Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: 1KUWVqqpzIwCrB2ktt7PrU0GerOJkRn3MOokeoHYmUg=
Subject key identifier: 10:7E:AB:BB:73:84:35:18:C9:1D:D3:A8:B0:F6:8F:66:CE:DC:09:E5
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 01935764882CD627307D6725C8FDDB040E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 05:00:26 +0000
Manifest this update: Sat 23 Nov 2024 05:00:26 +0000
Manifest next update: Sun 24 Nov 2024 05:00:26 +0000
Files and hashes: 1: TmGVbsIKUZ7lC_jUbdjb3JTwnhA.roa (hash: W+ovxNBcbgJnXBJKWQ/0770JFqCgX4jdBI0xiCm5nPI=)
2: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: uobBGz4nw39RHAO63Mtecw8m1gjMeIgjAOAosy8Y48I=)
3: z79tujcPB1r-6gVKD2DntMWUk4I.roa (hash: Ks9UUDkYedmidPcN39SBy/v/Gkzlji3TDrmm7oZO0H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:88:2c:d6:27:30:7d:67:25:c8:fd:db:04:0e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Nov 23 05:00:26 2024 GMT
Not After : Nov 24 05:00:26 2024 GMT
Subject: CN=107eabbb73843518c91dd3a8b0f68f66cedc09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:e8:e4:42:00:34:78:f7:8b:76:6d:ea:b7:
53:ea:cd:ce:13:b5:a1:ed:c3:d7:0d:56:2d:16:ca:
fe:45:62:7e:f9:45:5a:39:bd:23:45:6f:b2:b2:5d:
e8:6e:cf:a3:b2:88:7a:bc:de:43:16:bc:1f:34:b1:
7a:f1:b0:b6:75:2a:8c:fa:78:48:d0:13:51:c8:2f:
5e:39:28:b9:f2:1c:33:dc:df:95:80:d5:67:23:b7:
33:6a:9f:40:77:69:1f:2f:25:9b:2c:0d:33:8c:3d:
1d:01:10:a3:e7:68:4f:29:26:67:66:05:d0:91:8c:
80:3c:cc:ad:15:10:d8:3b:1e:29:68:88:86:0d:5a:
f1:32:2d:44:99:16:d9:5b:35:c3:4d:ea:bc:e2:cd:
bd:ae:31:59:e5:3b:1d:b0:ee:95:bd:4d:42:be:69:
e8:4d:35:5d:fc:e7:63:91:f2:55:99:bb:c9:7e:45:
e8:59:4b:72:66:62:d7:0c:3c:a6:97:f1:f0:5d:e7:
55:fa:0a:3f:09:a3:b1:26:5c:75:e4:37:56:9a:54:
0c:b8:bc:78:9e:77:a4:f2:c2:ba:9e:75:b2:8b:55:
88:fe:44:56:f9:3e:b0:77:58:90:2f:97:9c:8c:95:
79:be:f5:38:09:4b:5e:50:73:be:3d:48:00:58:9b:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:AB:BB:73:84:35:18:C9:1D:D3:A8:B0:F6:8F:66:CE:DC:09:E5
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:bd:3e:e2:29:05:5c:e8:15:23:2f:6d:79:6c:36:5a:2b:
37:b3:b1:ec:82:ef:a4:9b:6d:bb:38:29:72:2d:13:13:28:c8:
3f:3a:0d:89:0e:38:86:47:32:1c:66:f8:f5:a3:13:03:2b:ef:
ba:7a:3b:7d:c0:a4:f8:36:ba:54:ad:ca:af:f9:01:02:b5:8c:
8c:38:a1:22:f5:54:15:e2:81:d8:86:b6:08:90:04:ab:c6:be:
ca:5b:e2:29:c7:a6:31:3f:98:fa:23:fe:31:ee:32:a5:d5:f4:
b1:db:61:66:39:ae:ce:82:72:fc:ff:68:1f:1e:91:1b:6e:fd:
63:af:bf:e8:b1:04:25:3d:02:3f:03:72:d3:08:80:17:5c:bb:
fb:53:87:8d:ca:8c:b9:54:20:cc:c3:1e:d4:81:f4:28:0c:60:
d4:3b:99:99:04:4c:b8:37:de:98:4e:c7:71:29:86:54:3a:34:
a2:e6:ef:d1:4c:94:bb:3c:a0:df:0a:d8:b5:85:54:0b:53:a6:
85:e7:e3:0c:88:3b:e4:54:9c:45:3d:49:4a:c1:4d:91:a5:07:
08:3e:2e:78:6e:a6:23:ee:b2:34:00:30:24:79:b8:1c:51:d9:
ba:f1:82:87:bc:da:da:77:82:2d:ba:41:e2:fa:76:68:f3:74:
7d:96:89:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZIgs1icwfWclyP3bBA4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk
ZWU2MjUwHhcNMjQxMTIzMDUwMDI2WhcNMjQxMTI0MDUwMDI2WjAzMTEwLwYDVQQD
EygxMDdlYWJiYjczODQzNTE4YzkxZGQzYThiMGY2OGY2NmNlZGMwOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaTo5EIANHj3i3Zt6rdT6s3OE7Wh
7cPXDVYtFsr+RWJ++UVaOb0jRW+ysl3obs+jsoh6vN5DFrwfNLF68bC2dSqM+nhI
0BNRyC9eOSi58hwz3N+VgNVnI7czap9Ad2kfLyWbLA0zjD0dARCj52hPKSZnZgXQ
kYyAPMytFRDYOx4paIiGDVrxMi1EmRbZWzXDTeq84s29rjFZ5TsdsO6VvU1Cvmno
TTVd/OdjkfJVmbvJfkXoWUtyZmLXDDyml/HwXedV+go/CaOxJlx15DdWmlQMuLx4
nnek8sK6nnWyi1WI/kRW+T6wd1iQL5ecjJV5vvU4CUteUHO+PUgAWJsbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB+q7tzhDUYyR3TqLD2j2bO3AnlMB8GA1UdIwQY
MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt
YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2
LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXO9PuIp
BVzoFSMvbXlsNlorN7Ox7ILvpJttuzgpci0TEyjIPzoNiQ44hkcyHGb49aMTAyvv
uno7fcCk+Da6VK3Kr/kBArWMjDihIvVUFeKB2Ia2CJAEq8a+ylviKcemMT+Y+iP+
Me4ypdX0sdthZjmuzoJy/P9oHx6RG279Y6+/6LEEJT0CPwNy0wiAF1y7+1OHjcqM
uVQgzMMe1IH0KAxg1DuZmQRMuDfemE7HcSmGVDo0oubv0UyUuzyg3wrYtYVUC1Om
hefjDIg75FScRT1JSsFNkaUHCD4ueG6mI+6yNAAwJHm4HFHZuvGCh7za2neCLbpB
4vp2aPN0fZaJcA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:44 2024 by rpki-client on console-fra.rpki-client.org