Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: QOobyUN7E56SfjhazLWQcpBmKvUviDlIh5vgrAj6gtE=
Subject key identifier: 20:D3:37:46:21:39:17:E5:E3:0C:15:8F:DD:72:52:13:F1:C7:ED:E2
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0194BB96DD689CC888932A1FB6CD7881B611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 09:00:13 +0000
Manifest this update: Fri 31 Jan 2025 09:00:13 +0000
Manifest next update: Sat 01 Feb 2025 09:00:13 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: vfmw0P3c+N2Cw2s7URiKFJMPVAx0cbdjoRqJ0BfswIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:dd:68:9c:c8:88:93:2a:1f:b6:cd:78:81:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jan 31 09:00:13 2025 GMT
Not After : Feb 1 09:00:13 2025 GMT
Subject: CN=20d33746213917e5e30c158fdd725213f1c7ede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:2b:be:3e:f6:09:95:8b:04:9b:92:3e:9c:
07:fc:ab:63:ca:e2:14:26:37:94:21:aa:a1:01:6a:
04:25:b5:7b:c3:8d:49:15:2d:1e:0a:74:70:2e:bd:
e9:04:8e:7c:8c:f3:f2:08:b8:71:61:c3:ac:be:64:
41:d6:1f:f3:ce:99:44:a8:ae:53:f8:e7:ed:01:4a:
23:07:96:47:ab:44:80:fa:c3:aa:3d:5c:1c:66:c2:
3c:4e:3a:10:10:73:71:ce:9a:35:db:69:9d:f5:3d:
35:56:72:7f:65:69:85:0c:0a:68:4a:c9:af:a4:33:
d4:a7:27:df:8d:f5:e8:6b:fd:49:87:8f:54:4c:21:
b2:4f:1c:31:8e:cd:b5:3f:34:44:8a:a4:16:a2:35:
b3:0a:68:40:7f:52:8d:b7:2c:6e:fc:60:9e:1e:c0:
f8:0a:b8:a3:31:1b:b8:2c:68:23:84:29:15:4d:80:
37:ba:cc:8b:94:68:a0:09:a3:eb:d4:10:15:e2:24:
47:5c:25:10:6d:a1:d6:2d:97:73:93:13:96:fa:72:
8d:db:5e:f6:55:5b:df:c3:e3:f6:e1:be:6f:1c:48:
20:e4:c0:da:ab:27:5b:4e:c7:8c:de:1a:44:b0:ac:
72:c9:56:d9:08:93:63:db:d1:00:09:c9:02:f5:8d:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:37:46:21:39:17:E5:E3:0C:15:8F:DD:72:52:13:F1:C7:ED:E2
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6e:28:8a:c6:cb:7a:3c:ab:b3:08:dd:ac:30:e6:24:3e:f9:
d2:55:6b:9d:3f:ba:64:56:3c:ab:b9:65:ba:85:9f:0a:78:9b:
32:b0:68:15:f7:69:dc:a1:a8:0e:72:87:c3:c2:e2:1a:d9:db:
b0:06:eb:64:93:51:78:fc:ca:69:c9:6d:d1:db:77:cf:8f:b6:
e6:bd:05:ff:d6:be:6f:31:14:ea:9c:60:08:fe:6e:f6:47:29:
8b:e5:97:90:a0:c8:9d:d2:d9:fc:ac:90:97:6f:6d:b8:ac:99:
ca:6b:52:2c:9e:ea:cb:54:74:22:ca:ea:8a:b2:29:a3:d0:b8:
f0:51:c4:af:e5:1d:97:a2:f7:f1:11:04:0b:1e:b2:e5:09:0f:
ec:27:94:7d:76:de:78:94:ac:f1:a0:1d:a2:fc:b4:b1:c2:c3:
b4:ca:17:d1:42:95:b3:e1:5a:55:2c:85:4a:8f:d5:ae:5b:7c:
e5:b9:4c:30:d1:2c:51:ea:f7:7e:8a:43:87:e5:b5:3c:32:61:
df:d4:fc:8d:bf:21:fb:79:13:04:44:6c:37:7c:7b:9c:61:65:
15:2c:6f:2d:2b:15:3a:7b:6d:c9:5a:29:e5:6d:99:8f:34:90:
b5:a2:cb:7e:77:da:20:08:4d:d6:36:3f:43:30:ef:a6:bf:4b:
9c:50:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:30 2025 by rpki-client on console-fra.rpki-client.org