Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: K5CJtBleN6LZ29+Tv+jkMuL1NJbHp7+Ho64RYig8iLU=
Subject key identifier: 8A:AF:0E:08:50:E2:5D:F6:8F:4A:C8:19:2E:B3:A0:F6:E5:A1:6D:7D
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0193549C2123F613FD13E6444A1831A0FB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0818
Signing time: Fri 22 Nov 2024 16:02:18 +0000
Manifest this update: Fri 22 Nov 2024 16:02:18 +0000
Manifest next update: Sat 23 Nov 2024 16:02:18 +0000
Files and hashes: 1: 1-VmWqoew3BBDOOtghQuJFHi5d3c.roa (hash: sv4mII3iR+JdC1Ws2XRjfQ6e/QUYIQ5OBeBMhvu5k+g=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: AlBwYd0cuas76npRMbX8nZUNlostpJQA7k5Btv6teag=)
3: b2DyTRb7Aq3dTbfS4J_fhfmZMqs.roa (hash: uPwGi+TuGqYNGJllbn94WhzjIhRh9cibrnl29g1hXeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:21:23:f6:13:fd:13:e6:44:4a:18:31:a0:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Nov 22 16:02:18 2024 GMT
Not After : Nov 23 16:02:18 2024 GMT
Subject: CN=8aaf0e0850e25df68f4ac8192eb3a0f6e5a16d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:70:68:aa:ba:97:f6:d0:47:95:35:06:ef:
1c:4b:b4:98:cc:9d:87:95:3a:39:04:7c:15:71:b4:
0c:1d:9f:0a:b5:f7:8e:8e:b0:af:e0:df:f9:4e:b5:
23:9f:94:15:c6:0d:fd:0f:26:26:a5:f1:b8:a5:74:
af:09:d7:26:60:41:54:64:f7:e9:af:a6:c4:ed:2e:
09:58:fd:f4:86:ba:23:bc:72:f8:bd:52:f9:64:fb:
07:2e:8d:f7:92:3c:36:b1:69:1e:6b:3a:f9:58:12:
ba:29:9b:df:3c:15:55:c6:04:1f:c1:b1:82:5f:03:
6e:ae:5f:03:b7:26:c9:43:51:3b:fe:38:05:e8:95:
ba:ac:1f:1f:83:88:f6:da:bc:ba:87:21:62:b1:86:
a8:f8:f6:08:e0:c3:ac:8a:2a:e7:80:ad:86:ed:f5:
6c:71:7e:4a:8e:ea:2c:1b:ab:57:49:71:f3:72:78:
ed:c4:dc:50:85:da:58:c8:e7:0d:49:d1:46:91:a7:
ea:61:26:90:c2:ec:05:43:23:77:64:7f:85:2f:de:
9e:8f:87:94:5f:e1:d8:8b:da:6c:aa:35:6e:80:6a:
8e:e3:64:72:9f:0a:55:3c:51:ce:9d:76:53:f2:16:
71:b1:2f:bb:ca:37:e3:89:4c:89:e4:59:a5:7a:a9:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:0E:08:50:E2:5D:F6:8F:4A:C8:19:2E:B3:A0:F6:E5:A1:6D:7D
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:b2:fa:98:5f:8f:9d:b6:b5:03:c2:39:04:14:15:58:f8:
e6:8c:b5:67:25:d9:8d:9c:c2:c1:4e:a1:8c:dd:ad:af:32:1a:
0e:9b:0f:a3:fe:72:98:df:fa:11:16:82:ce:5f:3f:cc:52:d6:
32:16:d6:f1:a5:78:6b:df:91:06:d0:4c:49:62:cd:33:11:18:
65:9c:fd:57:41:f7:67:ed:8d:41:90:ff:5c:aa:15:33:e9:13:
09:18:59:3b:25:bf:c6:c7:5f:9c:7a:a4:6f:8b:0c:bd:cc:bf:
06:79:78:48:88:73:fc:ec:dd:18:03:41:45:56:c9:80:7f:62:
9d:94:6c:d1:3f:8c:2d:c8:99:c8:5e:81:0d:5c:31:70:e4:93:
9d:7b:3e:91:de:9c:55:3b:50:6f:6a:5f:86:f6:84:b8:44:e3:
a6:66:f8:82:ed:52:7c:84:5f:47:ce:82:a2:db:9a:e3:a2:25:
48:77:77:5c:52:3f:42:c1:1f:13:ab:73:99:f9:fa:18:f0:4e:
bc:f4:8e:5a:65:52:5e:f1:d4:e5:e8:c7:3b:8e:32:1e:be:79:
5b:77:79:c8:01:d4:a6:f8:77:62:0b:9c:1f:09:3b:49:02:82:
49:39:e1:9a:f2:e3:f0:78:ce:81:15:10:4c:f7:43:a4:3e:c1:
86:56:1c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnCEj9hP9E+ZEShgxoPsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjQxMTIyMTYwMjE4WhcNMjQxMTIzMTYwMjE4WjAzMTEwLwYDVQQD
Eyg4YWFmMGUwODUwZTI1ZGY2OGY0YWM4MTkyZWIzYTBmNmU1YTE2ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7NwaKq6l/bQR5U1Bu8cS7SYzJ2H
lTo5BHwVcbQMHZ8KtfeOjrCv4N/5TrUjn5QVxg39DyYmpfG4pXSvCdcmYEFUZPfp
r6bE7S4JWP30hrojvHL4vVL5ZPsHLo33kjw2sWkeazr5WBK6KZvfPBVVxgQfwbGC
XwNurl8DtybJQ1E7/jgF6JW6rB8fg4j22ry6hyFisYao+PYI4MOsiirngK2G7fVs
cX5KjuosG6tXSXHzcnjtxNxQhdpYyOcNSdFGkafqYSaQwuwFQyN3ZH+FL96ej4eU
X+HYi9psqjVugGqO42RynwpVPFHOnXZT8hZxsS+7yjfjiUyJ5FmleqnS0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqvDghQ4l32j0rIGS6zoPbloW19MB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtiy+phf
j522tQPCOQQUFVj45oy1ZyXZjZzCwU6hjN2trzIaDpsPo/5ymN/6ERaCzl8/zFLW
MhbW8aV4a9+RBtBMSWLNMxEYZZz9V0H3Z+2NQZD/XKoVM+kTCRhZOyW/xsdfnHqk
b4sMvcy/Bnl4SIhz/OzdGANBRVbJgH9inZRs0T+MLciZyF6BDVwxcOSTnXs+kd6c
VTtQb2pfhvaEuETjpmb4gu1SfIRfR86Cotua46IlSHd3XFI/QsEfE6tzmfn6GPBO
vPSOWmVSXvHU5ejHO44yHr55W3d5yAHUpvh3YgucHwk7SQKCSTnhmvLj8HjOgRUQ
TPdDpD7BhlYcTA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:21 2024 by rpki-client on console-ams.rpki-client.org