Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
File: nebkJy4s44e0zASxQ_czCdcTYps.mft (raw, json)
Hash identifier: 2PbtGUGdOmiWc/WqM6g6Uyf4ohus/gHEF+ClD8vSZq0=
Subject key identifier: 89:18:11:CA:66:6F:EF:3B:A1:49:D9:9D:45:36:8A:08:8A:CD:6B:63
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 01923A6FD49A7A0A4B88D274CC7B1B981A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
Manifest number: 12E0
Signing time: Sat 28 Sep 2024 21:01:00 +0000
Manifest this update: Sat 28 Sep 2024 21:01:00 +0000
Manifest next update: Sun 29 Sep 2024 21:01:00 +0000
Files and hashes: 1: 1--_Pra55j5vU4AW5fs8K_BXLtm4.roa (hash: Ded8iBiyEkn9Sz0Ngh8CNZL7SKS7jfdmY+71s8swWs0=)
2: nebkJy4s44e0zASxQ_czCdcTYps.crl (hash: 1aHbptJsgiyDXqTl85RPYVgFVnTRZE0tc7MeEMC3l10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:6f:d4:9a:7a:0a:4b:88:d2:74:cc:7b:1b:98:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Sep 28 21:01:00 2024 GMT
Not After : Sep 29 21:01:00 2024 GMT
Subject: CN=891811ca666fef3ba149d99d45368a088acd6b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:36:ee:09:6a:9e:6f:23:89:97:6b:bb:5e:
81:95:5f:32:12:2c:4b:f4:d6:9f:9e:25:2e:6a:50:
b5:bf:1e:65:31:d3:51:86:3b:db:9b:0d:4c:e3:1d:
d7:7a:05:77:55:11:b0:e9:46:1b:24:f4:b9:96:3a:
63:62:95:04:8a:7e:78:eb:ba:e8:b7:19:61:a3:d3:
0a:de:8f:96:ef:38:61:43:82:1b:c8:04:07:4d:38:
3b:78:e0:68:54:c9:18:c2:15:0a:ed:f2:28:e4:08:
62:c3:79:54:ae:2c:0c:86:c4:eb:93:51:8f:2a:5f:
0c:4b:3b:6a:00:46:92:25:01:1d:60:72:ba:fd:78:
71:77:6b:52:b6:99:dc:22:9d:26:61:b6:73:44:0c:
52:2a:0a:8f:95:d6:fe:e8:26:3b:ab:9a:5e:5c:fe:
1b:50:f3:47:84:6e:e0:7d:8c:5c:3c:b5:d3:30:2b:
ec:00:73:22:8d:a8:cc:7e:a6:eb:ff:23:ea:5d:d1:
c0:95:da:0f:c5:fb:1b:98:6f:b4:be:8a:fc:e0:ec:
b5:fd:fe:00:55:0f:6f:f5:35:e4:e0:0b:fa:b3:0b:
d6:66:63:00:87:ec:00:50:31:7b:5a:79:57:16:81:
54:9c:31:26:ba:05:30:a5:e9:29:ef:cd:d3:a6:78:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:11:CA:66:6F:EF:3B:A1:49:D9:9D:45:36:8A:08:8A:CD:6B:63
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:6e:0f:0e:9c:58:d4:d3:c0:b0:5a:f0:5f:db:9b:45:8f:
58:38:6e:4d:cc:63:fe:c1:c0:31:de:71:7c:86:d1:59:2f:59:
0c:97:01:5b:db:32:70:dc:a0:ba:b0:a6:ce:cd:47:2e:03:16:
6b:1d:ad:5a:b9:a2:c0:24:7a:3d:a5:52:4a:4d:74:13:ce:86:
8a:69:e8:fb:8c:49:3e:ee:b2:ff:8c:6b:ce:af:35:a6:0c:03:
8f:54:68:ce:5e:47:2f:87:ad:33:f2:09:fa:a0:28:8e:a2:2e:
c0:af:11:e8:d7:46:fd:0b:22:83:d3:79:c5:9b:c6:fb:7b:2e:
5d:27:69:33:f6:8e:2a:34:91:f3:d5:58:f2:69:f2:d4:b6:66:
01:13:e5:c9:70:b1:ae:cb:b8:e1:b2:11:04:0a:ce:a8:7b:2c:
50:16:8e:3f:64:2e:f0:81:91:1b:9b:a4:73:37:85:e5:d3:6b:
aa:ea:53:3e:92:ef:fc:59:9c:a2:b6:2b:3e:74:7b:52:6b:62:
fb:39:da:74:3f:b3:b4:15:75:73:42:47:22:d0:99:ef:c7:61:
21:83:91:b0:38:0c:5b:32:c4:94:e6:38:62:45:09:79:68:b4:
f4:b9:88:f3:4c:17:29:4d:6e:54:d5:96:da:78:b5:5d:64:81:
cc:d5:b3:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6b9SaegpLiNJ0zHsbmBoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTZlNDI3MmUyY2UzODdiNGNjMDRiMTQzZjczMzA5ZDcx
MzYyOWIwHhcNMjQwOTI4MjEwMTAwWhcNMjQwOTI5MjEwMTAwWjAzMTEwLwYDVQQD
Eyg4OTE4MTFjYTY2NmZlZjNiYTE0OWQ5OWQ0NTM2OGEwODhhY2Q2YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Q27glqnm8jiZdru16BlV8yEixL
9NafniUualC1vx5lMdNRhjvbmw1M4x3XegV3VRGw6UYbJPS5ljpjYpUEin5467ro
txlho9MK3o+W7zhhQ4IbyAQHTTg7eOBoVMkYwhUK7fIo5Ahiw3lUriwMhsTrk1GP
Kl8MSztqAEaSJQEdYHK6/Xhxd2tStpncIp0mYbZzRAxSKgqPldb+6CY7q5peXP4b
UPNHhG7gfYxcPLXTMCvsAHMijajMfqbr/yPqXdHAldoPxfsbmG+0vor84Oy1/f4A
VQ9v9TXk4Av6swvWZmMAh+wAUDF7WnlXFoFUnDEmugUwpekp783TpnhotwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkYEcpmb+87oUnZnUU2igiKzWtjMB8GA1UdIwQY
MBaAFJ3m5CcuLOOHtMwEsUP3MwnXE2KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMt
N2JhZDViYWU1MWU0LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMtN2JhZDViYWU1MWU0
LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtFuDw6c
WNTTwLBa8F/bm0WPWDhuTcxj/sHAMd5xfIbRWS9ZDJcBW9sycNygurCmzs1HLgMW
ax2tWrmiwCR6PaVSSk10E86Gimno+4xJPu6y/4xrzq81pgwDj1Rozl5HL4etM/IJ
+qAojqIuwK8R6NdG/Qsig9N5xZvG+3suXSdpM/aOKjSR89VY8mny1LZmARPlyXCx
rsu44bIRBArOqHssUBaOP2Qu8IGRG5ukczeF5dNrqupTPpLv/FmcorYrPnR7Umti
+znadD+ztBV1c0JHItCZ78dhIYORsDgMWzLElOY4YkUJeWi09LmI80wXKU1uVNWW
2ni1XWSBzNWzgg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 22:19:07 2024 by rpki-client on console-ams.rpki-client.org