Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: BXzVfUDR6PSw21+6XNlCRnIbNqom1kFs3OXZog6SqjU=
Subject key identifier: 00:3B:77:2F:1D:35:FE:57:3A:06:52:9B:5C:F2:8F:14:7D:75:54:60
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 018F98AAEEE866CE9676725EC6AD2BFB5F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0475
Signing time: Tue 21 May 2024 01:01:29 +0000
Manifest this update: Tue 21 May 2024 01:01:29 +0000
Manifest next update: Wed 22 May 2024 01:01:29 +0000
Files and hashes: 1: XyeCzG_wBf12nrFjyUT3zOVrgF4.roa (hash: B6WE3T2VnI0Q/ZB8p5ymbmWBBlTF/QgWmv6nMptwgFw=)
2: v5B6XJkuiUlxr77y-BFXalUmc7I.roa (hash: /t0ISmqyWZkTNYepoE3TrSigo0dNPkY5O1NlIYNgxZ4=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: Ni3fsvLQUj9Z64//y1oyORQhi/bkQU1Yw7EeXknwFCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:aa:ee:e8:66:ce:96:76:72:5e:c6:ad:2b:fb:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: May 21 01:01:29 2024 GMT
Not After : May 22 01:01:29 2024 GMT
Subject: CN=003b772f1d35fe573a06529b5cf28f147d755460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:e6:ac:a1:19:19:ba:e0:05:df:12:9d:1f:
11:f6:c9:fe:a4:35:f3:af:67:17:27:3a:e3:d9:0e:
9c:ca:22:d5:a7:73:f7:43:b5:7a:e1:16:ac:46:d7:
ab:11:6f:f5:94:cc:57:87:59:b0:38:3c:62:2b:11:
23:c2:eb:f2:10:08:57:94:b9:58:69:9c:2d:29:ff:
8c:e1:ad:47:c4:00:67:7a:ba:dc:28:90:fd:a3:bc:
3f:db:1d:b5:70:ca:7a:d9:45:29:a1:df:87:af:e6:
8b:b4:f5:08:1c:85:e1:b7:1f:45:59:f9:a8:c8:d4:
97:8c:1a:d0:8c:8d:3e:a8:2d:b6:73:58:95:d5:37:
2a:33:8b:bb:ca:2b:92:01:4a:30:43:f2:f6:74:cf:
72:de:89:6d:76:ec:06:35:cc:21:6a:2a:62:92:e2:
a0:dc:54:8d:ea:79:cf:29:35:70:54:bf:5a:eb:3e:
cc:95:c6:02:fc:2a:3e:5e:4b:11:1f:57:e3:73:e9:
fc:3d:03:60:fc:16:bb:e8:94:0f:2e:53:c7:26:46:
98:72:b0:26:6c:8b:95:3a:af:8b:0d:5a:4a:ed:90:
03:3a:2f:66:24:ca:33:75:10:81:cc:61:57:a9:d6:
76:4f:8c:df:26:95:84:52:e1:78:25:5b:5c:ee:af:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:77:2F:1D:35:FE:57:3A:06:52:9B:5C:F2:8F:14:7D:75:54:60
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:66:c4:bc:0b:9b:84:49:13:e6:2e:b4:0f:fb:35:f6:b7:
6c:0f:53:b2:f0:a8:04:95:06:38:77:82:30:cc:50:3f:43:f1:
b3:62:35:99:d4:88:58:7f:00:f5:ee:bf:73:7d:98:72:1b:e7:
92:56:81:da:0f:ba:1e:43:fc:8c:64:d2:dd:89:ed:ee:c0:b4:
de:e0:ef:9f:d4:0c:a8:fc:0b:99:a1:31:61:71:86:34:ba:60:
2c:40:3f:ff:34:73:fa:84:6f:6c:14:b5:d1:d2:e3:72:61:a9:
e1:89:a8:2f:23:22:de:be:5c:8b:11:69:ae:ce:5b:95:17:de:
ac:ba:62:b2:80:0e:8e:d5:1d:06:bf:a2:b7:a4:d9:50:1b:e8:
ee:20:fb:c4:6d:16:5e:09:02:70:de:8f:7e:e3:0f:ca:66:1c:
ef:e5:bb:ec:dd:9b:7d:8a:2d:9f:d1:28:c2:ef:38:36:40:c6:
96:ed:7a:8e:38:e7:dc:a6:66:5c:3d:10:84:b9:b8:29:4d:44:
45:27:df:1f:09:fe:11:78:fc:14:b4:c8:b6:ca:30:02:54:4a:
28:5e:22:33:42:8a:98:a1:48:af:aa:ea:45:13:58:ff:ac:fe:
fc:f5:e9:ae:77:7e:8d:3d:fd:61:3b:f4:e3:5b:39:56:5c:a6:
7c:0e:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:16:29 2024 by rpki-client on console-fra.rpki-client.org