Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: ETMk5aOjnmD8f/I6/AKSkjeRdGJ1Z0sb8JTE3YeoUTY=
Subject key identifier: 12:43:2E:5A:77:3C:86:44:D0:08:FE:AC:6F:7C:85:7B:81:BC:0F:E1
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 0193549BCD091BDF42A23650F23678421FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 12DA
Signing time: Fri 22 Nov 2024 16:01:56 +0000
Manifest this update: Fri 22 Nov 2024 16:01:56 +0000
Manifest next update: Sat 23 Nov 2024 16:01:56 +0000
Files and hashes: 1: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: JUHBDHvH3ju+hD9W9WVitcQdmrW0TSvyGLrQmZDRTt4=)
2: dv24McwdC8hBNPpZKmpENpnYDR4.roa (hash: IJqXdfLXfO3jZZiqGWzX9DgmZH7M6jKPpZOS2h1ZdnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:cd:09:1b:df:42:a2:36:50:f2:36:78:42:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: Nov 22 16:01:56 2024 GMT
Not After : Nov 23 16:01:56 2024 GMT
Subject: CN=12432e5a773c8644d008feac6f7c857b81bc0fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:fb:6d:0a:dd:c0:4a:19:2a:7f:73:f8:f7:
82:9f:1c:a3:93:eb:8a:28:24:a6:2b:38:37:96:05:
5e:fd:dd:b3:f5:81:27:67:b5:aa:2a:fb:d2:4b:f4:
f8:02:8f:a6:62:4d:7d:7f:23:a7:f1:1f:27:c2:b0:
20:8e:4e:3f:c1:15:85:e4:21:26:95:e9:42:6b:6b:
75:f4:f9:ab:d9:f7:00:5a:ca:44:b9:69:cd:ac:2f:
c7:f5:b6:ae:87:48:70:c9:0f:8b:be:66:51:a9:b0:
ae:42:45:32:36:85:b9:2a:39:e7:3a:02:14:1c:30:
c9:68:2e:3b:4e:d4:b3:57:17:2f:80:90:70:b1:27:
c3:89:8a:72:77:28:1e:17:47:84:14:85:4e:e2:90:
d6:41:26:1f:b3:a7:c3:ce:fa:d9:7a:99:25:0f:b2:
15:8d:0c:76:b5:00:e2:fd:6c:1a:bc:f4:6f:ba:67:
d0:3f:3d:9d:3d:7f:10:72:94:1c:2c:80:0b:7a:18:
37:9c:f3:62:51:04:3d:d2:07:0c:5a:a9:70:52:14:
37:5d:7b:c3:74:9c:d1:08:65:72:34:39:2a:18:cb:
80:84:75:11:0f:15:b8:d3:af:7a:28:49:d2:fa:84:
3e:05:6c:2e:6f:a9:f0:58:6d:77:2d:c5:9f:13:f6:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:2E:5A:77:3C:86:44:D0:08:FE:AC:6F:7C:85:7B:81:BC:0F:E1
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6b:b1:bc:fa:89:a4:f6:30:00:09:75:21:d0:58:23:62:e4:
33:21:37:05:e2:f9:c3:a7:08:fa:52:5f:d2:a1:30:79:29:20:
e7:78:7c:ac:ae:4a:07:55:01:53:bb:bc:30:1f:37:02:10:fa:
7f:7e:a4:e9:90:fb:9b:c1:e9:9d:48:c3:c8:87:c7:e7:da:d5:
7d:23:31:d1:f9:15:4c:41:a5:f6:f6:f1:ae:bf:ad:d1:3d:4e:
2c:41:82:1b:58:1f:f9:25:ba:ee:23:9e:82:75:48:2c:e7:d0:
51:be:dd:e6:bf:6e:7e:01:9e:16:8c:1d:56:d5:8e:02:4f:e6:
4c:f1:cd:9a:05:97:de:db:34:a7:06:33:fb:37:c2:e3:24:b9:
a2:ae:39:62:27:65:5c:a4:f7:6c:7a:f1:6e:2d:78:e4:19:ff:
1d:50:1a:76:7d:a1:6a:84:23:7e:f8:55:d9:fa:c1:a5:c1:b9:
a8:07:77:86:ef:d9:fc:04:89:93:50:ce:9f:53:53:61:aa:a1:
f7:18:21:a9:94:76:75:d3:f8:4e:e5:02:d2:fd:57:d2:76:7e:
9b:c2:63:38:9d:b3:24:93:6e:61:28:41:05:75:cd:b6:44:95:
59:ec:b7:5e:19:e7:55:26:3f:97:41:dd:77:9a:05:6b:ee:80:
0f:80:dc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm80JG99CojZQ8jZ4Qh/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGE1NWEzZWQ2YWFlZmY5YWIwMjI1MzkxN2FjOTlkMTUz
NzAyNmMwHhcNMjQxMTIyMTYwMTU2WhcNMjQxMTIzMTYwMTU2WjAzMTEwLwYDVQQD
EygxMjQzMmU1YTc3M2M4NjQ0ZDAwOGZlYWM2ZjdjODU3YjgxYmMwZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbv7bQrdwEoZKn9z+PeCnxyjk+uK
KCSmKzg3lgVe/d2z9YEnZ7WqKvvSS/T4Ao+mYk19fyOn8R8nwrAgjk4/wRWF5CEm
lelCa2t19Pmr2fcAWspEuWnNrC/H9bauh0hwyQ+LvmZRqbCuQkUyNoW5KjnnOgIU
HDDJaC47TtSzVxcvgJBwsSfDiYpydygeF0eEFIVO4pDWQSYfs6fDzvrZepklD7IV
jQx2tQDi/WwavPRvumfQPz2dPX8QcpQcLIALehg3nPNiUQQ90gcMWqlwUhQ3XXvD
dJzRCGVyNDkqGMuAhHURDxW40696KEnS+oQ+BWwub6nwWG13LcWfE/aJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJDLlp3PIZE0Aj+rG98hXuBvA/hMB8GA1UdIwQY
MBaAFNsKVaPtaq7/mrAiU5F6yZ0VNwJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndwVm8tMXFydi1hc0NKVGtYckpuUlUzQW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xMzY0OTItMjFkZS00YWIyLWE0MzYt
ODhjMmNkMDA4NDhkLzEvMndwVm8tMXFydi1hc0NKVGtYckpuUlUzQW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xMzY0OTItMjFkZS00YWIyLWE0MzYtODhjMmNkMDA4NDhk
LzEvMndwVm8tMXFydi1hc0NKVGtYckpuUlUzQW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmuxvPqJ
pPYwAAl1IdBYI2LkMyE3BeL5w6cI+lJf0qEweSkg53h8rK5KB1UBU7u8MB83AhD6
f36k6ZD7m8HpnUjDyIfH59rVfSMx0fkVTEGl9vbxrr+t0T1OLEGCG1gf+SW67iOe
gnVILOfQUb7d5r9ufgGeFowdVtWOAk/mTPHNmgWX3ts0pwYz+zfC4yS5oq45Yidl
XKT3bHrxbi145Bn/HVAadn2haoQjfvhV2frBpcG5qAd3hu/Z/ASJk1DOn1NTYaqh
9xghqZR2ddP4TuUC0v1X0nZ+m8JjOJ2zJJNuYShBBXXNtkSVWey3XhnnVSY/l0Hd
d5oFa+6AD4DcfA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:26 2024 by rpki-client on console-fra.rpki-client.org