Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: 3gVTLp1+0QGiVsrxFJNQoBemJn0tcyxuJegQlaY5fq0=
Subject key identifier: 48:7F:F2:99:8B:09:88:C1:D0:05:0F:95:67:20:12:F2:28:CE:9C:D9
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 0193549A883E247B9A449CD969B7FDFE5F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 070A
Signing time: Fri 22 Nov 2024 16:00:33 +0000
Manifest this update: Fri 22 Nov 2024 16:00:33 +0000
Manifest next update: Sat 23 Nov 2024 16:00:33 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: smctkjaHQht71ISgFZ4z3QqW4iGz6rKog1B/794OHQs=)
2: t2KLQdHWFqpCqldZ2tpa9QRrDYU.roa (hash: FHaDuyA7Ceb82OIZ7EBkxy4VBnhjTpbPPAfBquRrPgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:88:3e:24:7b:9a:44:9c:d9:69:b7:fd:fe:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Nov 22 16:00:33 2024 GMT
Not After : Nov 23 16:00:33 2024 GMT
Subject: CN=487ff2998b0988c1d0050f95672012f228ce9cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:1a:bd:52:3b:45:46:40:33:c7:4f:3e:d3:
a1:7c:42:e0:f8:6a:25:dc:f6:e2:02:a6:86:a2:fc:
9d:eb:b4:71:ce:4a:fd:56:07:85:a4:a3:c2:d7:52:
c2:12:c5:fe:34:53:f3:a4:1d:3d:c7:02:60:0a:ee:
b6:b9:29:f1:fd:ca:b0:7e:2b:51:0d:ae:23:62:9c:
d8:df:10:2f:29:b0:7e:73:b6:7b:85:96:ac:d3:fa:
de:60:3d:01:90:e9:3a:5d:0c:b6:47:b4:e6:df:38:
f0:21:ac:eb:de:f3:52:57:bf:73:d9:86:64:a4:57:
74:0b:58:68:1f:66:23:ab:19:b1:c3:91:e5:e3:c0:
98:58:bf:92:8a:62:47:c5:4b:c9:7f:52:5a:5e:a9:
37:d0:35:16:10:c0:98:46:98:5f:9c:aa:77:31:66:
3c:6a:ec:8e:b5:bd:13:0a:b5:43:9c:fa:31:08:2c:
39:1f:03:de:bd:1b:f7:c5:f5:a9:7a:4a:b3:22:e5:
b6:6a:aa:5b:85:50:dd:5e:7b:16:6d:df:a9:95:6a:
ce:be:b1:06:92:5e:2b:b8:fe:11:bc:ed:66:22:54:
45:c5:c5:59:fd:44:37:6f:c6:98:80:ba:93:ad:d8:
92:5d:04:42:59:ee:08:59:73:07:62:c8:5e:41:90:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:F2:99:8B:09:88:C1:D0:05:0F:95:67:20:12:F2:28:CE:9C:D9
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:e9:da:27:2a:87:d2:c0:d4:ab:d4:b9:57:97:4c:43:11:
53:0e:26:19:32:c6:24:21:cb:e4:f3:7f:f3:aa:c3:2d:e5:e5:
40:a7:c3:23:87:89:40:27:43:dd:20:70:5c:7b:79:41:a0:68:
f1:01:4d:01:2e:11:8c:e1:14:6a:97:d9:a1:ce:d7:32:1e:fb:
90:f0:60:93:2d:f8:2d:a7:22:a1:ef:4a:ee:6e:75:0f:04:f9:
0b:5e:3c:f3:c9:8c:41:90:4f:3e:a7:57:48:2c:46:56:00:6e:
52:55:1b:a5:9e:53:9b:7b:9e:f5:31:b0:18:d1:c3:ec:44:9b:
51:e7:f8:87:cf:e7:58:d6:66:c4:ac:e2:90:14:c8:e4:84:82:
e7:2b:9b:79:6e:54:73:3c:7b:62:c3:cc:d7:d9:a2:4b:42:45:
56:86:a0:f3:ca:48:95:4d:43:d5:24:de:38:c0:3c:c6:44:29:
9b:20:82:3c:03:6b:08:e7:a1:26:ed:6c:a4:a8:a5:d8:f5:37:
ff:2e:05:76:2c:8f:08:9b:7f:63:d4:58:9c:6c:65:d3:ce:36:
26:7f:0c:04:a0:28:01:c6:9c:99:74:97:26:03:ca:8f:93:91:
13:90:6d:85:fb:35:fd:d3:74:55:82:1b:fd:2c:08:d2:78:89:
4d:ee:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:01 2024 by rpki-client on console-fra.rpki-client.org