Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: QNv9KuAF5iR+0sVs8t7xZ05+1fTvHetzICjXSSl4MJQ=
Subject key identifier: 20:BB:45:87:51:2B:42:DA:5B:53:26:2D:40:F6:5A:B6:65:9F:62:E6
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 0193549A67D162EBA0A2E6CEF103C205871D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 0DF9
Signing time: Fri 22 Nov 2024 16:00:25 +0000
Manifest this update: Fri 22 Nov 2024 16:00:25 +0000
Manifest next update: Sat 23 Nov 2024 16:00:25 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: VPJHaXvrA2T8gnHU0FZChbT4dabRiH/QPY8DPYP2mnQ=)
2: Ra2yohMs4LbhrIuUTTG_z0f40LE.roa (hash: 1MMpU5v8/l6O2rSlqYKubJ/ZY9u21uftC8TUmIDIgns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:67:d1:62:eb:a0:a2:e6:ce:f1:03:c2:05:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Nov 22 16:00:25 2024 GMT
Not After : Nov 23 16:00:25 2024 GMT
Subject: CN=20bb4587512b42da5b53262d40f65ab6659f62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:f2:e1:18:20:1f:30:53:1d:36:93:b2:34:
b4:67:4b:c1:94:44:b0:35:22:3f:0b:72:c1:0e:54:
1c:6b:ca:7f:75:4e:2d:32:38:3b:94:a1:b9:87:e5:
0c:ee:1c:32:b3:fb:1d:ad:7f:49:0e:ef:e2:ec:c8:
9f:5a:3f:71:2f:29:c9:9f:53:18:24:c6:c8:c1:af:
ed:26:2d:a7:4b:0c:e7:13:98:b6:5a:82:15:77:59:
21:c6:2b:b2:17:fd:c8:8a:c0:a5:5f:91:93:3b:be:
51:9b:02:a8:03:91:f8:50:b4:0a:0d:d7:ae:65:d0:
fb:67:91:09:dc:d2:ba:01:32:29:19:a6:fd:75:23:
97:bb:c8:45:02:53:9e:53:9d:64:66:78:b8:74:49:
fc:da:2e:a9:e2:9f:51:fb:fe:ed:c9:75:c2:e9:96:
fc:43:b1:4f:53:c9:7e:61:00:20:fc:b0:73:e3:0d:
b7:92:5e:1b:9b:12:be:2b:b9:9a:c5:3e:b1:5d:5e:
d8:33:c6:05:71:72:d0:f4:2d:9b:8b:1d:eb:d3:60:
8a:0e:e7:50:36:35:a2:7a:7d:d6:d6:44:3c:9a:7f:
07:9b:8a:fe:a0:24:8e:30:14:95:5e:ae:6b:46:66:
a6:34:d6:4e:75:58:71:bf:98:12:24:a3:20:1e:7d:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:45:87:51:2B:42:DA:5B:53:26:2D:40:F6:5A:B6:65:9F:62:E6
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:d7:ae:13:db:f2:ba:ee:39:09:05:bc:23:04:eb:f2:08:
b8:97:bd:ce:d1:aa:25:d5:b0:98:a0:b4:bc:e3:12:b6:24:f6:
eb:a3:ae:6d:0b:e3:6c:4e:4b:be:03:18:6d:92:05:4b:a9:c2:
59:a9:96:e5:45:33:d1:81:2a:4b:e3:b8:1d:3d:45:06:d4:a0:
0f:ee:87:6c:df:6d:e0:b6:b4:05:86:83:e8:0d:5f:f9:aa:e4:
6f:1e:8e:f8:82:fc:02:c6:f2:ce:d0:90:f4:7d:0d:a8:17:18:
fd:85:a5:8a:83:24:56:de:e7:7b:fc:4b:02:57:ff:fa:19:f3:
71:d5:12:3f:f4:4a:43:f5:19:31:28:12:ad:32:d6:11:53:c8:
f2:13:b4:01:3a:15:d0:9d:c9:53:11:04:29:03:33:0f:81:78:
28:c6:4a:ba:dd:d4:11:d7:41:9b:37:f2:9e:42:51:35:a9:e6:
ac:13:7b:6f:aa:d1:57:26:d5:71:bb:9b:26:83:93:72:6d:58:
de:2b:50:33:36:b5:6e:ae:21:1d:30:4a:06:6d:9e:74:70:24:
13:11:00:e9:34:87:ea:6c:54:11:e8:05:8b:72:5e:52:6e:57:
a3:7e:b3:22:77:5a:1f:30:53:b9:7f:5c:43:65:9e:14:71:43:
86:33:c3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmmfRYuugoubO8QPCBYcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk
ZDhjMzAwHhcNMjQxMTIyMTYwMDI1WhcNMjQxMTIzMTYwMDI1WjAzMTEwLwYDVQQD
EygyMGJiNDU4NzUxMmI0MmRhNWI1MzI2MmQ0MGY2NWFiNjY1OWY2MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdPy4RggHzBTHTaTsjS0Z0vBlESw
NSI/C3LBDlQca8p/dU4tMjg7lKG5h+UM7hwys/sdrX9JDu/i7MifWj9xLynJn1MY
JMbIwa/tJi2nSwznE5i2WoIVd1khxiuyF/3IisClX5GTO75RmwKoA5H4ULQKDdeu
ZdD7Z5EJ3NK6ATIpGab9dSOXu8hFAlOeU51kZni4dEn82i6p4p9R+/7tyXXC6Zb8
Q7FPU8l+YQAg/LBz4w23kl4bmxK+K7maxT6xXV7YM8YFcXLQ9C2bix3r02CKDudQ
NjWien3W1kQ8mn8Hm4r+oCSOMBSVXq5rRmamNNZOdVhxv5gSJKMgHn213QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC7RYdRK0LaW1MmLUD2WrZln2LmMB8GA1UdIwQY
MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt
ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi
LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3TXrhPb
8rruOQkFvCME6/IIuJe9ztGqJdWwmKC0vOMStiT266OubQvjbE5LvgMYbZIFS6nC
WamW5UUz0YEqS+O4HT1FBtSgD+6HbN9t4La0BYaD6A1f+arkbx6O+IL8AsbyztCQ
9H0NqBcY/YWlioMkVt7ne/xLAlf/+hnzcdUSP/RKQ/UZMSgSrTLWEVPI8hO0AToV
0J3JUxEEKQMzD4F4KMZKut3UEddBmzfynkJRNanmrBN7b6rRVybVcbubJoOTcm1Y
3itQMza1bq4hHTBKBm2edHAkExEA6TSH6mxUEegFi3JeUm5Xo36zIndaHzBTuX9c
Q2WeFHFDhjPDXQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:34 2024 by rpki-client on console-fra.rpki-client.org