Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: GAh55+OhfpS4f452Xcug75Sl1BZesiirMTeYJ7S066k=
Subject key identifier: ED:34:ED:0C:D0:8B:CF:4A:4B:30:D9:B1:30:85:80:8C:54:E5:E1:98
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0193572D74A430F272FB4F6FD0AE5F71CBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0D74
Signing time: Sat 23 Nov 2024 04:00:16 +0000
Manifest this update: Sat 23 Nov 2024 04:00:16 +0000
Manifest next update: Sun 24 Nov 2024 04:00:16 +0000
Files and hashes: 1: BsXnfnKYf003ZMvtqeu1j-hijqs.roa (hash: u0YkyI8pGu4agK4ZiUE4TIk2v33nsDahwWYQ8mqz0vI=)
2: d7ajyhix5OYOHS5bjOMzFNdvvzU.roa (hash: iycL2Atn8bFBw3z0tiS1wbILZ7xAAP2xAVoS+7kUD+Y=)
3: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: clW1cCFMM0bxE2/IpIOqcZcXca2arAKSXXnHp3PDbnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:74:a4:30:f2:72:fb:4f:6f:d0:ae:5f:71:cb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Nov 23 04:00:16 2024 GMT
Not After : Nov 24 04:00:16 2024 GMT
Subject: CN=ed34ed0cd08bcf4a4b30d9b13085808c54e5e198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:67:21:49:df:d1:20:7a:e5:b7:72:ea:0b:
e0:b3:0e:57:12:ee:db:4f:5a:95:96:bb:34:7d:32:
a3:e5:bf:2a:f7:e3:f8:9c:28:fe:29:f1:51:6f:a4:
3d:54:bc:5d:73:8d:d4:2a:30:19:e2:83:90:3a:da:
01:cb:51:56:ed:7d:ee:fd:70:75:d2:0f:d5:68:84:
8d:97:07:7a:ec:7e:83:d7:02:3b:58:4f:3d:37:98:
e4:98:63:61:c4:ca:5c:a5:b3:6f:ca:8e:89:c9:53:
2b:cd:d4:65:5e:92:61:ec:25:f7:80:ef:9d:42:14:
51:f7:a3:64:99:58:c3:3b:76:ae:c5:07:b2:12:1f:
b1:2f:ca:b2:56:c9:4f:27:c3:59:4b:35:c8:15:b0:
be:d4:50:48:32:b9:71:b5:18:1f:63:91:e2:fc:cc:
a6:50:90:a7:71:e8:46:2e:aa:3b:12:0c:e9:fa:15:
07:1e:eb:a1:66:4b:c0:fb:31:42:55:63:21:27:8e:
2b:dd:7c:bb:c7:9d:e6:dc:af:76:27:b4:9c:c7:ce:
00:96:6c:ca:01:c2:66:74:93:f2:c5:9b:0d:fa:ee:
bf:d4:a9:cc:08:57:93:8f:46:bd:42:88:d9:a9:56:
62:cc:12:23:83:4d:92:2e:ec:d1:14:6e:03:60:aa:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:34:ED:0C:D0:8B:CF:4A:4B:30:D9:B1:30:85:80:8C:54:E5:E1:98
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:be:04:f8:90:38:e0:2f:88:ca:ce:ce:84:e3:e5:18:d2:
96:40:52:7c:ba:5e:c9:3a:d5:e7:3e:12:4b:e8:22:41:9d:39:
95:78:c6:0c:4d:fa:a1:81:f3:6d:9f:59:69:2c:e6:4b:b8:5e:
27:f4:9e:69:04:5f:2e:9a:60:b8:4a:e9:18:b1:54:d1:65:94:
84:f1:0f:a5:1a:41:b6:98:a0:fa:09:96:d5:7b:0c:3b:0f:54:
fc:e9:38:1b:c1:4e:95:47:b6:a5:7b:fb:41:40:bd:44:d6:76:
69:5b:11:e4:04:49:b6:af:90:c0:19:a9:d8:62:00:57:9e:1d:
a1:42:97:72:75:23:2b:c5:3f:00:b4:3c:c0:0a:6e:0c:29:a6:
e1:be:9c:73:59:46:2f:4f:28:13:22:83:59:21:e5:3c:1f:17:
c2:a7:7f:5f:a3:10:f0:8d:94:04:1e:71:4b:eb:27:dc:78:d0:
76:58:5d:b9:4c:37:36:2d:4a:37:6f:7a:2b:1a:7f:3e:25:f6:
6d:a9:ab:9a:37:75:85:48:42:01:a2:c3:5f:37:23:e9:e4:bf:
9d:0f:4c:04:c6:ba:ac:b4:b8:af:0f:50:2b:f5:f1:40:e6:1f:
4a:06:82:e1:41:03:03:4f:37:d9:02:2d:cc:f3:ec:80:a0:56:
1b:8f:a3:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLXSkMPJy+09v0K5fccv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy
YjMwMjcwHhcNMjQxMTIzMDQwMDE2WhcNMjQxMTI0MDQwMDE2WjAzMTEwLwYDVQQD
EyhlZDM0ZWQwY2QwOGJjZjRhNGIzMGQ5YjEzMDg1ODA4YzU0ZTVlMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnpnIUnf0SB65bdy6gvgsw5XEu7b
T1qVlrs0fTKj5b8q9+P4nCj+KfFRb6Q9VLxdc43UKjAZ4oOQOtoBy1FW7X3u/XB1
0g/VaISNlwd67H6D1wI7WE89N5jkmGNhxMpcpbNvyo6JyVMrzdRlXpJh7CX3gO+d
QhRR96NkmVjDO3auxQeyEh+xL8qyVslPJ8NZSzXIFbC+1FBIMrlxtRgfY5Hi/Mym
UJCncehGLqo7Egzp+hUHHuuhZkvA+zFCVWMhJ44r3Xy7x53m3K92J7Scx84AlmzK
AcJmdJPyxZsN+u6/1KnMCFeTj0a9QojZqVZizBIjg02SLuzRFG4DYKp8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO007QzQi89KSzDZsTCFgIxU5eGYMB8GA1UdIwQY
MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt
OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2
LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACT++BPiQ
OOAviMrOzoTj5RjSlkBSfLpeyTrV5z4SS+giQZ05lXjGDE36oYHzbZ9ZaSzmS7he
J/SeaQRfLppguErpGLFU0WWUhPEPpRpBtpig+gmW1XsMOw9U/Ok4G8FOlUe2pXv7
QUC9RNZ2aVsR5ARJtq+QwBmp2GIAV54doUKXcnUjK8U/ALQ8wApuDCmm4b6cc1lG
L08oEyKDWSHlPB8Xwqd/X6MQ8I2UBB5xS+sn3HjQdlhduUw3Ni1KN296Kxp/PiX2
bamrmjd1hUhCAaLDXzcj6eS/nQ9MBMa6rLS4rw9QK/XxQOYfSgaC4UEDA0832QIt
zPPsgKBWG4+jiw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:48 2024 by rpki-client on console-fra.rpki-client.org