Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: fNzX9rl4EehznuY5koay3bY0U8SNN6XKqHQvuA8pGoE=
Subject key identifier: 8C:28:EF:4E:05:6C:21:2C:42:F9:D1:F2:B8:7C:3D:49:9F:00:8C:1F
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 01936A46B8941F5C0354FC4FC6ECEFCA6AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0568
Signing time: Tue 26 Nov 2024 21:00:39 +0000
Manifest this update: Tue 26 Nov 2024 21:00:39 +0000
Manifest next update: Wed 27 Nov 2024 21:00:39 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: BDDHHFxEIsylk70t2dwEccCmsjWShslcyip14lFHNQ4=)
2: 4-3kj-D14e3EK4sJ-up5ng2XrhI.roa (hash: heHDVmqt3D7pwz3N+6R11nATahu4prWnElQnPRhGA9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:b8:94:1f:5c:03:54:fc:4f:c6:ec:ef:ca:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Nov 26 21:00:39 2024 GMT
Not After : Nov 27 21:00:39 2024 GMT
Subject: CN=8c28ef4e056c212c42f9d1f2b87c3d499f008c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:65:96:6c:ca:ac:d2:8a:23:9c:05:47:d5:
20:bb:d3:e1:c5:ee:06:ba:38:d5:31:0e:da:cc:93:
c8:48:a6:9e:4c:52:95:78:10:4e:60:6c:d6:5a:94:
1c:a7:68:d7:c3:c9:94:93:b3:2a:37:da:8d:8a:2a:
4e:06:70:b2:9b:f5:17:f1:67:57:f4:29:00:8a:d6:
53:49:a9:86:60:cc:e2:07:e3:44:ca:13:b1:13:3b:
25:a7:fa:db:79:65:a5:46:1c:12:ef:2c:25:5f:54:
69:a8:b2:0e:72:ad:cf:cc:b1:d4:82:69:65:b9:ca:
c5:7a:e6:f0:60:1a:4f:ec:ee:fb:6f:7b:2c:f3:1f:
b2:9d:a6:87:5b:01:c5:ad:54:14:f9:df:30:d3:13:
cf:94:e4:a3:21:17:ca:fb:d4:16:d2:ec:da:31:2b:
39:94:49:55:2a:8e:57:bf:87:92:d3:91:91:55:9b:
a7:f4:ec:80:69:6a:d2:e5:f5:db:e9:3b:63:3a:9f:
1c:a9:81:8a:9f:63:d6:d1:7a:32:40:d7:80:66:2f:
dd:96:3f:09:f4:c6:84:98:d3:0d:c4:07:29:d1:fa:
e6:c9:56:cf:69:84:69:2c:89:c1:62:bb:b8:b3:a0:
95:26:f5:44:76:40:8c:24:66:c4:e1:1b:18:eb:bc:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:EF:4E:05:6C:21:2C:42:F9:D1:F2:B8:7C:3D:49:9F:00:8C:1F
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d0:93:fb:d2:b3:d1:69:d4:29:20:5c:e7:16:fa:0c:7a:0f:
af:33:eb:e6:12:7e:66:2c:6d:de:7c:f3:9b:58:45:09:e1:64:
bc:94:1c:24:76:5c:10:f3:0b:c7:55:ad:e5:8a:76:22:f2:c4:
67:42:59:95:c8:97:92:be:ff:4b:f9:8a:30:b2:d1:c4:cf:44:
8a:e3:ae:1c:c1:54:90:93:a4:2b:c0:2a:7e:30:5c:bd:cb:b4:
0c:91:f7:68:3f:82:ef:e0:d0:b7:fc:bb:c5:9e:d6:f3:0e:ac:
64:7a:f5:c8:1d:b1:41:85:50:57:ce:86:6f:0c:ef:ea:19:2a:
32:f7:58:2f:8c:c8:c2:61:49:05:21:c8:cd:0a:88:82:49:03:
07:22:b9:14:7a:34:7d:96:f5:0e:f6:06:8f:e9:b1:84:87:71:
9c:17:35:70:08:b8:98:74:00:fd:d5:b1:a2:64:c6:66:1a:c3:
0d:e7:58:0c:04:e8:ba:a8:93:bd:10:93:ed:18:b5:92:f1:6b:
a7:e4:13:b9:01:2a:eb:17:40:cf:17:8c:58:4a:21:ac:45:24:
f5:9a:c0:86:0a:a1:05:5c:29:30:37:8f:02:f5:3e:c9:39:4b:
fa:6b:4b:cd:a0:5d:f9:a8:42:78:9a:21:0b:78:68:bc:ec:ff:
03:f1:49:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRriUH1wDVPxPxuzvymrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk
ODE5MjYwHhcNMjQxMTI2MjEwMDM5WhcNMjQxMTI3MjEwMDM5WjAzMTEwLwYDVQQD
Eyg4YzI4ZWY0ZTA1NmMyMTJjNDJmOWQxZjJiODdjM2Q0OTlmMDA4YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHlllmzKrNKKI5wFR9Ugu9Phxe4G
ujjVMQ7azJPISKaeTFKVeBBOYGzWWpQcp2jXw8mUk7MqN9qNiipOBnCym/UX8WdX
9CkAitZTSamGYMziB+NEyhOxEzslp/rbeWWlRhwS7ywlX1RpqLIOcq3PzLHUgmll
ucrFeubwYBpP7O77b3ss8x+ynaaHWwHFrVQU+d8w0xPPlOSjIRfK+9QW0uzaMSs5
lElVKo5Xv4eS05GRVZun9OyAaWrS5fXb6TtjOp8cqYGKn2PW0XoyQNeAZi/dlj8J
9MaEmNMNxAcp0frmyVbPaYRpLInBYru4s6CVJvVEdkCMJGbE4RsY67waFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwo704FbCEsQvnR8rh8PUmfAIwfMB8GA1UdIwQY
MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt
Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw
LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9CT+9Kz
0WnUKSBc5xb6DHoPrzPr5hJ+Zixt3nzzm1hFCeFkvJQcJHZcEPMLx1Wt5Yp2IvLE
Z0JZlciXkr7/S/mKMLLRxM9EiuOuHMFUkJOkK8AqfjBcvcu0DJH3aD+C7+DQt/y7
xZ7W8w6sZHr1yB2xQYVQV86Gbwzv6hkqMvdYL4zIwmFJBSHIzQqIgkkDByK5FHo0
fZb1DvYGj+mxhIdxnBc1cAi4mHQA/dWxomTGZhrDDedYDATouqiTvRCT7Ri1kvFr
p+QTuQEq6xdAzxeMWEohrEUk9ZrAhgqhBVwpMDePAvU+yTlL+mtLzaBd+ahCeJoh
C3hovOz/A/FJtg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:09 2024 by rpki-client on console-ams.rpki-client.org