Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: cePcweP7YaqfmRhrEjFo65BB37lO0fAxZ+oPdKpQo5k=
Subject key identifier: FC:8C:20:93:28:63:88:D3:74:E7:88:71:29:E3:57:BD:F7:2D:D7:9F
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019359534B94FB8F1F03E9E09CF7C193A513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0D02
Signing time: Sat 23 Nov 2024 14:00:51 +0000
Manifest this update: Sat 23 Nov 2024 14:00:51 +0000
Manifest next update: Sun 24 Nov 2024 14:00:51 +0000
Files and hashes: 1: dVOST6O78KqzBnGjM-NS0hfiJXw.roa (hash: /T/OjMqxk41z+ZqWRGzZDhWGnahYhgVZvfs02azLeZY=)
2: g6pV_pEhme532gwNX2mBqelnOWM.roa (hash: ZnHZvZqalsz6Ti7HFocFCnKiDYLBOUVzakp5jA/JYCU=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: JHMO9DD7MRASK+JOAaJLki5iPKcXvvrguzFpjxseTmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:4b:94:fb:8f:1f:03:e9:e0:9c:f7:c1:93:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Nov 23 14:00:51 2024 GMT
Not After : Nov 24 14:00:51 2024 GMT
Subject: CN=fc8c2093286388d374e7887129e357bdf72dd79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:d4:30:cd:9b:5e:db:d6:ad:99:eb:ef:2c:
e7:ac:c0:8b:f6:0a:9b:da:08:03:89:fc:e6:9b:1b:
86:a0:a2:14:42:b3:2a:ff:b4:dd:95:09:90:6f:ca:
7e:58:44:7f:3e:e9:0a:9b:6f:a3:ea:c9:b6:dc:3b:
9a:c1:55:f7:93:37:a8:a5:a8:ca:70:9a:4d:ce:b3:
9a:1c:65:10:f4:26:7b:e4:26:5c:9d:eb:c1:4d:0c:
05:a8:b5:d9:39:56:08:65:80:f7:a2:1c:7c:ce:07:
ba:35:44:62:6d:01:1c:76:b2:1c:67:b3:eb:37:8f:
de:d0:42:d8:18:85:b5:ad:69:48:c7:49:94:88:51:
03:45:e0:56:bb:36:be:5a:32:d8:87:26:65:96:bc:
03:a7:b2:c9:07:3b:cf:94:b0:a5:fb:92:5f:b5:c2:
22:af:9c:90:59:5b:da:2a:56:5e:8c:cd:d5:2f:ff:
73:fb:d8:e3:18:ec:da:94:dd:89:bf:59:70:f3:bb:
90:c2:c4:d5:04:61:73:63:f7:98:6d:d2:d6:f4:0e:
77:59:a4:0f:a3:37:f9:53:3f:6a:52:8f:7d:b3:63:
c9:c9:16:26:99:bd:b0:d2:c5:b0:0d:c7:76:31:16:
37:bf:4b:be:85:ee:16:58:77:98:d4:55:ab:3e:da:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:20:93:28:63:88:D3:74:E7:88:71:29:E3:57:BD:F7:2D:D7:9F
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ed:b6:94:9b:7a:9c:96:dc:da:fc:82:2b:09:fe:74:fb:9f:
bb:5e:2e:5a:34:80:b3:b4:4f:74:9d:60:22:1b:88:5d:74:fb:
71:82:85:6d:55:86:ba:53:23:e8:dd:92:c0:52:10:c9:48:19:
b9:6a:5a:d5:d0:d8:15:2a:09:6f:fc:1a:a8:ac:47:e8:54:8e:
0e:f1:80:18:56:58:0a:0b:65:9c:5c:18:05:01:73:c9:01:b0:
ba:bd:d0:52:96:cc:25:f6:82:05:bf:79:63:56:3e:4f:32:1d:
83:0d:dc:ca:2b:44:53:0a:4f:3a:74:a2:49:6d:25:35:56:78:
f9:04:d3:9c:c1:9d:61:60:d5:22:66:3f:c8:9b:cc:3c:07:9a:
bb:5c:75:80:57:92:21:f7:0d:06:88:a5:d0:99:4f:02:02:97:
2c:1b:fc:ab:5e:73:b2:d6:2b:e4:8f:ea:ce:37:29:bb:15:8c:
1f:a5:de:59:8a:31:21:06:b9:93:f9:ae:83:72:0e:7a:d7:f1:
5f:00:8b:07:d2:57:f5:7a:28:15:aa:a8:21:7e:92:d6:e8:73:
3a:25:58:1e:c3:42:3e:b8:d5:64:e3:ec:55:1a:53:80:26:b2:
00:d2:a6:b7:b3:a4:a1:27:05:2a:3c:8a:6b:bc:2b:91:69:46:
b0:3f:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:13 2024 by rpki-client on console-fra.rpki-client.org