Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
File: f-M2aJct_7fshiiujDwmvt4cq5o.mft (raw, json)
Hash identifier: /Tixu7/i0qW939BucsuTAE8Ag1GTKJk3e5Wu6m0PRCY=
Subject key identifier: 09:8F:8B:66:69:4C:61:33:A5:09:AC:B0:57:03:CE:48:14:2D:98:71
Authority key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Certificate issuer: /CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Certificate serial: 019365206A19ADA5F0B223FA04402782DDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
Manifest number: 0B27
Signing time: Mon 25 Nov 2024 21:00:43 +0000
Manifest this update: Mon 25 Nov 2024 21:00:43 +0000
Manifest next update: Tue 26 Nov 2024 21:00:43 +0000
Files and hashes: 1: SxdRDhh5LHh79FOeToDTni3b2Dk.roa (hash: StEaV1ZLZzt5rLPpjeDe0ls2Z6ngaL7FsM8WlWXXdUA=)
2: f-M2aJct_7fshiiujDwmvt4cq5o.crl (hash: /Yo6WinYSAStrTzBhl7tpWd9wo2XtYtceUpp9kD8LX0=)
3: fqYeYmCZsuYLGhFkIjS2fI-aIu0.roa (hash: N9DrsPBqloytSOZA/JPmkYGsHZ5FCFKxuOJQ0eau1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:20:6a:19:ad:a5:f0:b2:23:fa:04:40:27:82:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Validity
Not Before: Nov 25 21:00:43 2024 GMT
Not After : Nov 26 21:00:43 2024 GMT
Subject: CN=098f8b66694c6133a509acb05703ce48142d9871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:f3:a5:b8:7c:26:0d:46:0c:36:d5:7b:14:
df:a5:c3:ca:9d:d0:f8:93:ea:b9:c1:25:8e:68:a1:
63:36:00:29:5c:95:71:80:79:7a:eb:3c:e9:2c:27:
0c:e6:a6:77:f5:24:9f:3c:b9:f6:7d:d5:32:95:84:
e3:23:d2:6f:c9:07:e2:59:1a:88:ea:88:4c:c6:cc:
1c:63:34:69:d3:f4:73:8e:d5:2d:c6:8b:24:5e:5c:
4e:7c:bd:43:17:10:9b:b5:89:50:8c:fa:62:0c:25:
29:3f:b1:47:2d:f8:d2:b9:66:d6:e7:cc:ea:d4:12:
95:72:c5:b3:4b:47:62:63:a5:b0:fb:05:50:7f:f7:
d1:e8:d1:fa:1e:64:c7:22:7d:90:0e:d1:1e:6e:9f:
92:a5:32:a9:c5:a5:ce:78:d8:54:8b:9d:dc:fe:66:
42:88:01:1a:30:60:10:72:f3:b5:d9:88:fe:a8:18:
a3:13:26:89:b4:45:6d:d2:ba:58:34:5c:9e:66:27:
d3:22:5d:a8:0e:07:0b:93:7b:65:18:5f:7f:fa:b0:
bf:0a:2a:2b:a3:90:74:ca:ad:f3:86:52:a5:cc:21:
f7:d6:d1:69:86:fb:1a:6a:0f:ad:c4:fa:ae:b4:93:
95:f7:0a:9d:18:fe:dd:ec:d1:f2:8f:78:2c:84:34:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:8B:66:69:4C:61:33:A5:09:AC:B0:57:03:CE:48:14:2D:98:71
X509v3 Authority Key Identifier:
keyid:7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:ba:23:a5:5f:b0:3a:07:e1:be:ad:3b:ce:a1:2e:8d:62:
b0:1c:f0:85:94:db:43:16:49:84:a3:45:4d:34:37:99:46:77:
74:8c:1a:3d:b6:e5:c0:b4:a9:ee:c3:46:96:a0:1b:4e:23:dc:
03:41:7f:10:2b:cd:81:0c:8a:4a:0a:dd:78:0f:f0:a5:b3:61:
fa:41:2c:e8:1f:8f:81:3a:2c:ae:59:3a:11:be:3b:5a:71:f3:
8e:d3:a5:f1:87:97:18:d8:eb:e8:4e:c8:37:9d:c8:4f:dd:3d:
97:c0:b3:25:41:07:90:ec:9f:c4:20:54:04:f8:be:e5:e8:2d:
16:b5:0c:11:6d:1e:04:4b:cb:1a:06:0c:ce:04:3d:1d:fb:ec:
2d:d9:31:c9:4b:72:7a:7b:56:03:25:6c:87:75:7a:68:af:d5:
b2:40:95:da:5f:a0:1b:be:0a:80:03:a5:b5:36:30:fb:a7:a4:
81:73:d8:6a:be:f2:c0:16:32:42:8d:40:88:b3:0f:03:a1:0a:
1a:56:c0:41:5e:e7:3a:a4:99:91:7e:91:e5:99:84:cc:39:86:
db:2f:f8:7d:72:76:ba:1e:c2:2e:89:fd:14:37:fa:85:b6:8b:
0d:24:81:17:97:3e:74:89:58:c0:7e:0b:48:f3:e7:9e:c6:eb:
f0:59:95:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlIGoZraXwsiP6BEAngt27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTMzNjY4OTcyZGZmYjdlYzg2MjhhZThjM2MyNmJlZGUx
Y2FiOWEwHhcNMjQxMTI1MjEwMDQzWhcNMjQxMTI2MjEwMDQzWjAzMTEwLwYDVQQD
EygwOThmOGI2NjY5NGM2MTMzYTUwOWFjYjA1NzAzY2U0ODE0MmQ5ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWvzpbh8Jg1GDDbVexTfpcPKndD4
k+q5wSWOaKFjNgApXJVxgHl66zzpLCcM5qZ39SSfPLn2fdUylYTjI9JvyQfiWRqI
6ohMxswcYzRp0/RzjtUtxoskXlxOfL1DFxCbtYlQjPpiDCUpP7FHLfjSuWbW58zq
1BKVcsWzS0diY6Ww+wVQf/fR6NH6HmTHIn2QDtEebp+SpTKpxaXOeNhUi53c/mZC
iAEaMGAQcvO12Yj+qBijEyaJtEVt0rpYNFyeZifTIl2oDgcLk3tlGF9/+rC/Cior
o5B0yq3zhlKlzCH31tFphvsaag+txPqutJOV9wqdGP7d7NHyj3gshDTQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmPi2ZpTGEzpQmssFcDzkgULZhxMB8GA1UdIwQY
MBaAFH/jNmiXLf+37IYorow8Jr7eHKuaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1NMmFKY3RfN2ZzaGlpdWpEd212dDRjcTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YzkyOGQtODMyNi00MmM1LThhNzEt
NzNhM2E0MGJkYzMwLzEvZi1NMmFKY3RfN2ZzaGlpdWpEd212dDRjcTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85YzkyOGQtODMyNi00MmM1LThhNzEtNzNhM2E0MGJkYzMw
LzEvZi1NMmFKY3RfN2ZzaGlpdWpEd212dDRjcTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADse6I6Vf
sDoH4b6tO86hLo1isBzwhZTbQxZJhKNFTTQ3mUZ3dIwaPbblwLSp7sNGlqAbTiPc
A0F/ECvNgQyKSgrdeA/wpbNh+kEs6B+PgTosrlk6Eb47WnHzjtOl8YeXGNjr6E7I
N53IT909l8CzJUEHkOyfxCBUBPi+5egtFrUMEW0eBEvLGgYMzgQ9HfvsLdkxyUty
entWAyVsh3V6aK/VskCV2l+gG74KgAOltTYw+6ekgXPYar7ywBYyQo1AiLMPA6EK
GlbAQV7nOqSZkX6R5ZmEzDmG2y/4fXJ2uh7CLon9FDf6hbaLDSSBF5c+dIlYwH4L
SPPnnsbr8FmV3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:23 2024 by rpki-client on console-fra.rpki-client.org