Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: N9u0VgE9X2Su7woAE2Cw2KFDXIQt+unQRxtxcn5Hyko=
Subject key identifier: B3:83:F3:9A:B4:7C:7F:52:93:A7:A3:7D:B8:C3:1E:8B:9D:4F:63:C0
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 01936AB4B0092D4D5FFF4D06EE86299674A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 01D6
Signing time: Tue 26 Nov 2024 23:00:46 +0000
Manifest this update: Tue 26 Nov 2024 23:00:46 +0000
Manifest next update: Wed 27 Nov 2024 23:00:46 +0000
Files and hashes: 1: 6PXgUBKTZCIOw13uQ-Fwm6UfGJo.roa (hash: tH4Nm9qGIS1vGAGhnvmQeVPMFAPiBrDLDuHOdaIwL7I=)
2: Ic-u24aNdkMdE0xtpojKmIhAGXg.roa (hash: 9CuGqkLGq7Iw9i8uRHj1o4NDPIQMahS9frHepmZBZz0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: ywuzt3fr/l4I5pGMFkYNgHjFJWzP9rCBSXAJkW2BdY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b0:09:2d:4d:5f:ff:4d:06:ee:86:29:96:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Nov 26 23:00:46 2024 GMT
Not After : Nov 27 23:00:46 2024 GMT
Subject: CN=b383f39ab47c7f5293a7a37db8c31e8b9d4f63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:1a:5c:d0:0c:e6:7a:cc:45:37:a8:fd:b1:
4a:fb:53:80:04:63:13:46:4b:6a:9b:04:cd:3b:cb:
81:52:24:f3:56:33:96:b0:f1:4e:c1:20:8e:34:fd:
59:b9:3e:0c:f6:e3:9a:65:8a:02:71:db:3f:0c:d3:
28:1c:80:66:73:8f:4b:ae:52:48:7f:59:9a:e7:9d:
c6:eb:78:93:a7:01:fe:c6:d3:0a:1e:dd:55:5e:6b:
14:04:09:85:fb:7e:13:63:a3:83:fa:b5:06:5e:96:
a8:69:56:1c:83:12:ac:86:17:d4:58:cc:7f:7e:3d:
94:97:dd:3f:c9:ac:d2:e1:d1:c3:c1:41:55:bd:98:
e9:ea:f0:00:d3:60:f7:fb:8a:e6:f5:96:a5:43:9f:
8b:4c:23:c5:35:58:3b:77:2c:a8:79:55:4a:a9:b0:
ad:d3:85:59:cd:9d:c8:5c:79:0d:74:3e:c6:17:eb:
56:51:8a:65:80:53:9f:80:d7:32:e2:cb:ce:bf:37:
99:88:8f:d1:04:f9:b6:2f:ad:7b:64:31:9e:a1:38:
b0:2a:87:bd:37:6c:5e:1b:62:c3:6c:4f:ec:18:a8:
d5:d4:47:56:ad:cf:96:44:9d:00:08:1a:ea:fd:f8:
a3:a2:37:e9:d8:fb:64:14:d1:a0:8f:c5:fa:b3:05:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:F3:9A:B4:7C:7F:52:93:A7:A3:7D:B8:C3:1E:8B:9D:4F:63:C0
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:15:66:42:e4:b4:4a:9a:b0:a7:f7:9c:13:d1:f9:4f:e0:f1:
ea:af:c2:3a:5f:e0:3c:4e:01:a7:27:63:14:f6:99:51:4e:c4:
e5:b0:64:c5:16:6d:5d:e3:45:aa:27:1c:85:93:82:a4:9b:5a:
35:2f:bd:81:7b:a1:06:61:1d:99:41:27:7c:fc:5b:f2:7b:7b:
a1:6c:c7:14:57:9e:b6:3f:04:1a:79:26:b0:7c:ab:e7:79:bd:
c5:66:07:d1:9f:ff:74:08:04:52:19:ce:46:e8:54:15:96:bd:
e0:9a:8d:d8:dc:2d:ff:56:6e:5c:a3:7e:7b:95:96:ba:de:94:
0d:31:27:d1:53:eb:33:65:60:1e:5c:83:d3:e9:a3:76:1d:22:
15:0d:ea:a6:a5:dd:58:fd:30:11:4b:5b:5d:24:9b:95:fc:60:
10:b2:d0:cc:df:72:4b:95:3d:65:f3:33:c3:de:8d:e4:80:e6:
84:94:b6:f6:75:79:50:f1:c9:d6:ec:d9:f7:24:17:49:c9:39:
5f:63:ce:df:7b:7b:c4:5f:cd:73:6d:02:51:4d:2f:f6:76:fb:
4a:b3:df:fa:16:2e:4c:8f:d6:64:d4:ec:9e:6e:dc:8f:cb:3e:
48:0a:e4:29:a8:b0:74:87:5a:e5:87:f0:dc:56:51:d3:81:23:
0e:48:23:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtLAJLU1f/00G7oYplnSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjQxMTI2MjMwMDQ2WhcNMjQxMTI3MjMwMDQ2WjAzMTEwLwYDVQQD
EyhiMzgzZjM5YWI0N2M3ZjUyOTNhN2EzN2RiOGMzMWU4YjlkNGY2M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHoaXNAM5nrMRTeo/bFK+1OABGMT
RktqmwTNO8uBUiTzVjOWsPFOwSCONP1ZuT4M9uOaZYoCcds/DNMoHIBmc49LrlJI
f1ma553G63iTpwH+xtMKHt1VXmsUBAmF+34TY6OD+rUGXpaoaVYcgxKshhfUWMx/
fj2Ul90/yazS4dHDwUFVvZjp6vAA02D3+4rm9ZalQ5+LTCPFNVg7dyyoeVVKqbCt
04VZzZ3IXHkNdD7GF+tWUYplgFOfgNcy4svOvzeZiI/RBPm2L617ZDGeoTiwKoe9
N2xeG2LDbE/sGKjV1EdWrc+WRJ0ACBrq/fijojfp2PtkFNGgj8X6swU7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOD85q0fH9Sk6ejfbjDHoudT2PAMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhVmQuS0
Spqwp/ecE9H5T+Dx6q/COl/gPE4BpydjFPaZUU7E5bBkxRZtXeNFqicchZOCpJta
NS+9gXuhBmEdmUEnfPxb8nt7oWzHFFeetj8EGnkmsHyr53m9xWYH0Z//dAgEUhnO
RuhUFZa94JqN2Nwt/1ZuXKN+e5WWut6UDTEn0VPrM2VgHlyD0+mjdh0iFQ3qpqXd
WP0wEUtbXSSblfxgELLQzN9yS5U9ZfMzw96N5IDmhJS29nV5UPHJ1uzZ9yQXSck5
X2PO33t7xF/Nc20CUU0v9nb7SrPf+hYuTI/WZNTsnm7cj8s+SArkKaiwdIda5Yfw
3FZR04EjDkgj0Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:58 2024 by rpki-client on console-fra.rpki-client.org