Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: SV0sWJgWwxqtuDzbV69i+zonm/bE0DuTXVgGCiZLzrI=
Subject key identifier: 7E:B9:53:4B:46:A9:30:25:28:52:35:5F:66:39:A2:29:46:4A:22:EA
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 0193523E1B0F697F1D35B274114CFE9B3BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 020A
Signing time: Fri 22 Nov 2024 05:00:22 +0000
Manifest this update: Fri 22 Nov 2024 05:00:22 +0000
Manifest next update: Sat 23 Nov 2024 05:00:22 +0000
Files and hashes: 1: biWMasp9BnMcdR8d7VeHQ93bwWM.roa (hash: Ds7i8+FGdlPmPJlZLaJSmwBZHbFUkKCgyRsdXKWrads=)
2: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: hDdexidch7Yr+GASskpXZ5SKfktdAyhBfnmCBhlO61s=)
3: wVE6M5Lg-x6vQIK0qEIkcnQrcIc.roa (hash: swdrEBS4YYGxg7F+vfcdDPVhEGwIL412cpJzZhqTcKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:1b:0f:69:7f:1d:35:b2:74:11:4c:fe:9b:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Nov 22 05:00:22 2024 GMT
Not After : Nov 23 05:00:22 2024 GMT
Subject: CN=7eb9534b46a930252852355f6639a229464a22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:63:5b:17:6b:2c:f4:db:03:37:67:38:0b:
c7:d9:b1:28:1e:bc:56:c3:d9:6b:c6:77:03:da:fb:
fd:a8:65:c4:ca:35:4d:ba:00:7a:ef:c5:53:3e:53:
23:e9:69:47:4b:a9:89:0a:e8:00:fe:fe:e9:6c:3f:
4a:a2:9f:98:53:be:ce:22:7d:a1:7d:35:68:5a:01:
70:3d:e9:91:eb:05:73:73:31:56:cf:25:fb:07:11:
b0:b2:39:9d:4c:df:68:3d:1d:ff:a7:0f:51:5e:5e:
c5:38:d7:42:24:a3:c6:ab:31:ee:1a:ec:cc:68:8f:
cf:14:ca:05:84:d0:a0:88:5e:11:de:9f:25:d1:09:
77:f6:3e:8d:3f:62:d5:cf:9a:51:cf:5e:86:d4:52:
18:e8:dd:58:45:27:fb:98:6f:e9:67:e1:da:6f:5c:
66:c0:e3:10:ac:66:81:45:b5:23:c4:d1:32:aa:97:
fa:3b:d6:27:c6:7f:12:e8:f2:5e:94:96:84:fd:6f:
67:8e:49:13:38:fb:d4:3d:e1:10:93:15:d0:e3:2d:
0c:8e:8b:51:ac:78:77:63:32:88:65:30:5b:0c:b8:
10:48:56:a2:e7:fd:ba:2c:15:06:f1:09:3e:83:7c:
3a:e2:61:10:75:ac:d2:29:2d:2c:57:1d:2c:c6:7d:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:53:4B:46:A9:30:25:28:52:35:5F:66:39:A2:29:46:4A:22:EA
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c0:39:aa:a4:e3:fc:f1:49:c2:f4:66:bd:c6:63:70:6a:b1:
c1:d3:71:55:9b:be:89:e9:d5:a9:53:b0:a1:1b:49:c8:19:d0:
5b:f4:e6:6b:c4:8e:48:b4:24:5a:a9:20:67:a9:08:6f:51:4b:
41:50:2b:ed:21:81:e0:bc:e6:c4:a1:f2:d3:d7:e6:6f:8f:83:
a5:b8:28:f1:a8:3f:22:dd:5c:99:b1:78:7b:25:3a:b4:65:43:
8e:a7:95:41:b8:8e:60:74:ad:43:a2:14:56:8e:a6:8f:a0:ce:
56:3e:61:1d:f3:54:18:3b:53:7a:b1:90:9e:ab:da:a6:2d:6e:
7f:e5:c9:2b:f5:b1:03:ae:b3:77:86:37:f2:ce:e0:0b:8f:01:
ca:b0:9d:74:6b:4a:f8:4a:50:69:70:aa:f4:21:b1:6e:9a:97:
3f:99:82:89:6d:37:6b:0d:92:e2:5f:1c:7d:ac:a2:30:78:41:
38:88:5b:68:a2:b2:f4:41:16:cc:99:b0:e4:f7:62:fb:93:f9:
34:96:09:2a:82:93:58:9f:1f:21:c4:f7:3b:6d:a2:a5:59:02:
7f:dc:fb:56:70:62:8b:97:aa:89:60:0f:55:a8:dd:6f:3a:cf:
ef:6f:90:44:9f:ef:30:db:14:02:9d:35:98:90:81:b9:61:1f:
85:91:03:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPhsPaX8dNbJ0EUz+mzv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0
NzQwOGMwHhcNMjQxMTIyMDUwMDIyWhcNMjQxMTIzMDUwMDIyWjAzMTEwLwYDVQQD
Eyg3ZWI5NTM0YjQ2YTkzMDI1Mjg1MjM1NWY2NjM5YTIyOTQ2NGEyMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVjWxdrLPTbAzdnOAvH2bEoHrxW
w9lrxncD2vv9qGXEyjVNugB678VTPlMj6WlHS6mJCugA/v7pbD9Kop+YU77OIn2h
fTVoWgFwPemR6wVzczFWzyX7BxGwsjmdTN9oPR3/pw9RXl7FONdCJKPGqzHuGuzM
aI/PFMoFhNCgiF4R3p8l0Ql39j6NP2LVz5pRz16G1FIY6N1YRSf7mG/pZ+Hab1xm
wOMQrGaBRbUjxNEyqpf6O9Ynxn8S6PJelJaE/W9njkkTOPvUPeEQkxXQ4y0MjotR
rHh3YzKIZTBbDLgQSFai5/26LBUG8Qk+g3w64mEQdazSKS0sVx0sxn3aHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH65U0tGqTAlKFI1X2Y5oilGSiLqMB8GA1UdIwQY
MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt
ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy
LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcA5qqTj
/PFJwvRmvcZjcGqxwdNxVZu+ienVqVOwoRtJyBnQW/Tma8SOSLQkWqkgZ6kIb1FL
QVAr7SGB4LzmxKHy09fmb4+Dpbgo8ag/It1cmbF4eyU6tGVDjqeVQbiOYHStQ6IU
Vo6mj6DOVj5hHfNUGDtTerGQnqvapi1uf+XJK/WxA66zd4Y38s7gC48ByrCddGtK
+EpQaXCq9CGxbpqXP5mCiW03aw2S4l8cfayiMHhBOIhbaKKy9EEWzJmw5Pdi+5P5
NJYJKoKTWJ8fIcT3O22ipVkCf9z7VnBii5eqiWAPVajdbzrP72+QRJ/vMNsUAp01
mJCBuWEfhZEDyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:10 2024 by rpki-client on console-ams.rpki-client.org