Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: V6lck0X6yQZ+QV5XZliHfIPpBb6PwnO6Q82Uu3V1rIg=
Subject key identifier: F2:C4:56:22:C0:0E:08:01:D6:8C:A8:9F:F2:3C:40:83:90:78:1E:63
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019358403EABACEFC98AEDB0BA221B52B2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 125C
Signing time: Sat 23 Nov 2024 09:00:25 +0000
Manifest this update: Sat 23 Nov 2024 09:00:25 +0000
Manifest next update: Sun 24 Nov 2024 09:00:25 +0000
Files and hashes: 1: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: 2+pIwfZb9B3sKUnjiTc7biC3iQ9K8TcZwltR+UIhxK8=)
2: XbBRWmXgEROklmMezeJ3WdoNe0w.roa (hash: kjF33479KdcrS0awBk2Bs2KUgSLer4Q++KxBeyMrWtA=)
3: Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa (hash: UEcnE88KEotGmtiZXVGvg5ratRqqM3Yzu5+iGXwXYBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:3e:ab:ac:ef:c9:8a:ed:b0:ba:22:1b:52:b2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Nov 23 09:00:25 2024 GMT
Not After : Nov 24 09:00:25 2024 GMT
Subject: CN=f2c45622c00e0801d68ca89ff23c408390781e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:cd:0f:77:31:46:aa:70:28:e0:bd:08:aa:
54:b3:4b:24:1f:a4:49:2e:72:5e:3b:5e:d3:27:a2:
20:05:2d:6f:4f:1e:86:4a:5c:80:c2:1e:fa:b9:28:
75:62:9f:2f:ec:16:14:ca:cd:89:54:98:ce:b5:bf:
2c:c9:21:fd:6a:a7:f9:ec:8c:2e:13:f4:65:c3:36:
11:f2:a2:7b:6f:04:55:d7:39:7f:aa:27:77:a9:3d:
9e:1d:32:c1:31:a3:d5:97:0e:82:aa:e5:62:68:52:
60:3d:5d:3e:98:d4:75:4f:21:45:96:a9:b1:32:60:
e3:d0:a1:da:8f:4d:63:c9:2a:d1:c2:6f:b1:89:4e:
28:65:31:a6:06:3f:f9:63:6e:2c:47:63:d2:f7:91:
f5:da:f5:48:e5:af:8e:ba:50:e9:5b:41:fa:66:1a:
f7:b4:a8:b8:82:d7:ca:4c:05:34:c5:d6:79:af:67:
b7:0b:2c:e5:2e:43:f1:9e:e0:83:e6:b9:7d:54:1e:
0d:f6:af:cb:75:25:5f:1c:ae:82:9e:5f:3c:6e:ed:
a4:10:e7:99:f2:0b:ea:38:d1:06:3c:89:91:b5:71:
83:04:9e:58:ef:ea:b8:2c:35:ce:27:24:de:c4:81:
2f:93:e5:ee:db:11:b2:bb:4c:2c:db:ec:a2:20:30:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C4:56:22:C0:0E:08:01:D6:8C:A8:9F:F2:3C:40:83:90:78:1E:63
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:2f:81:a9:e2:4a:d5:a4:a0:91:92:dc:ca:ff:5a:5c:14:
d1:17:58:f7:a6:67:3a:59:10:30:15:a7:ea:f9:20:d9:a6:bd:
17:5c:ad:77:5d:13:42:be:28:3f:0c:f3:6e:98:f9:c9:b0:ef:
47:93:ad:35:78:4b:f3:da:41:09:a9:81:08:50:a9:59:14:81:
a3:06:46:93:a1:f6:85:1e:34:7c:ee:e4:69:0b:49:7c:b4:a0:
25:f2:28:33:c0:b7:5c:d2:6e:b3:bb:73:4a:60:28:b5:66:e7:
fe:2e:f9:d0:c6:4c:bd:d5:af:42:64:8b:00:6f:c8:de:50:0c:
7e:7b:6c:9a:5a:ec:e9:5b:76:8e:3c:14:af:ce:9f:c3:c5:31:
1c:56:e8:84:b9:49:98:5b:bf:26:fc:9e:4f:90:cd:35:9a:09:
e3:d4:26:9d:86:ad:04:bc:7c:71:23:f2:30:b7:2a:fe:60:5d:
8e:9e:5e:2a:1b:89:87:f2:66:9a:f3:48:18:62:a8:fc:4b:d4:
5b:e0:21:2f:80:12:e5:40:0a:54:0d:a5:6f:43:07:2a:c0:35:
33:35:92:a5:d4:87:cb:6e:c6:8b:99:93:9e:bc:cf:c8:4f:15:
da:99:9c:71:7d:f1:68:9b:5b:52:8f:b5:4b:eb:a0:b4:23:69:
72:10:df:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQD6rrO/Jiu2wuiIbUrLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjQxMTIzMDkwMDI1WhcNMjQxMTI0MDkwMDI1WjAzMTEwLwYDVQQD
EyhmMmM0NTYyMmMwMGUwODAxZDY4Y2E4OWZmMjNjNDA4MzkwNzgxZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaPND3cxRqpwKOC9CKpUs0skH6RJ
LnJeO17TJ6IgBS1vTx6GSlyAwh76uSh1Yp8v7BYUys2JVJjOtb8sySH9aqf57Iwu
E/RlwzYR8qJ7bwRV1zl/qid3qT2eHTLBMaPVlw6CquViaFJgPV0+mNR1TyFFlqmx
MmDj0KHaj01jySrRwm+xiU4oZTGmBj/5Y24sR2PS95H12vVI5a+OulDpW0H6Zhr3
tKi4gtfKTAU0xdZ5r2e3CyzlLkPxnuCD5rl9VB4N9q/LdSVfHK6Cnl88bu2kEOeZ
8gvqONEGPImRtXGDBJ5Y7+q4LDXOJyTexIEvk+Xu2xGyu0ws2+yiIDDSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLEViLADggB1oyon/I8QIOQeB5jMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7gvgani
StWkoJGS3Mr/WlwU0RdY96ZnOlkQMBWn6vkg2aa9F1ytd10TQr4oPwzzbpj5ybDv
R5OtNXhL89pBCamBCFCpWRSBowZGk6H2hR40fO7kaQtJfLSgJfIoM8C3XNJus7tz
SmAotWbn/i750MZMvdWvQmSLAG/I3lAMfntsmlrs6Vt2jjwUr86fw8UxHFbohLlJ
mFu/JvyeT5DNNZoJ49QmnYatBLx8cSPyMLcq/mBdjp5eKhuJh/JmmvNIGGKo/EvU
W+AhL4AS5UAKVA2lb0MHKsA1MzWSpdSHy27Gi5mTnrzPyE8V2pmccX3xaJtbUo+1
S+ugtCNpchDfDA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:10 2024 by rpki-client on console-fra.rpki-client.org