Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: doqWc+kc5illfBQDcamOG6cMMPvB5idLE7GAH2xB0CU=
Subject key identifier: 9F:89:29:88:47:40:54:97:D8:6D:A1:52:1C:A1:30:76:D3:9F:9D:F4
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 0193568B09B5E2B13650AB9B6D6397320850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 03FC
Signing time: Sat 23 Nov 2024 01:02:52 +0000
Manifest this update: Sat 23 Nov 2024 01:02:52 +0000
Manifest next update: Sun 24 Nov 2024 01:02:52 +0000
Files and hashes: 1: CJuMNFIiBS1vwPm4DobHua8w-10.roa (hash: WkRHl/jd/siB+I0EHC4EViKlSraXZqc8SAjUP14/2jU=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: Mhc34S+uPc4xv2tpUzlqci4OimQY2Mh5Hss8h1eHLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:09:b5:e2:b1:36:50:ab:9b:6d:63:97:32:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Nov 23 01:02:52 2024 GMT
Not After : Nov 24 01:02:52 2024 GMT
Subject: CN=9f89298847405497d86da1521ca13076d39f9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:31:4e:4b:0a:f2:0d:94:8d:38:dc:7e:18:
ac:7f:01:44:63:b6:47:80:ae:96:d8:0e:dd:3e:e3:
1a:43:f5:f8:ed:d3:0c:d2:4d:00:8d:d4:b2:a7:70:
c7:f1:92:19:d8:e7:9d:83:dd:0e:6d:80:14:f1:1f:
d9:5c:3c:a4:db:88:ff:c2:23:2e:a6:58:1e:2b:39:
50:97:4c:01:1b:68:55:d0:0b:09:1e:c3:72:e5:97:
6d:c7:ed:d2:e5:58:8c:85:4b:d7:8d:a0:4f:d8:bc:
58:d2:45:c4:6f:2c:08:ee:f5:3c:c7:66:9b:2c:de:
87:46:d3:25:cb:e0:d3:35:7b:ef:ef:1a:a9:85:87:
e2:3c:a3:0c:c2:21:00:ed:a0:6d:e7:70:16:4a:ea:
24:08:a6:18:82:d5:a7:54:b3:d5:8d:b6:3a:be:0d:
b3:98:33:7d:a2:d3:2f:a7:83:33:84:6f:bd:eb:43:
a3:c1:f2:09:79:d9:27:33:2f:e0:b2:12:ec:5c:44:
6b:01:11:b8:b3:19:1b:05:e9:31:d6:21:ed:77:86:
57:c5:65:93:d8:63:63:38:27:de:e6:d9:0c:4f:32:
53:24:d0:59:93:80:4c:25:3f:e2:b2:b2:58:5b:d8:
4e:cc:c4:8a:c1:2c:4d:8b:3f:e6:ea:28:2e:99:1d:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:29:88:47:40:54:97:D8:6D:A1:52:1C:A1:30:76:D3:9F:9D:F4
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:2a:f3:c2:57:cd:92:d9:29:c2:2d:f0:10:6e:31:d1:4e:
38:24:a8:52:14:b0:e7:0c:c1:ff:cf:99:03:c8:da:32:d2:ba:
0d:a0:e4:0a:67:55:d2:f7:11:26:51:97:a9:57:1f:cc:26:d3:
7e:2c:23:1b:e5:ea:b2:a8:46:a1:4b:38:6f:a1:0c:1c:26:86:
8a:f8:0a:0a:f2:93:22:6a:33:10:65:cc:4f:09:82:c8:42:25:
2f:05:84:bf:ff:37:79:9a:16:bb:ca:11:f0:1c:62:58:f1:5a:
86:d4:5c:ca:00:30:24:5a:b4:33:17:35:76:d3:eb:8a:cf:4e:
c1:7f:3e:72:04:5b:86:67:23:b1:c0:17:2f:9e:62:d0:11:66:
9a:fd:1e:f7:5d:15:c4:db:d8:8d:17:81:42:bb:45:b8:c1:23:
54:b5:8a:f5:ba:58:42:9e:18:83:45:4a:2f:29:93:55:a6:ba:
a4:2c:6d:5c:8a:62:99:6f:30:73:6c:f4:ca:b7:f0:79:47:ae:
4b:be:95:16:68:6f:1e:9a:61:d8:87:67:0d:a5:5d:2e:d5:43:
cc:eb:9e:35:58:cd:81:06:d9:17:bf:f8:7f:fb:7e:8e:01:d3:
08:ac:93:bf:e3:e5:88:b5:d5:3d:3a:02:e4:d9:d4:44:da:93:
c9:c6:05:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiwm14rE2UKubbWOXMghQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODZmMTNhOWI3MjFjZDE4NjlmYmI5NzRlZTUzZDkwMDIy
ZWFhMmMwHhcNMjQxMTIzMDEwMjUyWhcNMjQxMTI0MDEwMjUyWjAzMTEwLwYDVQQD
Eyg5Zjg5Mjk4ODQ3NDA1NDk3ZDg2ZGExNTIxY2ExMzA3NmQzOWY5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAUxTksK8g2UjTjcfhisfwFEY7ZH
gK6W2A7dPuMaQ/X47dMM0k0AjdSyp3DH8ZIZ2Oedg90ObYAU8R/ZXDyk24j/wiMu
plgeKzlQl0wBG2hV0AsJHsNy5Zdtx+3S5ViMhUvXjaBP2LxY0kXEbywI7vU8x2ab
LN6HRtMly+DTNXvv7xqphYfiPKMMwiEA7aBt53AWSuokCKYYgtWnVLPVjbY6vg2z
mDN9otMvp4MzhG+960OjwfIJedknMy/gshLsXERrARG4sxkbBekx1iHtd4ZXxWWT
2GNjOCfe5tkMTzJTJNBZk4BMJT/isrJYW9hOzMSKwSxNiz/m6igumR1tjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+JKYhHQFSX2G2hUhyhMHbTn530MB8GA1UdIwQY
MBaAFHyG8TqbchzRhp+7l07lPZACLqosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUt
NmZhODQ0MDJkNmEwLzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUtNmZhODQ0MDJkNmEw
LzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASygq88JX
zZLZKcIt8BBuMdFOOCSoUhSw5wzB/8+ZA8jaMtK6DaDkCmdV0vcRJlGXqVcfzCbT
fiwjG+XqsqhGoUs4b6EMHCaGivgKCvKTImozEGXMTwmCyEIlLwWEv/83eZoWu8oR
8BxiWPFahtRcygAwJFq0Mxc1dtPris9OwX8+cgRbhmcjscAXL55i0BFmmv0e910V
xNvYjReBQrtFuMEjVLWK9bpYQp4Yg0VKLymTVaa6pCxtXIpimW8wc2z0yrfweUeu
S76VFmhvHpph2IdnDaVdLtVDzOueNVjNgQbZF7/4f/t+jgHTCKyTv+PliLXVPToC
5NnURNqTycYFEQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:32 2024 by rpki-client on console-ams.rpki-client.org