Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
File: XnKDhygnB8uQxfqebs30S2IGJdg.mft (raw, json)
Hash identifier: q9X1ahGHEe8edmixAWenvppdT1jGnFtiPShEh32Brt0=
Subject key identifier: 42:F5:69:AF:EA:51:C6:C5:DC:E3:45:A7:5C:72:E2:28:B4:95:2A:5F
Authority key identifier: 5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
Certificate issuer: /CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Certificate serial: 0193655769165AC574DD85761DA7B91847FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
Manifest number: 056E
Signing time: Mon 25 Nov 2024 22:00:47 +0000
Manifest this update: Mon 25 Nov 2024 22:00:47 +0000
Manifest next update: Tue 26 Nov 2024 22:00:47 +0000
Files and hashes: 1: XnKDhygnB8uQxfqebs30S2IGJdg.crl (hash: mCkdKEWSiIr6LsGcKvQ0czLDNMDhLJ9W3iebIgVaLK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:57:69:16:5a:c5:74:dd:85:76:1d:a7:b9:18:47:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Validity
Not Before: Nov 25 22:00:47 2024 GMT
Not After : Nov 26 22:00:47 2024 GMT
Subject: CN=42f569afea51c6c5dce345a75c72e228b4952a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:c4:5d:86:eb:ac:4d:ba:86:6e:15:5d:8a:
bb:78:c7:ba:df:cf:c4:9d:8a:49:c8:0d:64:b3:90:
ef:9f:cf:fc:f8:55:9a:10:eb:6f:73:79:e3:85:83:
f7:74:2c:ce:ba:10:b0:be:e9:eb:86:92:61:6a:f4:
99:9b:e0:c8:8e:a6:18:5e:8f:9a:e6:34:2a:e3:92:
aa:db:b3:7c:e1:fe:02:93:ee:b7:7a:15:a8:e0:fb:
fc:b1:2e:0a:5d:8a:e8:4c:c7:c2:ef:c7:0a:4e:b9:
2e:9f:3f:b7:c4:8d:3f:25:af:33:f5:74:11:da:26:
c0:6c:54:8c:9c:8c:55:76:12:90:b2:d0:4e:f1:3f:
af:4d:4f:bd:71:e2:ba:29:82:25:43:86:05:ef:1f:
4f:5a:6e:04:d3:f3:a6:c3:df:e6:0d:c6:11:a8:b9:
30:48:5a:4a:17:a5:65:e9:73:59:13:3a:8f:ed:6a:
ad:42:b2:c9:1a:bd:27:fd:90:60:12:8d:fb:21:44:
15:61:86:fc:d5:3d:d5:3b:0a:ba:10:0e:ce:c3:12:
9f:33:71:74:a3:23:f8:24:dc:d6:81:e4:96:14:a8:
f6:d8:e6:ab:eb:b7:1c:f7:82:8a:15:ba:c3:25:aa:
5e:64:da:e3:66:46:44:3a:cc:74:5f:da:4a:9b:76:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:69:AF:EA:51:C6:C5:DC:E3:45:A7:5C:72:E2:28:B4:95:2A:5F
X509v3 Authority Key Identifier:
keyid:5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:3c:c9:f4:27:e7:7e:a5:f7:35:18:18:a0:be:17:6f:7f:
b8:da:72:47:23:a9:23:12:72:bd:2e:2d:b3:80:6c:48:06:16:
2c:f8:6d:6e:d8:88:97:b0:74:23:79:aa:72:61:e0:93:57:9f:
45:32:d4:be:c6:36:2b:59:ca:76:de:1b:e7:1b:ff:e0:9a:fb:
fe:a1:7f:d2:cb:43:df:d2:a4:66:82:1e:27:21:b6:3e:13:15:
1a:be:d8:24:1c:3f:41:07:a5:0c:bd:ff:b0:44:ba:06:2e:2c:
52:22:a9:4e:44:4a:99:ea:e0:75:6d:34:5a:28:d0:7b:cc:ac:
b0:b7:50:14:e3:10:47:03:fe:37:75:6b:dc:4f:8b:29:c8:af:
1e:30:d4:ab:1d:31:3a:50:3c:5b:74:db:c0:07:3c:7b:fe:32:
35:86:e2:d9:bb:e7:eb:ab:f6:44:d3:7c:63:c8:d8:18:2f:73:
43:f6:8f:95:fd:22:be:d6:59:13:b6:d5:3a:c7:0d:c5:3d:f3:
df:9d:b3:67:cf:3c:0c:8b:ee:3d:c6:d7:ae:10:b0:b9:5f:74:
54:33:99:07:6f:8c:3d:6a:26:8a:a1:ce:6f:5d:4f:bd:c2:87:
ef:5e:8f:e6:67:2a:e1:95:60:d4:81:74:b6:09:dc:36:24:ba:
68:84:c7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlV2kWWsV03YV2Hae5GEf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzI4Mzg3MjgyNzA3Y2I5MGM1ZmE5ZTZlY2RmNDRiNjIw
NjI1ZDgwHhcNMjQxMTI1MjIwMDQ3WhcNMjQxMTI2MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg0MmY1NjlhZmVhNTFjNmM1ZGNlMzQ1YTc1YzcyZTIyOGI0OTUyYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFrEXYbrrE26hm4VXYq7eMe638/E
nYpJyA1ks5Dvn8/8+FWaEOtvc3njhYP3dCzOuhCwvunrhpJhavSZm+DIjqYYXo+a
5jQq45Kq27N84f4Ck+63ehWo4Pv8sS4KXYroTMfC78cKTrkunz+3xI0/Ja8z9XQR
2ibAbFSMnIxVdhKQstBO8T+vTU+9ceK6KYIlQ4YF7x9PWm4E0/Omw9/mDcYRqLkw
SFpKF6Vl6XNZEzqP7WqtQrLJGr0n/ZBgEo37IUQVYYb81T3VOwq6EA7OwxKfM3F0
oyP4JNzWgeSWFKj22Oar67cc94KKFbrDJapeZNrjZkZEOsx0X9pKm3bJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL1aa/qUcbF3ONFp1xy4ii0lSpfMB8GA1UdIwQY
MBaAFF5yg4coJwfLkMX6nm7N9EtiBiXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83Mzk1ZWUtNDc3ZC00ZmFlLWFhOTIt
NmI5ZGRlY2Q3NTA2LzEvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83Mzk1ZWUtNDc3ZC00ZmFlLWFhOTItNmI5ZGRlY2Q3NTA2
LzEvWG5LRGh5Z25COHVReGZxZWJzMzBTMklHSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIM8yfQn
536l9zUYGKC+F29/uNpyRyOpIxJyvS4ts4BsSAYWLPhtbtiIl7B0I3mqcmHgk1ef
RTLUvsY2K1nKdt4b5xv/4Jr7/qF/0stD39KkZoIeJyG2PhMVGr7YJBw/QQelDL3/
sES6Bi4sUiKpTkRKmergdW00WijQe8yssLdQFOMQRwP+N3Vr3E+LKcivHjDUqx0x
OlA8W3TbwAc8e/4yNYbi2bvn66v2RNN8Y8jYGC9zQ/aPlf0ivtZZE7bVOscNxT3z
352zZ888DIvuPcbXrhCwuV90VDOZB2+MPWomiqHOb11PvcKH716P5mcq4ZVg1IF0
tgncNiS6aITH4A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:54 2024 by rpki-client on console-fra.rpki-client.org