Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: hBKr97SfhpAx0wzB4ZuxrvoImMhAMyOLgYOb3CJENbI=
Subject key identifier: 4F:C5:0B:CA:FE:8F:EF:87:59:13:4C:88:08:7E:77:FD:72:14:27:E4
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019355AD1C460D21886E87124A2582152A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 6E
Signing time: Fri 22 Nov 2024 21:00:28 +0000
Manifest this update: Fri 22 Nov 2024 21:00:28 +0000
Manifest next update: Sat 23 Nov 2024 21:00:28 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: 0JWIZAozAQP3urS8k69dS6XCxUV7BORDdtxSlatT7Jo=)
2: dPMyaVemdUDLzMighSCzbMB1RLs.roa (hash: DV9PLNH0yyfRR6Dsv9nKHxgGg4tPeHvxYy4da8VuaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:1c:46:0d:21:88:6e:87:12:4a:25:82:15:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Nov 22 21:00:28 2024 GMT
Not After : Nov 23 21:00:28 2024 GMT
Subject: CN=4fc50bcafe8fef8759134c88087e77fd721427e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:49:f4:6d:2f:d8:e7:62:c2:cd:6c:a2:a1:
56:5a:f3:c0:1d:6e:68:0e:ce:c6:d7:a0:78:8c:8d:
88:97:02:1f:22:e4:d3:54:39:f5:92:a7:7c:2c:65:
22:9b:8a:95:cb:88:a5:a6:bc:7f:88:57:9f:4a:68:
e5:d3:c3:bf:75:bf:ec:85:8c:c0:87:f4:2a:e3:cd:
0d:69:ca:38:a2:2d:be:af:50:c2:a9:f0:7c:65:ce:
de:d8:b6:44:42:da:87:e5:b7:bf:18:ab:a6:8c:64:
05:50:40:86:10:f8:0d:44:00:ee:af:cb:8f:93:82:
fc:4f:aa:39:ba:2b:24:c3:28:69:11:63:ec:8a:01:
d1:d3:41:9a:da:1e:07:87:ea:26:72:71:8b:2c:44:
ec:a5:4e:a1:c7:e2:4a:d2:2d:49:a1:72:01:03:23:
bb:c4:20:3f:51:9d:38:d3:92:ec:59:f2:ce:04:34:
7d:63:52:5e:32:0a:09:94:63:9e:76:53:a2:fc:d5:
a6:b5:28:05:5c:d6:77:07:cc:cf:31:92:1a:ac:fe:
34:35:9f:5d:95:28:9a:f9:43:d2:b7:89:0a:fd:43:
bf:4c:21:22:d7:9a:a2:02:a0:3e:0d:a0:33:34:d7:
9a:9a:db:d1:4f:95:72:6e:b8:2a:8e:35:a5:08:79:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:0B:CA:FE:8F:EF:87:59:13:4C:88:08:7E:77:FD:72:14:27:E4
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:2a:0e:5b:79:d8:9a:cb:95:7d:61:b9:1e:86:cd:0f:66:
0f:95:81:1b:43:39:39:16:7c:03:e1:d3:a9:1e:2d:a7:07:6b:
fd:6e:1f:e4:a4:bd:25:5d:1a:b3:26:9c:6a:52:69:fe:7a:f9:
5b:4f:68:80:07:6e:62:35:55:ec:2a:8e:8f:ae:d7:7c:a4:99:
28:cd:35:4a:60:95:99:94:2e:f0:bb:07:7a:f6:82:ca:d7:cc:
d5:52:10:99:75:e3:b7:f7:6d:ed:6e:17:80:4b:84:22:6a:0d:
a6:35:a6:a8:99:4c:73:7c:48:e7:bf:57:2f:4e:e1:3a:69:61:
6b:8e:d6:e5:84:9b:92:64:91:1d:f6:32:b1:48:ea:40:d7:10:
5b:3b:68:a8:3e:e3:b1:68:37:a8:48:ef:2d:ce:07:d9:73:61:
9c:ec:71:71:d8:31:23:0c:d6:43:aa:c8:6d:5a:8e:82:06:ed:
51:04:38:2e:f4:ad:59:83:7c:15:74:91:3f:4a:a4:f5:6c:3e:
7c:86:e0:a4:4c:38:9e:db:ab:a0:cf:38:b7:fa:f9:54:f5:89:
e9:83:c5:8b:3a:1b:12:8f:ec:e1:3b:bd:a8:6c:8f:23:48:bb:
e1:b9:35:c6:12:a4:e5:fe:14:7b:84:17:a6:9d:b3:49:a6:7f:
ac:79:66:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrRxGDSGIbocSSiWCFSo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi
NWIxYjcwHhcNMjQxMTIyMjEwMDI4WhcNMjQxMTIzMjEwMDI4WjAzMTEwLwYDVQQD
Eyg0ZmM1MGJjYWZlOGZlZjg3NTkxMzRjODgwODdlNzdmZDcyMTQyN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M9J9G0v2Odiws1soqFWWvPAHW5o
Ds7G16B4jI2IlwIfIuTTVDn1kqd8LGUim4qVy4ilprx/iFefSmjl08O/db/shYzA
h/Qq480Naco4oi2+r1DCqfB8Zc7e2LZEQtqH5be/GKumjGQFUECGEPgNRADur8uP
k4L8T6o5uiskwyhpEWPsigHR00Ga2h4Hh+omcnGLLETspU6hx+JK0i1JoXIBAyO7
xCA/UZ0405LsWfLOBDR9Y1JeMgoJlGOedlOi/NWmtSgFXNZ3B8zPMZIarP40NZ9d
lSia+UPSt4kK/UO/TCEi15qiAqA+DaAzNNeamtvRT5VybrgqjjWlCHm/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/FC8r+j++HWRNMiAh+d/1yFCfkMB8GA1UdIwQY
MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt
OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4
LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyAqDlt5
2JrLlX1huR6GzQ9mD5WBG0M5ORZ8A+HTqR4tpwdr/W4f5KS9JV0asyacalJp/nr5
W09ogAduYjVV7CqOj67XfKSZKM01SmCVmZQu8LsHevaCytfM1VIQmXXjt/dt7W4X
gEuEImoNpjWmqJlMc3xI579XL07hOmlha47W5YSbkmSRHfYysUjqQNcQWztoqD7j
sWg3qEjvLc4H2XNhnOxxcdgxIwzWQ6rIbVqOggbtUQQ4LvStWYN8FXSRP0qk9Ww+
fIbgpEw4nturoM84t/r5VPWJ6YPFizobEo/s4Tu9qGyPI0i74bk1xhKk5f4Ue4QX
pp2zSaZ/rHlm7A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:22 2024 by rpki-client on console-fra.rpki-client.org