Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: DUVUhX2NeA37O2OHCnDBmHf2QGujmMf5d6gXf421IgE=
Subject key identifier: DE:7B:42:B6:1A:0D:87:B1:F0:D3:06:26:1C:FC:A3:E8:1A:B8:2C:7D
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01935689B32C7F9DED4B11D9F486816C7336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 01:01:25 +0000
Manifest this update: Sat 23 Nov 2024 01:01:25 +0000
Manifest next update: Sun 24 Nov 2024 01:01:25 +0000
Files and hashes: 1: DjKcIUOno4dV9vd_SnvzdULOxC0.roa (hash: UeOES/Pe/+X8HsG4idOff3jnVcRMXKGSGPsJAkRjs9E=)
2: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: 9iC7Qqg61axdoRwZYrPoreL6getSQKrJjaOKDI/Mo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:b3:2c:7f:9d:ed:4b:11:d9:f4:86:81:6c:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Nov 23 01:01:25 2024 GMT
Not After : Nov 24 01:01:25 2024 GMT
Subject: CN=de7b42b61a0d87b1f0d306261cfca3e81ab82c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:12:f6:a0:6e:8c:8d:e9:0c:8a:49:be:cc:
d6:d0:b1:da:32:bf:70:b4:a0:59:15:a9:29:ef:b9:
ff:3c:df:a5:bb:8f:a2:08:fd:18:05:ac:1b:6d:be:
f8:5c:e8:76:c2:17:da:7c:1d:18:d2:c0:8a:34:aa:
b4:3d:c4:0c:37:c4:e6:bc:1c:2d:31:bc:06:71:b9:
ae:de:97:ac:a4:29:f5:9c:96:0e:44:21:12:08:e7:
43:7d:f2:63:51:9f:ab:08:a9:2b:1b:0f:ca:7f:1c:
ca:2f:95:37:f8:b0:89:05:07:72:68:7a:1a:77:d2:
8a:1d:71:c7:83:04:d0:4c:6d:84:19:53:01:f1:f2:
a3:d5:f3:e0:f7:db:8f:40:4a:c9:46:99:ad:df:f0:
89:e8:79:96:f5:a3:9e:a1:f4:81:fa:9b:b8:02:a5:
ee:14:73:34:5f:e6:73:21:56:60:40:38:e3:b5:3c:
27:7a:8c:eb:72:31:0f:3d:07:67:0f:79:b8:29:81:
a1:84:60:01:88:d6:50:12:db:5c:4f:b5:23:b0:1e:
e2:cc:bd:ea:c1:36:9b:ce:6a:90:5d:7d:78:69:17:
ce:7b:0d:d3:08:99:54:d5:1f:cc:f4:b9:84:08:8e:
fe:53:22:ee:b3:64:fb:28:34:7b:6a:d4:66:07:c5:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:42:B6:1A:0D:87:B1:F0:D3:06:26:1C:FC:A3:E8:1A:B8:2C:7D
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:67:75:87:2d:e3:aa:e5:b9:98:87:13:d7:2d:04:e8:c1:a1:
96:77:30:1f:ce:2e:8b:dc:23:d5:fe:22:e0:95:97:e6:f5:c0:
70:77:3d:04:31:08:2f:2d:16:c2:f5:ef:1b:e5:ef:dc:94:fd:
12:8b:4b:0e:16:2f:1f:3d:d8:d3:3b:ce:ae:34:f9:bf:f2:f2:
7a:e9:49:4a:4c:38:9f:39:ca:a7:89:6f:3d:a3:f4:3b:3c:c8:
3a:ad:cd:dd:d2:51:01:f1:b7:fb:d3:e1:6f:d3:0b:cd:c5:54:
60:f9:6b:93:2a:5d:9d:f6:ff:aa:82:38:22:b4:15:fe:2d:46:
b3:9e:65:5d:fc:31:ba:c2:0f:2b:c7:ef:c5:a5:a1:f4:51:29:
d0:da:99:90:f1:22:5e:74:b3:84:42:58:25:c7:50:83:cf:eb:
30:7c:99:b3:70:35:d0:b7:9b:44:ea:67:d4:ae:3e:58:df:60:
5c:37:b5:b4:00:e8:50:f4:ae:5b:f3:c1:c1:86:cf:79:4f:9e:
b2:18:70:72:f2:90:52:d9:36:db:47:b5:d9:a2:e4:bb:dd:c9:
38:8c:aa:71:b4:53:48:bc:5f:0c:d2:33:35:cb:1e:3f:9f:a6:
17:23:06:0d:f5:98:c8:00:23:17:24:8f:7a:6e:60:2a:39:39:
93:8a:7b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWibMsf53tSxHZ9IaBbHM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjQxMTIzMDEwMTI1WhcNMjQxMTI0MDEwMTI1WjAzMTEwLwYDVQQD
EyhkZTdiNDJiNjFhMGQ4N2IxZjBkMzA2MjYxY2ZjYTNlODFhYjgyYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG4S9qBujI3pDIpJvszW0LHaMr9w
tKBZFakp77n/PN+lu4+iCP0YBawbbb74XOh2whfafB0Y0sCKNKq0PcQMN8TmvBwt
MbwGcbmu3pespCn1nJYORCESCOdDffJjUZ+rCKkrGw/KfxzKL5U3+LCJBQdyaHoa
d9KKHXHHgwTQTG2EGVMB8fKj1fPg99uPQErJRpmt3/CJ6HmW9aOeofSB+pu4AqXu
FHM0X+ZzIVZgQDjjtTwneozrcjEPPQdnD3m4KYGhhGABiNZQEttcT7UjsB7izL3q
wTabzmqQXX14aRfOew3TCJlU1R/M9LmECI7+UyLus2T7KDR7atRmB8WJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN57QrYaDYex8NMGJhz8o+gauCx9MB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGd1hy3j
quW5mIcT1y0E6MGhlncwH84ui9wj1f4i4JWX5vXAcHc9BDEILy0WwvXvG+Xv3JT9
EotLDhYvHz3Y0zvOrjT5v/LyeulJSkw4nznKp4lvPaP0OzzIOq3N3dJRAfG3+9Ph
b9MLzcVUYPlrkypdnfb/qoI4IrQV/i1Gs55lXfwxusIPK8fvxaWh9FEp0NqZkPEi
XnSzhEJYJcdQg8/rMHyZs3A10LebROpn1K4+WN9gXDe1tADoUPSuW/PBwYbPeU+e
shhwcvKQUtk220e12aLku93JOIyqcbRTSLxfDNIzNcseP5+mFyMGDfWYyAAjFySP
em5gKjk5k4p7Hw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:01 2024 by rpki-client on console-fra.rpki-client.org