Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: birZYMZNeZgWTiMUpExhCFiGkLjw02bOBITLUqEJGfI=
Subject key identifier: B4:58:73:84:B9:DE:43:B0:77:E4:38:CF:7B:EF:1C:B4:33:51:6F:AF
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019358789B8078DE9FB3E0B150D22227F26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 10A8
Signing time: Sat 23 Nov 2024 10:01:59 +0000
Manifest this update: Sat 23 Nov 2024 10:01:59 +0000
Manifest next update: Sun 24 Nov 2024 10:01:59 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: VS+T0hP1lBxHhCd259L8ih+0EH0UiYv5nxn9aiHKnkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:9b:80:78:de:9f:b3:e0:b1:50:d2:22:27:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Nov 23 10:01:59 2024 GMT
Not After : Nov 24 10:01:59 2024 GMT
Subject: CN=b4587384b9de43b077e438cf7bef1cb433516faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:a8:d0:db:a3:92:04:be:9f:90:28:20:aa:
2a:47:70:2d:8b:a3:c1:cf:b9:4a:b9:3d:1e:55:5f:
79:14:02:ad:da:54:2c:fe:e0:90:d8:74:c7:17:8c:
1c:ea:b0:0f:ad:f9:4b:85:13:64:40:43:81:2a:22:
b7:52:c6:80:90:b5:6d:08:75:18:7b:9e:c2:8e:ee:
f3:b4:40:8a:79:32:50:81:46:f5:4b:3a:0c:ca:fe:
8d:c6:bb:e2:92:eb:07:41:62:49:2e:ae:34:c6:93:
91:cb:80:7b:23:fa:8b:94:5c:6e:48:f5:e5:17:33:
0f:ae:74:91:06:64:90:fc:df:18:60:8c:90:cc:76:
2f:b3:e1:90:ff:4a:2e:24:48:c9:a7:fe:47:11:37:
01:17:7f:64:91:87:a0:85:02:57:ee:03:d4:13:80:
44:5d:51:24:a6:eb:e5:47:cf:94:0b:3b:85:d2:1f:
01:77:b0:a9:9b:b7:83:31:c9:71:67:5a:3b:83:af:
cd:50:de:d8:ec:dc:80:10:d4:5f:1e:a6:bf:45:98:
c8:76:f6:de:4f:fc:e0:43:51:07:f0:a0:0f:a0:73:
fd:4c:a4:d0:ae:60:cc:cb:c4:ab:18:47:40:f9:26:
7c:08:66:e1:77:da:da:20:b1:dd:1d:85:61:c2:3d:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:73:84:B9:DE:43:B0:77:E4:38:CF:7B:EF:1C:B4:33:51:6F:AF
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:a2:b4:01:d5:62:6e:6e:e9:14:fd:80:4f:c7:e8:e3:bd:
61:d1:49:f7:54:17:73:bc:fe:4a:89:2d:97:c6:02:2f:52:3e:
b4:23:e8:09:43:39:36:f7:3e:4f:a3:9e:f0:f5:7d:d8:f1:02:
14:e5:c9:2b:9c:cb:44:b6:30:ee:f6:9a:69:4c:2e:e3:fa:ea:
b4:b6:52:a3:44:91:40:fa:89:16:24:35:c9:b6:a5:ee:c8:08:
9f:2a:3c:e9:bf:f8:f0:0f:6d:94:f8:ec:89:a9:ce:9a:f3:b2:
2a:06:17:29:7c:d4:35:36:6d:fb:49:29:8a:e0:81:80:9c:8d:
78:db:46:ec:6e:c5:e0:60:b5:dc:3c:1c:b2:eb:c8:af:b9:1c:
ef:b5:b4:42:15:cd:89:a1:d7:4e:1e:e9:fb:5d:01:45:8f:6a:
d4:da:e8:3f:28:32:f4:35:bf:67:e4:cd:90:64:62:a2:4d:b5:
c8:99:11:f7:44:6b:bd:62:3b:10:e4:94:5e:1a:7a:5d:43:5c:
d2:df:34:29:9d:86:cd:cb:20:a0:10:54:b6:cc:5a:de:cb:d4:
d9:25:e6:76:8e:47:ce:3d:ca:98:a3:74:3d:4b:8d:42:94:21:
7c:9e:be:dd:b8:25:76:41:48:96:30:b2:24:e7:e5:f6:42:2a:
11:25:99:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeJuAeN6fs+CxUNIiJ/JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjQxMTIzMTAwMTU5WhcNMjQxMTI0MTAwMTU5WjAzMTEwLwYDVQQD
EyhiNDU4NzM4NGI5ZGU0M2IwNzdlNDM4Y2Y3YmVmMWNiNDMzNTE2ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64Ko0NujkgS+n5AoIKoqR3Ati6PB
z7lKuT0eVV95FAKt2lQs/uCQ2HTHF4wc6rAPrflLhRNkQEOBKiK3UsaAkLVtCHUY
e57Cju7ztECKeTJQgUb1SzoMyv6NxrvikusHQWJJLq40xpORy4B7I/qLlFxuSPXl
FzMPrnSRBmSQ/N8YYIyQzHYvs+GQ/0ouJEjJp/5HETcBF39kkYeghQJX7gPUE4BE
XVEkpuvlR8+UCzuF0h8Bd7Cpm7eDMclxZ1o7g6/NUN7Y7NyAENRfHqa/RZjIdvbe
T/zgQ1EH8KAPoHP9TKTQrmDMy8SrGEdA+SZ8CGbhd9raILHdHYVhwj2zOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRYc4S53kOwd+Q4z3vvHLQzUW+vMB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi6itAHV
Ym5u6RT9gE/H6OO9YdFJ91QXc7z+Soktl8YCL1I+tCPoCUM5Nvc+T6Oe8PV92PEC
FOXJK5zLRLYw7vaaaUwu4/rqtLZSo0SRQPqJFiQ1ybal7sgInyo86b/48A9tlPjs
ianOmvOyKgYXKXzUNTZt+0kpiuCBgJyNeNtG7G7F4GC13DwcsuvIr7kc77W0QhXN
iaHXTh7p+10BRY9q1NroPygy9DW/Z+TNkGRiok21yJkR90RrvWI7EOSUXhp6XUNc
0t80KZ2GzcsgoBBUtsxa3svU2SXmdo5Hzj3KmKN0PUuNQpQhfJ6+3bgldkFIljCy
JOfl9kIqESWZVg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:05 2024 by rpki-client on console-fra.rpki-client.org