Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
File: vHBHR5L1CD5iXyTW1XqrctZXIp4.mft (raw, json)
Hash identifier: +tUl0cpbjAFVcMTVbANXPfwgpRqnzjVja/i2dDt2/4k=
Subject key identifier: 56:DB:52:40:B6:91:98:44:C3:92:E6:DA:4B:A7:8C:A6:0A:90:1C:41
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Certificate issuer: /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial: 0193603162F09F361F76F5C3EE4960912C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
Manifest number: 0D9A
Signing time: Sun 24 Nov 2024 22:01:09 +0000
Manifest this update: Sun 24 Nov 2024 22:01:09 +0000
Manifest next update: Mon 25 Nov 2024 22:01:09 +0000
Files and hashes: 1: GY2oZrtglfTkAGfhiGVH6OhdFsI.roa (hash: 99i9mYdyhOWi4HmmHb+dXMMBBgrRYRqP//RDsY72X1w=)
2: vHBHR5L1CD5iXyTW1XqrctZXIp4.crl (hash: vCQgmkMQDJvi0Ve58/0HIzBmSJNIp5b/NWpNTFYMAQ4=)
3: y-_obQTBjyJNGhvahNorf2-Ya2k.roa (hash: ntAhUj6SbADn2M42I2XZFKdiyEY94SHmSfNz1XzQc+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:31:62:f0:9f:36:1f:76:f5:c3:ee:49:60:91:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
Validity
Not Before: Nov 24 22:01:09 2024 GMT
Not After : Nov 25 22:01:09 2024 GMT
Subject: CN=56db5240b6919844c392e6da4ba78ca60a901c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:2d:34:a0:07:c3:25:66:cb:0c:3b:3b:42:
f4:5f:ce:38:0c:36:46:fd:1a:04:55:5d:f5:25:3f:
47:24:b4:20:47:72:a7:2a:8d:10:a1:3d:5c:bb:ea:
9b:93:dd:50:43:e7:43:a7:3e:5d:ad:02:8d:f4:99:
b3:54:04:e3:2a:6e:92:82:b6:27:41:e1:8c:20:00:
a3:bc:1d:13:80:2e:12:51:1d:54:b0:63:8f:b2:1a:
db:f3:33:47:6c:e9:07:79:2b:6c:11:c1:dc:f0:81:
da:57:54:0a:d5:43:e8:78:9b:83:40:fe:7d:0d:f9:
74:61:d0:38:85:81:dc:b5:2f:76:15:82:a5:f8:58:
3f:51:4e:b4:fa:37:4d:13:c7:e6:15:6a:83:bc:04:
9d:92:12:23:5e:73:9a:45:17:99:52:5c:71:f7:33:
02:e7:68:8d:aa:af:e6:92:e0:67:7f:48:fd:80:e2:
f3:69:da:8a:ca:6c:7f:ef:e7:77:f4:72:c9:2c:95:
70:21:52:80:65:94:11:58:34:0a:6a:22:e7:92:ba:
0f:79:40:6a:58:a7:1a:a8:50:9e:90:93:a1:9c:19:
78:2e:04:1a:16:0d:f5:85:f9:11:71:08:ed:7a:13:
32:07:9a:57:b6:ed:e6:ed:d4:9c:bc:f0:05:f3:c7:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:52:40:B6:91:98:44:C3:92:E6:DA:4B:A7:8C:A6:0A:90:1C:41
X509v3 Authority Key Identifier:
keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8d:1b:d7:d9:b9:ce:07:ae:75:a6:3c:eb:41:26:6d:a4:09:
f1:b4:8a:06:2e:b6:60:e3:08:23:f7:a5:53:89:5d:10:ac:49:
22:0c:02:38:27:54:e9:b7:bc:89:f7:03:20:79:7a:48:7f:be:
04:39:b8:15:bb:11:56:80:ca:db:64:bb:de:be:24:c1:66:f5:
ae:9d:09:01:f8:8c:52:ee:ef:9d:83:5e:d5:0c:64:99:02:60:
88:6c:9f:ed:c9:7e:7b:5f:e5:b6:b3:d1:36:90:96:3f:db:a5:
df:68:00:11:74:ac:55:f2:ac:5e:ec:29:e3:5d:b7:2b:34:c8:
53:18:54:87:86:f9:01:0d:18:c2:36:21:77:7b:04:d8:3f:e7:
dc:fa:2b:2b:d1:85:e7:76:7e:60:e6:c9:b5:20:6d:a1:00:d0:
b9:55:71:1e:37:48:17:d3:ce:b4:39:1b:d6:19:a7:16:83:4a:
b9:ff:ab:c7:1c:a3:0f:65:80:67:9a:1f:95:d9:be:8a:fc:e1:
75:ee:68:f1:c2:57:f2:ec:e4:d8:23:8a:02:e1:1f:16:50:30:
ab:10:d2:d4:44:ff:cf:97:01:10:aa:c2:2a:cc:1e:ee:80:21:
b2:1e:9c:73:9e:ab:17:45:04:c0:42:b0:46:aa:03:e1:79:4e:
dd:37:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:06:25 2024 by rpki-client on console-fra.rpki-client.org