Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: G5/1TYUeeg0F8yUh+tOsX7VH0RA8Lq3g1aaubP2rKJY=
Subject key identifier: 0D:71:F1:49:C9:71:8F:27:3C:80:D5:9B:D6:AA:9C:36:93:B5:5A:2D
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 0193579BE795EAFF33ED0A9F6B236FE61001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0A8F
Signing time: Sat 23 Nov 2024 06:00:55 +0000
Manifest this update: Sat 23 Nov 2024 06:00:55 +0000
Manifest next update: Sun 24 Nov 2024 06:00:55 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: PmhOWcsx/SJ1JB1uEHkhL9bSqAGSBuDuE6wGszAQvMc=)
2: QENe-TnhxKKl57v5cRBX2EEaB3c.roa (hash: UueRUfcyoo1ubBtHncyx6ZrmAcFJVU5MEYy9JAebCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:e7:95:ea:ff:33:ed:0a:9f:6b:23:6f:e6:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Nov 23 06:00:55 2024 GMT
Not After : Nov 24 06:00:55 2024 GMT
Subject: CN=0d71f149c9718f273c80d59bd6aa9c3693b55a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:b4:89:48:1e:56:e9:41:60:92:69:f4:2d:
10:51:90:10:58:83:90:97:c0:41:d0:ca:a6:f3:96:
2d:74:67:c9:4f:b3:02:3f:00:bc:a6:37:ac:2d:d8:
b3:07:59:7a:e5:22:84:90:33:63:47:63:49:7d:50:
f1:9a:80:3b:d4:73:fe:29:3c:64:ed:bc:af:e4:7c:
c4:7b:ca:6a:03:19:fd:bd:50:94:51:06:57:aa:14:
2b:c1:d5:3f:3b:cd:43:7c:e6:4d:74:87:30:16:04:
e5:d5:dc:54:a7:8d:51:b3:82:e3:d4:93:f5:0d:dc:
0c:9d:03:df:08:20:1c:7d:aa:9e:04:c2:ee:4c:58:
07:aa:52:88:7a:66:c6:97:65:e6:eb:42:78:2c:7e:
41:db:c9:b6:a3:cf:ac:e5:95:23:40:b4:16:a7:19:
a0:6c:ca:77:a6:1b:fc:10:da:03:3b:b5:51:05:b7:
06:2c:0a:60:18:d6:af:a7:d1:b3:e6:8d:4c:81:fb:
46:4b:0e:66:ed:1e:50:54:32:21:27:96:47:89:7d:
6f:4a:6a:2e:9c:ca:21:76:19:f6:17:76:0a:80:2c:
80:e2:b7:e7:85:8d:28:b7:c3:3e:49:e3:02:4e:6c:
95:c6:6b:84:b0:e0:9e:06:63:52:84:56:8d:b8:ab:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:F1:49:C9:71:8F:27:3C:80:D5:9B:D6:AA:9C:36:93:B5:5A:2D
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:0c:5b:b9:ea:dc:15:da:a4:9b:10:62:f4:66:7d:c3:c0:
3b:25:db:e1:14:20:7d:d8:cc:d0:c9:b9:3b:f0:f7:0d:d6:3d:
7c:60:1e:40:06:bb:bb:0b:bb:2d:5a:12:e6:84:01:57:16:69:
ec:bb:ea:e1:59:19:d5:8c:53:7b:1b:15:5b:bf:50:d9:eb:c1:
13:9c:e7:b8:a6:b4:92:43:48:c7:d8:35:91:75:6f:3c:a1:2b:
5e:0f:62:3c:56:a1:08:55:3b:45:59:7e:77:64:df:e5:e2:f2:
31:64:09:e3:66:00:cd:33:f0:d0:60:72:fd:8d:10:3e:69:64:
34:05:c6:62:71:7c:4d:e8:c8:de:c8:df:4d:ad:17:54:ea:09:
c9:1d:4e:2a:71:5d:d3:c6:00:c1:b8:c6:c6:40:1c:66:79:6d:
d3:27:27:f9:d5:9a:63:41:10:cf:7f:34:0f:6a:ae:23:4f:92:
1a:9f:a3:35:8a:0e:86:40:e4:24:68:52:4a:85:be:47:4d:c5:
b5:28:f6:e9:30:78:db:67:9b:b9:eb:a5:fa:c1:df:96:4c:a7:
54:68:fe:22:0c:5a:86:2d:96:4c:1b:11:25:3a:29:1a:fc:dd:
31:a2:11:4a:c0:d5:73:b9:c1:7c:a5:d9:41:0b:ed:09:0a:86:
1a:fd:b8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm+eV6v8z7QqfayNv5hABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5
Y2MyZjAwHhcNMjQxMTIzMDYwMDU1WhcNMjQxMTI0MDYwMDU1WjAzMTEwLwYDVQQD
EygwZDcxZjE0OWM5NzE4ZjI3M2M4MGQ1OWJkNmFhOWMzNjkzYjU1YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLK0iUgeVulBYJJp9C0QUZAQWIOQ
l8BB0Mqm85YtdGfJT7MCPwC8pjesLdizB1l65SKEkDNjR2NJfVDxmoA71HP+KTxk
7byv5HzEe8pqAxn9vVCUUQZXqhQrwdU/O81DfOZNdIcwFgTl1dxUp41Rs4Lj1JP1
DdwMnQPfCCAcfaqeBMLuTFgHqlKIembGl2Xm60J4LH5B28m2o8+s5ZUjQLQWpxmg
bMp3phv8ENoDO7VRBbcGLApgGNavp9Gz5o1MgftGSw5m7R5QVDIhJ5ZHiX1vSmou
nMohdhn2F3YKgCyA4rfnhY0ot8M+SeMCTmyVxmuEsOCeBmNShFaNuKu6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1x8UnJcY8nPIDVm9aqnDaTtVotMB8GA1UdIwQY
MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt
NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj
LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpwMW7nq
3BXapJsQYvRmfcPAOyXb4RQgfdjM0Mm5O/D3DdY9fGAeQAa7uwu7LVoS5oQBVxZp
7Lvq4VkZ1YxTexsVW79Q2evBE5znuKa0kkNIx9g1kXVvPKErXg9iPFahCFU7RVl+
d2Tf5eLyMWQJ42YAzTPw0GBy/Y0QPmlkNAXGYnF8TejI3sjfTa0XVOoJyR1OKnFd
08YAwbjGxkAcZnlt0ycn+dWaY0EQz380D2quI0+SGp+jNYoOhkDkJGhSSoW+R03F
tSj26TB422ebueul+sHflkynVGj+Igxahi2WTBsRJTopGvzdMaIRSsDVc7nBfKXZ
QQvtCQqGGv24Fw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:33 2024 by rpki-client on console-ams.rpki-client.org