Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: VU/fBV1AFxHjNITUP/oQhd/oUuWCZ3wYlJ+rI9527V4=
Subject key identifier: CD:40:DA:5C:8F:92:DB:F8:76:58:AD:32:12:89:89:5C:BE:E6:34:36
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0193542C8402F423C087581013EBB812D0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 07AD
Signing time: Fri 22 Nov 2024 14:00:23 +0000
Manifest this update: Fri 22 Nov 2024 14:00:23 +0000
Manifest next update: Sat 23 Nov 2024 14:00:23 +0000
Files and hashes: 1: 47mpN30q4FNutUlTaAwHwr0rFRI.roa (hash: X/Y+KDgWCLYBUuJODTDONVz6p0/EBxqlXAMSTRthRoE=)
2: BgEEdYJJbHgGc924Zm7WEX99FWY.roa (hash: SHVXIpPkhSLkYBapIuC2jgu/JHbbH+uIDYhiqs5pUEs=)
3: LvOK8NNX9N0vTRMFrJFC1id72wg.roa (hash: dGRz165MXipBaFxiU68vMoc1BIO7mXJiBn9LTkiWu0M=)
4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: OWeMvAiMdsEhqH8sqxRv56cjnK6kXy9IKPI8XUg+Vd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:2c:84:02:f4:23:c0:87:58:10:13:eb:b8:12:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Nov 22 14:00:23 2024 GMT
Not After : Nov 23 14:00:23 2024 GMT
Subject: CN=cd40da5c8f92dbf87658ad321289895cbee63436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:4b:ec:9a:80:7f:49:d8:61:70:9a:6f:71:
9e:06:72:27:e4:27:65:cd:a2:43:59:9c:19:f1:15:
57:85:d7:19:f5:1d:3f:1f:85:80:f3:5c:c6:95:90:
43:0c:9c:63:25:d8:12:a5:5b:39:cb:bb:34:20:c5:
92:a2:d6:93:3d:cd:61:ad:41:5c:a2:8b:51:e1:2d:
07:29:90:44:ab:28:88:21:c3:d8:0a:84:55:ea:a0:
7b:8d:be:71:42:54:b4:57:4f:83:d2:9b:c2:46:f3:
46:52:61:02:cc:fc:36:fe:b7:83:30:f9:5f:3f:2a:
e7:b2:13:da:dd:1e:bb:9e:f9:51:1a:04:a5:49:60:
73:eb:99:fa:db:89:07:e0:88:62:1b:06:71:aa:11:
6a:02:27:51:7b:56:7f:cc:9d:56:6a:ef:85:d5:98:
af:c7:ba:a7:69:a9:08:cf:8d:9a:42:97:8b:23:f6:
23:96:97:b2:f9:f9:91:2c:2a:91:6e:f9:95:b1:3b:
aa:04:f3:67:18:66:d4:8b:6d:8c:8c:85:ce:c0:59:
05:d8:31:5b:37:40:bb:73:b6:dd:25:58:34:43:81:
00:35:b3:5a:9c:e4:cc:9e:98:3e:e2:9d:3f:91:29:
82:4b:e1:73:65:3a:87:23:67:a3:ed:13:1c:8f:f5:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:DA:5C:8F:92:DB:F8:76:58:AD:32:12:89:89:5C:BE:E6:34:36
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:a8:66:9d:8a:9b:65:1a:1d:a1:ce:41:f7:38:e3:21:cb:
2c:18:72:34:e5:3c:aa:48:af:76:c0:a3:9c:0c:be:dd:56:b3:
df:fa:25:6c:3b:f6:3b:8f:6f:33:03:b8:83:6a:6c:07:a2:45:
86:66:e4:49:3a:1b:0c:ed:95:6c:00:83:80:77:6e:6f:e5:0d:
f2:86:a9:d2:37:a4:3d:50:65:f1:2d:b3:0a:d6:74:6a:b7:f9:
08:6b:e9:a9:29:0f:46:6e:88:73:17:ed:0f:88:27:ac:1c:4c:
2d:73:ed:4f:73:5a:5c:1a:97:a9:77:a2:b9:f8:2f:a8:76:c9:
99:ce:00:aa:79:f9:db:de:4d:df:6d:ff:79:93:aa:48:74:eb:
80:ee:f0:2d:08:7a:4c:6b:86:0d:18:6a:ef:a3:a2:48:fb:d5:
dc:b5:95:12:bb:e6:c7:e9:a1:c0:dd:48:08:57:7b:82:21:ec:
b3:a0:6b:7a:8b:12:97:f1:22:c8:07:12:42:21:77:a3:af:61:
15:e1:d2:5d:1e:b9:88:95:46:70:d9:4a:89:65:1f:e1:66:26:
bf:b7:ca:b8:d9:46:4c:49:42:96:3d:ce:a1:25:6a:0f:90:07:
b0:5e:1f:19:1f:69:1d:f5:40:cb:4e:38:31:70:46:00:1a:00:
f3:c1:0c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNULIQC9CPAh1gQE+u4EtDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjQxMTIyMTQwMDIzWhcNMjQxMTIzMTQwMDIzWjAzMTEwLwYDVQQD
EyhjZDQwZGE1YzhmOTJkYmY4NzY1OGFkMzIxMjg5ODk1Y2JlZTYzNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK9L7JqAf0nYYXCab3GeBnIn5Cdl
zaJDWZwZ8RVXhdcZ9R0/H4WA81zGlZBDDJxjJdgSpVs5y7s0IMWSotaTPc1hrUFc
ootR4S0HKZBEqyiIIcPYCoRV6qB7jb5xQlS0V0+D0pvCRvNGUmECzPw2/reDMPlf
PyrnshPa3R67nvlRGgSlSWBz65n624kH4IhiGwZxqhFqAidRe1Z/zJ1Wau+F1Ziv
x7qnaakIz42aQpeLI/Yjlpey+fmRLCqRbvmVsTuqBPNnGGbUi22MjIXOwFkF2DFb
N0C7c7bdJVg0Q4EANbNanOTMnpg+4p0/kSmCS+FzZTqHI2ej7RMcj/VU8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1A2lyPktv4dlitMhKJiVy+5jQ2MB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0SoZp2K
m2UaHaHOQfc44yHLLBhyNOU8qkivdsCjnAy+3Vaz3/olbDv2O49vMwO4g2psB6JF
hmbkSTobDO2VbACDgHdub+UN8oap0jekPVBl8S2zCtZ0arf5CGvpqSkPRm6Icxft
D4gnrBxMLXPtT3NaXBqXqXeiufgvqHbJmc4Aqnn5295N323/eZOqSHTrgO7wLQh6
TGuGDRhq76OiSPvV3LWVErvmx+mhwN1ICFd7giHss6BreosSl/EiyAcSQiF3o69h
FeHSXR65iJVGcNlKiWUf4WYmv7fKuNlGTElClj3OoSVqD5AHsF4fGR9pHfVAy044
MXBGABoA88EMWw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:11:37 2024 by rpki-client on console-fra.rpki-client.org