Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: jH4qaVKikUgktcNiODSgPm80Az7xXCIzJo1sslcUtwU=
Subject key identifier: A3:49:F9:08:1F:E3:21:E8:FF:18:F1:97:B7:0C:F5:16:0B:82:20:43
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019355763E11DAE162FEBDFB64F1B610287C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 20:00:32 +0000
Manifest this update: Fri 22 Nov 2024 20:00:32 +0000
Manifest next update: Sat 23 Nov 2024 20:00:32 +0000
Files and hashes: 1: _5xNTexb8bMlq1zVFv1eSL-_YFE.roa (hash: 5wSWYCGvysyYcKVIdm4LIhYsnOETRRyNf2eM0C+eL4g=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: uQuIbDRFHcZgDS6dxVs1iliQ+YUzFuNsLgfSOl8z33g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:3e:11:da:e1:62:fe:bd:fb:64:f1:b6:10:28:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Nov 22 20:00:32 2024 GMT
Not After : Nov 23 20:00:32 2024 GMT
Subject: CN=a349f9081fe321e8ff18f197b70cf5160b822043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:b3:81:8d:29:1f:7e:6e:3b:05:fa:ac:1c:
47:0b:29:0d:8f:05:b5:c3:02:00:8b:1d:38:5e:e4:
c7:58:5c:45:e0:b3:f8:e6:76:cc:ed:6f:6f:28:21:
ee:e0:e1:f3:60:bd:d8:d2:e9:48:7c:91:b6:cc:df:
10:c4:74:3b:0c:f5:a8:8e:6c:29:6f:73:a3:d0:ea:
7f:d2:12:b8:ff:f7:44:e4:ed:da:bb:3d:50:6a:08:
f7:28:d2:c1:38:c1:60:be:72:f5:20:c1:67:aa:58:
82:9d:b8:18:33:a3:00:c6:82:fd:55:94:1e:19:cd:
81:be:f9:aa:ba:7a:40:d4:aa:0f:9c:2b:8c:09:93:
ea:10:da:b9:8a:ad:28:97:e2:ff:aa:f2:13:72:a2:
f5:44:58:4a:6a:73:81:63:6b:21:76:2a:b2:a9:78:
2d:e5:c0:08:4a:af:47:e4:65:30:b3:bd:8a:e4:9e:
6a:7f:5d:90:7f:67:7c:9c:2d:2d:6f:d0:78:8e:e4:
7c:9b:7a:42:51:32:84:53:fa:4a:ab:ae:c0:35:5a:
04:67:d4:93:06:ec:36:20:6c:3b:02:13:27:f6:6a:
d0:aa:6a:61:88:ed:8c:7f:98:c0:6a:d9:1a:65:c1:
50:e3:81:f0:30:14:57:2d:87:52:f8:cf:17:90:f6:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:F9:08:1F:E3:21:E8:FF:18:F1:97:B7:0C:F5:16:0B:82:20:43
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:57:be:61:a6:71:8e:9b:9a:fb:a6:e5:cb:09:f6:95:a7:7e:
59:2a:d4:08:d9:3f:26:26:15:21:58:32:da:b7:30:59:4c:07:
9f:08:12:1a:3b:03:1a:8f:63:ba:3f:0b:42:1d:10:80:66:6a:
5d:e4:65:d2:c2:26:5b:eb:18:21:66:f8:2c:b1:b2:31:96:bc:
5e:a5:9a:a6:e5:6c:22:a3:5b:38:db:06:4f:62:62:28:f0:62:
42:33:3b:c0:a2:8c:cd:e8:0d:b8:a6:ed:83:d4:35:d5:8f:8b:
2c:47:83:bd:16:f4:3f:20:70:2c:73:27:29:ea:4a:97:81:73:
c1:10:fc:8b:ff:e7:58:5d:32:dc:34:e2:d7:4d:b9:2e:69:97:
53:cf:9f:cc:79:76:7d:99:2e:fc:a6:c5:7d:15:70:5c:35:4f:
a4:36:7b:b1:b9:ea:e7:33:ae:44:88:52:aa:47:53:84:b5:75:
46:0f:5a:df:71:7f:30:92:98:82:70:16:91:03:a3:9c:db:be:
ef:93:1f:58:9b:99:33:28:97:30:11:74:bd:87:e8:38:6d:f4:
69:c5:8c:0a:a5:a4:89:bd:ea:16:4a:6c:c4:9b:f8:00:05:b0:
45:00:01:95:79:0f:93:b4:1f:f7:bb:97:9f:3a:a9:13:51:02:
10:36:09:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdj4R2uFi/r37ZPG2ECh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTRlNjA3NTk3OGVhOTQ3NmI2NDFjZTAwOGM3ODdhYjI4
ZTVkMTMwHhcNMjQxMTIyMjAwMDMyWhcNMjQxMTIzMjAwMDMyWjAzMTEwLwYDVQQD
EyhhMzQ5ZjkwODFmZTMyMWU4ZmYxOGYxOTdiNzBjZjUxNjBiODIyMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw2zgY0pH35uOwX6rBxHCykNjwW1
wwIAix04XuTHWFxF4LP45nbM7W9vKCHu4OHzYL3Y0ulIfJG2zN8QxHQ7DPWojmwp
b3Oj0Op/0hK4//dE5O3auz1Qagj3KNLBOMFgvnL1IMFnqliCnbgYM6MAxoL9VZQe
Gc2BvvmqunpA1KoPnCuMCZPqENq5iq0ol+L/qvITcqL1RFhKanOBY2shdiqyqXgt
5cAISq9H5GUws72K5J5qf12Qf2d8nC0tb9B4juR8m3pCUTKEU/pKq67ANVoEZ9ST
Buw2IGw7AhMn9mrQqmphiO2Mf5jAatkaZcFQ44HwMBRXLYdS+M8XkPaOsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNJ+Qgf4yHo/xjxl7cM9RYLgiBDMB8GA1UdIwQY
MBaAFIHk5gdZeOqUdrZBzgCMeHqyjl0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgt
ODYyYjg2YjZlNjQyLzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgtODYyYjg2YjZlNjQy
LzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAble+YaZx
jpua+6blywn2lad+WSrUCNk/JiYVIVgy2rcwWUwHnwgSGjsDGo9juj8LQh0QgGZq
XeRl0sImW+sYIWb4LLGyMZa8XqWapuVsIqNbONsGT2JiKPBiQjM7wKKMzegNuKbt
g9Q11Y+LLEeDvRb0PyBwLHMnKepKl4FzwRD8i//nWF0y3DTi1025LmmXU8+fzHl2
fZku/KbFfRVwXDVPpDZ7sbnq5zOuRIhSqkdThLV1Rg9a33F/MJKYgnAWkQOjnNu+
75MfWJuZMyiXMBF0vYfoOG30acWMCqWkib3qFkpsxJv4AAWwRQABlXkPk7Qf97uX
nzqpE1ECEDYJmQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:40 2024 by rpki-client on console-ams.rpki-client.org