Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: mOCWZFFR7rxvaCuhDeXmliYJRhM5SG9/h02XV92Xq3o=
Subject key identifier: DB:78:D3:BF:EC:1A:90:F0:BE:FE:DD:B1:24:60:6C:5D:B1:01:47:4B
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019365FBFEFCD6ECA32EF8FE23DFE98C7132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1217
Signing time: Tue 26 Nov 2024 01:00:33 +0000
Manifest this update: Tue 26 Nov 2024 01:00:33 +0000
Manifest next update: Wed 27 Nov 2024 01:00:33 +0000
Files and hashes: 1: CHBJcj-N1HIS2MambWnbMXxuJl4.roa (hash: WaG7fBgmHmpqNUDdNZExx2pw+VwY1Z3ErUToTAKMvuU=)
2: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: jlB1eYgFKtBq/4pV4Xys9PjcFu2/4XMMOvMJKr/Wrh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fb:fe:fc:d6:ec:a3:2e:f8:fe:23:df:e9:8c:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Nov 26 01:00:33 2024 GMT
Not After : Nov 27 01:00:33 2024 GMT
Subject: CN=db78d3bfec1a90f0befeddb124606c5db101474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:bb:8e:1d:e8:bd:5a:f7:5a:6b:85:bd:6d:
24:14:5a:b6:99:b5:03:30:78:29:4a:41:ad:71:2a:
01:f5:ab:a7:2b:6c:16:b2:ab:0e:77:24:d5:16:f4:
f4:51:34:51:e0:fc:60:f7:6d:91:6d:4a:6c:17:07:
5d:39:8f:bb:78:21:d4:b1:5c:a3:8d:21:90:5c:af:
f2:11:ea:81:09:ac:48:b9:b5:ac:a4:50:d6:80:0f:
bd:3f:70:2c:fd:a8:a2:f6:5f:c6:d7:44:71:72:dc:
eb:d1:be:9f:6d:c0:de:8c:92:b2:8a:6e:9f:7d:63:
05:2d:65:a6:70:b5:de:f2:95:5b:b8:45:6e:46:12:
e4:6f:09:f3:ab:d7:29:f3:52:d2:93:fc:15:13:22:
04:22:c0:05:7d:a3:61:a0:19:6a:ab:73:0d:c3:df:
ab:01:70:ad:71:f7:f3:82:29:24:df:51:11:d3:3e:
6f:c7:8d:c5:b3:47:28:f4:dc:fe:be:25:f8:af:f2:
7f:fc:0b:06:7c:34:04:6c:78:3c:16:05:af:6e:4e:
89:43:25:90:2c:3f:f1:55:a5:1e:5e:7f:ef:e5:d5:
10:8f:5e:59:c3:f8:5e:f1:77:46:3c:7a:91:9c:04:
f3:6f:b1:60:e6:36:b4:84:df:29:e0:8b:75:f5:5e:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:D3:BF:EC:1A:90:F0:BE:FE:DD:B1:24:60:6C:5D:B1:01:47:4B
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ce:c0:cf:55:27:81:0e:3b:a0:02:31:84:47:93:05:d5:dc:
b2:a6:f1:70:6d:e2:9d:27:aa:63:29:c0:b2:ca:b5:f9:ba:8d:
45:91:30:23:ba:d6:d4:8e:06:d1:4b:2d:f6:d3:26:95:3c:87:
1e:23:9b:53:98:48:a9:44:1b:40:81:96:f7:90:88:0f:47:e4:
ce:b5:3f:1b:01:16:02:06:23:02:6c:b2:eb:83:5e:75:52:4b:
93:b3:3b:e0:82:ef:82:bd:60:33:0a:2a:86:65:4a:2b:6b:71:
a1:f9:8f:4a:2b:37:c1:c4:31:d3:57:8a:7d:18:d8:e8:ae:60:
d9:ba:ae:11:35:6a:df:28:57:a2:0d:3f:29:34:c1:71:fb:52:
d2:9f:c3:f3:e0:8c:8a:c2:94:a9:93:d6:c7:4c:f5:68:a0:f3:
1b:b3:03:b7:80:cb:51:49:1b:c7:50:2e:cc:81:36:14:e7:52:
1f:a2:28:4a:1b:4e:b4:f3:9b:fd:d1:45:a4:65:44:c1:6c:3d:
bb:12:73:55:8a:d0:c6:dc:48:b2:4a:85:b1:66:c5:b0:58:18:
e7:06:fd:b7:6f:19:1b:81:13:c2:bb:51:df:e1:c4:c9:d6:a3:
15:7f:f8:13:5f:54:b0:70:98:f5:25:7f:97:41:90:c6:fa:ce:
93:04:a1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl+/781uyjLvj+I9/pjHEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3
ZjZlMmIwHhcNMjQxMTI2MDEwMDMzWhcNMjQxMTI3MDEwMDMzWjAzMTEwLwYDVQQD
EyhkYjc4ZDNiZmVjMWE5MGYwYmVmZWRkYjEyNDYwNmM1ZGIxMDE0NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+7jh3ovVr3WmuFvW0kFFq2mbUD
MHgpSkGtcSoB9aunK2wWsqsOdyTVFvT0UTRR4Pxg922RbUpsFwddOY+7eCHUsVyj
jSGQXK/yEeqBCaxIubWspFDWgA+9P3As/aii9l/G10Rxctzr0b6fbcDejJKyim6f
fWMFLWWmcLXe8pVbuEVuRhLkbwnzq9cp81LSk/wVEyIEIsAFfaNhoBlqq3MNw9+r
AXCtcffzgikk31ER0z5vx43Fs0co9Nz+viX4r/J//AsGfDQEbHg8FgWvbk6JQyWQ
LD/xVaUeXn/v5dUQj15Zw/he8XdGPHqRnATzb7Fg5ja0hN8p4It19V6WlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt407/sGpDwvv7dsSRgbF2xAUdLMB8GA1UdIwQY
MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt
YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5
LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs7Az1Un
gQ47oAIxhEeTBdXcsqbxcG3inSeqYynAssq1+bqNRZEwI7rW1I4G0Ust9tMmlTyH
HiObU5hIqUQbQIGW95CID0fkzrU/GwEWAgYjAmyy64NedVJLk7M74ILvgr1gMwoq
hmVKK2txofmPSis3wcQx01eKfRjY6K5g2bquETVq3yhXog0/KTTBcftS0p/D8+CM
isKUqZPWx0z1aKDzG7MDt4DLUUkbx1AuzIE2FOdSH6IoShtOtPOb/dFFpGVEwWw9
uxJzVYrQxtxIskqFsWbFsFgY5wb9t28ZG4ETwrtR3+HEydajFX/4E19UsHCY9SV/
l0GQxvrOkwShWA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:07:06 2024 by rpki-client on console-ams.rpki-client.org