Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: d/rA473wbALdPeL7SCeYHykJUgahK25syXxEjnzyZA4=
Subject key identifier: 7F:99:F7:E1:E8:20:17:88:9B:96:DE:98:CD:F0:AB:62:19:72:07:41
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0193580915349CA55FA1BA6FD1168253C07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 0FA5
Signing time: Sat 23 Nov 2024 08:00:10 +0000
Manifest this update: Sat 23 Nov 2024 08:00:10 +0000
Manifest next update: Sun 24 Nov 2024 08:00:10 +0000
Files and hashes: 1: H_8RRu4X-CmicQuV7mUaFn0HP4A.roa (hash: pGDbI9djyKAvEWOI1/lEvd8/Yi/3HIC0wyvKyvv3AbU=)
2: NTTQXOe-KQNTX8GpVTq9DTybvwY.roa (hash: 7Q/izpjUfuI43NBSW+PFWtuOP1bn244NH82d5+luV8E=)
3: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: aZDmeBIf4INYNJR9ydz13sHKhopZhIolikwUC1K2/qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:15:34:9c:a5:5f:a1:ba:6f:d1:16:82:53:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Nov 23 08:00:10 2024 GMT
Not After : Nov 24 08:00:10 2024 GMT
Subject: CN=7f99f7e1e82017889b96de98cdf0ab6219720741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:fc:7e:57:ba:51:3e:5b:75:e5:1b:80:ea:
e0:ea:78:f7:47:a1:98:fa:6e:48:01:87:8b:5c:c5:
35:d9:07:33:0b:af:3d:74:1a:ba:7a:38:16:50:4c:
99:4d:87:08:06:f1:17:61:28:82:65:5e:c4:e3:ca:
92:b7:46:0e:1b:14:87:bd:48:b9:49:1c:c1:b7:1e:
03:df:8a:22:20:d0:e6:72:35:71:93:b9:c7:97:76:
ce:43:2d:70:dc:26:f0:4a:3a:59:27:8a:70:6a:ac:
61:f0:e5:55:2b:05:31:70:a3:8f:b7:17:bd:ec:70:
c0:b1:50:4d:c3:e0:cf:8c:5b:9c:83:7b:8f:17:1d:
09:46:fb:ff:8e:3c:42:63:4d:6d:af:03:cb:21:07:
fc:5a:cc:c6:f0:14:1c:39:24:09:ab:23:91:ea:14:
f5:07:8b:d4:31:a7:4f:75:f1:31:da:27:d1:d3:b5:
17:bc:77:b1:6a:05:35:fd:80:d7:fe:8f:70:f2:4e:
87:f2:3f:0b:53:1e:8d:53:fa:b7:56:9f:86:3a:ff:
e7:38:23:a6:17:48:e3:05:59:9f:b5:b8:62:4b:3a:
aa:69:81:87:89:0c:06:1e:6f:e3:dd:8f:f4:e1:5e:
c4:01:e4:21:06:2b:d5:76:54:35:77:5d:d2:3a:81:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:F7:E1:E8:20:17:88:9B:96:DE:98:CD:F0:AB:62:19:72:07:41
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:5c:c3:4d:e1:df:f5:41:b1:e4:c5:1c:86:94:ef:42:4c:
6c:a3:70:cf:17:9a:1c:2e:b8:e0:a4:c5:6e:35:6f:09:c4:0d:
83:91:5c:10:15:bc:20:c5:34:47:90:91:7e:2f:0f:73:b6:63:
02:8c:34:5f:5d:63:fa:b5:3c:7a:fb:9a:65:1a:6c:07:c8:88:
a9:a5:74:17:f8:7a:b9:e0:69:bf:5b:f3:89:72:c8:85:b6:b6:
d5:ad:b8:fd:7c:74:49:dd:42:f3:ff:a0:18:0f:8e:a9:8d:6c:
fc:ba:49:2f:7a:ea:a1:13:73:f5:2f:0d:93:74:fd:45:90:d4:
33:44:80:e7:fc:d8:b3:2d:96:0b:64:db:a0:85:6c:53:f3:6b:
83:cc:23:22:df:13:0c:05:59:6f:b0:2e:a8:d4:01:11:67:b2:
0d:e7:66:a3:7d:50:21:ba:48:76:e6:5e:3e:35:30:84:b8:55:
0c:3b:70:1f:aa:a3:82:14:bb:32:9b:d2:24:c1:52:88:ae:22:
1e:90:2a:db:45:e0:d8:66:bc:a5:6a:68:5b:98:58:65:3d:27:
87:fd:5d:5f:fa:7c:9f:3e:8c:78:ef:b6:ff:74:55:d1:5a:4d:
81:09:8c:9e:37:f0:3e:0d:d2:6e:9b:72:1b:b8:3c:97:15:11:
da:93:e1:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYCRU0nKVfobpv0RaCU8B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjQxMTIzMDgwMDEwWhcNMjQxMTI0MDgwMDEwWjAzMTEwLwYDVQQD
Eyg3Zjk5ZjdlMWU4MjAxNzg4OWI5NmRlOThjZGYwYWI2MjE5NzIwNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqH8fle6UT5bdeUbgOrg6nj3R6GY
+m5IAYeLXMU12QczC689dBq6ejgWUEyZTYcIBvEXYSiCZV7E48qSt0YOGxSHvUi5
SRzBtx4D34oiINDmcjVxk7nHl3bOQy1w3CbwSjpZJ4pwaqxh8OVVKwUxcKOPtxe9
7HDAsVBNw+DPjFucg3uPFx0JRvv/jjxCY01trwPLIQf8WszG8BQcOSQJqyOR6hT1
B4vUMadPdfEx2ifR07UXvHexagU1/YDX/o9w8k6H8j8LUx6NU/q3Vp+GOv/nOCOm
F0jjBVmftbhiSzqqaYGHiQwGHm/j3Y/04V7EAeQhBivVdlQ1d13SOoFGVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+Z9+HoIBeIm5bemM3wq2IZcgdBMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLZcw03h
3/VBseTFHIaU70JMbKNwzxeaHC644KTFbjVvCcQNg5FcEBW8IMU0R5CRfi8Pc7Zj
Aow0X11j+rU8evuaZRpsB8iIqaV0F/h6ueBpv1vziXLIhba21a24/Xx0Sd1C8/+g
GA+OqY1s/LpJL3rqoRNz9S8Nk3T9RZDUM0SA5/zYsy2WC2TboIVsU/Nrg8wjIt8T
DAVZb7AuqNQBEWeyDedmo31QIbpIduZePjUwhLhVDDtwH6qjghS7MpvSJMFSiK4i
HpAq20Xg2Ga8pWpoW5hYZT0nh/1dX/p8nz6MeO+2/3RV0VpNgQmMnjfwPg3Sbpty
G7g8lxUR2pPhGg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:33 2024 by rpki-client on console-ams.rpki-client.org