Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: FigYpDs5TcB/EMKFjjzHab/2FeZ6Un9OHsy5uxKKssY=
Subject key identifier: 68:B8:20:4C:95:57:0D:37:A9:A2:CA:BB:5F:53:53:68:76:03:B4:F1
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01936BC7F3F65EC998C35DB9A77130DCC603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 137C
Signing time: Wed 27 Nov 2024 04:01:26 +0000
Manifest this update: Wed 27 Nov 2024 04:01:26 +0000
Manifest next update: Thu 28 Nov 2024 04:01:26 +0000
Files and hashes: 1: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: U7ShvzDyd8pFe7O3XoBsDsivunTDyvO/23bgEYeKY3Q=)
2: MGlZFsyOq1f2F49idtK-ek2IT8I.roa (hash: FdQfolDBWmJ5yycj5iSBbHgmfx06g2HBfo6O0H7XUIw=)
3: gzExvZYYOzm2RnwUhxd8N3zJRC4.roa (hash: k4X6/64laKsRS3FbZuffVGXFOuObJIthvx6pW0mz4l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c7:f3:f6:5e:c9:98:c3:5d:b9:a7:71:30:dc:c6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Nov 27 04:01:26 2024 GMT
Not After : Nov 28 04:01:26 2024 GMT
Subject: CN=68b8204c95570d37a9a2cabb5f5353687603b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:9e:7f:15:a4:68:d0:27:1a:f2:ac:7e:e0:
de:a0:e9:2e:63:b0:53:c4:f4:14:47:2c:27:18:da:
76:b8:4b:44:8f:62:6a:e6:73:05:6a:6a:0c:fa:30:
02:70:26:05:07:21:88:c4:f8:79:c6:a9:bf:ea:3e:
38:4f:94:86:de:e4:e7:25:af:e8:32:01:67:bc:65:
f8:2e:f2:ed:b1:35:8b:07:3f:b3:33:b7:96:1f:f5:
03:59:91:fb:67:e3:41:74:d4:b7:52:71:62:00:d9:
a0:7c:0f:56:75:32:ef:e7:04:d7:f7:43:3e:65:ed:
e5:97:3c:b0:d0:93:9c:cb:02:a1:71:1a:93:23:30:
fd:db:98:d3:d6:8d:f3:0d:4b:ce:52:9b:19:25:31:
75:3e:a4:0a:46:6a:3c:29:ad:4a:20:a3:f4:08:fd:
12:33:02:34:98:dc:05:84:8e:20:38:81:20:d7:61:
62:c7:40:9c:68:50:b2:ba:03:f3:03:ce:74:f8:10:
87:b3:63:c3:76:a5:a4:e5:84:f8:94:ec:5d:60:aa:
d1:1b:4f:e7:e9:4e:ba:99:b4:90:2c:51:ca:c4:38:
21:d2:ba:6e:04:a4:94:65:0b:cf:cb:cf:3c:77:09:
0a:25:31:9e:81:cc:b0:0c:fe:b5:b5:16:34:d9:d8:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:20:4C:95:57:0D:37:A9:A2:CA:BB:5F:53:53:68:76:03:B4:F1
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8d:b5:37:48:de:1f:ba:4f:72:7e:35:b2:e6:01:78:47:2f:
57:48:e0:ed:22:5c:9f:80:47:1e:70:37:ac:20:65:44:78:20:
6e:38:50:cd:19:77:e7:c3:ea:7f:7d:86:ba:91:99:e7:32:f7:
a5:52:e5:fa:0c:f9:29:89:33:47:7f:d7:bc:b7:39:0a:b2:20:
b3:32:08:9b:e9:e8:41:df:e5:50:4d:fa:e9:96:b8:44:b0:c4:
7d:5b:31:23:0f:69:97:90:18:c7:5f:90:24:8e:ec:e2:91:34:
d3:59:74:d4:a6:7b:42:e0:ea:a2:9d:96:79:0d:d0:a6:d1:d8:
97:2c:aa:df:44:d0:b4:b9:d1:81:76:05:32:b9:d0:86:89:57:
5b:c1:c4:80:89:0a:e1:0b:77:6d:ec:79:69:90:1f:68:b8:6f:
03:3e:5d:67:63:56:de:6c:95:00:5b:0c:17:9c:bf:b6:cb:c2:
9a:bf:bc:84:a4:4e:65:b3:db:3d:0d:19:68:69:e1:f3:d6:b8:
56:05:32:c5:1d:12:fe:4c:ef:8a:4d:5b:83:f2:58:8b:d4:9b:
b9:37:09:c0:97:41:46:d7:2b:5e:5a:21:db:55:22:e0:91:1c:
8d:e9:cf:17:80:4b:cb:36:c4:b8:8b:20:59:68:6c:4a:50:2e:
84:fc:91:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrx/P2XsmYw125p3Ew3MYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjQxMTI3MDQwMTI2WhcNMjQxMTI4MDQwMTI2WjAzMTEwLwYDVQQD
Eyg2OGI4MjA0Yzk1NTcwZDM3YTlhMmNhYmI1ZjUzNTM2ODc2MDNiNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0iefxWkaNAnGvKsfuDeoOkuY7BT
xPQURywnGNp2uEtEj2Jq5nMFamoM+jACcCYFByGIxPh5xqm/6j44T5SG3uTnJa/o
MgFnvGX4LvLtsTWLBz+zM7eWH/UDWZH7Z+NBdNS3UnFiANmgfA9WdTLv5wTX90M+
Ze3llzyw0JOcywKhcRqTIzD925jT1o3zDUvOUpsZJTF1PqQKRmo8Ka1KIKP0CP0S
MwI0mNwFhI4gOIEg12Fix0CcaFCyugPzA850+BCHs2PDdqWk5YT4lOxdYKrRG0/n
6U66mbSQLFHKxDgh0rpuBKSUZQvPy888dwkKJTGegcywDP61tRY02djtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi4IEyVVw03qaLKu19TU2h2A7TxMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB421N0je
H7pPcn41suYBeEcvV0jg7SJcn4BHHnA3rCBlRHggbjhQzRl358Pqf32GupGZ5zL3
pVLl+gz5KYkzR3/XvLc5CrIgszIIm+noQd/lUE366Za4RLDEfVsxIw9pl5AYx1+Q
JI7s4pE001l01KZ7QuDqop2WeQ3QptHYlyyq30TQtLnRgXYFMrnQholXW8HEgIkK
4Qt3bex5aZAfaLhvAz5dZ2NW3myVAFsMF5y/tsvCmr+8hKROZbPbPQ0ZaGnh89a4
VgUyxR0S/kzvik1bg/JYi9SbuTcJwJdBRtcrXloh21Ui4JEcjenPF4BLyzbEuIsg
WWhsSlAuhPyRtA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:32 2024 by rpki-client on console-fra.rpki-client.org