Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: tLxwPe7cI5kNexKQdYGUSwRUl+dm5qPrA1NhotlgigE=
Subject key identifier: 71:AE:61:96:C0:FB:F4:2F:44:28:C4:40:54:62:64:AF:23:66:5B:35
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019369DAA3E4E84BC1277EBCB9133A10A5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 0FA0
Signing time: Tue 26 Nov 2024 19:02:36 +0000
Manifest this update: Tue 26 Nov 2024 19:02:36 +0000
Manifest next update: Wed 27 Nov 2024 19:02:36 +0000
Files and hashes: 1: WVIZpVZcVpej-e0fLEhE-_k7geE.roa (hash: qKFoe5pWxbvSRU7qlD6xAqELTIP/SIFobrIGqTlePdc=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: WAgeFKokyDJtm6iM8EmZUaqJrJ+n78+TmgREjxdGols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:a3:e4:e8:4b:c1:27:7e:bc:b9:13:3a:10:a5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Nov 26 19:02:36 2024 GMT
Not After : Nov 27 19:02:36 2024 GMT
Subject: CN=71ae6196c0fbf42f4428c440546264af23665b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:66:2d:c6:7f:7c:6a:5d:57:1d:2f:6d:f1:
e9:8e:d1:f1:1e:49:fc:9b:bf:40:72:4e:6f:a7:92:
67:26:53:c8:a4:87:e3:78:40:50:10:33:64:58:29:
ef:48:90:4d:a5:73:0a:31:70:de:9c:76:74:a8:c1:
54:ed:e4:dd:67:6d:2d:71:bf:94:a6:29:f3:99:92:
70:ec:27:03:39:49:f9:d9:65:37:ff:02:20:02:22:
7d:37:52:fd:93:09:ff:d8:fa:eb:a3:5b:60:b2:be:
e2:82:ef:66:26:eb:81:16:af:56:e5:6d:9c:1c:40:
99:99:c4:c2:27:d1:08:78:c7:44:4d:64:75:da:e2:
4f:67:9b:cd:4b:a5:a1:92:43:d8:a5:a7:39:16:21:
0f:89:86:18:7d:ce:a2:42:81:20:64:cf:63:78:57:
06:7c:b7:4e:6a:7d:61:10:4c:52:98:20:2c:f1:ca:
b0:77:e1:f0:28:6c:37:23:a3:48:d8:7e:ab:70:f5:
97:a1:6d:da:58:b7:88:a0:e7:a4:e6:ed:c2:95:66:
05:d1:cc:66:59:bd:6e:e9:46:59:55:2a:da:4d:3e:
ca:54:70:ba:49:ea:32:2b:43:ca:74:51:1c:6a:da:
9b:22:4c:b7:84:ad:c2:df:4a:f1:9f:25:39:3c:a0:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:61:96:C0:FB:F4:2F:44:28:C4:40:54:62:64:AF:23:66:5B:35
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:9a:71:b5:57:a4:45:92:5b:71:3c:41:d7:cc:10:30:d3:
f7:fd:58:be:40:d8:43:77:95:0b:97:d9:09:02:f7:f3:fe:65:
47:03:97:cc:41:ab:a8:8a:d7:7a:33:cc:59:59:cd:5a:f9:01:
56:af:5c:9a:68:ec:31:f0:fb:ac:3d:ad:6b:e6:72:c4:c0:08:
bf:b4:0b:52:74:19:1d:ad:cd:f3:7e:51:55:63:55:78:e0:97:
57:50:97:74:16:4c:02:3a:d2:4e:d8:08:31:29:b9:e8:fe:e8:
80:2f:78:57:b3:b9:3d:4b:36:df:07:2d:71:ff:54:82:12:87:
58:79:8e:bf:cc:d9:50:e0:df:97:bf:b5:9b:04:c8:e6:01:72:
01:b4:61:1c:52:b7:4b:7a:19:49:aa:2c:3e:18:19:26:b0:c2:
a0:25:e6:e1:f5:73:d5:c9:88:65:e0:ae:13:c3:29:c1:40:52:
c5:f5:41:7d:7a:a9:06:52:07:b6:6c:46:05:91:0c:c8:de:cf:
34:f7:f0:8f:19:78:82:97:90:18:b6:3b:ff:2f:70:63:d4:7c:
57:f8:96:ed:6c:ea:76:ce:3b:23:0e:af:60:08:fe:2c:50:90:
f5:f2:3a:f5:0e:b3:99:e8:d3:c7:ee:de:4c:f5:a8:7e:44:85:
f8:f0:4d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2qPk6EvBJ368uRM6EKX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk
NzBmY2YwHhcNMjQxMTI2MTkwMjM2WhcNMjQxMTI3MTkwMjM2WjAzMTEwLwYDVQQD
Eyg3MWFlNjE5NmMwZmJmNDJmNDQyOGM0NDA1NDYyNjRhZjIzNjY1YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVmLcZ/fGpdVx0vbfHpjtHxHkn8
m79Ack5vp5JnJlPIpIfjeEBQEDNkWCnvSJBNpXMKMXDenHZ0qMFU7eTdZ20tcb+U
pinzmZJw7CcDOUn52WU3/wIgAiJ9N1L9kwn/2Prro1tgsr7igu9mJuuBFq9W5W2c
HECZmcTCJ9EIeMdETWR12uJPZ5vNS6WhkkPYpac5FiEPiYYYfc6iQoEgZM9jeFcG
fLdOan1hEExSmCAs8cqwd+HwKGw3I6NI2H6rcPWXoW3aWLeIoOek5u3ClWYF0cxm
Wb1u6UZZVSraTT7KVHC6SeoyK0PKdFEcatqbIky3hK3C30rxnyU5PKAMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGuYZbA+/QvRCjEQFRiZK8jZls1MB8GA1UdIwQY
MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It
MGFlNjk2YmQzNjhhLzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh
LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZyacbVX
pEWSW3E8QdfMEDDT9/1YvkDYQ3eVC5fZCQL38/5lRwOXzEGrqIrXejPMWVnNWvkB
Vq9cmmjsMfD7rD2ta+ZyxMAIv7QLUnQZHa3N835RVWNVeOCXV1CXdBZMAjrSTtgI
MSm56P7ogC94V7O5PUs23wctcf9UghKHWHmOv8zZUODfl7+1mwTI5gFyAbRhHFK3
S3oZSaosPhgZJrDCoCXm4fVz1cmIZeCuE8MpwUBSxfVBfXqpBlIHtmxGBZEMyN7P
NPfwjxl4gpeQGLY7/y9wY9R8V/iW7Wzqds47Iw6vYAj+LFCQ9fI69Q6zmejTx+7e
TPWofkSF+PBNCw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:28 2024 by rpki-client on console-ams.rpki-client.org