Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: RKGL4wOHDh0XoB7PzrEcD0Pv3dNdkg4VDWETtvzm/LU=
Subject key identifier: 0C:F2:8E:08:B7:48:7F:5A:B5:8D:E3:72:DE:08:02:88:68:C6:EB:58
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01936A46F0F0687EA7217D1E7AFB16BD4446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 02A7
Signing time: Tue 26 Nov 2024 21:00:54 +0000
Manifest this update: Tue 26 Nov 2024 21:00:54 +0000
Manifest next update: Wed 27 Nov 2024 21:00:54 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: kvuklrPWV+G1wMjwyyC1SoFkEjGmlYlMzQj+PQrBAd4=)
2: 9Jj_FghD_cirMjHIN_NP2u3z9qg.roa (hash: A+rgvS9wluMd7LCZFyQ63A+lTUwZsVwHsgXhWoZ+tWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:f0:f0:68:7e:a7:21:7d:1e:7a:fb:16:bd:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Nov 26 21:00:54 2024 GMT
Not After : Nov 27 21:00:54 2024 GMT
Subject: CN=0cf28e08b7487f5ab58de372de08028868c6eb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:b0:c6:58:fb:70:c1:38:9c:21:7d:15:f0:
56:5e:6e:82:96:e2:e0:d4:1e:bd:52:ee:c4:e7:b8:
2d:0c:a7:70:dd:6b:d3:5f:c3:9c:bf:85:65:56:d0:
58:c9:5f:37:dc:95:d7:4b:a7:55:c8:c5:41:d5:e6:
30:42:1a:ca:df:2a:f6:98:a1:f4:fa:01:3b:66:74:
f2:c5:e9:e0:2a:e1:88:be:2b:3a:f6:28:2b:3a:ff:
f5:01:b7:de:64:4a:3b:21:e8:d5:10:86:01:c7:bc:
2d:f2:70:62:30:e5:ae:09:87:d8:04:65:87:45:41:
a2:a1:a4:8b:5f:35:01:b8:6f:f3:fd:e8:10:bd:13:
f7:8a:36:e7:a8:37:9f:a2:ac:a7:8b:e8:b7:a8:0f:
88:58:a5:a2:93:7c:b6:72:c7:a0:29:95:b1:d2:b5:
c0:03:c0:f3:0b:16:30:a4:20:a7:d4:95:78:56:fa:
b7:6f:4b:0c:ce:03:5e:a7:57:e8:10:bb:d7:64:ca:
d9:34:6a:62:0d:1d:d3:1e:14:e6:15:dc:3a:f1:38:
9f:59:e5:95:0f:e8:4b:be:21:18:39:5e:51:ae:df:
fc:74:25:5f:9d:48:f0:da:bb:7f:9b:88:b2:b3:2e:
2e:4f:6f:2a:fc:95:63:3c:4c:d6:b9:e1:84:9e:23:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:8E:08:B7:48:7F:5A:B5:8D:E3:72:DE:08:02:88:68:C6:EB:58
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:af:41:3f:f6:ac:91:06:66:da:d2:a2:30:c6:b1:b1:8d:
f8:48:85:9c:49:81:ea:8c:eb:1d:19:a3:e9:63:f1:df:a3:91:
94:53:c1:14:8a:d1:a7:e0:54:8c:02:22:92:2c:dd:5e:8c:81:
cb:0b:91:50:3c:04:ef:08:f5:11:f5:0a:44:ad:7b:73:dd:f4:
7f:d7:38:35:c1:7e:20:f6:40:87:1f:65:6f:2e:28:09:5a:5f:
0f:c6:be:15:f3:f9:02:5d:03:aa:fb:1f:27:17:68:5f:cd:7f:
ec:1a:81:2b:98:8b:5e:89:9c:b5:24:f1:be:f5:d1:23:75:1b:
d2:8e:4f:70:68:1c:c5:a8:e9:14:3c:0c:a5:98:da:11:62:21:
b4:a8:47:6f:e6:dc:c5:f8:f9:45:17:85:8b:20:60:fc:9f:f6:
fb:19:05:1a:e9:c5:94:ec:7e:02:c9:5b:1e:be:d5:d7:dd:46:
c6:33:49:a6:c5:77:fa:e2:5e:1a:89:36:9e:38:eb:30:cf:b8:
9c:75:ae:6b:ce:1d:2f:ed:83:95:70:76:31:50:e3:e9:dd:7f:
37:92:73:49:f4:47:bb:28:c0:d7:dd:46:8e:25:20:34:53:83:
54:b6:08:47:43:aa:79:92:25:c1:b8:9e:94:c3:a8:7d:bd:42:
e9:a2:79:1c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNqRvDwaH6nIX0eevsWvURGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx
ZDNjZjkwHhcNMjQxMTI2MjEwMDU0WhcNMjQxMTI3MjEwMDU0WjAzMTEwLwYDVQQD
EygwY2YyOGUwOGI3NDg3ZjVhYjU4ZGUzNzJkZTA4MDI4ODY4YzZlYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP6wxlj7cME4nCF9FfBWXm6CluLg
1B69Uu7E57gtDKdw3WvTX8Ocv4VlVtBYyV833JXXS6dVyMVB1eYwQhrK3yr2mKH0
+gE7ZnTyxengKuGIvis69igrOv/1AbfeZEo7IejVEIYBx7wt8nBiMOWuCYfYBGWH
RUGioaSLXzUBuG/z/egQvRP3ijbnqDefoqyni+i3qA+IWKWik3y2csegKZWx0rXA
A8DzCxYwpCCn1JV4Vvq3b0sMzgNep1foELvXZMrZNGpiDR3THhTmFdw68TifWeWV
D+hLviEYOV5Rrt/8dCVfnUjw2rt/m4iysy4uT28q/JVjPEzWueGEniPnYQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAzyjgi3SH9atY3jct4IAohoxutYMB8GA1UdIwQY
MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy
LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5
MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANymv
QT/2rJEGZtrSojDGsbGN+EiFnEmB6ozrHRmj6WPx36ORlFPBFIrRp+BUjAIikizd
XoyBywuRUDwE7wj1EfUKRK17c930f9c4NcF+IPZAhx9lby4oCVpfD8a+FfP5Al0D
qvsfJxdoX81/7BqBK5iLXomctSTxvvXRI3Ub0o5PcGgcxajpFDwMpZjaEWIhtKhH
b+bcxfj5RReFiyBg/J/2+xkFGunFlOx+AslbHr7V191GxjNJpsV3+uJeGok2njjr
MM+4nHWua84dL+2DlXB2MVDj6d1/N5JzSfRHuyjA191GjiUgNFODVLYIR0OqeZIl
wbielMOofb1C6aJ5HA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:31 2024 by rpki-client on console-ams.rpki-client.org