Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: +LSXUpPwQmo20DRz5js1Wu9Un9cIhvlGCdW9ieZuxyo=
Subject key identifier: D0:4E:37:BC:D7:A9:4E:6B:E2:98:A3:E2:4B:46:92:5C:DA:9C:30:87
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 01935A2EB201FF0EB51E92C794DB7E6FB71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 03E9
Signing time: Sat 23 Nov 2024 18:00:29 +0000
Manifest this update: Sat 23 Nov 2024 18:00:29 +0000
Manifest next update: Sun 24 Nov 2024 18:00:29 +0000
Files and hashes: 1: IyaPOy7oGAJNhefGcOcZN1-tfGs.roa (hash: FHZu5bPM+rKsk4OyHGPH7dd0SQVOW3boG3f0zNL5824=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: CAZ0N6JrCbwqycxMEeFgdy+fsAVxe5Wquib/uoo5Y14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:2e:b2:01:ff:0e:b5:1e:92:c7:94:db:7e:6f:b7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Nov 23 18:00:29 2024 GMT
Not After : Nov 24 18:00:29 2024 GMT
Subject: CN=d04e37bcd7a94e6be298a3e24b46925cda9c3087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b0:1d:d4:55:4f:d4:70:97:3c:d9:1b:3d:d1:
bb:df:1c:e2:79:d0:e7:0c:1f:5c:6a:2b:12:1a:92:
46:73:78:f7:83:a4:06:d7:31:3b:dc:ac:e3:55:3f:
31:b1:81:95:c0:37:ae:e2:c0:dc:88:f8:e5:50:4f:
4f:1e:e6:a0:71:eb:77:63:15:6f:88:38:92:bc:4f:
31:a9:98:17:41:9c:32:47:e0:8d:0d:e8:d1:92:e2:
45:f7:89:f1:70:77:92:7f:66:2f:65:18:93:77:df:
38:39:71:27:1e:76:bf:96:ba:0a:6e:f7:d7:30:7b:
c4:92:91:cc:aa:99:ac:e4:c7:b7:f4:f9:dc:d6:01:
70:7a:8f:8f:28:00:33:e0:0a:66:b5:a4:a8:ef:e6:
2f:7c:f1:c1:60:bb:f8:d5:1f:77:e0:1f:78:c7:6f:
e0:cd:15:9a:89:b4:9d:7e:0c:8f:ea:f7:46:a1:aa:
17:bd:c5:8a:12:95:73:74:e0:ac:98:be:3b:b9:ba:
37:22:2f:12:ac:3f:71:9f:bf:50:ee:15:b9:cb:be:
ab:74:af:d3:e3:e6:44:08:62:e1:d9:54:74:d3:f4:
90:5e:97:0e:b7:8f:cb:45:95:d2:fd:66:f2:f0:23:
85:13:a5:0e:98:59:cb:1c:53:f6:b6:52:91:46:ff:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4E:37:BC:D7:A9:4E:6B:E2:98:A3:E2:4B:46:92:5C:DA:9C:30:87
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:31:61:a3:d7:23:d5:85:bd:51:60:6c:68:01:ea:a8:8d:41:
84:ec:8a:20:55:6f:8f:a3:f3:16:10:fe:e0:b7:e6:27:ad:35:
f7:c2:7b:f7:63:08:c2:f8:cb:76:c8:25:b8:43:be:34:56:66:
b6:5b:0a:c5:e7:76:25:95:b3:8d:15:7f:75:41:6e:c3:f0:63:
03:46:c1:d4:49:67:92:c9:19:dd:8d:d2:da:7a:7d:a4:d2:c4:
5e:ba:20:ee:7f:0b:a0:bc:c5:55:be:5e:79:4a:48:d5:00:28:
cf:9a:36:cb:23:df:4c:72:df:56:8c:45:45:d8:92:b5:07:57:
b4:aa:0a:27:51:af:0a:d6:fa:ed:6e:19:f8:e1:93:f7:bd:92:
e6:46:dc:37:6a:ae:38:8b:80:4d:7a:5b:ec:f2:0b:1b:c3:7a:
87:f0:70:fb:1b:54:76:e1:b9:f5:26:5e:d1:38:e6:66:54:7d:
90:bd:7f:38:7e:e6:4c:1b:d5:43:4f:d1:e3:62:2d:87:68:65:
95:cc:3a:ac:fa:8c:a8:6e:0b:d9:ca:61:99:45:22:fc:67:a3:
e5:ae:a7:17:a8:5b:08:6d:af:cf:88:c7:4c:4d:86:33:55:d5:
3d:15:bf:c8:0a:95:af:ed:4e:a2:92:5d:4d:c2:8a:51:25:10:
92:a9:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:06:45 2024 by rpki-client on console-fra.rpki-client.org