Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: unH2FlpAhmCzQ8iIW/9pEp3soNn3mOzp2YiaFTKHDdY=
Subject key identifier: 20:0B:CB:25:95:EC:8E:3D:3A:8D:E4:D7:C2:C8:5D:7D:AF:CC:C8:02
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 01935274E91BF517EEA7A5012BBA5523653C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 0FA4
Signing time: Fri 22 Nov 2024 06:00:13 +0000
Manifest this update: Fri 22 Nov 2024 06:00:13 +0000
Manifest next update: Sat 23 Nov 2024 06:00:13 +0000
Files and hashes: 1: YxYV7ilU-bzaeiwRMYc2UtSyiIY.roa (hash: u2WpS/rE8mabBFz4HXJHYjc1HdXHi/azx+IQDgOLWXo=)
2: cUVsoCyzos4ssBbvF-ZRTsO1d1I.roa (hash: +PnY4zAxxBUiZN1Tp+I7+ze1N640mgzVuulUMk8GM40=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: e1LaixW1nMg4PoDbdDrYtrIqhjskoJuyaKGU59Wt9fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:e9:1b:f5:17:ee:a7:a5:01:2b:ba:55:23:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Nov 22 06:00:13 2024 GMT
Not After : Nov 23 06:00:13 2024 GMT
Subject: CN=200bcb2595ec8e3d3a8de4d7c2c85d7dafccc802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:2a:74:91:38:85:10:8e:af:35:77:6c:00:
25:ee:e4:44:0f:4a:c3:3c:83:0f:43:87:74:0a:53:
3f:a7:b3:cb:eb:90:e1:bb:c8:19:1d:5c:ec:d6:54:
5d:74:9c:6f:13:0a:37:54:aa:81:aa:58:09:84:7a:
08:d4:29:ef:dd:9b:3b:ca:88:d6:b8:2c:8e:87:f7:
6f:08:ee:5b:99:8a:d8:1a:df:72:39:82:ae:9a:b4:
e8:fe:f8:28:e0:8d:55:0a:39:d8:57:2d:aa:08:36:
eb:60:67:39:84:ab:f1:42:d4:f7:39:86:76:53:4a:
b9:d0:20:53:e6:41:65:22:76:3c:94:06:a3:7c:86:
2e:ad:37:3a:c1:6e:52:fc:90:ab:de:44:41:4b:29:
65:c0:9f:70:94:ac:96:b3:38:bf:f0:72:70:05:c3:
81:aa:3e:e8:9c:2d:8e:52:74:7f:96:32:40:c9:92:
11:4d:dc:d7:e9:59:8e:bf:9f:7d:fd:44:4c:6e:66:
2b:12:78:ba:36:10:69:f4:db:51:ae:f7:45:c5:d6:
0b:b8:32:ef:83:3a:5a:ba:cb:c6:e9:a1:a4:bd:e9:
c8:57:db:6e:f4:a5:8b:bb:93:af:24:d6:33:e6:2d:
54:5f:30:a1:86:8f:94:27:aa:87:82:4b:a3:75:1b:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:CB:25:95:EC:8E:3D:3A:8D:E4:D7:C2:C8:5D:7D:AF:CC:C8:02
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e6:3e:1b:0c:ca:16:cd:18:a4:c3:aa:29:34:a1:f1:51:b2:
b5:bb:40:48:a9:c0:8b:fe:d2:a2:5a:77:21:5b:e0:17:a3:51:
7a:80:df:f8:d0:23:ba:54:99:c1:26:ce:82:70:4d:ed:49:5e:
ed:8a:c4:41:0f:aa:e3:50:68:4d:fa:75:36:20:db:69:fe:32:
3e:12:69:87:d2:15:5b:65:1c:c7:a7:9a:3f:37:82:0a:ab:05:
9c:21:a8:34:59:cc:9e:2f:0d:74:be:3f:60:77:a4:4d:5a:62:
46:89:0c:ab:6a:cf:c5:55:7d:dc:d1:a9:d9:47:23:20:27:d5:
e6:4c:5b:f9:c1:46:ca:20:6d:e9:8d:7d:04:e0:73:36:84:0a:
07:52:41:a3:06:c7:0c:cf:b6:8d:06:db:18:f1:f3:83:5d:a7:
af:29:cb:e7:51:da:ec:9b:05:0d:0f:ba:86:5a:9d:64:b8:cf:
cd:bc:16:57:98:1b:84:78:b9:97:34:b6:c0:6c:35:2a:22:21:
21:3c:f7:6b:41:31:75:50:6f:5f:c0:47:e1:5c:60:8d:96:0a:
fa:0b:4b:66:1f:3c:17:48:4d:72:dc:01:f0:64:4b:65:68:7f:
4b:2d:4e:d9:66:0b:f0:e3:38:fd:b7:62:73:72:bb:e5:a6:83:
2d:a1:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:19 2024 by rpki-client on console-fra.rpki-client.org