Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: sDGgPrre/pJQdJqrGQtwjVMr/vKpRFqhkxeYzOR24V8=
Subject key identifier: A8:0E:8F:71:4B:F9:45:B7:3E:8A:4E:AC:4C:29:41:87:9D:9A:D7:D3
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019367EC47B97B7633894D800DFD345DECC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0D79
Signing time: Tue 26 Nov 2024 10:02:38 +0000
Manifest this update: Tue 26 Nov 2024 10:02:38 +0000
Manifest next update: Wed 27 Nov 2024 10:02:38 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: KHYuZ8syUXQ0FfRiPqoMueSopkBgmWsD702Sx8ATyZg=)
2: ncoBLA1HDUTqidFJmrj7JUto9Aw.roa (hash: 9FMViztroUpmlun2KH3GUKCRJy1G+1yGs8243QRCjI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:47:b9:7b:76:33:89:4d:80:0d:fd:34:5d:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Nov 26 10:02:38 2024 GMT
Not After : Nov 27 10:02:38 2024 GMT
Subject: CN=a80e8f714bf945b73e8a4eac4c2941879d9ad7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:e1:41:2e:f0:e4:53:8b:7b:b3:2e:e1:fe:
47:f3:ce:7b:5f:5a:ca:09:23:b6:d3:c8:d2:31:dc:
a0:72:4c:a0:c3:ee:b5:11:6d:fc:e0:fd:39:25:ab:
b2:ae:df:39:43:66:38:7d:d5:23:62:3a:bd:8e:e5:
6d:e4:fc:fa:a2:c4:bd:04:0a:22:49:6e:e4:d9:23:
1b:19:c4:d2:11:9e:3a:83:83:b9:d8:42:78:cb:6f:
b0:cb:53:57:66:e9:cb:8d:7f:72:eb:94:44:b5:01:
29:c6:97:65:f3:c7:0d:09:1c:e7:35:f3:c5:8f:95:
e3:c5:67:49:ac:a7:8f:e3:ce:52:24:3b:dc:7d:16:
a6:5d:9c:17:25:47:76:3b:6e:f5:79:4f:88:b4:a0:
2e:ea:46:dc:e8:25:00:95:c8:c2:0f:ab:5c:2a:d2:
83:e5:64:34:15:cf:e2:de:5c:a3:3f:05:a3:ca:d9:
96:71:1a:22:3b:ad:0e:c0:d5:e1:d3:4e:3c:21:75:
95:02:07:e2:78:8a:58:40:a6:80:41:76:a0:42:ea:
20:11:05:3c:7b:7a:39:ba:f0:70:75:51:07:70:89:
e9:a0:f4:a1:75:41:a9:1e:8a:1e:f2:42:e7:88:df:
55:0f:4a:2f:3a:df:ca:fa:a8:70:3b:01:1b:6f:c5:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:8F:71:4B:F9:45:B7:3E:8A:4E:AC:4C:29:41:87:9D:9A:D7:D3
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:75:08:66:37:d7:7d:ba:da:ea:4b:5d:7c:dd:c7:ae:e8:bc:
b7:6f:36:62:ad:a3:4b:d5:7f:98:47:e6:3c:8e:6d:b6:f2:e8:
31:c9:26:6f:be:35:3c:a4:da:12:56:90:50:75:82:71:db:dd:
48:93:f8:45:46:05:b5:93:28:1f:86:2f:67:c3:ab:43:59:9a:
ab:49:b2:a7:bc:32:4a:99:3f:d7:50:ad:1b:a2:f4:d9:fd:52:
ac:18:49:34:99:92:a0:3d:33:49:e7:f5:b5:db:c6:64:d0:86:
3b:bd:8b:6f:f8:9d:00:b9:69:25:44:93:95:d3:26:2c:ff:01:
cb:9d:42:d4:fa:7c:a8:01:c1:67:b9:54:c3:20:d5:03:5a:e4:
c9:66:e3:9d:4c:8d:ca:6c:67:59:94:33:20:f9:55:18:5f:2e:
6d:e9:65:46:f9:2d:b2:bf:f6:58:64:ec:e8:37:c5:23:1f:bc:
d6:6c:db:d1:01:b6:4a:9f:2d:30:1c:44:ea:68:22:84:5f:f0:
05:fa:db:df:ba:06:7f:01:99:2e:07:5e:55:58:1f:d0:a5:02:
0a:40:6a:74:df:e4:e0:af:4c:45:96:fb:cb:db:cc:20:24:86:
13:d2:fb:52:a6:25:39:5f:62:e9:a7:51:2c:c4:0b:39:ee:dd:
5c:ea:bf:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn7Ee5e3YziU2ADf00XezGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1
NmMxYWIwHhcNMjQxMTI2MTAwMjM4WhcNMjQxMTI3MTAwMjM4WjAzMTEwLwYDVQQD
EyhhODBlOGY3MTRiZjk0NWI3M2U4YTRlYWM0YzI5NDE4NzlkOWFkN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfzhQS7w5FOLe7Mu4f5H8857X1rK
CSO208jSMdygckygw+61EW384P05Jauyrt85Q2Y4fdUjYjq9juVt5Pz6osS9BAoi
SW7k2SMbGcTSEZ46g4O52EJ4y2+wy1NXZunLjX9y65REtQEpxpdl88cNCRznNfPF
j5XjxWdJrKeP485SJDvcfRamXZwXJUd2O271eU+ItKAu6kbc6CUAlcjCD6tcKtKD
5WQ0Fc/i3lyjPwWjytmWcRoiO60OwNXh0048IXWVAgfieIpYQKaAQXagQuogEQU8
e3o5uvBwdVEHcInpoPShdUGpHooe8kLniN9VD0ovOt/K+qhwOwEbb8WWeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgOj3FL+UW3PopOrEwpQYedmtfTMB8GA1UdIwQY
MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct
YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3
LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3UIZjfX
fbra6ktdfN3Hrui8t282Yq2jS9V/mEfmPI5ttvLoMckmb741PKTaElaQUHWCcdvd
SJP4RUYFtZMoH4YvZ8OrQ1maq0myp7wySpk/11CtG6L02f1SrBhJNJmSoD0zSef1
tdvGZNCGO72Lb/idALlpJUSTldMmLP8By51C1Pp8qAHBZ7lUwyDVA1rkyWbjnUyN
ymxnWZQzIPlVGF8ubellRvktsr/2WGTs6DfFIx+81mzb0QG2Sp8tMBxE6mgihF/w
Bfrb37oGfwGZLgdeVVgf0KUCCkBqdN/k4K9MRZb7y9vMICSGE9L7UqYlOV9i6adR
LMQLOe7dXOq/1A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:16:50 2024 by rpki-client on console-ams.rpki-client.org