Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: hai5qaBmaDgMgMxk8wZ2ZdDDUDHhzrRfWFsbiY+lUn0=
Subject key identifier: 29:CE:0E:D0:AE:72:CD:39:D2:9A:C9:91:84:6E:98:02:E9:A8:31:17
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0193576464067849156F67783AAE74DA95DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 09FC
Signing time: Sat 23 Nov 2024 05:00:17 +0000
Manifest this update: Sat 23 Nov 2024 05:00:17 +0000
Manifest next update: Sun 24 Nov 2024 05:00:17 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: gxHwN5MT2iBxLQR/upZ3gJ9itPxWASWqkabplhNJ5S4=)
2: zvdo8v9xyCdy1mKyVrWjfGNxMHM.roa (hash: Au0agW13xl3mH0Bx/FwdF4hcEhPlEoQV0ckZrM2DC20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:64:06:78:49:15:6f:67:78:3a:ae:74:da:95:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Nov 23 05:00:17 2024 GMT
Not After : Nov 24 05:00:17 2024 GMT
Subject: CN=29ce0ed0ae72cd39d29ac991846e9802e9a83117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:11:3b:f1:ec:db:dd:af:df:15:a0:5c:07:
85:1b:96:0b:96:8b:c3:f8:e7:3c:c8:04:5f:aa:a6:
17:60:e2:d9:58:42:ac:0b:7a:f5:19:a6:48:5a:26:
dc:ed:40:41:14:d8:d5:09:37:71:22:08:0b:9c:4d:
83:8e:b1:38:d6:9d:df:a1:ba:2c:dc:2b:2a:54:38:
ec:cc:92:c7:34:cd:cd:e8:23:b8:81:d6:b2:43:96:
91:67:19:28:6e:7b:26:f8:10:78:0e:c9:ee:c7:1f:
ea:ad:aa:a5:e8:e2:50:6b:56:11:61:b9:d9:2d:aa:
f8:50:4d:ce:6b:52:57:29:ec:48:e7:78:92:8f:e9:
9c:bd:69:40:5d:c7:c8:5a:91:7e:27:2a:a9:f5:55:
01:25:20:f0:f8:35:76:c0:09:12:2f:1d:35:ef:16:
78:6e:6e:2f:ee:5a:e0:1d:6a:f4:2f:1b:18:0a:ab:
59:8c:f3:f5:53:42:89:99:5d:84:8d:49:f1:03:de:
66:b7:14:3f:67:61:93:34:f9:83:62:7c:68:ec:d8:
66:55:29:7b:4c:55:44:27:01:c4:cd:bf:82:af:37:
35:6b:85:66:d8:9c:f6:fa:6f:c2:76:c8:1d:b3:11:
8f:75:2e:21:95:d8:87:c7:15:a0:26:40:86:1d:1f:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:0E:D0:AE:72:CD:39:D2:9A:C9:91:84:6E:98:02:E9:A8:31:17
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:cc:0d:2a:1e:c7:ea:47:d9:a3:ed:0b:72:fd:d2:d1:7f:
be:78:ae:6b:0e:4f:7a:95:3b:95:f1:66:cf:70:6d:42:de:2b:
31:42:44:c4:a9:95:6e:59:58:db:2e:ce:71:9d:bf:63:7a:f2:
07:db:09:06:87:9b:fd:63:07:da:37:a2:ad:be:fd:69:c2:db:
be:02:3d:6b:35:bc:bb:54:a0:2d:d3:87:ef:2f:1b:12:36:59:
bf:ef:b5:23:b6:a6:65:bd:0b:f7:1a:0e:2d:cf:60:e9:35:f9:
3e:22:66:ee:73:44:40:24:fb:5e:01:27:a6:97:13:69:a9:00:
cc:8a:5b:38:ef:92:a5:41:78:c5:f1:a5:0a:ab:85:0f:02:87:
52:80:08:dd:19:07:0c:46:a4:80:d4:c1:b0:0a:e5:0e:8b:76:
7a:a3:b5:25:4b:e6:81:36:54:e9:d2:7f:ad:06:36:7c:4a:25:
6a:a6:1d:ec:37:36:e5:36:10:67:2c:97:14:25:98:a6:33:d7:
26:de:ca:90:b1:24:9a:ff:c8:2b:c8:0f:05:5e:3c:12:b6:19:
7a:fd:93:c1:7a:e6:04:1c:16:63:46:97:10:b9:94:ca:a6:ff:
4c:d0:c6:74:05:c2:f4:49:54:4b:3a:b2:e8:8a:ae:46:9a:39:
53:a3:4b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZGQGeEkVb2d4Oq502pXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex
MmQ3YWIwHhcNMjQxMTIzMDUwMDE3WhcNMjQxMTI0MDUwMDE3WjAzMTEwLwYDVQQD
EygyOWNlMGVkMGFlNzJjZDM5ZDI5YWM5OTE4NDZlOTgwMmU5YTgzMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8IRO/Hs292v3xWgXAeFG5YLlovD
+Oc8yARfqqYXYOLZWEKsC3r1GaZIWibc7UBBFNjVCTdxIggLnE2DjrE41p3fobos
3CsqVDjszJLHNM3N6CO4gdayQ5aRZxkobnsm+BB4Dsnuxx/qraql6OJQa1YRYbnZ
Lar4UE3Oa1JXKexI53iSj+mcvWlAXcfIWpF+Jyqp9VUBJSDw+DV2wAkSLx017xZ4
bm4v7lrgHWr0LxsYCqtZjPP1U0KJmV2EjUnxA95mtxQ/Z2GTNPmDYnxo7NhmVSl7
TFVEJwHEzb+Crzc1a4Vm2Jz2+m/CdsgdsxGPdS4hldiHxxWgJkCGHR+JVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnODtCucs050prJkYRumALpqDEXMB8GA1UdIwQY
MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt
NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1
LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQjMDSoe
x+pH2aPtC3L90tF/vniuaw5PepU7lfFmz3BtQt4rMUJExKmVbllY2y7OcZ2/Y3ry
B9sJBoeb/WMH2jeirb79acLbvgI9azW8u1SgLdOH7y8bEjZZv++1I7amZb0L9xoO
Lc9g6TX5PiJm7nNEQCT7XgEnppcTaakAzIpbOO+SpUF4xfGlCquFDwKHUoAI3RkH
DEakgNTBsArlDot2eqO1JUvmgTZU6dJ/rQY2fEolaqYd7Dc25TYQZyyXFCWYpjPX
Jt7KkLEkmv/IK8gPBV48ErYZev2TwXrmBBwWY0aXELmUyqb/TNDGdAXC9ElUSzqy
6IquRpo5U6NLkA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:54 2024 by rpki-client on console-fra.rpki-client.org