Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: GlCEP1Rs//5DBo0EmcMl7JMCYDOFR4RW8X4GEY7O16Q=
Subject key identifier: 82:E2:9C:B8:6B:C4:39:35:42:A7:33:B3:A2:82:FF:68:21:26:A9:63
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 0194056A2A2D361F7EC03A873B2F42D8F772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0AA3
Signing time: Fri 27 Dec 2024 00:00:30 +0000
Manifest this update: Fri 27 Dec 2024 00:00:30 +0000
Manifest next update: Sat 28 Dec 2024 00:00:30 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: 96X4HZ+3UJZNnrF5H9zCgjZIy6HDGEPZC8EUsnJjXGM=)
2: rFcUf0_1CPlB5uSe0PPgZWYinlk.roa (hash: e38dPifqqLJ+UCJjHxMSNZq810vSU5GNBjkfw6xlDlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:6a:2a:2d:36:1f:7e:c0:3a:87:3b:2f:42:d8:f7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Dec 27 00:00:30 2024 GMT
Not After : Dec 28 00:00:30 2024 GMT
Subject: CN=82e29cb86bc4393542a733b3a282ff682126a963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:33:ce:a7:36:be:43:6f:14:16:29:29:cd:
a4:9d:2c:fc:9a:c0:12:a5:44:11:da:06:65:fc:51:
c1:eb:c4:f4:97:28:7a:93:6f:b3:77:93:71:a2:11:
eb:e1:f6:dd:37:53:74:42:df:a0:ce:6c:fe:58:7a:
61:79:88:49:2b:b5:a3:0a:18:12:82:34:bd:e2:59:
fd:bc:81:67:47:4d:3b:5b:a2:9c:8d:ac:b2:e7:d1:
96:5e:53:3e:12:7f:b7:84:63:e6:9a:11:3a:8e:19:
a0:1d:7c:25:2e:dc:2b:86:3c:86:93:43:8f:64:47:
66:ed:71:fb:e8:10:36:12:49:79:43:3c:ea:80:3a:
98:2e:a5:f9:04:95:bd:c7:a2:cf:90:b3:19:fd:03:
93:ab:ad:8b:3d:6f:80:eb:2a:95:eb:29:e8:8e:56:
91:21:7f:71:51:d7:cf:72:a5:b6:96:a4:62:60:ec:
a3:77:0b:55:78:97:54:a5:19:ab:8f:09:18:87:ed:
30:19:72:fe:57:d8:32:9f:bb:57:c9:8d:3b:c1:e9:
3b:6f:45:a6:3d:8a:e2:54:e8:b4:f7:2d:ce:2d:64:
ca:46:a9:0b:9e:bb:45:0e:ce:48:b2:ab:8c:ab:12:
96:4b:ea:b7:b3:31:7d:cc:51:a6:43:42:fe:cf:da:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:9C:B8:6B:C4:39:35:42:A7:33:B3:A2:82:FF:68:21:26:A9:63
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:a9:ae:fc:4a:9c:d1:88:86:4e:6c:4a:eb:f0:bb:ac:00:
98:f6:2f:66:36:56:90:7b:2e:2b:c0:30:71:40:86:6c:b5:21:
67:be:1e:21:50:2a:ba:6d:91:de:81:c8:4c:35:c2:e9:16:63:
42:36:2c:d3:c9:03:b2:1e:a6:72:4f:d4:29:29:84:9a:be:41:
4e:c7:12:06:dc:8c:2e:20:e0:3d:89:63:74:bc:81:43:3b:48:
37:48:39:60:24:cf:af:ad:69:08:35:06:a4:cd:7e:9f:ff:ac:
79:0c:90:28:4f:58:61:9c:d9:c8:92:b9:9d:91:20:05:a4:8b:
4f:c4:31:f7:e8:8c:b9:16:fb:d3:7e:1b:5a:65:6a:b2:34:a2:
fd:9e:73:5e:73:b7:cf:22:f7:3e:a4:43:24:3c:a1:1d:b5:16:
5a:5e:2d:e4:cd:ec:b3:e7:6f:81:5e:a2:24:6b:56:3c:e8:f3:
80:89:2b:3c:19:e5:07:68:d1:3d:03:a8:fe:05:1a:ae:33:81:
87:81:1f:dd:f5:29:dd:84:ed:b2:1d:99:a7:8e:07:70:a4:3b:
57:37:25:56:ee:bb:93:a2:03:c3:73:85:0f:10:3b:d2:a6:9f:
8c:fe:a3:5f:77:d5:fd:e5:09:e0:30:0f:74:78:ee:c3:7c:0b:
80:6e:e4:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQFaiotNh9+wDqHOy9C2PdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWViNTNjYjU2NzE4ZGYwZDk0NzZjZDk4NGFhYzQ0MzJi
OTBmNmMwHhcNMjQxMjI3MDAwMDMwWhcNMjQxMjI4MDAwMDMwWjAzMTEwLwYDVQQD
Eyg4MmUyOWNiODZiYzQzOTM1NDJhNzMzYjNhMjgyZmY2ODIxMjZhOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsowzzqc2vkNvFBYpKc2knSz8msAS
pUQR2gZl/FHB68T0lyh6k2+zd5NxohHr4fbdN1N0Qt+gzmz+WHpheYhJK7WjChgS
gjS94ln9vIFnR007W6Kcjayy59GWXlM+En+3hGPmmhE6jhmgHXwlLtwrhjyGk0OP
ZEdm7XH76BA2Ekl5QzzqgDqYLqX5BJW9x6LPkLMZ/QOTq62LPW+A6yqV6ynojlaR
IX9xUdfPcqW2lqRiYOyjdwtVeJdUpRmrjwkYh+0wGXL+V9gyn7tXyY07wek7b0Wm
PYriVOi09y3OLWTKRqkLnrtFDs5IsquMqxKWS+q3szF9zFGmQ0L+z9pnaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILinLhrxDk1Qqczs6KC/2ghJqljMB8GA1UdIwQY
MBaAFNYetTy1ZxjfDZR2zZhKrEQyuQ9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTIt
OWFlM2RmZTk3NDgxLzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTItOWFlM2RmZTk3NDgx
LzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeKprvxK
nNGIhk5sSuvwu6wAmPYvZjZWkHsuK8AwcUCGbLUhZ74eIVAqum2R3oHITDXC6RZj
QjYs08kDsh6mck/UKSmEmr5BTscSBtyMLiDgPYljdLyBQztIN0g5YCTPr61pCDUG
pM1+n/+seQyQKE9YYZzZyJK5nZEgBaSLT8Qx9+iMuRb7034bWmVqsjSi/Z5zXnO3
zyL3PqRDJDyhHbUWWl4t5M3ss+dvgV6iJGtWPOjzgIkrPBnlB2jRPQOo/gUarjOB
h4Ef3fUp3YTtsh2Zp44HcKQ7VzclVu67k6IDw3OFDxA70qafjP6jX3fV/eUJ4DAP
dHjuw3wLgG7kqg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:19 2024 by rpki-client on console-ams.rpki-client.org