Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
File: 9jmMMC0NFtqBmD54_0walvOElDw.mft (raw, json)
Hash identifier: w8ltl/2gCuZfDXloGGlI7PU5iaFonRlxrAuoMJ1qYXg=
Subject key identifier: C1:13:07:2D:5B:B7:72:D1:7E:74:62:0A:80:9D:98:C3:BF:B3:C0:41
Authority key identifier: F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
Certificate issuer: /CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Certificate serial: 0193572DC5DE1AD287667971C525FB39AD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
Manifest number: 05A6
Signing time: Sat 23 Nov 2024 04:00:37 +0000
Manifest this update: Sat 23 Nov 2024 04:00:37 +0000
Manifest next update: Sun 24 Nov 2024 04:00:37 +0000
Files and hashes: 1: 9jmMMC0NFtqBmD54_0walvOElDw.crl (hash: 8+nuWLIuObvans7V9j426Erj8bPKc3fwidwbYoB+MpI=)
2: cdNNuI-dQFerpdYn10Q_DTMl-Ag.roa (hash: IVo7U5r6lZzIHvraP1KQ3ZNEhLn3eBWnCEZvvBi/sdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:c5:de:1a:d2:87:66:79:71:c5:25:fb:39:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Validity
Not Before: Nov 23 04:00:37 2024 GMT
Not After : Nov 24 04:00:37 2024 GMT
Subject: CN=c113072d5bb772d17e74620a809d98c3bfb3c041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:d7:04:0a:8b:91:a9:5a:10:8e:c1:89:c9:
bf:06:d4:cd:f9:82:2b:21:2e:fd:69:dc:2d:a8:41:
f1:19:00:cd:6a:3a:69:d3:b9:b8:44:02:71:df:22:
3a:ac:c6:58:2c:60:f3:d7:90:70:d9:99:5a:90:db:
d1:5f:af:3c:39:ef:ad:9d:1a:b1:8c:d4:2e:4b:8b:
7d:72:5a:47:7f:06:f4:8c:4a:f5:2e:41:51:b2:b6:
ea:b7:06:94:62:96:cf:50:56:ce:8c:62:12:1e:a6:
8a:38:f0:9c:d5:95:be:87:e6:dc:ef:5e:83:ea:d7:
ca:89:04:8a:a2:8d:2b:ab:de:12:54:f4:f4:dc:e1:
e9:3b:1d:54:b9:31:1d:44:57:cc:d6:48:31:54:a7:
01:c0:a4:cf:10:51:e0:14:0e:b2:38:76:e0:8c:d0:
a1:69:b7:d4:5c:de:9a:7d:5b:98:a2:03:f8:9f:8f:
6e:9c:f4:59:4c:9f:77:9a:c6:aa:97:ff:77:e3:c9:
e2:e3:0b:07:c7:90:dd:f7:86:46:44:83:ba:ad:2c:
31:93:7f:b8:62:d0:28:9e:e3:af:17:3d:80:17:49:
10:3e:a8:5e:c6:17:50:6d:95:38:59:3d:fd:13:f0:
12:4f:86:3c:cd:4a:c2:ec:8f:04:93:06:05:7d:94:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:07:2D:5B:B7:72:D1:7E:74:62:0A:80:9D:98:C3:BF:B3:C0:41
X509v3 Authority Key Identifier:
keyid:F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:58:1f:bb:30:96:03:3a:5f:69:32:b3:c4:79:8d:51:15:fa:
e7:1b:8e:00:be:f6:ea:f3:17:5e:ff:13:7e:e5:85:a7:ec:98:
a4:8a:57:0d:66:7d:26:a0:f4:c9:5a:c5:2f:4d:a5:64:74:ec:
f0:d9:d9:b0:ee:14:b7:3b:be:39:1c:1a:dc:0a:09:a9:94:2b:
ed:80:e4:06:11:9a:72:59:ee:ab:4f:48:1f:10:00:f4:7b:cb:
1a:b0:6f:37:5a:11:68:ab:67:38:72:c7:16:96:30:58:eb:72:
14:53:b2:02:75:97:b5:1d:a5:8b:b9:f4:8c:74:37:a8:12:b4:
86:af:84:a1:43:37:d1:98:89:67:b5:f5:41:0f:71:59:b4:fc:
09:bf:f5:ae:b8:7b:58:22:1a:f4:7d:a7:f1:87:8d:7e:ca:0c:
0a:2e:a8:4d:77:23:e6:0d:74:18:bc:8f:79:49:b1:85:b2:83:
91:11:94:f2:5d:18:02:d6:fd:a4:5a:6b:b5:f4:95:99:3b:cf:
51:c8:fb:1b:45:09:3f:58:56:55:dd:44:26:c8:96:90:9c:9f:
f2:26:0b:64:59:2f:f8:d8:ce:ce:db:10:e1:4d:ce:33:81:42:
65:5d:b8:74:49:5f:f0:46:80:06:38:0d:ac:30:4f:8e:dc:98:
be:06:a9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLcXeGtKHZnlxxSX7Oa00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzk4YzMwMmQwZDE2ZGE4MTk4M2U3OGZmNGMxYTk2ZjM4
NDk0M2MwHhcNMjQxMTIzMDQwMDM3WhcNMjQxMTI0MDQwMDM3WjAzMTEwLwYDVQQD
EyhjMTEzMDcyZDViYjc3MmQxN2U3NDYyMGE4MDlkOThjM2JmYjNjMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx7XBAqLkalaEI7Bicm/BtTN+YIr
IS79adwtqEHxGQDNajpp07m4RAJx3yI6rMZYLGDz15Bw2ZlakNvRX688Oe+tnRqx
jNQuS4t9clpHfwb0jEr1LkFRsrbqtwaUYpbPUFbOjGISHqaKOPCc1ZW+h+bc716D
6tfKiQSKoo0rq94SVPT03OHpOx1UuTEdRFfM1kgxVKcBwKTPEFHgFA6yOHbgjNCh
abfUXN6afVuYogP4n49unPRZTJ93msaql/9348ni4wsHx5Dd94ZGRIO6rSwxk3+4
YtAonuOvFz2AF0kQPqhexhdQbZU4WT39E/AST4Y8zUrC7I8EkwYFfZRJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMETBy1bt3LRfnRiCoCdmMO/s8BBMB8GA1UdIwQY
MBaAFPY5jDAtDRbagZg+eP9MGpbzhJQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWptTU1DME5GdHFCbUQ1NF8wd2Fsdk9FbER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MjBiYjYtMDliYi00NDFhLTkwNjEt
MTU1MjBjZDBmZjZiLzEvOWptTU1DME5GdHFCbUQ1NF8wd2Fsdk9FbER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MjBiYjYtMDliYi00NDFhLTkwNjEtMTU1MjBjZDBmZjZi
LzEvOWptTU1DME5GdHFCbUQ1NF8wd2Fsdk9FbER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVgfuzCW
AzpfaTKzxHmNURX65xuOAL726vMXXv8TfuWFp+yYpIpXDWZ9JqD0yVrFL02lZHTs
8NnZsO4Utzu+ORwa3AoJqZQr7YDkBhGaclnuq09IHxAA9HvLGrBvN1oRaKtnOHLH
FpYwWOtyFFOyAnWXtR2li7n0jHQ3qBK0hq+EoUM30ZiJZ7X1QQ9xWbT8Cb/1rrh7
WCIa9H2n8YeNfsoMCi6oTXcj5g10GLyPeUmxhbKDkRGU8l0YAtb9pFprtfSVmTvP
Ucj7G0UJP1hWVd1EJsiWkJyf8iYLZFkv+NjOztsQ4U3OM4FCZV24dElf8EaABjgN
rDBPjtyYvgap9g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:33 2024 by rpki-client on console-ams.rpki-client.org