Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: rbDmRWGUFjDu8jYvKZNLgaTp7lGIUsoa+1gxapxshFo=
Subject key identifier: 38:46:69:0E:B0:EE:4D:1F:85:AC:93:1B:F1:3E:54:33:E5:A1:DB:1D
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01935764E889E0095035EF542C7BFFB29655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 05:00:51 +0000
Manifest this update: Sat 23 Nov 2024 05:00:51 +0000
Manifest next update: Sun 24 Nov 2024 05:00:51 +0000
Files and hashes: 1: 1-vZaZiQvGimbD0PABrjj5n5gFII.roa (hash: nfA+SJ882PqLFvaj0p83cV0UAVeXVLiIh4kmKSIFv+k=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: WZUzjaHXasyWByBN7+Hejm17KpHkdtgDt6l1Vp+fPM4=)
3: ORZl5_uo-mD8TA-u7oHBa6Bfcns.roa (hash: csa5Jc2uvlu6Y+LcuT34GI2iKAadCxcC073WyvpUpkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e8:89:e0:09:50:35:ef:54:2c:7b:ff:b2:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Nov 23 05:00:51 2024 GMT
Not After : Nov 24 05:00:51 2024 GMT
Subject: CN=3846690eb0ee4d1f85ac931bf13e5433e5a1db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:23:ef:69:29:64:e7:d9:31:07:1b:44:d8:
4a:41:21:aa:3e:52:6b:ec:fc:a1:e3:c2:3a:f3:00:
a4:3e:eb:0c:84:c9:a1:72:4e:1d:7e:e9:5f:6a:35:
c2:e8:72:84:35:2b:db:32:42:a2:b8:a4:fa:6f:7d:
7b:e8:38:ee:af:45:d3:83:9e:6c:0b:a9:a0:7b:aa:
f6:07:74:18:9f:d5:91:e2:09:0d:d5:27:93:90:d2:
eb:b8:52:71:45:91:d7:62:d4:1b:ab:c4:fd:2a:b0:
5d:7f:c1:0e:9f:dc:89:77:1e:3e:1c:68:38:5e:19:
31:3a:ab:9a:0d:d4:72:ca:92:a1:92:d2:94:ba:5d:
e1:0c:1d:d8:de:2e:9d:77:c8:d8:ad:15:70:6e:18:
03:63:fb:c3:ed:95:1c:fc:a0:d6:19:41:c3:1c:1a:
fa:bc:1b:08:d8:13:de:36:99:3a:f1:01:4b:fc:f1:
93:20:6f:ab:8f:0e:26:56:04:35:89:72:bd:47:8f:
55:34:50:a8:6d:96:f8:b2:34:62:9f:80:5f:59:12:
cc:b1:ed:9c:20:9e:aa:05:d3:0b:ff:18:e0:c8:e3:
ae:e3:ea:ad:24:f7:9c:0a:95:4d:fe:12:71:2b:81:
d7:6b:3e:a3:45:01:97:4e:c8:94:21:1a:73:8b:d6:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:69:0E:B0:EE:4D:1F:85:AC:93:1B:F1:3E:54:33:E5:A1:DB:1D
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:8b:b7:8c:a4:6e:14:57:e8:81:0e:49:41:d4:2b:63:f7:
93:1a:2d:c9:c6:14:c6:7c:8a:8f:71:ff:b5:12:e5:3d:d5:28:
0a:7c:aa:ee:8a:b7:aa:54:00:70:57:78:d9:48:8f:20:f9:9c:
64:18:99:ea:41:ea:9b:26:2b:6a:48:b3:3e:68:53:ef:84:3c:
d7:b1:83:36:ec:28:ec:ca:44:cf:11:83:c4:e1:a0:8c:5a:90:
ef:04:dc:38:7c:db:51:54:f1:a6:c4:29:03:0d:cf:64:96:23:
67:fa:3d:df:b6:e9:34:36:76:bb:1f:c0:29:0b:19:e0:dc:2c:
2c:0d:74:98:fe:6b:17:3e:a1:ee:de:7e:b4:bd:54:45:3c:fa:
fb:95:dc:75:b3:05:a2:7f:44:22:cf:38:98:ed:07:6d:7f:d2:
92:30:e8:f5:6a:ee:4b:d0:d8:c2:0e:56:f5:3f:e0:e7:45:f4:
b9:7b:56:a0:e8:a5:51:de:47:98:65:6b:0c:f3:59:80:56:ad:
5c:f0:7c:d4:02:f8:ee:bd:28:79:3e:41:e2:13:f6:5d:6a:4a:
43:c4:a2:8b:83:8f:29:2c:2f:b5:a6:b6:0c:51:2e:f4:95:8b:
09:7c:56:7e:de:40:76:1d:92:9b:25:27:f4:83:4c:5c:7b:de:
6f:47:c0:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZOiJ4AlQNe9ULHv/spZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjQxMTIzMDUwMDUxWhcNMjQxMTI0MDUwMDUxWjAzMTEwLwYDVQQD
EygzODQ2NjkwZWIwZWU0ZDFmODVhYzkzMWJmMTNlNTQzM2U1YTFkYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGkj72kpZOfZMQcbRNhKQSGqPlJr
7Pyh48I68wCkPusMhMmhck4dfulfajXC6HKENSvbMkKiuKT6b3176Djur0XTg55s
C6mge6r2B3QYn9WR4gkN1SeTkNLruFJxRZHXYtQbq8T9KrBdf8EOn9yJdx4+HGg4
XhkxOquaDdRyypKhktKUul3hDB3Y3i6dd8jYrRVwbhgDY/vD7ZUc/KDWGUHDHBr6
vBsI2BPeNpk68QFL/PGTIG+rjw4mVgQ1iXK9R49VNFCobZb4sjRin4BfWRLMse2c
IJ6qBdML/xjgyOOu4+qtJPecCpVN/hJxK4HXaz6jRQGXTsiUIRpzi9ZHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhGaQ6w7k0fhayTG/E+VDPlodsdMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKiLt4yk
bhRX6IEOSUHUK2P3kxotycYUxnyKj3H/tRLlPdUoCnyq7oq3qlQAcFd42UiPIPmc
ZBiZ6kHqmyYrakizPmhT74Q817GDNuwo7MpEzxGDxOGgjFqQ7wTcOHzbUVTxpsQp
Aw3PZJYjZ/o937bpNDZ2ux/AKQsZ4NwsLA10mP5rFz6h7t5+tL1URTz6+5XcdbMF
on9EIs84mO0HbX/SkjDo9WruS9DYwg5W9T/g50X0uXtWoOilUd5HmGVrDPNZgFat
XPB81AL47r0oeT5B4hP2XWpKQ8Sii4OPKSwvtaa2DFEu9JWLCXxWft5Adh2SmyUn
9INMXHveb0fAzA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:34 2024 by rpki-client on console-ams.rpki-client.org