Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: DJvh4gESV3c0dgnYJJhHnXIHdClr/Leyhh9/LeAzTps=
Subject key identifier: E7:F8:E1:EE:29:B9:BD:C3:9F:EF:51:B8:9A:3E:A7:C3:61:FB:55:5A
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0193568AC28C987CC1346EA362011C94EDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 01:02:34 +0000
Manifest this update: Sat 23 Nov 2024 01:02:34 +0000
Manifest next update: Sun 24 Nov 2024 01:02:34 +0000
Files and hashes: 1: AtveoMEfvepUaXuLEIBi_aFLNRE.roa (hash: ZSmwE2KGPg7QHvdqHjrGKNciYhMvqQ7AKTIZq413uJo=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: TavdR0Awnn214yEGkLqB27uHUze7w7OebLtOJuCwQuQ=)
3: xKEcDNpyxj8h6O8lLfpmyKoecAY.roa (hash: bCcHfDuNowle8ht8kipeUNs+eZ3bGyz536SvLVvZYSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:c2:8c:98:7c:c1:34:6e:a3:62:01:1c:94:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Nov 23 01:02:34 2024 GMT
Not After : Nov 24 01:02:34 2024 GMT
Subject: CN=e7f8e1ee29b9bdc39fef51b89a3ea7c361fb555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:ed:73:fb:c6:5b:2f:bd:36:2e:77:ed:15:
81:d4:6f:3f:d4:91:49:ee:08:d7:73:7f:40:99:53:
9e:87:bb:32:a2:ba:17:77:01:d6:70:52:30:71:4b:
e3:0e:71:51:1d:5c:92:53:2a:6a:56:fe:2f:4b:49:
9c:af:c6:72:3a:73:1e:39:8d:72:05:12:15:de:c6:
5a:87:b8:7d:30:8c:0d:25:16:03:f1:21:a4:3e:5a:
c9:f5:24:20:a5:51:4d:f7:69:d6:26:3b:75:58:b8:
38:05:e9:17:bd:f5:02:15:4b:0a:a0:84:1e:44:05:
ae:9e:ed:29:93:e0:62:83:6f:74:cc:fe:77:3e:4e:
e5:75:90:96:ce:d8:f8:e5:03:33:0b:78:64:aa:bd:
15:d9:b6:f0:72:77:7d:69:02:6e:b4:27:64:76:18:
fa:9e:c9:62:33:32:2e:b1:be:8e:4b:a5:e8:47:b5:
b9:52:5c:0a:42:c1:30:fc:a4:9f:56:57:52:d1:60:
fb:51:8a:18:5e:e0:9f:af:72:78:40:eb:6c:31:88:
71:4d:05:16:44:61:0c:6d:70:de:24:4a:fd:be:cd:
78:55:f6:1b:7a:6c:20:87:5d:f2:e2:b2:8c:fb:0c:
65:42:09:e6:a6:08:52:35:d6:88:8f:ff:f0:2f:79:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:E1:EE:29:B9:BD:C3:9F:EF:51:B8:9A:3E:A7:C3:61:FB:55:5A
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1f:e1:9e:08:0e:28:ea:df:d4:2c:1c:23:b7:82:75:ec:f7:
e7:07:e3:da:0a:f7:e8:69:1f:da:38:04:8b:05:c8:34:4b:53:
df:15:a9:c8:de:0f:66:a2:05:fe:65:b9:7c:8a:41:5d:ef:a2:
24:71:8b:25:0e:65:d7:c4:fe:fb:ab:3a:d8:dd:52:7d:af:0d:
fc:75:fc:14:82:8f:34:7a:9b:a4:bb:d9:da:b5:d4:31:de:c5:
e4:48:d1:3b:57:51:2b:68:9e:29:9b:c0:34:a2:fc:12:29:44:
da:f7:e2:b8:17:09:97:94:b0:6a:19:c1:20:c8:75:0a:20:7b:
97:e6:de:c1:32:5c:57:b6:5d:4c:57:97:00:a1:14:06:60:73:
50:d0:ff:15:95:c6:27:0e:e7:5d:04:a3:7f:41:22:ad:f6:a4:
ca:73:32:27:d1:5d:bd:48:eb:87:d6:e3:bf:bf:d2:69:b7:6c:
c3:22:63:65:31:ce:4e:f6:8f:22:6a:79:83:6e:0e:12:94:28:
bf:d3:fb:41:ec:0c:a6:a7:b9:99:8c:1a:da:ab:3d:85:1d:a3:
a3:fd:2e:ba:56:11:10:cb:fe:11:64:55:f7:75:b8:7f:be:7b:
5f:3e:e2:76:1e:cd:60:5a:94:1c:91:17:3e:4c:bf:36:1c:73:
b5:d3:e9:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWisKMmHzBNG6jYgEclO3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjQxMTIzMDEwMjM0WhcNMjQxMTI0MDEwMjM0WjAzMTEwLwYDVQQD
EyhlN2Y4ZTFlZTI5YjliZGMzOWZlZjUxYjg5YTNlYTdjMzYxZmI1NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hXtc/vGWy+9Ni537RWB1G8/1JFJ
7gjXc39AmVOeh7syoroXdwHWcFIwcUvjDnFRHVySUypqVv4vS0mcr8ZyOnMeOY1y
BRIV3sZah7h9MIwNJRYD8SGkPlrJ9SQgpVFN92nWJjt1WLg4BekXvfUCFUsKoIQe
RAWunu0pk+Big290zP53Pk7ldZCWztj45QMzC3hkqr0V2bbwcnd9aQJutCdkdhj6
nsliMzIusb6OS6XoR7W5UlwKQsEw/KSfVldS0WD7UYoYXuCfr3J4QOtsMYhxTQUW
RGEMbXDeJEr9vs14VfYbemwgh13y4rKM+wxlQgnmpghSNdaIj//wL3mcIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf44e4pub3Dn+9RuJo+p8Nh+1VaMB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx/hnggO
KOrf1CwcI7eCdez35wfj2gr36Gkf2jgEiwXINEtT3xWpyN4PZqIF/mW5fIpBXe+i
JHGLJQ5l18T++6s62N1Sfa8N/HX8FIKPNHqbpLvZ2rXUMd7F5EjRO1dRK2ieKZvA
NKL8EilE2vfiuBcJl5SwahnBIMh1CiB7l+bewTJcV7ZdTFeXAKEUBmBzUND/FZXG
Jw7nXQSjf0EirfakynMyJ9FdvUjrh9bjv7/SabdswyJjZTHOTvaPImp5g24OEpQo
v9P7QewMpqe5mYwa2qs9hR2jo/0uulYREMv+EWRV93W4f757Xz7idh7NYFqUHJEX
Pky/NhxztdPpsw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:39 2024 by rpki-client on console-ams.rpki-client.org