Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: fHp9Nhp9PdgTwGkBjlhT5bAOsyXwBjrD2lWjgFteW8s=
Subject key identifier: 58:AB:14:65:95:99:76:5B:2B:A9:39:B4:56:3B:78:04:1F:C2:72:D0
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 0193549BFE38D53AF4403DE39692B8276B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 074A
Signing time: Fri 22 Nov 2024 16:02:09 +0000
Manifest this update: Fri 22 Nov 2024 16:02:09 +0000
Manifest next update: Sat 23 Nov 2024 16:02:09 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: nz0U1DvoNqP0RpohVZWkZ1ttAvwMM1wk8iCf77RN+68=)
2: IvNcqRyi5pDhE7CryjlULF3uJk4.roa (hash: DPx/+6Hdtre18ORDL9NgXN7Fa0SpTiuyt/rGrM+3McI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:fe:38:d5:3a:f4:40:3d:e3:96:92:b8:27:6b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Nov 22 16:02:09 2024 GMT
Not After : Nov 23 16:02:09 2024 GMT
Subject: CN=58ab14659599765b2ba939b4563b78041fc272d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:bc:b7:60:0f:fd:17:b9:ea:71:e2:7a:05:
ae:8f:fb:fe:bf:33:f5:0c:b6:44:c9:aa:6a:a0:2e:
d9:d3:be:43:02:e9:c1:34:5b:a1:29:32:6a:91:a2:
d4:84:fd:e3:a8:af:59:2d:e6:1c:34:97:39:8a:c7:
5e:29:f0:ba:2e:d8:72:22:8f:04:0a:5a:b9:df:e2:
61:84:34:26:85:77:54:95:0c:83:af:a8:4b:1c:fc:
0c:42:1c:65:58:55:f6:5f:9a:9a:f7:e6:ed:a1:de:
94:84:b2:1a:4f:98:e3:4e:31:a9:67:15:75:3b:1f:
c1:eb:d7:48:a2:6e:71:bc:5c:ad:ed:59:46:85:7a:
5e:08:d2:cd:e1:eb:4d:d4:96:25:e6:5c:d2:30:9b:
0f:8f:4d:d4:2b:86:08:de:68:2b:93:40:b4:8b:9e:
64:fe:54:e6:52:12:79:68:05:c4:54:d0:6b:10:7c:
5b:4f:b7:c2:5e:da:26:32:0c:97:a9:01:3f:13:27:
5e:63:76:08:a1:b7:ca:47:00:e5:bf:03:8c:37:de:
6e:fd:9e:b1:8e:31:cf:89:25:6e:c1:b6:04:df:be:
37:bc:45:2d:b3:ee:1c:95:83:47:3d:4e:68:52:f4:
ac:2e:00:bd:77:0f:21:e5:6f:c2:ab:d4:6e:4a:d0:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:14:65:95:99:76:5B:2B:A9:39:B4:56:3B:78:04:1F:C2:72:D0
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:53:62:6d:bc:eb:f7:d5:b4:90:50:3e:50:c9:09:ea:16:b2:
b3:b6:10:84:7e:a9:f9:92:6c:47:a6:dc:2c:0f:5b:f6:08:dc:
0e:8b:07:83:69:39:b6:85:94:e2:b7:2b:ff:75:f8:dd:69:84:
78:ec:0e:30:22:84:07:15:18:5d:9d:30:4e:21:3d:a3:95:bb:
2d:41:7d:99:99:d8:5f:90:27:53:83:bf:41:03:e7:b8:a9:17:
8e:be:64:46:36:66:b4:62:32:4b:ad:d2:c1:97:71:f1:00:c4:
8c:c7:e6:d2:b2:ab:a8:24:0f:3f:21:d0:17:88:72:10:a0:fa:
fc:25:6d:99:66:1e:79:dd:9a:9e:80:e0:a1:0a:b3:73:34:87:
f1:79:f5:ec:97:18:af:0c:a7:db:17:2e:9e:68:a8:89:a8:07:
b6:6f:31:a5:18:cf:c4:c2:72:21:a0:54:d9:e7:cb:48:b7:be:
dc:b9:e2:e6:10:2a:6f:de:94:e8:30:94:7a:9d:53:53:75:f2:
80:4f:b1:7e:b8:08:1e:4f:e5:bb:9e:2d:04:7c:98:ec:8c:30:
1e:49:80:af:c9:6e:b4:25:25:72:33:6b:29:84:a7:64:8a:cd:
56:29:94:16:33:d3:40:52:69:6d:b5:93:d2:a5:08:71:c6:20:
87:4d:1a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm/441Tr0QD3jlpK4J2tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3
MWE5Y2IwHhcNMjQxMTIyMTYwMjA5WhcNMjQxMTIzMTYwMjA5WjAzMTEwLwYDVQQD
Eyg1OGFiMTQ2NTk1OTk3NjViMmJhOTM5YjQ1NjNiNzgwNDFmYzI3MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kq8t2AP/Re56nHiegWuj/v+vzP1
DLZEyapqoC7Z075DAunBNFuhKTJqkaLUhP3jqK9ZLeYcNJc5isdeKfC6LthyIo8E
Clq53+JhhDQmhXdUlQyDr6hLHPwMQhxlWFX2X5qa9+btod6UhLIaT5jjTjGpZxV1
Ox/B69dIom5xvFyt7VlGhXpeCNLN4etN1JYl5lzSMJsPj03UK4YI3mgrk0C0i55k
/lTmUhJ5aAXEVNBrEHxbT7fCXtomMgyXqQE/EydeY3YIobfKRwDlvwOMN95u/Z6x
jjHPiSVuwbYE3743vEUts+4clYNHPU5oUvSsLgC9dw8h5W/Cq9RuStD9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFirFGWVmXZbK6k5tFY7eAQfwnLQMB8GA1UdIwQY
MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt
Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4
LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFNibbzr
99W0kFA+UMkJ6hays7YQhH6p+ZJsR6bcLA9b9gjcDosHg2k5toWU4rcr/3X43WmE
eOwOMCKEBxUYXZ0wTiE9o5W7LUF9mZnYX5AnU4O/QQPnuKkXjr5kRjZmtGIyS63S
wZdx8QDEjMfm0rKrqCQPPyHQF4hyEKD6/CVtmWYeed2anoDgoQqzczSH8Xn17JcY
rwyn2xcunmioiagHtm8xpRjPxMJyIaBU2efLSLe+3Lni5hAqb96U6DCUep1TU3Xy
gE+xfrgIHk/lu54tBHyY7IwwHkmAr8lutCUlcjNrKYSnZIrNVimUFjPTQFJpbbWT
0qUIccYgh00aWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:07 2024 by rpki-client on console-fra.rpki-client.org