Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: 0aMusKCv9MopWxft7QpNoXX2QBe1A/lWR8DMZYaxFVQ=
Subject key identifier: CB:C4:A3:12:BE:28:C9:C5:5A:A4:10:53:9D:9A:44:1B:00:93:37:FC
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 0193549C0279D22D5AFA7451C9F974299ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 0362
Signing time: Fri 22 Nov 2024 16:02:10 +0000
Manifest this update: Fri 22 Nov 2024 16:02:10 +0000
Manifest next update: Sat 23 Nov 2024 16:02:10 +0000
Files and hashes: 1: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: WUodG+LX+2Rmjavscmb5aPxKSKckB02zjdAGi614pgY=)
2: W8xtC8Zi7uWOjbUA7seBvN4EGoE.roa (hash: 3+4ROcDbUHhGpqwikFDfJCQFc5oH0cExxE3gqtwTmcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:02:79:d2:2d:5a:fa:74:51:c9:f9:74:29:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Nov 22 16:02:10 2024 GMT
Not After : Nov 23 16:02:10 2024 GMT
Subject: CN=cbc4a312be28c9c55aa410539d9a441b009337fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:6f:75:dc:da:39:26:3d:2a:4a:36:aa:80:
60:7a:eb:f5:14:6a:ca:6e:c3:d7:ec:bd:df:ea:a7:
b1:d5:25:86:3e:23:8e:99:36:e7:b0:af:50:9f:ae:
10:ba:a1:2f:6e:91:ac:91:50:75:5d:5d:f0:14:87:
84:48:28:02:77:30:6d:5f:e0:d5:99:06:ae:85:8a:
95:dc:91:c5:37:1f:cd:f0:a8:15:1c:d9:11:2a:bd:
72:14:54:a8:1b:19:1a:65:cd:c5:90:ea:5d:55:6c:
da:f9:17:cc:04:0d:d4:14:84:55:9d:b4:f9:8f:fb:
9a:76:3e:90:f7:d8:20:c0:5a:a8:89:1d:59:46:99:
2f:fe:26:4f:bf:ae:58:ca:d7:31:a5:cc:ee:7b:be:
dd:a0:20:d6:15:49:1e:3e:bb:45:ab:f1:b7:10:e5:
e6:e2:3a:52:e6:d5:89:6b:b0:31:52:80:2f:a6:00:
50:c6:2d:42:ce:7c:6e:2b:43:61:47:73:ec:1e:27:
4f:5b:eb:90:f3:4a:00:15:ec:87:73:b2:15:5f:08:
6d:66:d5:bd:00:d5:0d:c3:70:13:8f:37:d3:dc:53:
c8:1b:fa:d5:f3:ec:c4:72:8c:b3:29:8b:25:b2:c1:
64:22:4d:d3:c9:17:06:46:72:a6:68:74:d2:80:10:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:A3:12:BE:28:C9:C5:5A:A4:10:53:9D:9A:44:1B:00:93:37:FC
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:17:ba:ae:33:0c:da:2c:1b:e9:5f:d0:84:f0:f0:6f:44:
70:c6:a9:dc:ff:03:53:11:c5:05:63:0a:99:08:7d:6b:f6:5b:
fb:99:bd:5c:13:94:b0:fc:55:f8:42:63:5c:00:c8:9e:5f:6d:
9f:8f:07:56:75:e5:c9:7c:45:81:7a:2d:d4:f8:4a:82:b9:97:
89:56:ad:27:4e:d3:b1:3c:13:d4:a4:e5:23:ea:f9:22:ea:30:
c6:c9:79:e2:a7:dd:22:43:53:fa:18:6f:a8:cc:13:0c:25:e7:
4b:05:24:69:d5:21:b7:bd:50:ee:16:1a:ac:e7:69:cb:3f:02:
16:b6:df:03:d1:93:e7:a8:90:21:23:5b:b9:0d:6f:18:3d:35:
cb:17:97:4d:16:c7:26:61:03:9e:7e:bd:91:39:b8:30:11:51:
24:48:19:88:b2:92:b3:1d:a1:21:96:7c:23:d8:d8:b9:f8:92:
b8:2b:57:db:3d:17:16:66:09:f8:f2:d5:3d:69:c8:c3:b4:e4:
8b:b6:b4:42:96:a7:f2:c8:b3:92:b9:b3:dd:4a:4f:5a:b6:aa:
d4:34:58:bf:c1:8c:b2:d8:6f:90:a5:6b:d4:71:56:30:9f:83:
66:fa:d3:dc:98:76:5b:d5:46:23:14:9c:e6:58:d3:fe:bc:8c:
22:12:5e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnAJ50i1a+nRRyfl0KZreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MWQ0ZjQ2MzcxM2FiOWE5MjdiN2VlM2ExMDEwNTJiMTRi
YWNjMzEwHhcNMjQxMTIyMTYwMjEwWhcNMjQxMTIzMTYwMjEwWjAzMTEwLwYDVQQD
EyhjYmM0YTMxMmJlMjhjOWM1NWFhNDEwNTM5ZDlhNDQxYjAwOTMzN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNvddzaOSY9Kko2qoBgeuv1FGrK
bsPX7L3f6qex1SWGPiOOmTbnsK9Qn64QuqEvbpGskVB1XV3wFIeESCgCdzBtX+DV
mQauhYqV3JHFNx/N8KgVHNkRKr1yFFSoGxkaZc3FkOpdVWza+RfMBA3UFIRVnbT5
j/uadj6Q99ggwFqoiR1ZRpkv/iZPv65Yytcxpczue77doCDWFUkePrtFq/G3EOXm
4jpS5tWJa7AxUoAvpgBQxi1CznxuK0NhR3PsHidPW+uQ80oAFeyHc7IVXwhtZtW9
ANUNw3ATjzfT3FPIG/rV8+zEcoyzKYslssFkIk3TyRcGRnKmaHTSgBDhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvEoxK+KMnFWqQQU52aRBsAkzf8MB8GA1UdIwQY
MBaAFCgdT0Y3E6uaknt+46EBBSsUuswxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYt
MmVkMmZlYTIxZTNlLzEvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mZmZmNmMtYzQ0NC00MjdlLTg3MTYtMmVkMmZlYTIxZTNl
LzEvS0IxUFJqY1RxNXFTZTM3am9RRUZLeFM2ekRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr8Xuq4z
DNosG+lf0ITw8G9EcMap3P8DUxHFBWMKmQh9a/Zb+5m9XBOUsPxV+EJjXADInl9t
n48HVnXlyXxFgXot1PhKgrmXiVatJ07TsTwT1KTlI+r5Iuowxsl54qfdIkNT+hhv
qMwTDCXnSwUkadUht71Q7hYarOdpyz8CFrbfA9GT56iQISNbuQ1vGD01yxeXTRbH
JmEDnn69kTm4MBFRJEgZiLKSsx2hIZZ8I9jYufiSuCtX2z0XFmYJ+PLVPWnIw7Tk
i7a0Qpan8sizkrmz3UpPWraq1DRYv8GMsthvkKVr1HFWMJ+DZvrT3Jh2W9VGIxSc
5ljT/ryMIhJecA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:19 2024 by rpki-client on console-ams.rpki-client.org