Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: i9sF3PAdFtCgO2J1lIonTIIShpxpubN8z385LtS6T0A=
Subject key identifier: B3:6C:A5:6F:02:35:DB:24:FA:FC:C1:C2:45:F9:8B:B7:CD:A5:CE:9F
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 019354D1458537EFD789647209AC5981A618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 039E
Signing time: Fri 22 Nov 2024 17:00:21 +0000
Manifest this update: Fri 22 Nov 2024 17:00:21 +0000
Manifest next update: Sat 23 Nov 2024 17:00:21 +0000
Files and hashes: 1: Mv_oQaT-N6Idg5LhYDNLYjD__Tw.roa (hash: XMTVYqporUR5F+KlNuTab0bQbjoeBpIYd1k75wIVeUY=)
2: p8EOtxAQPNX44lqN-_D41rg_ESY.roa (hash: Oa4UJGrEknxUxIjhnqbLKy96F0IZAnCA6R2xy1o0Udg=)
3: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: K/9xj7PslE4mivx5iQ4BJT9jvfI82EqtS0SXnbp6XXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d1:45:85:37:ef:d7:89:64:72:09:ac:59:81:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Nov 22 17:00:21 2024 GMT
Not After : Nov 23 17:00:21 2024 GMT
Subject: CN=b36ca56f0235db24fafcc1c245f98bb7cda5ce9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:b9:07:ae:77:20:a0:13:72:c1:f6:25:a4:
57:d5:7b:4f:05:97:ca:a6:ea:09:37:e2:cc:20:5d:
68:5d:1a:ea:2e:31:94:e0:f8:6f:20:6b:2d:29:b0:
88:fa:a2:fd:d4:94:f7:51:20:3c:a4:81:2c:a6:23:
ac:34:43:e6:1c:65:41:92:02:db:0c:69:65:63:2f:
99:5f:a1:b9:e0:f6:90:2e:10:a9:e9:c0:db:74:3b:
ab:9e:af:bd:55:67:0e:d1:4a:e0:1e:ac:62:4e:60:
84:40:61:34:ca:c5:33:bc:15:7c:43:db:84:e9:4f:
c5:ac:d9:33:8e:32:9b:76:0d:76:d9:d4:07:e1:c5:
fa:16:6f:cd:b4:69:1a:fa:aa:f2:04:0c:b3:93:84:
4b:a0:9d:67:dc:48:b5:31:55:05:0c:94:7d:84:a0:
21:23:90:7e:6d:17:e9:55:26:09:f9:d9:62:29:19:
36:40:d1:1e:55:dd:6c:86:ae:8c:75:d7:3c:12:ab:
8a:7d:b3:5e:c2:bc:a7:e7:b9:ac:b1:c3:91:1f:06:
17:30:01:30:32:ba:1d:ba:11:f9:86:5e:af:58:62:
b7:ef:56:52:5a:b1:0b:fd:bf:8d:cc:fd:9f:3d:3e:
ed:99:3d:29:8f:e7:aa:0f:a9:ad:43:76:c5:94:61:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:A5:6F:02:35:DB:24:FA:FC:C1:C2:45:F9:8B:B7:CD:A5:CE:9F
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:2d:e2:a2:45:71:7a:16:c7:79:54:79:77:09:54:aa:77:
21:69:c4:94:1d:7d:05:fb:ae:56:f3:d8:65:4d:d6:20:cc:85:
a3:03:11:ea:1e:9c:a5:65:ab:85:bd:48:f2:46:05:35:08:4e:
aa:e0:b5:5f:6c:c7:2c:77:59:e5:0a:64:32:3e:f6:f7:d4:d9:
1d:b3:3b:82:68:60:d8:57:63:70:7b:4d:4b:f9:18:4b:2b:d9:
43:c6:ff:d5:fa:32:38:44:5b:10:62:3d:86:d4:2b:85:72:ed:
0d:0c:a1:51:7f:a5:6d:82:77:f6:c0:34:f5:4a:52:e9:d0:11:
5d:38:33:cf:2f:5e:4e:b2:63:59:6a:7e:9b:5b:69:9b:25:b1:
64:3d:a1:4e:a9:ca:3b:0e:e2:36:a4:54:c5:9d:1c:75:c7:61:
d3:98:5a:e6:ee:54:53:53:c7:47:12:b2:05:98:9a:d0:92:10:
40:96:bc:cb:80:0c:49:40:c8:31:fb:bd:ab:b9:cb:bc:34:b1:
9a:8e:f9:f6:8b:f6:24:e9:76:a5:01:d7:5d:fb:e6:6d:08:86:
52:5e:a5:ad:4c:62:cd:0d:06:eb:b4:3e:04:fc:5c:7c:20:c2:
a8:0a:4c:27:be:39:f3:29:be:2a:bc:aa:1d:05:93:30:f5:59:
5c:41:4d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNU0UWFN+/XiWRyCaxZgaYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTU2OTlhMDhjN2JmZDcwN2NmYjA2ZDMyMTNmNWNhY2Jm
MjgyNTcwHhcNMjQxMTIyMTcwMDIxWhcNMjQxMTIzMTcwMDIxWjAzMTEwLwYDVQQD
EyhiMzZjYTU2ZjAyMzVkYjI0ZmFmY2MxYzI0NWY5OGJiN2NkYTVjZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz65B653IKATcsH2JaRX1XtPBZfK
puoJN+LMIF1oXRrqLjGU4PhvIGstKbCI+qL91JT3USA8pIEspiOsNEPmHGVBkgLb
DGllYy+ZX6G54PaQLhCp6cDbdDurnq+9VWcO0UrgHqxiTmCEQGE0ysUzvBV8Q9uE
6U/FrNkzjjKbdg122dQH4cX6Fm/NtGka+qryBAyzk4RLoJ1n3Ei1MVUFDJR9hKAh
I5B+bRfpVSYJ+dliKRk2QNEeVd1shq6Mddc8EquKfbNewryn57msscORHwYXMAEw
MroduhH5hl6vWGK371ZSWrEL/b+NzP2fPT7tmT0pj+eqD6mtQ3bFlGH2xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNspW8CNdsk+vzBwkX5i7fNpc6fMB8GA1UdIwQY
MBaAFLClaZoIx7/XB8+wbTIT9crL8oJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZmQ2ZTktMTdkMy00MDE5LTg2Njkt
OTY2NmQ5NzYyODVkLzEvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZmQ2ZTktMTdkMy00MDE5LTg2NjktOTY2NmQ5NzYyODVk
LzEvc0tWcG1nakh2OWNIejdCdE1oUDF5c3Z5Z2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5Qt4qJF
cXoWx3lUeXcJVKp3IWnElB19BfuuVvPYZU3WIMyFowMR6h6cpWWrhb1I8kYFNQhO
quC1X2zHLHdZ5QpkMj7299TZHbM7gmhg2FdjcHtNS/kYSyvZQ8b/1foyOERbEGI9
htQrhXLtDQyhUX+lbYJ39sA09UpS6dARXTgzzy9eTrJjWWp+m1tpmyWxZD2hTqnK
Ow7iNqRUxZ0cdcdh05ha5u5UU1PHRxKyBZia0JIQQJa8y4AMSUDIMfu9q7nLvDSx
mo759ov2JOl2pQHXXfvmbQiGUl6lrUxizQ0G67Q+BPxcfCDCqApMJ7458ym+Kryq
HQWTMPVZXEFNYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:17 2024 by rpki-client on console-ams.rpki-client.org