Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: rCx/S8k7XgJMWMoaGr19c5sPGZl28AWA5jEfGUwmrYg=
Subject key identifier: D9:B6:13:FE:E7:06:5A:3E:CC:CE:9B:03:68:72:F0:47:93:6D:16:99
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019358773D8DF512865EDC6624C006F0D86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:00:29 +0000
Manifest this update: Sat 23 Nov 2024 10:00:29 +0000
Manifest next update: Sun 24 Nov 2024 10:00:29 +0000
Files and hashes: 1: imMpXqaT4Wso747AZYKI2OixbMU.roa (hash: VtBpI1x8qSbsIKqHCmFj9lRbBSPToluPHbYjIcL7+5w=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: WgkSLh6bbUY0frms0YpkyYh8HG7XlACIp7MHin8TEXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:3d:8d:f5:12:86:5e:dc:66:24:c0:06:f0:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Nov 23 10:00:29 2024 GMT
Not After : Nov 24 10:00:29 2024 GMT
Subject: CN=d9b613fee7065a3eccce9b036872f047936d1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:75:ed:c1:3b:b1:d4:a9:ec:66:4b:4f:bc:
d8:3d:b2:b1:6f:48:3f:89:9f:c2:a4:6e:ae:c7:0f:
12:30:66:c6:ac:24:9f:f3:30:76:ba:60:0e:e9:6e:
24:54:4b:37:c9:66:52:5d:ed:75:2a:c7:07:10:ba:
a9:63:9a:7e:65:a1:2b:cf:c0:1e:3c:04:c9:42:05:
d4:6e:f5:e8:4a:7c:9e:c6:64:1d:42:77:2f:7a:5f:
0d:b2:8c:ab:f2:64:fb:73:13:f6:ba:18:82:5d:8a:
09:ea:2b:10:91:f7:cb:13:93:6a:a1:fc:69:99:ed:
5e:4e:8f:99:1e:6c:4b:95:75:e6:e5:ea:94:e3:f3:
54:94:04:3c:11:74:38:b3:a4:86:bf:8d:b6:bb:e2:
86:6b:89:c5:d3:33:47:89:0c:1e:46:ef:6e:ff:9d:
db:a0:f2:af:3d:b7:7e:95:be:ac:56:90:3b:62:64:
fa:f7:56:13:c4:41:9a:6c:0d:80:47:47:62:89:35:
1b:c9:66:79:1b:81:0d:89:9c:6e:6e:6a:f7:d0:0d:
0f:c1:81:4e:a5:5c:cc:61:0d:d2:4a:53:f8:00:ee:
4e:2b:5b:97:4c:9f:2c:27:86:08:ec:38:c2:19:be:
27:76:84:b9:64:1f:3c:36:29:23:d2:cb:cd:98:9d:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:13:FE:E7:06:5A:3E:CC:CE:9B:03:68:72:F0:47:93:6D:16:99
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3c:94:9e:1b:cf:42:f8:54:5c:c6:d2:93:e3:ca:69:23:8b:
26:40:2d:51:e1:58:c8:1a:97:39:e2:c6:16:02:34:64:21:8b:
24:e4:cc:69:ec:ad:13:14:9f:86:39:79:d1:ff:41:0e:dd:5b:
da:6a:f9:4d:66:36:2e:2b:4d:5c:a4:34:94:1b:c0:59:16:0d:
08:43:6c:38:e0:ef:9a:ca:1d:6b:d3:52:dc:1b:c8:7d:04:3e:
14:06:9b:d7:a3:96:e6:ed:09:60:fc:04:db:6c:de:79:7f:3e:
99:68:a9:9d:ff:9f:5e:e0:89:ed:d6:b6:7b:35:56:70:d1:71:
27:78:cb:e6:92:82:aa:fe:e6:dc:07:d8:e0:93:6e:84:36:c2:
f1:31:ac:4a:8b:2f:02:90:3f:21:db:fd:4e:9a:02:97:01:4e:
e8:89:b3:cb:60:00:6e:eb:5f:d3:77:14:ce:1b:ed:56:23:bb:
7c:2b:d5:b3:82:bc:d8:58:87:56:d9:f0:11:9a:14:25:b8:7d:
0b:29:66:82:6c:88:1e:9e:10:08:7a:28:1d:f3:a6:61:0a:7a:
92:13:bd:24:a8:f7:3d:71:91:72:de:9d:c8:c6:aa:88:1e:4d:
71:d2:b4:f1:7f:01:34:ca:90:cb:50:11:80:bc:d1:e9:37:99:
40:2d:6e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdz2N9RKGXtxmJMAG8NhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTc2ZWY0YWE0OThjMjE1MjRkZDdlZGFkMTZkZTFkM2Ri
MDAyZTMwHhcNMjQxMTIzMTAwMDI5WhcNMjQxMTI0MTAwMDI5WjAzMTEwLwYDVQQD
EyhkOWI2MTNmZWU3MDY1YTNlY2NjZTliMDM2ODcyZjA0NzkzNmQxNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvJ17cE7sdSp7GZLT7zYPbKxb0g/
iZ/CpG6uxw8SMGbGrCSf8zB2umAO6W4kVEs3yWZSXe11KscHELqpY5p+ZaErz8Ae
PATJQgXUbvXoSnyexmQdQncvel8Nsoyr8mT7cxP2uhiCXYoJ6isQkffLE5Nqofxp
me1eTo+ZHmxLlXXm5eqU4/NUlAQ8EXQ4s6SGv422u+KGa4nF0zNHiQweRu9u/53b
oPKvPbd+lb6sVpA7YmT691YTxEGabA2AR0diiTUbyWZ5G4ENiZxubmr30A0PwYFO
pVzMYQ3SSlP4AO5OK1uXTJ8sJ4YI7DjCGb4ndoS5ZB88Nikj0svNmJ3atwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm2E/7nBlo+zM6bA2hy8EeTbRaZMB8GA1UdIwQY
MBaAFJvnbvSqSYwhUk3X7a0W3h09sALjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgt
OWRmMzcxMDljODFkLzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgtOWRmMzcxMDljODFk
LzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzyUnhvP
QvhUXMbSk+PKaSOLJkAtUeFYyBqXOeLGFgI0ZCGLJOTMaeytExSfhjl50f9BDt1b
2mr5TWY2LitNXKQ0lBvAWRYNCENsOODvmsoda9NS3BvIfQQ+FAab16OW5u0JYPwE
22zeeX8+mWipnf+fXuCJ7da2ezVWcNFxJ3jL5pKCqv7m3AfY4JNuhDbC8TGsSosv
ApA/Idv9TpoClwFO6Imzy2AAbutf03cUzhvtViO7fCvVs4K82FiHVtnwEZoUJbh9
CylmgmyIHp4QCHooHfOmYQp6khO9JKj3PXGRct6dyMaqiB5NcdK08X8BNMqQy1AR
gLzR6TeZQC1ulQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:43 2024 by rpki-client on console-fra.rpki-client.org