Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: LFeMf/ewFkp7dUDuY7WVXyVgLkryrdfXE0ddDYPIjJk=
Subject key identifier: 1C:A8:72:78:ED:87:13:44:A2:90:15:4F:7B:E3:9B:47:A2:45:A2:ED
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0193572DCFD05186B708FAE55AA96CCB6F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 03EC
Signing time: Sat 23 Nov 2024 04:00:40 +0000
Manifest this update: Sat 23 Nov 2024 04:00:40 +0000
Manifest next update: Sun 24 Nov 2024 04:00:40 +0000
Files and hashes: 1: GVNJhF-wiO7QEgdiCx4ycOoGKuA.roa (hash: Qn10mfvjYpxG6isoA3+2wpYv50KFY1PEB23wY7dnTho=)
2: ZKyLwF3cs71jj6OCFJhcOhndPrg.roa (hash: hNQeeQEd+PkNsRh/uAQ0z9NeCSFpL+5mPqssruOS1TU=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: lIz5Sjk69HfuEIZvP9OzUTrEwB+wIqPCV8cqlSQ6X74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:cf:d0:51:86:b7:08:fa:e5:5a:a9:6c:cb:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Nov 23 04:00:40 2024 GMT
Not After : Nov 24 04:00:40 2024 GMT
Subject: CN=1ca87278ed871344a290154f7be39b47a245a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:33:93:03:d5:42:17:dd:59:0c:dd:6d:86:
c1:08:79:60:7d:3c:01:8e:f4:92:00:1c:8c:ce:ef:
38:81:2d:07:85:1a:be:92:c8:16:e2:c1:a8:d7:a7:
93:01:38:16:99:09:79:2e:92:91:e0:45:fe:c4:1c:
97:f9:63:87:9e:85:80:c5:12:2f:b7:ed:e8:1b:4e:
46:e1:ca:11:f8:c7:6c:d1:0b:c0:4b:28:fc:4c:eb:
6b:8f:52:35:0d:cf:23:88:c2:0f:ce:cd:8f:57:47:
bb:44:04:8f:e5:11:a0:d5:4f:72:30:c3:7d:f3:05:
75:a7:a8:23:ae:44:bb:c1:52:f1:15:06:df:df:8b:
ef:f7:7e:be:34:1a:65:bd:bf:fd:b4:76:0c:4c:36:
ca:2f:36:31:b0:0d:6f:aa:0d:08:cf:33:99:59:a4:
73:ea:dc:11:c9:4a:2f:94:dd:cb:d3:7c:35:6c:c8:
1f:6c:dc:79:24:ec:2e:29:b6:10:65:82:f6:47:77:
ec:a9:fd:05:fb:58:b4:8e:a6:61:a6:da:03:f5:e0:
52:f8:2c:4b:41:c4:f8:cf:29:43:a6:ab:c5:94:d6:
14:1b:5b:0e:8e:e3:5b:42:87:d1:b2:51:0e:1f:8d:
0f:38:60:80:18:1d:23:57:a4:ba:f9:a0:fa:6f:b7:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:72:78:ED:87:13:44:A2:90:15:4F:7B:E3:9B:47:A2:45:A2:ED
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:61:43:70:d1:ea:a5:f3:34:0a:9e:7e:ab:5a:ac:b9:8c:38:
00:bb:62:4c:a5:ab:89:7e:bd:1a:88:3f:a5:18:3e:8b:39:12:
3e:c3:66:e4:cc:42:56:64:ea:f9:e0:00:6f:de:46:97:93:be:
1b:a1:a1:ff:e2:c1:f5:12:b5:a2:5f:a6:ef:9e:21:a0:32:35:
3d:7b:a4:c3:a1:c7:8b:20:03:e5:94:43:eb:9c:b1:59:8a:ad:
ee:46:88:a2:dd:80:0c:d2:b3:10:10:8a:50:e4:15:ce:cb:f1:
c9:41:ab:32:c8:d5:43:57:17:ee:01:74:e7:b1:40:18:98:6e:
ba:c0:68:d2:65:eb:6e:22:f2:1d:17:9d:f7:35:95:c3:8d:c6:
cd:dd:5e:58:78:7e:82:de:28:1e:dc:f7:b6:2b:55:7a:ad:12:
43:5d:85:86:da:92:0c:17:18:12:04:be:1c:8a:8d:b9:a2:38:
b0:6b:47:16:e9:15:65:e5:2b:f0:17:38:92:e4:05:01:ea:d5:
f9:8d:19:5a:03:fe:25:7d:ae:0d:77:92:07:e0:6b:cd:c8:1e:
cf:75:4d:d4:e5:13:42:1a:34:74:49:fd:48:a9:6d:33:77:19:
7a:d3:8d:e3:dc:b6:95:5b:23:08:09:e5:5d:8a:5b:d7:63:8a:
63:ed:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:39 2024 by rpki-client on console-fra.rpki-client.org