Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: etG/YVRd1hgFXArFwK07SmdmgArlX5GsLmErqrtc8Mw=
Subject key identifier: E3:8C:24:B1:7F:AF:66:58:05:1D:A5:6B:FE:5C:62:D6:21:CA:2C:2B
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019356F72027E52D2AE60FCA4A050CE5106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 016B
Signing time: Sat 23 Nov 2024 03:00:56 +0000
Manifest this update: Sat 23 Nov 2024 03:00:56 +0000
Manifest next update: Sun 24 Nov 2024 03:00:56 +0000
Files and hashes: 1: 1A-ARGD0GHA3rNEJNDCzqlS9WOY.roa (hash: eEZtq1y87oY2ndVfZ2eBQPDbew4vt9frgJd/eVp2/wI=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: qSXpH6FQOHOU7PNS4X3fnhc/i2HUcaA9dQ0O+mgo7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:20:27:e5:2d:2a:e6:0f:ca:4a:05:0c:e5:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Nov 23 03:00:56 2024 GMT
Not After : Nov 24 03:00:56 2024 GMT
Subject: CN=e38c24b17faf6658051da56bfe5c62d621ca2c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:5a:cc:b0:90:ec:ad:41:9d:22:25:fe:a3:
0a:ac:62:42:33:26:d6:c0:99:36:30:62:33:8d:6b:
68:94:2d:3f:56:43:d1:e2:bc:5a:09:1e:fe:37:7f:
9e:53:44:88:25:e4:24:b1:f8:0a:8e:ad:49:db:4f:
1b:a7:c3:94:14:da:d5:45:a9:15:e9:9b:ea:83:6e:
b6:af:8b:80:45:6d:fb:ba:2e:89:96:fa:91:7c:de:
8c:0c:30:f7:fd:a4:60:e4:60:d7:6c:34:8a:f0:09:
54:d1:f5:92:58:02:0f:b8:07:a8:4b:9d:1d:d4:d1:
25:50:21:47:a2:8a:d8:5e:47:6e:e0:de:ed:38:3c:
57:18:30:3f:7e:b8:41:d3:dd:f9:a8:49:aa:9d:c5:
f6:e8:ec:28:ba:aa:9b:17:ec:71:a7:4b:55:b0:d2:
27:84:b7:46:33:ce:81:d9:1f:d2:79:c4:0f:3f:ca:
b3:4d:ca:9c:51:a8:20:50:bc:af:b1:4e:55:25:3f:
37:bd:ea:bb:9a:7c:44:00:23:45:3e:21:58:12:64:
55:74:df:9e:73:c5:58:8a:9a:91:8d:71:66:43:96:
a7:d2:6a:46:c6:d3:26:48:0d:5d:33:be:00:1a:f6:
4b:20:11:67:fa:77:f0:0c:08:40:51:74:45:96:0b:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:24:B1:7F:AF:66:58:05:1D:A5:6B:FE:5C:62:D6:21:CA:2C:2B
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:59:b0:20:0b:36:56:66:bc:01:58:71:4c:1f:0e:36:76:a8:
fc:25:2b:a6:18:0a:c8:f2:65:4f:90:0c:6f:7b:f6:f9:42:37:
d5:ce:c7:bd:7c:15:ef:0a:96:73:cf:bf:97:87:9b:b4:0f:0c:
7c:3e:47:5c:21:5b:65:ea:a1:f4:f8:9b:17:7d:58:20:1d:29:
5d:fe:80:f4:f9:aa:e4:88:31:72:3d:fd:d1:32:f9:80:e8:17:
27:1d:bc:f9:cf:7a:f6:91:6e:2e:c8:6a:8e:ca:f5:bb:8b:e2:
37:aa:36:1b:19:18:b7:d4:74:30:91:55:be:9b:dc:6f:3c:8c:
2a:51:56:19:dc:b0:e7:83:db:b7:27:70:c6:47:3c:9d:f2:a3:
f6:ab:4d:fa:2f:6a:cd:09:7a:00:1e:e4:28:57:b7:b3:24:1b:
98:01:4d:19:82:81:36:1a:de:18:22:e7:f2:c2:68:87:a3:1c:
30:3f:53:02:d3:69:6f:72:b4:51:dc:eb:e5:79:6a:36:21:5f:
46:93:0f:b7:8c:49:69:18:c7:7d:a1:65:6b:c5:51:b1:f1:b4:
6e:fb:12:9d:95:fb:4b:1a:cc:7a:f3:5c:d3:54:6f:23:b7:97:
6f:d9:57:36:48:bf:c3:f2:9f:ed:ea:00:8a:02:3e:56:92:3c:
bb:b6:09:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9yAn5S0q5g/KSgUM5RBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl
NGM5MzEwHhcNMjQxMTIzMDMwMDU2WhcNMjQxMTI0MDMwMDU2WjAzMTEwLwYDVQQD
EyhlMzhjMjRiMTdmYWY2NjU4MDUxZGE1NmJmZTVjNjJkNjIxY2EyYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yVazLCQ7K1BnSIl/qMKrGJCMybW
wJk2MGIzjWtolC0/VkPR4rxaCR7+N3+eU0SIJeQksfgKjq1J208bp8OUFNrVRakV
6Zvqg262r4uARW37ui6JlvqRfN6MDDD3/aRg5GDXbDSK8AlU0fWSWAIPuAeoS50d
1NElUCFHoorYXkdu4N7tODxXGDA/frhB0935qEmqncX26OwouqqbF+xxp0tVsNIn
hLdGM86B2R/SecQPP8qzTcqcUaggULyvsU5VJT83veq7mnxEACNFPiFYEmRVdN+e
c8VYipqRjXFmQ5an0mpGxtMmSA1dM74AGvZLIBFn+nfwDAhAUXRFlgsPywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOMJLF/r2ZYBR2la/5cYtYhyiwrMB8GA1UdIwQY
MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt
OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy
LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVmwIAs2
Vma8AVhxTB8ONnao/CUrphgKyPJlT5AMb3v2+UI31c7HvXwV7wqWc8+/l4ebtA8M
fD5HXCFbZeqh9PibF31YIB0pXf6A9Pmq5Igxcj390TL5gOgXJx28+c969pFuLshq
jsr1u4viN6o2GxkYt9R0MJFVvpvcbzyMKlFWGdyw54Pbtydwxkc8nfKj9qtN+i9q
zQl6AB7kKFe3syQbmAFNGYKBNhreGCLn8sJoh6McMD9TAtNpb3K0Udzr5XlqNiFf
RpMPt4xJaRjHfaFla8VRsfG0bvsSnZX7SxrMevNc01RvI7eXb9lXNki/w/Kf7eoA
igI+VpI8u7YJNg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:27 2024 by rpki-client on console-ams.rpki-client.org