Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: tphulschYH43NE/yatdep4Rm0OWmV/Sg78EVrCz3BSo=
Subject key identifier: C5:A2:1F:09:FE:EE:03:51:0F:10:F5:75:B2:0B:4B:35:FB:17:A8:37
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01935689786FC9ECAA569C894A34C35690E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0A1D
Signing time: Sat 23 Nov 2024 01:01:10 +0000
Manifest this update: Sat 23 Nov 2024 01:01:10 +0000
Manifest next update: Sun 24 Nov 2024 01:01:10 +0000
Files and hashes: 1: 9Rltt9XgOImZch_SdNWkh1a-y3M.roa (hash: jClHBohqiJC7gN+lCFwklXpNhL28fkejfvC91vrtkxs=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: nR4Y3oA7co6stZceiKOkOmSR0h2CGub7inma5X+8/GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:78:6f:c9:ec:aa:56:9c:89:4a:34:c3:56:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Nov 23 01:01:10 2024 GMT
Not After : Nov 24 01:01:10 2024 GMT
Subject: CN=c5a21f09feee03510f10f575b20b4b35fb17a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:8d:cb:88:b0:d5:6d:44:96:59:52:eb:ad:
ac:bf:ed:ce:f5:66:73:af:45:b8:c5:53:1c:e1:cc:
73:93:d1:1e:05:e6:be:1f:1b:0d:50:ec:1f:7b:c3:
30:c0:47:0f:df:87:72:c1:3d:62:e4:9c:4c:78:c6:
fc:6f:fe:d9:66:15:40:d6:e0:72:45:6a:a6:31:04:
0f:ad:92:a3:e4:01:83:da:20:11:ff:57:62:7a:d8:
61:ea:66:5f:be:de:2e:eb:c5:1b:31:f8:95:fb:42:
b6:05:ec:7b:57:78:af:90:4f:8a:70:e9:ac:f0:23:
6a:52:64:2e:21:59:d2:24:3e:cf:6d:06:a1:ee:9b:
47:77:40:e0:8c:a3:e7:49:39:9a:d1:d4:78:c5:00:
ef:7f:c7:21:b0:c4:89:71:2f:3b:e7:35:09:1e:74:
06:fe:05:e7:b0:5b:d8:66:99:ef:e1:91:11:00:3d:
12:05:d8:2a:ff:0c:f4:16:99:7e:18:cd:71:4a:71:
ab:2b:e0:89:83:ac:71:55:2a:e6:63:11:71:8d:40:
2b:a4:d2:b6:ef:40:00:85:c1:92:98:de:9e:d4:a7:
2a:62:f5:ce:e5:84:cb:16:9c:6a:81:35:23:a3:fa:
c4:9b:ae:38:45:ae:34:6b:c8:3c:03:37:49:da:93:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A2:1F:09:FE:EE:03:51:0F:10:F5:75:B2:0B:4B:35:FB:17:A8:37
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1a:47:64:d0:ce:3c:f2:5c:36:2c:c8:62:1a:74:9b:f9:1c:
65:16:f7:d4:b4:67:d9:3f:04:62:c1:56:82:2c:b5:97:b9:a3:
f2:4a:cc:b0:72:61:c9:f0:55:c3:07:a3:dd:92:86:c7:d2:ef:
9d:3c:62:2b:8d:11:36:3f:43:41:1d:a8:7a:d1:fb:74:0e:0f:
a6:3f:1b:9d:dd:9f:70:a2:47:7f:79:fc:3a:cd:bc:af:4a:b7:
bc:c1:e9:14:90:8f:2e:e1:38:9e:1a:84:31:89:d4:2a:50:18:
57:f4:00:69:e7:02:5b:8b:4f:c3:07:0c:2c:65:c2:85:82:5f:
ba:54:6a:f4:f3:2d:3b:1c:82:f4:94:e5:ca:90:c2:6e:40:ab:
86:37:01:d0:03:63:5d:e7:15:a0:68:59:5b:b5:8a:ed:67:e1:
78:13:c8:9c:30:e5:b6:fb:f7:cd:c2:fa:ec:58:28:6f:1e:19:
4c:40:73:42:03:eb:8e:46:cc:60:53:3b:60:0f:18:97:e0:81:
80:9e:21:d5:d3:36:39:c8:5c:92:53:be:84:81:e0:32:f1:46:
b7:8a:26:ea:91:2f:1f:95:d1:3f:b2:77:e1:11:ae:2c:0f:7c:
70:49:b3:f1:ac:e0:d7:ff:31:5c:84:96:5d:af:35:70:7f:b3:
73:9e:f2:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiXhvyeyqVpyJSjTDVpDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0
OTZiYzkwHhcNMjQxMTIzMDEwMTEwWhcNMjQxMTI0MDEwMTEwWjAzMTEwLwYDVQQD
EyhjNWEyMWYwOWZlZWUwMzUxMGYxMGY1NzViMjBiNGIzNWZiMTdhODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EyNy4iw1W1ElllS662sv+3O9WZz
r0W4xVMc4cxzk9EeBea+HxsNUOwfe8MwwEcP34dywT1i5JxMeMb8b/7ZZhVA1uBy
RWqmMQQPrZKj5AGD2iAR/1diethh6mZfvt4u68UbMfiV+0K2Bex7V3ivkE+KcOms
8CNqUmQuIVnSJD7PbQah7ptHd0DgjKPnSTma0dR4xQDvf8chsMSJcS875zUJHnQG
/gXnsFvYZpnv4ZERAD0SBdgq/wz0Fpl+GM1xSnGrK+CJg6xxVSrmYxFxjUArpNK2
70AAhcGSmN6e1KcqYvXO5YTLFpxqgTUjo/rEm644Ra40a8g8AzdJ2pOnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWiHwn+7gNRDxD1dbILSzX7F6g3MB8GA1UdIwQY
MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt
YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz
LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBpHZNDO
PPJcNizIYhp0m/kcZRb31LRn2T8EYsFWgiy1l7mj8krMsHJhyfBVwwej3ZKGx9Lv
nTxiK40RNj9DQR2oetH7dA4Ppj8bnd2fcKJHf3n8Os28r0q3vMHpFJCPLuE4nhqE
MYnUKlAYV/QAaecCW4tPwwcMLGXChYJfulRq9PMtOxyC9JTlypDCbkCrhjcB0ANj
XecVoGhZW7WK7WfheBPInDDltvv3zcL67Fgobx4ZTEBzQgPrjkbMYFM7YA8Yl+CB
gJ4h1dM2OchcklO+hIHgMvFGt4om6pEvH5XRP7J34RGuLA98cEmz8azg1/8xXISW
Xa81cH+zc57yyg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:45 2024 by rpki-client on console-fra.rpki-client.org