Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: 6YH2Dy5csnwTe+HEvNtJkAUzajJDr5I9amsj5gZK0bM=
Subject key identifier: DE:08:BC:99:98:8C:EA:54:5C:69:6F:7D:BD:04:FD:DE:E7:D6:9A:CD
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 01936A7DDC7D01039C8920B21F2210542A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 08CD
Signing time: Tue 26 Nov 2024 22:00:53 +0000
Manifest this update: Tue 26 Nov 2024 22:00:53 +0000
Manifest next update: Wed 27 Nov 2024 22:00:53 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: OwtWMFGrgws5uXOVZBRYQqUS6SdXidm1dxvba0GqxSo=)
2: lzB8DGeWpbmlsnpgTBxA4nxCofg.roa (hash: pWFbGbSephuGDga9byIjErNswg5NuHKW8bgIsQPIO6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:dc:7d:01:03:9c:89:20:b2:1f:22:10:54:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Nov 26 22:00:53 2024 GMT
Not After : Nov 27 22:00:53 2024 GMT
Subject: CN=de08bc99988cea545c696f7dbd04fddee7d69acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:6a:ca:f3:1d:37:6b:99:6d:9a:c7:b0:e2:
4e:71:e9:ac:26:14:07:f6:fb:0f:21:be:c6:dd:86:
a5:e1:9c:59:b6:e8:70:4d:a7:c8:d9:8f:f3:75:20:
89:2a:2d:16:ca:51:2b:45:65:47:f4:be:08:f8:f5:
c0:8e:88:a4:91:95:2e:91:44:c6:80:c3:4f:df:7f:
72:3b:e5:14:77:c6:d0:8d:10:62:0c:64:f0:64:3b:
96:88:f3:b9:64:54:86:de:25:5f:81:de:4b:71:68:
d2:d1:f3:34:5c:3b:6e:cb:ed:68:6c:96:a0:a3:89:
8a:04:ba:e9:16:53:eb:9d:ab:48:6b:e8:be:aa:38:
e0:c0:20:f0:bd:7c:61:64:4f:8f:7e:1e:77:bb:04:
1c:bc:9d:64:33:29:16:b0:9a:f7:b0:62:45:4b:57:
3a:9a:e1:d6:22:f4:8d:ff:d4:67:50:03:e4:a8:6d:
27:e8:43:ab:f4:2c:25:21:12:ca:8a:09:c5:a4:9f:
6d:77:95:25:1a:e4:69:17:ee:0c:b1:a1:68:63:5d:
5e:f7:72:78:84:a9:8c:30:2b:02:a6:25:c7:88:ba:
5d:fb:12:25:6d:ba:10:0d:d0:17:fd:12:3e:84:11:
7f:8d:53:88:23:5f:3c:c9:43:7b:af:5d:41:c4:53:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:BC:99:98:8C:EA:54:5C:69:6F:7D:BD:04:FD:DE:E7:D6:9A:CD
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:8c:78:66:f2:77:bc:93:dc:81:aa:6d:19:07:d1:4e:91:
88:40:c9:5e:46:1d:3d:c3:55:35:cf:14:a6:e7:39:27:f8:cf:
a1:cc:2a:b9:3c:85:73:dd:67:9f:d2:3b:a7:10:e7:69:a7:72:
06:16:45:3d:7b:b4:41:36:e7:9b:e5:3c:39:ce:8a:2f:15:11:
fa:f1:49:c5:7e:aa:9b:4d:01:b9:7e:20:62:8d:9b:77:37:a1:
ff:b7:8f:bd:20:d2:03:49:76:61:23:b6:d8:f7:5e:35:70:13:
bf:dc:8d:82:51:a6:3a:9c:8f:37:3b:ab:b7:bb:9b:dc:28:2d:
43:ff:43:47:cf:7f:92:f6:2b:dd:bd:fe:07:52:02:20:de:5f:
f0:79:70:af:fd:73:cb:c8:c2:d7:ec:c5:46:3f:f7:d6:b7:6a:
fc:22:63:5f:73:a0:41:6b:85:1c:36:7f:c3:b1:51:7e:34:ab:
90:ae:e3:5c:fe:36:28:b2:e9:ae:50:a3:cc:14:c9:9b:eb:16:
0a:28:ce:97:0d:8e:d4:81:c5:30:51:c9:d2:1c:8f:a2:35:e0:
88:dc:78:ef:d4:eb:e7:49:3f:da:c1:94:3d:28:fb:86:56:ed:
a6:55:e5:13:cf:8f:72:05:42:f3:52:ab:59:e8:7a:92:2c:49:
71:e2:c7:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfdx9AQOciSCyHyIQVCpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5
MDY4Y2IwHhcNMjQxMTI2MjIwMDUzWhcNMjQxMTI3MjIwMDUzWjAzMTEwLwYDVQQD
EyhkZTA4YmM5OTk4OGNlYTU0NWM2OTZmN2RiZDA0ZmRkZWU3ZDY5YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yVqyvMdN2uZbZrHsOJOcemsJhQH
9vsPIb7G3Yal4ZxZtuhwTafI2Y/zdSCJKi0WylErRWVH9L4I+PXAjoikkZUukUTG
gMNP339yO+UUd8bQjRBiDGTwZDuWiPO5ZFSG3iVfgd5LcWjS0fM0XDtuy+1obJag
o4mKBLrpFlPrnatIa+i+qjjgwCDwvXxhZE+Pfh53uwQcvJ1kMykWsJr3sGJFS1c6
muHWIvSN/9RnUAPkqG0n6EOr9CwlIRLKignFpJ9td5UlGuRpF+4MsaFoY11e93J4
hKmMMCsCpiXHiLpd+xIlbboQDdAX/RI+hBF/jVOII188yUN7r11BxFNf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4IvJmYjOpUXGlvfb0E/d7n1prNMB8GA1UdIwQY
MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt
MDNmYTdhOWMzNzFlLzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl
LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPSMeGby
d7yT3IGqbRkH0U6RiEDJXkYdPcNVNc8Upuc5J/jPocwquTyFc91nn9I7pxDnaady
BhZFPXu0QTbnm+U8Oc6KLxUR+vFJxX6qm00BuX4gYo2bdzeh/7ePvSDSA0l2YSO2
2PdeNXATv9yNglGmOpyPNzurt7ub3CgtQ/9DR89/kvYr3b3+B1ICIN5f8Hlwr/1z
y8jC1+zFRj/31rdq/CJjX3OgQWuFHDZ/w7FRfjSrkK7jXP42KLLprlCjzBTJm+sW
CijOlw2O1IHFMFHJ0hyPojXgiNx479Tr50k/2sGUPSj7hlbtplXlE8+PcgVC81Kr
Weh6kixJceLHRA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:12 2024 by rpki-client on console-ams.rpki-client.org