Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier: BUMLQn2VJOwxHTLLP5+ksYSwcMd1Sw096PvZjg3/GZ8=
Subject key identifier: B2:0C:64:26:A0:AA:04:C7:90:E3:21:1D:BC:22:31:C2:28:7C:3C:49
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial: 019355086F88C46953ABD75FFFBA8FC703BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number: 031F
Signing time: Fri 22 Nov 2024 18:00:36 +0000
Manifest this update: Fri 22 Nov 2024 18:00:36 +0000
Manifest next update: Sat 23 Nov 2024 18:00:36 +0000
Files and hashes: 1: oK-E66YcVkte06xj_n0KgdERRdc.roa (hash: SIF8HOSRM/PIxIBDxl6Qokbbqagzu4mHy7cTuzlsAa4=)
2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: jnWAfn0r4gQ9o+BWrJrqtwGBVH1QnSC0BF8Ma0asQDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:6f:88:c4:69:53:ab:d7:5f:ff:ba:8f:c7:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
Validity
Not Before: Nov 22 18:00:36 2024 GMT
Not After : Nov 23 18:00:36 2024 GMT
Subject: CN=b20c6426a0aa04c790e3211dbc2231c2287c3c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:3b:b6:d8:de:44:c6:f2:dd:31:e8:fa:19:
63:c1:ed:00:74:ac:db:d2:28:16:b0:ce:a7:27:af:
bf:59:8c:34:45:3d:8f:36:58:f1:7f:60:3d:59:38:
5c:b1:6c:19:f9:ae:b8:7e:71:9b:0b:57:4b:23:e2:
1f:2f:a5:64:ff:ad:84:77:1d:44:5e:cf:1c:96:9c:
6b:8f:54:b9:fa:b4:65:22:e2:ea:0c:1c:47:21:89:
16:d4:20:17:8d:d7:85:77:61:33:47:d3:25:90:ae:
7d:2b:94:7e:a3:63:e3:bb:7b:23:a3:7f:92:d6:f3:
3d:26:27:c0:c3:21:4c:66:fe:16:87:84:30:3d:1b:
9e:12:af:70:06:12:e1:2b:56:73:a7:83:4f:93:33:
c8:a5:42:77:db:58:9f:77:dc:41:de:83:47:31:22:
41:84:6d:bd:79:ad:62:4f:18:f9:cd:4f:d6:b8:c8:
bc:f9:20:24:57:4b:36:ea:96:0f:9f:fd:f3:2a:36:
62:7b:9e:dd:ef:b7:cf:48:83:09:6a:0e:c1:b0:9f:
eb:71:92:29:24:e5:92:d1:b3:86:10:ee:60:38:ee:
d5:ff:ad:f3:ea:c6:49:e9:c5:02:4b:d1:83:fc:de:
72:83:e7:6b:c0:10:63:24:9c:af:97:a9:e3:91:ba:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0C:64:26:A0:AA:04:C7:90:E3:21:1D:BC:22:31:C2:28:7C:3C:49
X509v3 Authority Key Identifier:
keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dc:b1:ba:d0:d9:ff:bf:58:ca:ef:ca:d8:3b:0b:87:e9:9c:
ae:5c:3a:6b:57:08:b9:72:8b:c6:34:81:3d:b0:ac:d4:ec:4c:
24:19:99:53:87:31:f6:fa:bd:42:f8:6d:b8:4c:3a:a0:1a:47:
fc:03:f4:86:de:aa:04:18:94:18:d4:b5:38:47:47:86:50:96:
86:d4:30:18:df:0f:b3:6f:e4:c0:17:79:a4:77:64:2e:e3:61:
5b:db:ea:52:ff:2a:15:d0:e9:44:84:54:a8:63:3a:a3:b4:5e:
cf:a4:65:3c:e2:bf:39:31:fb:07:93:b5:72:58:25:1c:f9:a6:
78:eb:a9:6a:0b:9f:c2:9e:9c:9b:a0:c4:fe:04:58:42:cd:4b:
c4:93:64:cd:19:09:3e:a8:40:9a:17:5a:5a:41:12:3a:0e:2b:
45:1d:bb:1d:c2:bf:6e:1e:d5:c8:39:66:8e:db:c7:6f:18:98:
56:f0:2f:fe:df:ea:40:03:e2:e5:e4:3f:c2:5a:b3:91:45:1e:
51:31:6e:2a:5d:26:6e:a1:74:f7:28:a9:1e:d5:7e:89:54:7d:
24:8b:d9:a9:a5:84:05:e8:d2:ed:ca:c7:8c:99:30:fd:54:11:
1a:5a:0a:c4:57:e6:68:07:c4:00:55:db:cb:15:fb:42:3f:85:
11:d3:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:05 2024 by rpki-client on console-fra.rpki-client.org