Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: /hqn+IS92qBTAzBQZ2kwgoIvopjR6UphKbm0hLWf3G4=
Subject key identifier: FD:D2:C9:DC:B8:A0:85:66:94:02:D6:D5:AA:FA:E3:EE:90:57:80:56
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 019356F6D29F655CE8465E92C5C3715165E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 0F25
Signing time: Sat 23 Nov 2024 03:00:36 +0000
Manifest this update: Sat 23 Nov 2024 03:00:36 +0000
Manifest next update: Sun 24 Nov 2024 03:00:36 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: 0F7roYUqSEfZexc0plfMEcXBIKBc3pFxf7j+g1iWJR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:d2:9f:65:5c:e8:46:5e:92:c5:c3:71:51:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Nov 23 03:00:36 2024 GMT
Not After : Nov 24 03:00:36 2024 GMT
Subject: CN=fdd2c9dcb8a085669402d6d5aafae3ee90578056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:33:60:42:d8:ad:f4:2a:27:62:7e:1e:ab:
f5:cf:0f:5d:e0:c6:84:d5:1a:4d:ce:f9:30:76:e0:
77:2e:32:97:6f:aa:fe:5e:21:9a:b5:01:5e:69:15:
21:d7:b5:db:5f:23:e2:cb:10:91:70:9d:a8:40:5e:
9b:8d:fc:0e:bf:f5:c2:e8:be:15:c5:d9:cb:9b:2d:
5f:17:36:94:07:27:da:5c:65:40:b3:f1:63:fe:93:
ca:95:1b:91:f3:eb:c1:79:8a:2a:79:be:b4:90:3d:
9a:6e:f1:76:57:47:c1:f9:cb:26:5a:d5:65:0f:de:
32:e8:75:33:e3:c3:4e:cb:a0:c3:10:d7:95:c8:ba:
d4:bf:0a:90:2b:19:51:0e:f7:d6:d8:53:f2:aa:f4:
23:b0:16:2a:d8:45:dc:22:32:cb:84:18:38:88:b0:
93:4f:99:b3:6f:2e:94:bb:0d:12:e4:df:d7:4b:8c:
5e:37:5d:5b:ae:c8:88:aa:7b:d8:bb:af:0c:c1:1a:
92:0f:3e:b8:05:58:1c:d9:ff:07:8e:79:1e:e5:d0:
82:f2:aa:26:2d:8a:53:54:8d:9e:8f:20:d1:a7:f3:
64:84:23:61:7a:1d:b6:a5:c7:58:ed:6a:0c:80:df:
d5:9e:b3:05:3f:71:79:dd:33:13:17:f2:cc:36:99:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:C9:DC:B8:A0:85:66:94:02:D6:D5:AA:FA:E3:EE:90:57:80:56
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:8e:c7:5b:ef:29:84:49:07:90:d8:77:96:31:35:b7:22:
4b:70:f6:51:bb:34:d0:08:11:e7:22:e6:c7:a1:08:9d:e2:16:
92:1b:97:b2:c2:1a:2d:25:f1:43:4f:7c:20:b2:40:bc:63:7b:
22:f9:4f:d6:68:ac:ae:f2:dc:2b:5a:aa:68:2e:bd:f4:be:03:
70:6b:c9:6d:ca:c4:3e:67:d9:2b:97:4b:9e:d5:b1:af:fd:40:
ae:86:01:05:54:05:9a:8a:c1:0d:d7:9c:6c:7b:8c:93:7a:8a:
a6:38:59:b2:49:a3:6d:27:f9:b9:b6:24:c9:32:13:24:6d:6f:
68:c6:ab:ac:6e:22:ea:e4:74:52:01:96:b8:3d:91:99:f8:33:
71:00:e1:a4:a1:df:73:6c:3e:95:fd:b0:f8:03:a1:8b:80:6c:
a6:ec:0c:fb:ab:4f:a3:ec:44:30:3c:2e:3c:b2:2a:a7:38:5e:
c1:d5:d5:97:e1:e8:b8:43:92:fe:71:97:96:c3:1d:a6:e8:04:
41:1d:0c:57:ae:44:6b:e5:87:6e:2e:f1:32:02:72:41:85:cd:
f7:77:14:80:36:f0:aa:93:f8:b6:d8:b1:ed:9d:79:b5:00:4b:
57:42:cf:36:38:d8:da:7d:2e:90:dd:d6:09:8f:56:51:c8:de:
b6:55:c3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9tKfZVzoRl6SxcNxUWXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx
YzkyNTkwHhcNMjQxMTIzMDMwMDM2WhcNMjQxMTI0MDMwMDM2WjAzMTEwLwYDVQQD
EyhmZGQyYzlkY2I4YTA4NTY2OTQwMmQ2ZDVhYWZhZTNlZTkwNTc4MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8AzYELYrfQqJ2J+Hqv1zw9d4MaE
1RpNzvkwduB3LjKXb6r+XiGatQFeaRUh17XbXyPiyxCRcJ2oQF6bjfwOv/XC6L4V
xdnLmy1fFzaUByfaXGVAs/Fj/pPKlRuR8+vBeYoqeb60kD2abvF2V0fB+csmWtVl
D94y6HUz48NOy6DDENeVyLrUvwqQKxlRDvfW2FPyqvQjsBYq2EXcIjLLhBg4iLCT
T5mzby6Uuw0S5N/XS4xeN11brsiIqnvYu68MwRqSDz64BVgc2f8Hjnke5dCC8qom
LYpTVI2ejyDRp/NkhCNheh22pcdY7WoMgN/VnrMFP3F53TMTF/LMNpniDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3Sydy4oIVmlALW1ar64+6QV4BWMB8GA1UdIwQY
MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt
NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx
LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0mOx1vv
KYRJB5DYd5YxNbciS3D2Ubs00AgR5yLmx6EIneIWkhuXssIaLSXxQ098ILJAvGN7
IvlP1misrvLcK1qqaC699L4DcGvJbcrEPmfZK5dLntWxr/1AroYBBVQFmorBDdec
bHuMk3qKpjhZskmjbSf5ubYkyTITJG1vaMarrG4i6uR0UgGWuD2RmfgzcQDhpKHf
c2w+lf2w+AOhi4BspuwM+6tPo+xEMDwuPLIqpzhewdXVl+HouEOS/nGXlsMdpugE
QR0MV65Ea+WHbi7xMgJyQYXN93cUgDbwqpP4ttix7Z15tQBLV0LPNjjY2n0ukN3W
CY9WUcjetlXDyA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:54 2024 by rpki-client on console-fra.rpki-client.org