Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: cGjHrvZjgTuVdwaBhS8/3ikMAhCd4W67oDCk8Xu/FyQ=
Subject key identifier: A1:B8:7E:8E:C1:32:42:C6:59:B1:31:FD:6A:54:DB:92:B6:7E:69:EE
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 01936AEBA780E81A044880EC401C56967061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0D61
Signing time: Wed 27 Nov 2024 00:00:48 +0000
Manifest this update: Wed 27 Nov 2024 00:00:48 +0000
Manifest next update: Thu 28 Nov 2024 00:00:48 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: Sk/p6QTLlu3fJ6KAm3KQdZqBFOKcUlWusbwmkJL0NMA=)
2: Qpt_WE7u7qPmZQvhid6Wdj14J-Q.roa (hash: +cZhAWwD80FbGGP1sJdoVLy5zcq2Q13OMjQP9BRud4A=)
3: WsXo6KzMdkKbb0SJeF67fmXx1UY.roa (hash: Uqr8i/vkCMRK6A1aMGnGd681unOZfqOxTg7fohwjogE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:a7:80:e8:1a:04:48:80:ec:40:1c:56:96:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Nov 27 00:00:48 2024 GMT
Not After : Nov 28 00:00:48 2024 GMT
Subject: CN=a1b87e8ec13242c659b131fd6a54db92b67e69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:4e:f8:1c:a5:24:8e:59:31:60:1a:f2:01:
03:ef:9f:17:05:74:1c:97:46:d1:ef:fd:15:47:31:
34:6c:e2:cf:2d:4b:9f:c1:dd:84:43:b5:14:d6:0c:
84:f1:af:71:3e:27:e0:61:6f:1d:22:53:62:94:30:
2c:72:d7:6e:b6:53:e8:f0:5e:4a:d0:d6:7b:8d:73:
d0:43:3e:bb:71:ae:d2:46:0d:ab:75:12:16:eb:7a:
64:b7:b7:47:ee:10:0a:b7:74:bc:02:0e:1b:80:59:
19:6f:de:1a:85:f8:e5:94:c3:4f:f7:2b:fd:74:97:
aa:ad:f3:a1:52:12:ba:41:ed:34:f5:db:c2:9d:78:
39:9c:35:3f:d5:0b:53:46:f6:6c:64:87:47:fb:70:
77:9c:5c:34:a3:b4:2b:47:1a:c6:7a:11:03:23:6e:
49:fe:3c:ba:c6:e9:e8:84:68:9a:88:5a:8e:c8:49:
c8:6f:d1:6a:7d:18:93:71:dd:79:7c:a8:33:9e:30:
84:3d:41:63:de:a9:ba:b1:ce:e2:eb:79:8a:55:15:
4d:5c:b2:ef:40:46:72:68:07:02:fa:af:cc:01:7e:
f1:7a:cc:38:7d:04:e5:7c:f2:8a:f7:53:fc:d9:f9:
1f:79:6c:48:ce:2e:73:24:9c:05:14:e5:24:03:0d:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:7E:8E:C1:32:42:C6:59:B1:31:FD:6A:54:DB:92:B6:7E:69:EE
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1d:f4:2b:88:f5:6b:c0:81:74:79:28:eb:28:cc:21:6b:0d:
63:ad:32:88:e7:46:33:71:7e:71:10:74:21:30:b9:71:dc:bd:
4b:8e:df:39:a6:68:4f:d6:1f:4b:e2:20:cc:fa:6e:70:ea:ab:
bb:62:d2:8d:c9:b5:b0:e0:c1:df:93:33:29:75:6d:f4:6c:e9:
6f:78:10:5d:e3:82:b7:84:ff:3e:50:77:0c:cf:32:29:04:28:
c7:2e:15:b9:60:a9:00:ea:1e:5d:d5:5f:da:a1:dc:0f:24:83:
93:b3:b7:4e:00:a7:d3:29:fd:e7:34:e2:55:04:2f:ab:4d:00:
65:36:5e:1e:3a:a4:33:72:9e:01:5c:02:53:59:bb:d3:01:3e:
a7:a6:fb:c4:67:bf:bf:46:86:af:3d:6e:e7:1f:4e:e7:36:6f:
1f:56:e0:e1:d7:1b:2b:f0:b4:11:57:c2:62:d2:6f:ea:d1:13:
33:60:17:8d:93:e4:9d:06:ae:4c:ce:99:f9:0a:64:18:a8:e7:
a2:73:9e:f5:de:79:87:d5:dd:20:bc:5e:5a:79:db:88:f9:c7:
7c:e5:e9:52:1f:20:2d:a2:14:a0:da:82:32:9e:fd:c5:14:1b:
a1:22:be:d9:4d:0a:5c:e2:ef:9e:4f:fa:ba:13:b0:1c:41:5b:
56:3d:68:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq66eA6BoESIDsQBxWlnBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjQxMTI3MDAwMDQ4WhcNMjQxMTI4MDAwMDQ4WjAzMTEwLwYDVQQD
EyhhMWI4N2U4ZWMxMzI0MmM2NTliMTMxZmQ2YTU0ZGI5MmI2N2U2OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qlO+BylJI5ZMWAa8gED758XBXQc
l0bR7/0VRzE0bOLPLUufwd2EQ7UU1gyE8a9xPifgYW8dIlNilDAsctdutlPo8F5K
0NZ7jXPQQz67ca7SRg2rdRIW63pkt7dH7hAKt3S8Ag4bgFkZb94ahfjllMNP9yv9
dJeqrfOhUhK6Qe009dvCnXg5nDU/1QtTRvZsZIdH+3B3nFw0o7QrRxrGehEDI25J
/jy6xunohGiaiFqOyEnIb9FqfRiTcd15fKgznjCEPUFj3qm6sc7i63mKVRVNXLLv
QEZyaAcC+q/MAX7xesw4fQTlfPKK91P82fkfeWxIzi5zJJwFFOUkAw0INwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG4fo7BMkLGWbEx/WpU25K2fmnuMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh30K4j1
a8CBdHko6yjMIWsNY60yiOdGM3F+cRB0ITC5cdy9S47fOaZoT9YfS+IgzPpucOqr
u2LSjcm1sODB35MzKXVt9Gzpb3gQXeOCt4T/PlB3DM8yKQQoxy4VuWCpAOoeXdVf
2qHcDySDk7O3TgCn0yn95zTiVQQvq00AZTZeHjqkM3KeAVwCU1m70wE+p6b7xGe/
v0aGrz1u5x9O5zZvH1bg4dcbK/C0EVfCYtJv6tETM2AXjZPknQauTM6Z+QpkGKjn
onOe9d55h9XdILxeWnnbiPnHfOXpUh8gLaIUoNqCMp79xRQboSK+2U0KXOLvnk/6
uhOwHEFbVj1opg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 08:30:50 2024 by rpki-client on console-fra.rpki-client.org