Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: PYeeol5dM45hW9jjqjdapICBq6l0NjGRmQRpoxE8Jdc=
Subject key identifier: 4A:86:3D:6D:47:7F:BF:63:BE:40:C5:CC:2B:7A:49:53:97:E7:E3:B2
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019357D23D26DD6ADC152E165D2CC2B9A38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 1346
Signing time: Sat 23 Nov 2024 07:00:16 +0000
Manifest this update: Sat 23 Nov 2024 07:00:16 +0000
Manifest next update: Sun 24 Nov 2024 07:00:16 +0000
Files and hashes: 1: 2P3Hvw50g9AQsDZqlpKhx3SFw9Q.roa (hash: 1MM4SYInG3syN8PT9l0jTHeFavAMZkW5oJvD1JA+t2o=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: htEK6ulunoZHOAIAWXN29URvvzIxMM3TPE+Cn2KdkxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:3d:26:dd:6a:dc:15:2e:16:5d:2c:c2:b9:a3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Nov 23 07:00:16 2024 GMT
Not After : Nov 24 07:00:16 2024 GMT
Subject: CN=4a863d6d477fbf63be40c5cc2b7a495397e7e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:76:20:a9:29:44:99:20:96:f0:e1:4e:60:
7e:8d:1d:5c:ed:d1:0e:08:f7:c6:d1:81:aa:17:af:
fc:c4:e4:d3:fe:eb:b0:64:93:29:2a:cc:b6:c1:48:
65:39:9d:64:9d:57:a5:9f:15:6a:5f:3d:69:b9:6d:
3e:76:38:96:58:2c:57:7c:2c:ae:29:50:66:9e:b2:
21:96:5b:32:f6:03:46:8c:c4:d8:9d:7f:f3:5a:16:
18:00:1b:1f:c8:4a:10:09:ff:ca:06:86:cd:de:33:
36:fd:3a:81:dd:5f:08:07:76:85:bd:9e:32:f2:d0:
c7:3a:23:a7:99:64:33:d6:a8:1d:cf:d8:63:75:9d:
df:df:1f:c1:da:41:09:4a:b1:f5:56:e0:f2:cd:66:
87:0c:86:2f:60:e9:03:b3:62:91:ca:c7:3c:f4:92:
4c:56:4d:fc:96:29:ce:f1:0d:eb:54:8e:f8:8b:8e:
56:cd:92:0b:45:aa:66:b5:f8:8c:20:8e:e3:5d:12:
b1:69:11:16:32:bd:4a:9c:ba:5b:b4:05:ff:ab:e5:
28:a8:ff:2c:a1:d4:29:05:88:98:f7:1b:f2:3d:ac:
9f:f2:88:0a:80:a0:c1:71:a8:a1:f4:2d:be:c1:b5:
ff:2a:7e:5f:66:c0:b9:9e:da:af:80:5c:d3:d3:85:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:3D:6D:47:7F:BF:63:BE:40:C5:CC:2B:7A:49:53:97:E7:E3:B2
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:89:88:12:7d:95:94:0b:76:37:18:d3:61:a3:f0:6e:6b:
bc:0d:71:be:5f:8e:0f:bc:62:d7:6e:9c:08:25:7e:47:fd:b3:
50:e7:5a:c3:96:e6:44:2e:bb:4e:d7:25:9b:3c:c3:ce:bf:97:
60:84:c9:44:8a:d4:80:ea:c1:8a:bf:e4:df:f4:84:7a:cb:ab:
a5:b6:40:bc:24:ff:25:bd:66:62:25:b7:22:fa:89:ee:a9:15:
4f:31:91:8f:14:53:bd:51:a0:53:d4:1e:30:71:e0:17:a3:85:
f6:26:49:d2:97:f3:56:0a:8a:bb:66:f4:c4:93:fe:74:00:02:
7a:b0:91:f9:44:c0:ab:7e:d6:80:6d:ee:b9:f2:f0:50:0c:f2:
a8:a3:d7:a1:ba:39:a2:2b:32:00:73:74:f4:17:f4:48:9f:ae:
75:7b:33:59:fd:51:61:f8:4e:e6:7f:eb:df:2c:17:d9:30:0a:
c7:ff:c1:c2:66:0b:af:93:60:a8:63:10:e4:f3:bd:73:7d:dc:
45:f5:8b:53:aa:b3:57:aa:a6:c5:34:81:31:a2:ca:79:fa:c6:
04:53:06:3a:61:50:b7:05:81:d4:d0:cc:15:3a:73:c7:11:5c:
bc:7f:31:c4:2f:24:4c:9f:6d:a9:a7:25:af:21:1e:a7:10:96:
fa:aa:ad:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0j0m3WrcFS4WXSzCuaOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDQwNzhiNDA3NzJiMTcyYzcwNDZlNzQ0NjIwNDk4MGNl
YWUxMzkwHhcNMjQxMTIzMDcwMDE2WhcNMjQxMTI0MDcwMDE2WjAzMTEwLwYDVQQD
Eyg0YTg2M2Q2ZDQ3N2ZiZjYzYmU0MGM1Y2MyYjdhNDk1Mzk3ZTdlM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylJ2IKkpRJkglvDhTmB+jR1c7dEO
CPfG0YGqF6/8xOTT/uuwZJMpKsy2wUhlOZ1knVelnxVqXz1puW0+djiWWCxXfCyu
KVBmnrIhllsy9gNGjMTYnX/zWhYYABsfyEoQCf/KBobN3jM2/TqB3V8IB3aFvZ4y
8tDHOiOnmWQz1qgdz9hjdZ3f3x/B2kEJSrH1VuDyzWaHDIYvYOkDs2KRysc89JJM
Vk38linO8Q3rVI74i45WzZILRapmtfiMII7jXRKxaREWMr1KnLpbtAX/q+UoqP8s
odQpBYiY9xvyPayf8ogKgKDBcaih9C2+wbX/Kn5fZsC5ntqvgFzT04XktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqGPW1Hf79jvkDFzCt6SVOX5+OyMB8GA1UdIwQY
MBaAFJlEB4tAdysXLHBG50RiBJgM6uE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMt
NGRjMjA3MWE1YmYxLzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wNDhkZjYtYmNjZC00ODg1LThmNDMtNGRjMjA3MWE1YmYx
LzEvbVVRSGkwQjNLeGNzY0ViblJHSUVtQXpxNFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC+JiBJ9
lZQLdjcY02Gj8G5rvA1xvl+OD7xi126cCCV+R/2zUOdaw5bmRC67TtclmzzDzr+X
YITJRIrUgOrBir/k3/SEesurpbZAvCT/Jb1mYiW3IvqJ7qkVTzGRjxRTvVGgU9Qe
MHHgF6OF9iZJ0pfzVgqKu2b0xJP+dAACerCR+UTAq37WgG3uufLwUAzyqKPXobo5
oisyAHN09Bf0SJ+udXszWf1RYfhO5n/r3ywX2TAKx//BwmYLr5NgqGMQ5PO9c33c
RfWLU6qzV6qmxTSBMaLKefrGBFMGOmFQtwWB1NDMFTpzxxFcvH8xxC8kTJ9tqacl
ryEepxCW+qqtUQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:17 2024 by rpki-client on console-fra.rpki-client.org