Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: lyzRTfa5D2h1nfRpUegYVlqVaGyxWGS1P0gjWh6mbBM=
Subject key identifier: E0:1A:71:19:7B:B6:E3:52:1A:5A:38:CE:49:BB:26:67:E8:30:B8:86
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01935508B0B3A7B57F1DF8BB52179760C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 10F4
Signing time: Fri 22 Nov 2024 18:00:52 +0000
Manifest this update: Fri 22 Nov 2024 18:00:52 +0000
Manifest next update: Sat 23 Nov 2024 18:00:52 +0000
Files and hashes: 1: 1-z0VFzM_9cX7udLeF8Djz6cbsgc.roa (hash: 83UoHtw8nDkwGide2JoUFtdknM1a/lgZvCtKE4bjRdQ=)
2: J1uk3AeynBXMMtIuSSNkGgZJOLg.roa (hash: lACUqTNKkDnhF0lhKQ9/HN46DSL7xQHIKNUVEx0Jrj8=)
3: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: 347lKP3xVlXSAv3kNwrMsZ9uPAPdTKeaMozFtJ8bZXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:b0:b3:a7:b5:7f:1d:f8:bb:52:17:97:60:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Nov 22 18:00:52 2024 GMT
Not After : Nov 23 18:00:52 2024 GMT
Subject: CN=e01a71197bb6e3521a5a38ce49bb2667e830b886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:13:0d:40:90:d4:7f:d8:7b:4d:d6:c0:55:
fe:9c:7e:ca:fc:d3:95:88:a0:09:3f:c7:ed:8f:ed:
2e:9e:98:38:a1:0b:3c:0c:6e:41:ec:4f:bd:0e:c7:
f4:01:2d:e5:e5:94:4a:a5:f6:d1:ca:4e:1c:ea:d3:
bc:e7:c9:cf:49:7a:cc:eb:61:3a:d8:dd:9b:c2:11:
f3:a5:58:0c:8c:d3:09:f3:64:b5:11:ce:e2:90:17:
dd:b9:e3:d7:4e:c8:bc:a3:45:1f:f7:b0:02:f9:c2:
c3:f6:58:30:5f:15:a4:ce:12:b7:0d:cb:82:61:e6:
c9:ff:74:1a:03:a3:5f:7a:28:22:9a:26:f6:46:15:
7a:12:9f:58:2c:01:75:45:87:c9:04:2f:c9:85:9a:
bc:71:21:7b:50:39:86:a7:9e:fd:42:90:7c:66:04:
f6:d4:a0:98:a9:ca:f3:19:1c:80:77:0a:bd:37:dd:
f8:1d:a8:b0:1f:c8:bc:1d:b9:73:36:e6:7d:3c:74:
bf:8e:58:3c:0e:d0:68:2b:9d:d1:30:de:58:f3:b0:
b1:b7:79:4a:e6:79:97:a6:20:4f:04:bb:bf:a4:e2:
f4:ed:45:15:d0:16:b9:05:c5:b3:82:b2:f0:59:2a:
e3:e8:19:5c:c0:00:6a:fd:36:60:c9:7a:6a:3d:0b:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:71:19:7B:B6:E3:52:1A:5A:38:CE:49:BB:26:67:E8:30:B8:86
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e6:aa:08:b7:db:65:28:4b:1b:02:7c:e1:ed:94:a9:50:c5:
95:53:92:ac:2d:85:53:c1:9e:c2:d2:36:95:82:df:de:cd:5b:
22:a0:77:90:f3:80:f7:aa:e0:fb:04:b6:ec:3f:15:61:3b:0d:
70:3a:98:40:05:a2:ff:7d:63:c3:4b:b3:ac:52:a7:1b:1f:ce:
7e:30:d6:83:b0:42:95:e1:0b:a1:23:cf:05:80:b9:ec:ca:82:
78:12:11:fa:a7:13:99:3a:bf:06:25:72:a8:cd:a3:53:d7:1c:
7e:62:95:f0:4a:44:fa:48:3a:63:f7:a5:c4:c0:65:94:63:a0:
7c:9c:62:28:a2:5f:2d:66:f2:39:91:9e:f7:57:a1:75:fe:10:
d8:df:84:9b:f5:94:43:3a:e9:f6:2f:2b:b0:18:af:7c:24:a6:
b0:5f:4c:5c:ac:71:32:fb:92:e6:00:bc:5b:40:35:ea:f1:86:
58:25:25:f3:7d:90:80:63:73:4b:c1:bc:1e:52:63:a2:ad:39:
2e:00:5e:b6:a1:07:ac:d8:34:71:4e:6e:99:e6:8b:f9:c0:9c:
97:a9:0b:b9:ae:1d:6c:37:45:b0:2b:ae:e7:05:8e:f6:af:62:
26:80:25:ec:70:2a:3e:2f:eb:66:44:e8:f1:e6:fc:ec:ca:d6:
b1:a3:34:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCLCzp7V/Hfi7UheXYMDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzIxMDNmZDI0MTdjODg2OTE0NTYxN2RlOTRmY2M5MTNi
MDg1ZWYwHhcNMjQxMTIyMTgwMDUyWhcNMjQxMTIzMTgwMDUyWjAzMTEwLwYDVQQD
EyhlMDFhNzExOTdiYjZlMzUyMWE1YTM4Y2U0OWJiMjY2N2U4MzBiODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKYTDUCQ1H/Ye03WwFX+nH7K/NOV
iKAJP8ftj+0unpg4oQs8DG5B7E+9Dsf0AS3l5ZRKpfbRyk4c6tO858nPSXrM62E6
2N2bwhHzpVgMjNMJ82S1Ec7ikBfduePXTsi8o0Uf97AC+cLD9lgwXxWkzhK3DcuC
YebJ/3QaA6Nfeigimib2RhV6Ep9YLAF1RYfJBC/JhZq8cSF7UDmGp579QpB8ZgT2
1KCYqcrzGRyAdwq9N934HaiwH8i8HblzNuZ9PHS/jlg8DtBoK53RMN5Y87Cxt3lK
5nmXpiBPBLu/pOL07UUV0Ba5BcWzgrLwWSrj6BlcwABq/TZgyXpqPQvREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAacRl7tuNSGlo4zkm7JmfoMLiGMB8GA1UdIwQY
MBaAFCnCED/SQXyIaRRWF96U/MkTsIXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUt
OWQ1NjU3NTEzZTIwLzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjhkODItMzlmYi00YTU2LTg5YzUtOWQ1NjU3NTEzZTIw
LzEvS2NJUVA5SkJmSWhwRkZZWDNwVDh5Uk93aGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeaqCLfb
ZShLGwJ84e2UqVDFlVOSrC2FU8GewtI2lYLf3s1bIqB3kPOA96rg+wS27D8VYTsN
cDqYQAWi/31jw0uzrFKnGx/OfjDWg7BCleELoSPPBYC57MqCeBIR+qcTmTq/BiVy
qM2jU9ccfmKV8EpE+kg6Y/elxMBllGOgfJxiKKJfLWbyOZGe91ehdf4Q2N+Em/WU
Qzrp9i8rsBivfCSmsF9MXKxxMvuS5gC8W0A16vGGWCUl832QgGNzS8G8HlJjoq05
LgBetqEHrNg0cU5umeaL+cCcl6kLua4dbDdFsCuu5wWO9q9iJoAl7HAqPi/rZkTo
8eb87MrWsaM0aw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:08 2024 by rpki-client on console-fra.rpki-client.org