Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: Q0YUTXlpbczAMUDtwn/T+kan2fr4MmCwesyPJCpbmtw=
Subject key identifier: 09:F8:0D:12:B3:D7:E8:67:8A:34:8B:AB:99:19:5B:7B:6F:04:BF:60
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019355ACF5E1716F8BDB8106051AFF7D586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 21:00:18 +0000
Manifest this update: Fri 22 Nov 2024 21:00:18 +0000
Manifest next update: Sat 23 Nov 2024 21:00:18 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 41m5if54xMBZAU8T+DK9y48jxtjVGuxnvS2Bz1v5d38=)
2: S18mLZ5iWMIc754wpqpHxSQiZ5I.roa (hash: CkDrUJzVjr38jBLEnPHObXPaeFZtTcIUaAzTQvqu11I=)
3: foo1sictJkMhfSVXWigaWWi3cW8.roa (hash: vaIBvASpPr7SLw28lmz0JgrlPYCiCxSZv/J+gcFerfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ac:f5:e1:71:6f:8b:db:81:06:05:1a:ff:7d:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Nov 22 21:00:18 2024 GMT
Not After : Nov 23 21:00:18 2024 GMT
Subject: CN=09f80d12b3d7e8678a348bab99195b7b6f04bf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:4a:2a:59:98:98:07:db:af:8e:dc:cf:bb:
a9:3c:dd:ba:20:c4:b5:80:12:be:2b:f6:72:e0:c6:
a3:bf:f5:d6:b0:d8:6b:f8:c0:47:d7:43:5d:f8:fd:
8c:36:f6:6f:09:ad:a6:57:3f:98:d2:da:02:74:74:
0f:72:41:82:b4:0e:b2:08:5e:55:a2:71:50:67:7a:
bf:6e:28:6f:8a:1c:e0:d4:d2:00:71:54:65:ac:e1:
2d:59:bb:ca:75:31:8a:da:8f:c1:e0:66:45:74:db:
63:1b:43:84:04:44:74:78:77:fa:63:3c:74:5c:c9:
9b:02:eb:37:f9:40:6d:cc:96:13:b7:b6:df:9a:5b:
db:f9:90:5a:3b:c2:ba:85:ed:a3:71:99:c7:fa:fd:
31:e9:41:fe:5a:2a:0e:d0:99:82:7b:cd:45:cd:51:
ac:ef:94:99:1a:32:27:82:dc:2c:44:02:02:a6:f5:
6f:f0:00:12:9c:7f:77:e8:e1:c1:c5:e3:68:1a:be:
aa:cb:fd:f6:bd:85:70:64:54:61:b6:fd:76:e2:01:
03:c6:9e:3b:7c:c1:3b:70:17:6f:c7:e1:40:61:77:
6e:dd:e9:c9:61:55:31:51:51:bf:1a:5a:f1:17:8d:
e8:5d:6a:88:24:5c:41:85:2c:6d:54:ce:f0:b5:ef:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:0D:12:B3:D7:E8:67:8A:34:8B:AB:99:19:5B:7B:6F:04:BF:60
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:5b:63:40:53:4a:35:10:8c:61:6a:7c:6b:64:c2:9a:ee:
90:f9:85:3a:9a:e1:68:f1:1c:ca:ef:f2:e7:80:51:86:a5:9e:
7f:5a:26:aa:f4:00:b2:47:ea:66:34:7a:d8:04:b1:db:ef:5a:
cb:09:8f:b6:1d:07:f0:66:e2:93:df:f7:15:42:05:9d:53:69:
5c:c1:5f:05:9c:65:62:bd:0a:fc:6a:c1:30:3e:35:67:71:ce:
7e:bd:96:c5:9e:3e:7e:c6:0e:22:06:83:28:e8:9f:90:b6:2c:
c3:27:69:b6:12:35:18:c8:05:60:64:6b:b1:ba:a4:22:f0:4a:
f9:b2:c2:ac:a7:ef:37:46:07:83:fc:0c:02:de:04:6f:07:80:
ed:ac:55:b9:87:f0:bf:f4:18:68:15:75:aa:74:65:78:57:9c:
cd:fa:8f:8f:cf:8f:48:29:1f:26:bd:25:c2:85:80:e5:34:c1:
9e:77:d1:b0:31:08:54:eb:2e:99:bc:ab:fb:a4:ab:7a:db:d5:
09:00:f6:50:5e:54:ff:7d:75:16:51:1b:28:a2:b9:59:a3:3c:
e0:a1:c7:cf:db:22:5c:11:f2:7d:b1:2b:53:93:ed:31:f7:34:
28:01:24:c3:4c:9a:54:d0:1e:8d:ad:92:57:89:47:2f:a8:b7:
9d:07:60:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrPXhcW+L24EGBRr/fVhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjQxMTIyMjEwMDE4WhcNMjQxMTIzMjEwMDE4WjAzMTEwLwYDVQQD
EygwOWY4MGQxMmIzZDdlODY3OGEzNDhiYWI5OTE5NWI3YjZmMDRiZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUZKKlmYmAfbr47cz7upPN26IMS1
gBK+K/Zy4Majv/XWsNhr+MBH10Nd+P2MNvZvCa2mVz+Y0toCdHQPckGCtA6yCF5V
onFQZ3q/bihvihzg1NIAcVRlrOEtWbvKdTGK2o/B4GZFdNtjG0OEBER0eHf6Yzx0
XMmbAus3+UBtzJYTt7bfmlvb+ZBaO8K6he2jcZnH+v0x6UH+WioO0JmCe81FzVGs
75SZGjIngtwsRAICpvVv8AASnH936OHBxeNoGr6qy/32vYVwZFRhtv124gEDxp47
fME7cBdvx+FAYXdu3enJYVUxUVG/GlrxF43oXWqIJFxBhSxtVM7wte9SsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn4DRKz1+hnijSLq5kZW3tvBL9gMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO9bY0BT
SjUQjGFqfGtkwprukPmFOprhaPEcyu/y54BRhqWef1omqvQAskfqZjR62ASx2+9a
ywmPth0H8Gbik9/3FUIFnVNpXMFfBZxlYr0K/GrBMD41Z3HOfr2WxZ4+fsYOIgaD
KOifkLYswydpthI1GMgFYGRrsbqkIvBK+bLCrKfvN0YHg/wMAt4EbweA7axVuYfw
v/QYaBV1qnRleFeczfqPj8+PSCkfJr0lwoWA5TTBnnfRsDEIVOsumbyr+6SretvV
CQD2UF5U/311FlEbKKK5WaM84KHHz9siXBHyfbErU5PtMfc0KAEkw0yaVNAeja2S
V4lHL6i3nQdgNA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:01 2024 by rpki-client on console-fra.rpki-client.org