Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: j1ql+bTVFxJ0IgK6iXHa6Z19cIJ+qHXjZ+xC5JiCP8M=
Subject key identifier: 86:A6:B1:6D:84:30:42:AA:1B:79:73:9E:EF:38:10:4A:D2:86:BE:75
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019351994CA7827E4ED94E51B98B50FEB2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 12B2
Signing time: Fri 22 Nov 2024 02:00:21 +0000
Manifest this update: Fri 22 Nov 2024 02:00:21 +0000
Manifest next update: Sat 23 Nov 2024 02:00:21 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: +6oKwc740LAFw8Ob9CH5Ixu7Iq7VGQCjRmkwYAlbo1w=)
2: ZjbEOF69NhzYjDYehcjyz3voty8.roa (hash: URM1Jw2O6JSoKpZAuJcl1jnNgLoTFAndQ5zAwRdvYY4=)
3: h5XKQLnbD49GrZGLOxUirZThWJk.roa (hash: +AkTBraCqiwhU6H47xBqoY41heU8XvkRXiQt8YdxNP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:4c:a7:82:7e:4e:d9:4e:51:b9:8b:50:fe:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Nov 22 02:00:21 2024 GMT
Not After : Nov 23 02:00:21 2024 GMT
Subject: CN=86a6b16d843042aa1b79739eef38104ad286be75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:7e:a7:77:f6:ff:9b:d6:e7:c9:6b:58:9c:
46:c7:78:ca:ee:12:bd:52:7c:e8:5b:d4:b3:21:2d:
39:7e:3b:ac:db:a8:b7:d0:b7:73:10:d2:b1:3b:63:
67:4a:63:3d:6a:c8:1c:7f:27:46:0e:42:88:b7:fb:
a6:47:16:75:b7:01:ef:7b:0c:5f:d0:cb:54:43:b3:
f9:aa:f3:51:66:bf:28:a5:d9:d4:2c:a0:a3:3c:ae:
b3:c2:72:54:f1:c8:bb:87:48:dd:c7:41:04:7c:e7:
9f:e1:f4:ff:4d:e7:36:00:67:cb:33:da:95:e3:a2:
8a:ca:e9:89:85:c1:dc:f0:91:fd:43:df:e1:75:a4:
7d:84:f8:92:bc:95:f6:03:53:82:f5:6e:52:d1:fd:
36:f7:f7:9a:36:57:b4:67:18:6e:16:23:2c:68:c8:
2a:0a:49:e0:f9:16:d4:e5:f3:75:4f:54:72:4b:43:
9b:a1:68:2a:72:b9:f5:fa:a6:4a:c8:5b:fb:ec:55:
6a:82:3e:2b:c4:3b:9d:eb:e4:c9:13:37:85:86:ef:
1b:63:5f:1c:ef:55:81:28:a0:e3:4d:de:49:f3:96:
b1:74:da:5c:61:da:45:93:15:24:ae:7a:df:ba:60:
86:68:46:ee:29:96:10:33:9d:b2:84:5f:a0:df:6e:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:B1:6D:84:30:42:AA:1B:79:73:9E:EF:38:10:4A:D2:86:BE:75
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:44:0f:aa:c6:a0:18:82:0a:5f:aa:dd:7f:9a:6f:3a:8f:23:
b3:ce:37:34:67:2d:74:3d:a4:f5:34:7f:86:12:6d:c7:de:2b:
ab:42:f1:0e:84:b9:7b:46:ef:f1:b0:2e:76:4c:10:7f:51:49:
79:3b:ac:8e:e9:31:71:5a:5a:9b:03:cc:0b:88:e3:e5:b0:f4:
ab:bd:0e:e2:72:6d:c4:b2:95:51:f2:3c:fe:86:a2:ef:fa:b8:
48:0a:c9:ee:eb:ba:e0:96:21:0e:3c:d1:04:03:97:80:52:31:
21:78:e1:bf:45:63:88:46:dc:bf:b0:d7:bd:1f:9a:8e:5d:7c:
29:a0:a8:50:4d:f3:39:52:5f:a0:0d:a6:2c:11:c3:11:59:2f:
e0:aa:ec:74:cc:f8:f8:72:a1:43:e2:63:d7:4e:76:f1:73:e6:
de:7f:06:e5:54:ba:8a:f8:f5:1c:22:fa:b2:da:84:f2:8a:a0:
fe:36:5c:88:73:82:83:a6:f8:e4:2d:c3:89:58:1f:d6:69:2b:
58:7e:b8:21:cb:b1:1b:79:8a:cc:c9:ca:b5:71:f3:dd:05:6d:
41:59:f3:53:6a:6b:00:92:39:be:e5:7a:e2:6c:8f:86:e2:ed:
3d:f2:67:7e:75:ae:17:5c:7d:a1:24:fe:11:42:c5:1c:bb:46:
8d:93:44:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmUyngn5O2U5RuYtQ/rLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy
MGYyOTgwHhcNMjQxMTIyMDIwMDIxWhcNMjQxMTIzMDIwMDIxWjAzMTEwLwYDVQQD
Eyg4NmE2YjE2ZDg0MzA0MmFhMWI3OTczOWVlZjM4MTA0YWQyODZiZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG9+p3f2/5vW58lrWJxGx3jK7hK9
UnzoW9SzIS05fjus26i30LdzENKxO2NnSmM9asgcfydGDkKIt/umRxZ1twHvewxf
0MtUQ7P5qvNRZr8opdnULKCjPK6zwnJU8ci7h0jdx0EEfOef4fT/Tec2AGfLM9qV
46KKyumJhcHc8JH9Q9/hdaR9hPiSvJX2A1OC9W5S0f029/eaNle0ZxhuFiMsaMgq
Ckng+RbU5fN1T1RyS0OboWgqcrn1+qZKyFv77FVqgj4rxDud6+TJEzeFhu8bY18c
71WBKKDjTd5J85axdNpcYdpFkxUkrnrfumCGaEbuKZYQM52yhF+g327CzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIamsW2EMEKqG3lznu84EErShr51MB8GA1UdIwQY
MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct
OTkzOWRmMWQwZDA5LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5
LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEQPqsag
GIIKX6rdf5pvOo8js843NGctdD2k9TR/hhJtx94rq0LxDoS5e0bv8bAudkwQf1FJ
eTusjukxcVpamwPMC4jj5bD0q70O4nJtxLKVUfI8/oai7/q4SArJ7uu64JYhDjzR
BAOXgFIxIXjhv0VjiEbcv7DXvR+ajl18KaCoUE3zOVJfoA2mLBHDEVkv4KrsdMz4
+HKhQ+Jj10528XPm3n8G5VS6ivj1HCL6stqE8oqg/jZciHOCg6b45C3DiVgf1mkr
WH64IcuxG3mKzMnKtXHz3QVtQVnzU2prAJI5vuV64myPhuLtPfJnfnWuF1x9oST+
EULFHLtGjZNEUg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:42 2024 by rpki-client on console-fra.rpki-client.org