Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: K31n2UbRHlGEQGN56RpLFNRIQSlemvjL2/OXrHKfeW8=
Subject key identifier: 53:92:D6:4C:8F:32:66:68:46:6F:5E:9D:7B:49:06:9C:2A:0B:06:FB
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 01923AA8F9AE439935FD0E64C18B74E4BBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0CA9
Signing time: Sat 28 Sep 2024 22:03:25 +0000
Manifest this update: Sat 28 Sep 2024 22:03:25 +0000
Manifest next update: Sun 29 Sep 2024 22:03:25 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: 9pVs6HkYSGQgzO4KEe1JYEsiS7v3uns+ld88epjZhwY=)
2: rZ7xUgNck1yP178EFkRc59qD0Q4.roa (hash: mIx7lI9xi457nYIE2xvvA43jVV+dMX7ZUnBmk1Cj75A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a8:f9:ae:43:99:35:fd:0e:64:c1:8b:74:e4:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Sep 28 22:03:25 2024 GMT
Not After : Sep 29 22:03:25 2024 GMT
Subject: CN=5392d64c8f326668466f5e9d7b49069c2a0b06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:f3:f9:5b:19:c3:8b:d0:89:0e:f1:af:50:
4e:6a:28:b6:de:07:5c:0e:43:f3:34:04:ec:6e:a7:
a6:40:7e:be:0a:2a:04:a1:85:2c:c1:6f:43:2d:b7:
46:42:af:af:35:8c:31:96:0c:f7:30:4e:0e:c2:d3:
31:0b:8d:86:79:23:d4:e4:6d:11:f6:7b:59:4c:3e:
35:b9:ad:0a:0f:e9:41:12:a1:0b:90:8e:c8:11:68:
3a:4c:84:d0:02:a3:4b:16:09:1e:a5:77:7c:fa:da:
95:29:fa:a7:47:e2:87:47:61:c4:fb:73:70:b8:29:
fe:a8:ab:72:c0:ba:0a:4e:8f:8c:5b:f5:9c:76:bf:
1d:e2:7b:2f:b4:84:22:c0:fe:f1:26:7c:4c:7a:0b:
16:a4:17:9c:c5:ab:37:1c:e7:45:19:9b:7d:15:79:
6a:a3:d7:06:e5:1c:4d:89:4d:ff:47:75:15:a7:21:
f1:1a:83:33:6f:df:6b:36:d2:5a:64:9e:86:eb:e2:
f5:cc:4b:bf:5a:51:af:ce:c1:79:8a:6d:e6:04:f8:
3c:56:35:c2:74:47:41:df:93:e9:ed:da:62:6a:c8:
a3:0f:0f:8e:b0:45:62:04:f9:0e:06:46:dc:4f:ac:
87:17:33:70:58:4b:54:d2:c4:f2:f1:b6:17:f7:76:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:D6:4C:8F:32:66:68:46:6F:5E:9D:7B:49:06:9C:2A:0B:06:FB
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a4:72:28:39:99:d5:59:a7:02:5d:21:a9:1b:ca:71:3c:32:
4c:a8:87:12:36:9a:11:6e:30:4f:be:41:df:35:1d:10:a8:0f:
f2:d4:2e:a1:4e:58:20:88:d7:d1:1d:81:52:1e:c2:e2:32:1e:
c6:b8:b8:59:20:90:52:0a:32:b5:d6:3c:48:91:b3:04:1d:a8:
41:51:b7:92:e9:42:63:ef:7e:d9:ea:54:db:14:71:ed:7d:c3:
7b:83:f4:5c:8e:50:c6:4a:ec:4b:b1:32:86:3c:e3:9b:71:48:
02:d4:37:76:69:9c:0c:ca:0e:be:29:4f:0a:2c:47:f6:73:d7:
c3:b6:12:67:ec:61:6b:a7:ab:76:a7:1e:de:41:91:4d:89:f9:
b7:27:68:47:77:db:83:75:34:c1:f5:12:49:2a:0b:bc:b8:60:
1a:37:80:ad:1f:6d:58:49:3f:6c:05:6d:2d:46:1c:ed:30:9c:
55:ee:99:ee:4d:ec:ad:90:49:50:d6:87:18:96:34:21:52:d5:
34:ed:21:74:f8:ad:5d:e4:f6:34:ea:06:c3:96:0a:5a:5c:95:
84:e2:f9:9d:cb:05:fe:90:ea:45:9c:21:e6:1b:ce:21:96:8d:
95:b9:54:12:c6:57:14:c7:7c:a8:48:28:4f:96:5e:c2:80:4f:
36:b3:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:08:47 2024 by rpki-client on console-fra.rpki-client.org