Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier: fnAnjH65aU8CySnmdeEFa//Fr0Udz9ecJmogn/F3CWk=
Subject key identifier: CE:FD:12:E7:64:E1:5C:64:F1:53:31:6A:F2:70:A9:85:91:0C:F4:C0
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer: /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial: 019357D27A94D5BDDCD0C076B466DE5B52AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number: 0F5D
Signing time: Sat 23 Nov 2024 07:00:31 +0000
Manifest this update: Sat 23 Nov 2024 07:00:31 +0000
Manifest next update: Sun 24 Nov 2024 07:00:31 +0000
Files and hashes: 1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: 8+5DGb/47N099p+POcRTtOAoawzjrP9qKpfWm/vtfq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:7a:94:d5:bd:dc:d0:c0:76:b4:66:de:5b:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Validity
Not Before: Nov 23 07:00:31 2024 GMT
Not After : Nov 24 07:00:31 2024 GMT
Subject: CN=cefd12e764e15c64f153316af270a985910cf4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:79:5e:d8:90:b0:10:4c:64:0e:b4:87:98:
eb:36:99:c1:f2:d6:75:2f:15:c2:2b:0a:55:ac:97:
32:f9:5b:ba:3b:6d:53:80:52:d3:23:09:93:ad:b9:
bf:bd:14:2b:4b:f9:7f:ac:ee:65:ba:2c:44:e5:ea:
35:c0:81:b6:bc:3f:23:58:54:9c:b6:74:93:22:07:
79:c4:b3:19:f8:69:6a:2b:63:ab:6b:3f:d0:91:77:
47:e4:81:4e:1d:31:66:92:cc:a7:1a:96:1c:47:4a:
60:d3:9e:eb:a1:9a:4a:28:b9:34:9d:3b:d8:1d:97:
0e:d2:b2:b7:78:dc:61:ac:0c:8c:fa:e7:7b:9b:f0:
7a:25:7d:f5:9c:cc:25:d3:2f:03:3e:c3:df:69:d6:
1a:5b:d2:c1:ad:7a:3a:07:b2:38:13:91:45:c7:4b:
09:79:38:94:69:ce:30:3e:f2:ef:28:ee:35:ff:23:
ef:ec:6f:27:a9:d3:5e:01:93:b5:b5:17:da:09:46:
fd:50:37:6e:2f:0b:5b:16:98:23:43:2a:9d:9d:30:
1c:39:ef:61:60:03:95:eb:a4:97:a6:e2:80:4f:1d:
8d:12:1a:a8:b2:0b:6b:e7:0d:b9:50:1a:fc:f8:31:
d8:2b:81:6b:a5:71:92:3d:26:69:69:e6:f9:8b:db:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:12:E7:64:E1:5C:64:F1:53:31:6A:F2:70:A9:85:91:0C:F4:C0
X509v3 Authority Key Identifier:
keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:65:e5:28:cc:55:3a:29:4e:48:4b:b5:6d:e0:76:ff:bd:
88:86:70:b0:5c:68:b2:84:b2:75:b2:0a:dc:83:d7:1b:95:f3:
64:f8:66:c1:88:22:ec:06:3a:fa:d1:19:b4:76:39:24:d2:a6:
bf:c3:f8:62:5e:9c:a6:1f:22:af:02:49:da:9d:c6:c6:c8:9b:
e9:9c:09:fd:ff:93:5d:d9:f7:e9:27:02:d2:d8:b5:91:fb:62:
8f:26:3e:bd:0a:1e:66:a4:68:51:c9:3c:53:bb:01:dd:60:d9:
b0:bd:04:9c:00:3e:9a:13:71:51:89:84:e5:ba:76:ad:81:d8:
d9:1d:ae:c6:65:bf:8e:93:14:70:2d:d2:b7:52:c4:d5:58:37:
23:af:61:1e:15:e0:03:d5:fd:43:2c:96:a2:ab:52:96:a0:50:
ce:3b:22:e4:77:f1:75:e5:0c:cd:3b:46:c6:7b:6c:48:72:11:
39:aa:a0:d6:07:67:7c:68:c2:ff:41:06:d5:5d:39:18:fb:36:
7a:13:f9:10:4f:85:b2:8f:62:c3:e8:d7:a8:28:8f:2d:93:29:
89:6a:65:11:aa:94:f1:d7:5f:03:7c:cf:54:55:85:4b:1e:8e:
3a:2e:de:f7:f1:84:52:3a:7e:93:78:48:0d:01:57:2e:75:de:
68:92:4c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0nqU1b3c0MB2tGbeW1KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNzRhOTdmZTliZTBlZjYyY2RlNTlmNDFhOWE1ZjA5OTE4
MjkxNDcwHhcNMjQxMTIzMDcwMDMxWhcNMjQxMTI0MDcwMDMxWjAzMTEwLwYDVQQD
EyhjZWZkMTJlNzY0ZTE1YzY0ZjE1MzMxNmFmMjcwYTk4NTkxMGNmNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4p5XtiQsBBMZA60h5jrNpnB8tZ1
LxXCKwpVrJcy+Vu6O21TgFLTIwmTrbm/vRQrS/l/rO5luixE5eo1wIG2vD8jWFSc
tnSTIgd5xLMZ+GlqK2Oraz/QkXdH5IFOHTFmksynGpYcR0pg057roZpKKLk0nTvY
HZcO0rK3eNxhrAyM+ud7m/B6JX31nMwl0y8DPsPfadYaW9LBrXo6B7I4E5FFx0sJ
eTiUac4wPvLvKO41/yPv7G8nqdNeAZO1tRfaCUb9UDduLwtbFpgjQyqdnTAcOe9h
YAOV66SXpuKATx2NEhqosgtr5w25UBr8+DHYK4FrpXGSPSZpaeb5i9tVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM79Eudk4Vxk8VMxavJwqYWRDPTAMB8GA1UdIwQY
MBaAFNF0qX/pvg72LN5Z9BqaXwmRgpFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhTcGYtbS1EdllzM2xuMEdwcGZDWkdDa1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MzI2YzYtNzU3OC00N2VjLTgyN2Qt
ODQ3ZDgwNWYzOGQwLzEvMFhTcGYtbS1EdllzM2xuMEdwcGZDWkdDa1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MzI2YzYtNzU3OC00N2VjLTgyN2QtODQ3ZDgwNWYzOGQw
LzEvMFhTcGYtbS1EdllzM2xuMEdwcGZDWkdDa1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn9l5SjM
VTopTkhLtW3gdv+9iIZwsFxosoSydbIK3IPXG5XzZPhmwYgi7AY6+tEZtHY5JNKm
v8P4Yl6cph8irwJJ2p3Gxsib6ZwJ/f+TXdn36ScC0ti1kftijyY+vQoeZqRoUck8
U7sB3WDZsL0EnAA+mhNxUYmE5bp2rYHY2R2uxmW/jpMUcC3St1LE1Vg3I69hHhXg
A9X9QyyWoqtSlqBQzjsi5HfxdeUMzTtGxntsSHIROaqg1gdnfGjC/0EG1V05GPs2
ehP5EE+Fso9iw+jXqCiPLZMpiWplEaqU8ddfA3zPVFWFSx6OOi7e9/GEUjp+k3hI
DQFXLnXeaJJM/w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:22 2024 by rpki-client on console-fra.rpki-client.org