Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: O2peaiO29hvF/w35QZWLrp04arMjK++d3IO5mdwvGIo=
Subject key identifier: 2B:10:F1:76:EE:42:D1:22:53:02:86:D1:30:EE:E6:B6:C9:99:C7:D9
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 01936A0F82C3B3C02DD454474A18D9C0669A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: AC
Signing time: Tue 26 Nov 2024 20:00:21 +0000
Manifest this update: Tue 26 Nov 2024 20:00:21 +0000
Manifest next update: Wed 27 Nov 2024 20:00:21 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: O+PsG3iVs894TTLM7yAn2qk8SV90roZAF5uw7HEK+2I=)
2: mhK28BhEpQWWIDvcOIYNfGXsBPE.roa (hash: JJJDa7X8kcp/u73b802akRtrHFk/PIRPccnBezbjJeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:82:c3:b3:c0:2d:d4:54:47:4a:18:d9:c0:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Nov 26 20:00:21 2024 GMT
Not After : Nov 27 20:00:21 2024 GMT
Subject: CN=2b10f176ee42d122530286d130eee6b6c999c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:c8:55:36:b0:6b:21:e3:2c:0b:34:9a:b2:
a1:49:63:03:c4:18:ff:e1:e9:0a:1b:9c:d4:38:88:
e7:9a:98:9b:49:0d:0d:6d:3d:22:1c:cf:96:af:85:
28:cc:a8:47:72:f9:72:0a:55:70:2c:ad:65:97:e5:
13:17:b5:b7:19:42:fb:ec:da:e3:45:17:55:ec:ad:
12:e5:66:04:93:56:d8:05:87:5e:f7:da:6d:00:a0:
4a:16:1c:a0:80:e4:67:60:c2:f0:70:cd:ac:ef:2a:
90:a2:98:b2:a3:53:f9:4c:f0:e4:d3:68:2a:33:85:
df:bb:8b:b2:0e:29:86:7a:f0:d9:07:fb:2a:0d:05:
03:9b:53:7c:ff:a4:b2:92:dc:4d:ea:f2:08:c2:72:
22:84:4c:2f:bb:1b:fd:94:59:cc:b4:a5:3a:6e:92:
4c:a0:c1:d6:1c:f8:39:a8:1e:ad:6a:57:23:a0:48:
bf:61:09:ac:d6:8b:d3:37:4d:ef:11:58:da:2f:e5:
0f:8a:7b:0c:01:96:87:23:b9:37:27:98:be:ca:20:
a6:69:d9:00:b5:58:e9:d1:cd:9a:55:ce:6e:21:72:
a9:7f:b4:7c:78:c1:f4:fb:df:0a:8e:da:9d:a0:9f:
bc:a5:3a:16:83:41:03:b4:fd:5e:86:aa:a1:ec:0f:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:F1:76:EE:42:D1:22:53:02:86:D1:30:EE:E6:B6:C9:99:C7:D9
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:0f:8c:30:da:82:66:08:66:54:f1:bb:13:26:65:69:ed:
c1:2f:68:a4:bb:0d:b8:36:40:ad:7f:9a:b5:14:be:41:8d:01:
e9:4b:1f:87:49:be:a9:02:fb:66:1a:d5:84:5c:39:70:59:04:
bd:20:55:d0:f9:18:6f:08:54:b6:25:95:76:b8:73:19:1e:ae:
65:ef:6a:31:18:20:76:9c:62:eb:89:38:a3:f9:23:5e:78:e8:
d6:7d:54:f5:e9:6e:c6:5d:08:41:e8:9d:29:89:4e:4a:d9:e7:
20:00:89:87:53:17:6a:05:ac:9e:74:09:5b:57:2c:0f:53:ca:
f7:1f:a0:e5:2e:d7:fd:1b:f0:45:16:7b:53:ee:f4:63:c6:49:
1a:5b:40:55:03:49:87:4d:22:4f:b3:89:af:dc:90:0b:37:1f:
e5:1d:4f:d8:07:b3:72:7b:fd:cc:85:15:18:29:12:bf:a9:e9:
c5:28:90:30:c8:07:6c:fb:84:ba:24:cd:ca:4a:89:5a:72:c0:
64:08:a1:18:d8:5c:95:f4:f6:7e:2d:0d:00:6e:57:a5:d4:fe:
69:c6:e9:b5:73:1c:10:8e:8f:4f:06:bd:05:1d:bd:52:7e:ce:
f3:f8:de:30:73:38:d4:62:54:aa:9d:cd:88:4f:ce:8c:18:63:
7f:de:2f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqD4LDs8At1FRHShjZwGaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZTc2Y2U1MzVjZmI4ZTIxNmVjMGQyNGRlYjU3OWQxYTRj
YTBlMDYwHhcNMjQxMTI2MjAwMDIxWhcNMjQxMTI3MjAwMDIxWjAzMTEwLwYDVQQD
EygyYjEwZjE3NmVlNDJkMTIyNTMwMjg2ZDEzMGVlZTZiNmM5OTljN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuprIVTawayHjLAs0mrKhSWMDxBj/
4ekKG5zUOIjnmpibSQ0NbT0iHM+Wr4UozKhHcvlyClVwLK1ll+UTF7W3GUL77Nrj
RRdV7K0S5WYEk1bYBYde99ptAKBKFhyggORnYMLwcM2s7yqQopiyo1P5TPDk02gq
M4Xfu4uyDimGevDZB/sqDQUDm1N8/6SyktxN6vIIwnIihEwvuxv9lFnMtKU6bpJM
oMHWHPg5qB6talcjoEi/YQms1ovTN03vEVjaL+UPinsMAZaHI7k3J5i+yiCmadkA
tVjp0c2aVc5uIXKpf7R8eMH0+98KjtqdoJ+8pToWg0EDtP1ehqqh7A9P4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsQ8XbuQtEiUwKG0TDu5rbJmcfZMB8GA1UdIwQY
MBaAFB3nbOU1z7jiFuwNJN61edGkyg4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYt
NjZjZTllM2E4YzFlLzEvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wNzZhZGQtZWRmYS00ZjM3LTk5OTYtNjZjZTllM2E4YzFl
LzEvSGVkczVUWFB1T0lXN0EwazNyVjUwYVRLRGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLkPjDDa
gmYIZlTxuxMmZWntwS9opLsNuDZArX+atRS+QY0B6Usfh0m+qQL7ZhrVhFw5cFkE
vSBV0PkYbwhUtiWVdrhzGR6uZe9qMRggdpxi64k4o/kjXnjo1n1U9eluxl0IQeid
KYlOStnnIACJh1MXagWsnnQJW1csD1PK9x+g5S7X/RvwRRZ7U+70Y8ZJGltAVQNJ
h00iT7OJr9yQCzcf5R1P2Aezcnv9zIUVGCkSv6npxSiQMMgHbPuEuiTNykqJWnLA
ZAihGNhclfT2fi0NAG5XpdT+acbptXMcEI6PTwa9BR29Un7O8/jeMHM41GJUqp3N
iE/OjBhjf94vvg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:05 2024 by rpki-client on console-ams.rpki-client.org