Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: YzQUusyCO3pH8WyD2Dsm9/UsByUjdggEjl6VpXoKJpw=
Subject key identifier: 39:B2:3C:B4:71:CF:F7:92:AF:93:47:3D:2F:3E:CE:B1:34:F8:CE:F0
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 0193568A044DF200B3798066AF9D19D7D353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 03D7
Signing time: Sat 23 Nov 2024 01:01:45 +0000
Manifest this update: Sat 23 Nov 2024 01:01:45 +0000
Manifest next update: Sun 24 Nov 2024 01:01:45 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: QY0DLs+CbCNacxdsxai1pnnRC6PsY9gxVQzq6iwGPbg=)
2: 6DwsoFTqdBgQCVJfCy7j5jtCPb0.roa (hash: 8f9H61aoApKOrC29U6VWHvDnnVl0mB77PJn+P6RxZj4=)
3: IK2T8fURoTCV_8Px_7zakdOI0Nw.roa (hash: FCR4P+tDox+P4Fve5crGlzvKDQV1RXxelz7fLORgzTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:04:4d:f2:00:b3:79:80:66:af:9d:19:d7:d3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Nov 23 01:01:45 2024 GMT
Not After : Nov 24 01:01:45 2024 GMT
Subject: CN=39b23cb471cff792af93473d2f3eceb134f8cef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:0a:65:bd:15:e1:7a:44:82:04:9b:d3:a0:
f3:a5:3f:f6:f4:f9:37:5f:9b:8f:89:93:47:3e:d1:
a5:69:70:ac:46:39:dd:aa:24:ad:45:4f:69:d9:3a:
50:c2:c5:4e:7d:0a:86:bf:c3:46:1b:b5:e1:db:2a:
ba:91:96:e9:5e:46:0a:cb:80:83:49:a7:d9:3c:fc:
13:e9:c7:0d:a1:1e:e0:a4:8c:30:d5:39:5c:72:4f:
4b:b7:8f:fa:e1:b4:59:7b:36:6c:d1:82:5b:b9:1e:
3d:27:ce:87:b4:73:b8:ca:b2:27:c4:1a:2b:2c:31:
1c:40:25:b9:dc:ee:a4:d0:46:3e:cf:e1:62:51:73:
ea:09:95:e4:44:23:19:8c:4a:8a:46:5b:4d:eb:cd:
ce:03:c7:9a:49:d9:16:52:64:df:2c:25:14:1f:b3:
4b:5a:16:1c:34:45:2b:b4:ca:3a:11:0d:5f:f8:8a:
d1:7f:19:8b:33:42:f2:cd:96:ed:55:93:5a:d4:63:
52:b0:c0:dd:a8:c3:63:a5:e1:08:b1:d4:39:37:35:
15:0c:aa:cf:48:54:ac:a3:81:58:9d:10:bd:4a:72:
c3:29:42:f6:1f:bf:fc:b2:a7:8b:8b:cb:4d:26:05:
b6:37:d1:98:86:fc:51:fe:5a:89:75:5b:5d:f3:da:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B2:3C:B4:71:CF:F7:92:AF:93:47:3D:2F:3E:CE:B1:34:F8:CE:F0
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a7:75:dc:67:cf:e5:ee:c9:9b:a5:e3:17:62:87:fe:8c:47:
59:e0:65:3a:ac:a6:cd:cc:08:c3:b7:1a:ec:c2:69:68:f1:df:
60:78:cf:50:b2:ac:b2:4f:a2:6c:b5:cd:38:38:e8:82:e6:a1:
e5:92:cd:70:aa:e2:ef:c8:14:88:ba:8d:a9:90:5a:aa:b2:6d:
04:d2:8d:29:5c:ae:34:81:86:ff:a9:de:9f:33:5b:27:1d:5c:
92:2a:65:ed:b7:3d:c8:fd:cd:fa:b4:89:f8:1c:52:3d:82:7d:
54:fd:ab:88:bf:b7:f6:bc:93:dd:c0:74:9f:c3:df:6c:c0:e4:
8b:74:a8:10:2a:69:30:0d:c1:67:e1:03:82:09:97:78:8a:9d:
a8:1e:43:51:98:8e:f2:d6:1e:3e:1c:50:a0:6e:f6:44:cb:2a:
00:6e:51:6e:04:80:ef:06:a1:1c:a1:e9:ce:10:95:e4:a6:a9:
1a:af:4a:6a:6d:41:49:65:1b:0f:ea:ab:60:23:9f:ee:98:24:
62:f4:5c:f2:34:96:0a:86:09:66:47:57:c1:d2:21:bf:6a:02:
a1:22:5f:fd:86:df:42:04:fa:41:eb:08:6e:26:8c:35:72:58:
e6:f6:5f:0c:df:66:ec:23:c4:57:a0:52:b3:b1:2c:2a:c7:53:
b0:d6:71:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWigRN8gCzeYBmr50Z19NTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjQxMTIzMDEwMTQ1WhcNMjQxMTI0MDEwMTQ1WjAzMTEwLwYDVQQD
EygzOWIyM2NiNDcxY2ZmNzkyYWY5MzQ3M2QyZjNlY2ViMTM0ZjhjZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTsKZb0V4XpEggSb06DzpT/29Pk3
X5uPiZNHPtGlaXCsRjndqiStRU9p2TpQwsVOfQqGv8NGG7Xh2yq6kZbpXkYKy4CD
SafZPPwT6ccNoR7gpIww1Tlcck9Lt4/64bRZezZs0YJbuR49J86HtHO4yrInxBor
LDEcQCW53O6k0EY+z+FiUXPqCZXkRCMZjEqKRltN683OA8eaSdkWUmTfLCUUH7NL
WhYcNEUrtMo6EQ1f+IrRfxmLM0LyzZbtVZNa1GNSsMDdqMNjpeEIsdQ5NzUVDKrP
SFSso4FYnRC9SnLDKUL2H7/8sqeLi8tNJgW2N9GYhvxR/lqJdVtd89oevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmyPLRxz/eSr5NHPS8+zrE0+M7wMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqd13GfP
5e7Jm6XjF2KH/oxHWeBlOqymzcwIw7ca7MJpaPHfYHjPULKssk+ibLXNODjoguah
5ZLNcKri78gUiLqNqZBaqrJtBNKNKVyuNIGG/6nenzNbJx1ckipl7bc9yP3N+rSJ
+BxSPYJ9VP2riL+39ryT3cB0n8PfbMDki3SoECppMA3BZ+EDggmXeIqdqB5DUZiO
8tYePhxQoG72RMsqAG5RbgSA7wahHKHpzhCV5KapGq9Kam1BSWUbD+qrYCOf7pgk
YvRc8jSWCoYJZkdXwdIhv2oCoSJf/YbfQgT6QesIbiaMNXJY5vZfDN9m7CPEV6BS
s7EsKsdTsNZxQA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:22 2024 by rpki-client on console-fra.rpki-client.org