Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: OOshFAN0V5Qq0xdSkDTLrwc+QDbd1SnVY7b2JbtbYGo=
Subject key identifier: 68:78:BB:26:8B:46:96:8E:D5:15:3C:50:DD:2B:AA:BA:D6:7C:9C:99
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019359C0BFDD4AE6403BCE22078AD9342E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0480
Signing time: Sat 23 Nov 2024 16:00:24 +0000
Manifest this update: Sat 23 Nov 2024 16:00:24 +0000
Manifest next update: Sun 24 Nov 2024 16:00:24 +0000
Files and hashes: 1: THI3epOjz7ojyW93aVDwbqxw0VI.roa (hash: LAJYCQ96Xfuj+C6m3Ca48gkUepdNGTvGFfdWZ2oPKDI=)
2: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: 1eiikK7+kYxpmq7S/QDx5ZeWtJjotKhiREjfbMzf508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:bf:dd:4a:e6:40:3b:ce:22:07:8a:d9:34:2e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Nov 23 16:00:24 2024 GMT
Not After : Nov 24 16:00:24 2024 GMT
Subject: CN=6878bb268b46968ed5153c50dd2baabad67c9c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:a6:65:a2:00:46:2e:dd:18:b5:02:2c:bb:
56:a8:59:e3:87:31:d7:e3:4e:1d:54:ee:80:96:1b:
5e:3b:7d:ad:b7:4b:f1:10:2a:ba:0b:9a:89:c4:a1:
ef:7b:f1:a0:7f:74:ad:c0:32:87:42:fd:90:cc:f3:
71:ef:70:f2:bd:b5:27:7b:94:86:0c:af:44:a8:86:
1f:3b:7a:3b:bd:c5:ed:9d:48:5a:34:c5:55:5a:ef:
5f:45:41:8f:1a:49:92:43:96:84:6e:b8:08:db:c1:
12:27:74:bb:5e:a6:f7:62:81:9b:17:93:53:c4:dc:
75:6a:48:d2:6b:f7:a4:ab:d4:ed:5f:76:c1:e9:0c:
14:0a:10:82:5e:28:be:bf:ef:bd:3a:47:c7:07:3d:
a5:25:98:b3:c9:b2:5f:0a:c0:58:90:e8:d8:84:d7:
e1:a5:a5:29:07:3a:0c:b6:ed:99:00:29:62:c8:5d:
2d:f7:e4:14:01:e4:c6:72:44:f5:a1:02:fe:e9:2d:
72:d1:2e:50:59:5f:3f:e1:da:c0:5c:b5:45:c6:65:
65:f3:fd:cf:93:85:0a:7b:06:e0:8d:57:6c:62:4a:
6b:42:94:0f:34:65:e9:33:aa:26:67:4e:7d:9f:5d:
7d:67:9e:fd:14:58:0e:39:d5:82:94:bf:b2:dd:4f:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:BB:26:8B:46:96:8E:D5:15:3C:50:DD:2B:AA:BA:D6:7C:9C:99
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:ac:d5:28:e7:f8:9e:89:c2:7f:5b:35:ee:c7:bf:0c:98:
83:a8:6b:ef:8b:3b:a1:a4:04:52:d8:56:5f:66:f4:3d:59:84:
44:70:89:7a:dd:df:5f:ad:f6:db:37:dd:08:a8:ca:17:47:3a:
63:92:24:8d:7f:49:61:20:fb:93:e4:89:34:ce:f5:87:89:c0:
6e:b0:a0:c8:48:70:cf:fe:31:b0:20:1c:e7:5d:3a:1a:3c:d6:
93:8b:d4:d9:bf:1e:e8:5b:4a:f4:44:7f:63:e6:e3:35:d3:af:
a9:36:6b:c8:63:66:b0:a1:be:cd:14:49:46:53:52:3a:25:e1:
51:49:5c:b7:43:ba:fc:a9:26:b9:ca:ce:5b:cc:e8:46:79:a1:
8c:55:40:0f:bc:53:b1:c9:53:0e:ff:8d:6b:43:50:7a:82:1c:
ac:ae:57:ec:92:b6:01:f2:0a:e2:4a:46:45:45:4a:e0:84:20:
b9:02:7f:98:e4:ec:cf:2b:b4:85:b4:1b:d1:5b:81:4c:e7:e2:
a8:79:b7:d1:21:90:bb:3a:75:3b:c1:a4:20:2c:3b:d3:32:b8:
cd:97:a2:2f:65:52:1b:aa:34:f6:bc:7b:c4:e7:74:a1:e5:db:
a4:bc:57:6e:f9:4e:59:bc:66:03:11:30:da:bc:5b:4b:18:71:
18:98:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:40 2024 by rpki-client on console-ams.rpki-client.org