Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: pZTH0sCYuZ0st3aTakglnbhrCrfMC7HlV3y6NKWAlbY=
Subject key identifier: DF:6C:D7:FC:B5:2C:59:31:1F:26:F7:3B:92:0B:9D:0D:06:BE:E4:2F
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 019356898FFDA229FE0A5354689DEE949679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 01:01:16 +0000
Manifest this update: Sat 23 Nov 2024 01:01:16 +0000
Manifest next update: Sun 24 Nov 2024 01:01:16 +0000
Files and hashes: 1: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: NVjyvV2ScEgP+jsGMowLyMJlWH6yWo1UyLssIW2sZ08=)
2: uavGPrkCeQCpjqg4G8y9vBzLEbQ.roa (hash: de8IqKR6dLt/o0pqASYo78iWnAmg5mNKFhCRDbuSMzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:8f:fd:a2:29:fe:0a:53:54:68:9d:ee:94:96:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Nov 23 01:01:16 2024 GMT
Not After : Nov 24 01:01:16 2024 GMT
Subject: CN=df6cd7fcb52c59311f26f73b920b9d0d06bee42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:5d:92:c7:33:1b:48:aa:67:9d:b0:1c:cc:
66:90:3b:dc:f6:f5:e7:cc:6b:86:89:fb:59:8e:db:
9f:64:f4:8e:91:29:c4:99:ea:de:5b:e0:ce:24:b3:
1f:3a:57:51:8b:e0:4b:de:26:99:b9:f1:31:21:3c:
82:a7:3a:eb:24:6f:db:ac:75:ef:0b:d4:cd:f3:3a:
fc:27:2d:9e:40:de:7b:c7:a9:03:8e:e8:2f:6d:4e:
ca:89:15:4c:14:eb:75:28:99:dc:34:b6:24:ce:3d:
bd:d2:84:ae:12:c5:ec:65:aa:4f:b4:93:a1:8d:14:
e7:fa:8f:ac:bd:d1:72:db:92:45:b9:c3:11:e5:cd:
9f:f4:1f:2d:47:f4:1e:1b:15:20:8b:e6:96:d7:2d:
2e:c1:a2:4a:b9:08:f0:59:4d:6f:1f:22:99:e5:2b:
86:91:77:f1:7c:bf:f0:50:53:5d:4b:db:d5:05:65:
aa:0b:91:f5:94:6c:c9:77:2f:1c:7b:b3:72:5a:0e:
ff:cb:d0:50:f1:45:eb:00:55:7a:de:0f:14:ca:c4:
47:97:fb:04:91:69:3a:fa:3f:00:10:93:62:45:f1:
76:42:e5:6c:e9:e5:09:08:72:73:e3:0e:a3:5e:8e:
01:78:42:87:db:9e:25:2f:a0:14:2e:7b:71:f2:2c:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:D7:FC:B5:2C:59:31:1F:26:F7:3B:92:0B:9D:0D:06:BE:E4:2F
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:15:fc:12:3a:dc:d7:48:3b:c5:1b:45:39:f9:da:13:50:
99:f6:c1:42:b0:f4:de:af:21:ef:09:18:b5:fc:bb:f2:8c:75:
07:48:3e:5f:e6:77:ac:0f:e4:a4:e5:26:8e:da:4b:49:41:90:
24:37:48:80:31:2a:c4:8e:53:d3:ac:ab:c7:87:80:db:e8:89:
d5:2a:11:74:41:9b:b5:f0:24:b7:47:a2:e2:ca:d0:23:cd:f3:
da:3e:f8:61:d7:4a:8a:de:38:bf:32:c0:da:f7:a1:37:45:a2:
e5:05:40:ff:29:59:fa:f0:ad:1a:72:cc:9a:55:6f:7d:eb:2b:
20:eb:ea:9d:4f:d2:49:ab:dc:bd:a2:93:93:d6:95:ef:94:be:
7d:90:b5:60:dd:24:6b:39:04:8f:34:0a:dd:0c:ce:98:38:e2:
57:ac:ca:f4:1f:ba:6a:7b:7c:e2:6a:58:e3:50:89:ba:c0:f1:
b1:a3:94:fd:77:03:ea:a6:35:dd:cc:02:d2:fe:e9:49:ff:cb:
09:a5:a6:2d:52:cc:d9:b4:77:be:f9:92:51:ad:4b:f6:70:d8:
80:59:2a:81:70:fe:77:26:e7:56:f0:8c:85:55:20:dd:f7:8b:
88:b9:68:21:65:ae:49:c2:2e:89:ea:b5:5b:cd:93:ff:b9:f2:
6b:b2:15:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiY/9oin+ClNUaJ3ulJZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1
YjBmMDIwHhcNMjQxMTIzMDEwMTE2WhcNMjQxMTI0MDEwMTE2WjAzMTEwLwYDVQQD
EyhkZjZjZDdmY2I1MmM1OTMxMWYyNmY3M2I5MjBiOWQwZDA2YmVlNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRJdksczG0iqZ52wHMxmkDvc9vXn
zGuGiftZjtufZPSOkSnEmereW+DOJLMfOldRi+BL3iaZufExITyCpzrrJG/brHXv
C9TN8zr8Jy2eQN57x6kDjugvbU7KiRVMFOt1KJncNLYkzj290oSuEsXsZapPtJOh
jRTn+o+svdFy25JFucMR5c2f9B8tR/QeGxUgi+aW1y0uwaJKuQjwWU1vHyKZ5SuG
kXfxfL/wUFNdS9vVBWWqC5H1lGzJdy8ce7NyWg7/y9BQ8UXrAFV63g8UysRHl/sE
kWk6+j8AEJNiRfF2QuVs6eUJCHJz4w6jXo4BeEKH254lL6AULntx8iyPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9s1/y1LFkxHyb3O5ILnQ0GvuQvMB8GA1UdIwQY
MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt
OGM3ZDIwOTIzYjA4LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4
LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF8V/BI6
3NdIO8UbRTn52hNQmfbBQrD03q8h7wkYtfy78ox1B0g+X+Z3rA/kpOUmjtpLSUGQ
JDdIgDEqxI5T06yrx4eA2+iJ1SoRdEGbtfAkt0ei4srQI83z2j74YddKit44vzLA
2vehN0Wi5QVA/ylZ+vCtGnLMmlVvfesrIOvqnU/SSavcvaKTk9aV75S+fZC1YN0k
azkEjzQK3QzOmDjiV6zK9B+6ant84mpY41CJusDxsaOU/XcD6qY13cwC0v7pSf/L
CaWmLVLM2bR3vvmSUa1L9nDYgFkqgXD+dybnVvCMhVUg3feLiLloIWWuScIuieq1
W82T/7nya7IVYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:09 2024 by rpki-client on console-fra.rpki-client.org