Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
File: N-1J76yXlZh3cazcd6DiKJBCd60.mft (raw, json)
Hash identifier: X2LMngJcjBKA1dY7lF0Ja+NSL7rAU39LB+0RTs21feM=
Subject key identifier: 23:09:B8:0D:60:3B:3E:EA:99:C2:FD:0B:40:3F:EF:A5:FA:36:3B:E1
Authority key identifier: 37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
Certificate issuer: /CN=37ed49efac9795987771acdc77a0e228904277ad
Certificate serial: 0193561AF3218E7FC7D9E96C6AA276EEF6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
Manifest number: 0B66
Signing time: Fri 22 Nov 2024 23:00:26 +0000
Manifest this update: Fri 22 Nov 2024 23:00:26 +0000
Manifest next update: Sat 23 Nov 2024 23:00:26 +0000
Files and hashes: 1: BxWpcFJV6mrWKnKut1nbMwvlgGs.roa (hash: PfvqAl4btFjoAaDNVfSdksYY7CC8ygq6bM0TY7hXh3U=)
2: N-1J76yXlZh3cazcd6DiKJBCd60.crl (hash: 4ghw6OuvIFnwxdeVTXHX46SxTvswnz5HPJnyfJcOpFY=)
3: X1rUcshA77fDQkjlnt2lH8F75jM.roa (hash: WQrLTMoX1XnlZTzO/Ej8+Si2mwsocfzFBpN/2bkj68A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:f3:21:8e:7f:c7:d9:e9:6c:6a:a2:76:ee:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ed49efac9795987771acdc77a0e228904277ad
Validity
Not Before: Nov 22 23:00:26 2024 GMT
Not After : Nov 23 23:00:26 2024 GMT
Subject: CN=2309b80d603b3eea99c2fd0b403fefa5fa363be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:ac:ba:fc:77:64:30:f6:ca:52:f9:ed:dc:
b8:9d:a1:1b:dd:61:3a:b9:b6:d3:20:50:cf:c7:54:
6e:43:e1:87:35:e6:c5:bf:1e:58:ed:64:47:ee:36:
f7:d9:78:8c:98:3d:08:14:b0:ba:00:ec:3b:77:1b:
94:ec:b6:fa:2b:e7:a3:95:6e:63:78:5e:bf:6f:af:
fa:3f:7f:54:35:f5:a4:c6:9d:71:4a:30:51:7a:10:
92:eb:3e:af:df:0b:18:80:34:8a:0e:b4:e3:f1:a9:
22:f5:44:03:7b:95:43:1e:a1:28:ba:de:4b:79:99:
46:41:ba:76:1e:45:8f:4b:ed:ea:51:7b:1a:b2:b4:
5d:98:6d:e6:b7:aa:22:93:af:80:ef:93:36:d2:ef:
7c:12:31:89:a0:9e:2f:9b:13:41:8a:e2:20:5b:10:
a9:c6:85:4b:7a:bc:b8:b9:e6:58:de:0a:cf:65:92:
91:50:0d:6e:a1:85:5f:91:d8:1b:d9:94:47:ba:e8:
cd:f3:9e:de:12:bf:64:09:88:fc:6b:33:31:2c:d5:
ba:e4:68:6b:60:05:33:05:1e:24:3d:02:70:46:eb:
f0:85:fb:0a:97:b5:ef:e4:86:c4:20:1f:e8:2e:f4:
98:e0:8a:13:79:06:50:a7:6b:67:a7:73:54:95:37:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:B8:0D:60:3B:3E:EA:99:C2:FD:0B:40:3F:EF:A5:FA:36:3B:E1
X509v3 Authority Key Identifier:
keyid:37:ED:49:EF:AC:97:95:98:77:71:AC:DC:77:A0:E2:28:90:42:77:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-1J76yXlZh3cazcd6DiKJBCd60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2171be-b083-479b-a580-6a06b7502bd7/1/N-1J76yXlZh3cazcd6DiKJBCd60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:53:78:8d:f5:c2:dd:15:20:f3:e6:11:d4:48:69:fc:29:
54:85:91:f3:78:02:fd:19:bb:e8:aa:31:f1:d1:2c:17:84:f3:
66:c2:34:a5:86:1c:20:99:b0:d0:30:09:2d:4c:d9:0a:45:8b:
75:97:ed:3a:11:b5:3a:66:71:d0:ab:6b:74:d3:05:c6:e4:60:
05:77:c1:e5:7e:76:2b:11:48:cf:a6:ad:85:4c:98:83:ae:42:
d4:11:d8:25:ef:fd:19:aa:12:c8:a7:98:8e:26:65:88:39:39:
2a:60:84:24:ce:a6:34:c6:28:eb:cb:de:d7:01:47:cd:d3:4b:
a0:e3:aa:65:54:dd:b8:b8:9a:f0:5d:df:86:2d:24:4d:2e:ba:
0d:6c:c7:a2:5a:30:68:1f:61:82:b9:26:f7:78:40:ac:eb:7f:
b9:72:91:79:c6:08:90:50:0a:c9:af:c7:5e:44:b7:98:be:af:
11:a6:b7:22:77:fe:1e:3f:b8:9b:b0:14:6c:53:36:67:56:f1:
52:0f:3f:00:2f:14:5a:e2:4f:55:e4:7f:73:e8:55:9d:58:39:
5f:eb:5e:58:ae:b5:80:20:c7:3c:04:dc:a8:8e:89:7b:02:09:
cb:52:50:1a:db:db:b6:36:74:16:08:34:95:f5:e3:46:0c:9a:
ae:96:48:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGvMhjn/H2elsaqJ27va4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZWQ0OWVmYWM5Nzk1OTg3NzcxYWNkYzc3YTBlMjI4OTA0
Mjc3YWQwHhcNMjQxMTIyMjMwMDI2WhcNMjQxMTIzMjMwMDI2WjAzMTEwLwYDVQQD
EygyMzA5YjgwZDYwM2IzZWVhOTljMmZkMGI0MDNmZWZhNWZhMzYzYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50usuvx3ZDD2ylL57dy4naEb3WE6
ubbTIFDPx1RuQ+GHNebFvx5Y7WRH7jb32XiMmD0IFLC6AOw7dxuU7Lb6K+ejlW5j
eF6/b6/6P39UNfWkxp1xSjBRehCS6z6v3wsYgDSKDrTj8aki9UQDe5VDHqEout5L
eZlGQbp2HkWPS+3qUXsasrRdmG3mt6oik6+A75M20u98EjGJoJ4vmxNBiuIgWxCp
xoVLery4ueZY3grPZZKRUA1uoYVfkdgb2ZRHuujN857eEr9kCYj8azMxLNW65Ghr
YAUzBR4kPQJwRuvwhfsKl7Xv5IbEIB/oLvSY4IoTeQZQp2tnp3NUlTeqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMJuA1gOz7qmcL9C0A/76X6NjvhMB8GA1UdIwQY
MBaAFDftSe+sl5WYd3Gs3Heg4iiQQnetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi0xSjc2eVhsWmgzY2F6Y2Q2RGlLSkJDZDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMTcxYmUtYjA4My00NzliLWE1ODAt
NmEwNmI3NTAyYmQ3LzEvTi0xSjc2eVhsWmgzY2F6Y2Q2RGlLSkJDZDYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yMTcxYmUtYjA4My00NzliLWE1ODAtNmEwNmI3NTAyYmQ3
LzEvTi0xSjc2eVhsWmgzY2F6Y2Q2RGlLSkJDZDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTRTeI31
wt0VIPPmEdRIafwpVIWR83gC/Rm76Kox8dEsF4TzZsI0pYYcIJmw0DAJLUzZCkWL
dZftOhG1OmZx0KtrdNMFxuRgBXfB5X52KxFIz6athUyYg65C1BHYJe/9GaoSyKeY
jiZliDk5KmCEJM6mNMYo68ve1wFHzdNLoOOqZVTduLia8F3fhi0kTS66DWzHolow
aB9hgrkm93hArOt/uXKRecYIkFAKya/HXkS3mL6vEaa3Inf+Hj+4m7AUbFM2Z1bx
Ug8/AC8UWuJPVeR/c+hVnVg5X+teWK61gCDHPATcqI6JewIJy1JQGtvbtjZ0Fgg0
lfXjRgyarpZI8g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:36 2024 by rpki-client on console-fra.rpki-client.org