Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File: EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier: lP+b4892NS8r/5r5ToeVrnZWtBNpKBXIV0xpcJcir1k=
Subject key identifier: 59:C3:B2:22:76:2F:E4:5A:63:08:2F:4B:94:46:BC:98:2F:29:40:D4
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 019356F7199FDF4B3B4FB358D9490641A075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 03:00:54 +0000
Manifest this update: Sat 23 Nov 2024 03:00:54 +0000
Manifest next update: Sun 24 Nov 2024 03:00:54 +0000
Files and hashes: 1: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: tSF4DLE1mnzxOotmDLKgZMtDMKZJuJ0k3O6osznDumk=)
2: hl0lHn_RunVv_xWWc3-H_tnGnp4.roa (hash: iemrdXOE7oL8FSdpdQNAs+21piAHusaiJZ+l7Ib4HQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:19:9f:df:4b:3b:4f:b3:58:d9:49:06:41:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Nov 23 03:00:54 2024 GMT
Not After : Nov 24 03:00:54 2024 GMT
Subject: CN=59c3b222762fe45a63082f4b9446bc982f2940d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:5e:80:de:14:b7:75:da:f4:40:b6:a1:ba:
1f:0b:5f:3d:53:7c:1e:a8:84:bd:72:42:40:b6:26:
c9:6e:f2:ad:b8:68:18:3c:8e:7d:83:50:74:20:b5:
bd:a3:06:76:8a:c4:54:2c:97:bd:17:5a:9e:a5:70:
28:4a:e1:8c:11:5b:4d:fb:4b:7c:c7:f8:54:16:98:
10:5a:7c:3e:81:11:1d:79:16:5b:9f:1e:df:b0:40:
4b:05:30:ae:9d:17:0e:82:23:9f:48:84:76:46:37:
f2:13:44:b4:c6:b6:a5:c8:5e:0a:ab:6a:69:70:cb:
9e:4c:95:1d:51:f8:ef:02:15:07:32:fc:e7:b0:02:
f3:47:75:e2:dd:a7:5f:67:c2:ec:d8:6c:ce:69:33:
67:6a:d4:ee:3a:e2:2c:77:d9:f1:7c:7b:27:bd:bc:
19:d8:dd:6e:1e:82:54:82:e1:d0:a1:af:06:52:71:
33:48:6b:d0:0a:c6:7b:a4:5c:1e:5a:d6:6a:dd:21:
34:de:05:2d:66:b1:83:57:6e:47:e0:72:9a:d8:cd:
e1:c8:be:5f:c4:37:d3:35:1d:53:87:55:f4:0e:94:
a6:2d:b6:bd:97:c6:fd:be:87:c6:61:2d:96:cc:7b:
5a:74:b7:24:ee:e6:12:37:73:d5:78:c8:cf:2e:7b:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:B2:22:76:2F:E4:5A:63:08:2F:4B:94:46:BC:98:2F:29:40:D4
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:0f:89:45:4a:9a:c7:77:b8:3d:a3:9d:af:42:19:ee:d7:
de:4d:bd:3c:79:26:dc:c5:6d:1a:fe:d3:65:78:0a:18:d6:b4:
1d:0e:56:97:55:4c:b3:d2:51:ec:e1:3f:41:1e:02:26:52:94:
41:8a:70:fc:64:d6:e8:94:e6:9d:5c:9d:c0:3d:13:66:3e:28:
c6:36:0e:67:96:8f:c5:1f:59:c7:55:df:b0:38:16:02:d6:86:
22:db:80:93:9b:08:40:de:c1:c9:ed:70:a7:3b:84:cf:3a:19:
a5:11:ff:95:07:60:5a:f0:7b:ff:85:3a:31:62:ba:6e:59:d8:
df:ff:9a:c3:2d:1d:af:17:40:df:69:60:d4:5c:79:87:90:02:
ea:a1:14:5f:33:a9:fe:4c:4b:81:29:f4:97:85:fd:b9:2f:1d:
ac:72:88:5f:a0:18:a6:3e:3c:26:56:a5:95:94:11:15:44:d9:
60:60:23:77:86:81:f4:3a:1c:b9:a0:11:02:56:e1:4b:ee:88:
36:d6:bf:ed:50:15:26:36:1d:97:ab:cc:0a:a1:a7:a2:bb:bc:
dc:cf:24:f8:30:b7:97:bd:75:26:32:1c:56:a5:fd:e7:1c:1a:
61:55:8d:6a:20:99:60:36:d7:24:ec:58:77:2a:67:7d:d0:27:
f9:86:42:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9xmf30s7T7NY2UkGQaB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMDc5M2UyNGE2NzIwMWY3ZDUyYjY1NjY4NmY0M2RhZGUz
YTEzOTIwHhcNMjQxMTIzMDMwMDU0WhcNMjQxMTI0MDMwMDU0WjAzMTEwLwYDVQQD
Eyg1OWMzYjIyMjc2MmZlNDVhNjMwODJmNGI5NDQ2YmM5ODJmMjk0MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8hegN4Ut3Xa9EC2obofC189U3we
qIS9ckJAtibJbvKtuGgYPI59g1B0ILW9owZ2isRULJe9F1qepXAoSuGMEVtN+0t8
x/hUFpgQWnw+gREdeRZbnx7fsEBLBTCunRcOgiOfSIR2RjfyE0S0xralyF4Kq2pp
cMueTJUdUfjvAhUHMvznsALzR3Xi3adfZ8Ls2GzOaTNnatTuOuIsd9nxfHsnvbwZ
2N1uHoJUguHQoa8GUnEzSGvQCsZ7pFweWtZq3SE03gUtZrGDV25H4HKa2M3hyL5f
xDfTNR1Th1X0DpSmLba9l8b9vofGYS2WzHtadLck7uYSN3PVeMjPLnsJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnDsiJ2L+RaYwgvS5RGvJgvKUDUMB8GA1UdIwQY
MBaAFBMHk+JKZyAffVK2VmhvQ9reOhOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGIt
OGJkZjk4YzBjOGYwLzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85MzRlZjgtMGNiNS00YzU5LTliOGItOGJkZjk4YzBjOGYw
LzEvRXdlVDRrcG5JQjk5VXJaV2FHOUQydDQ2RTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/QPiUVK
msd3uD2jna9CGe7X3k29PHkm3MVtGv7TZXgKGNa0HQ5Wl1VMs9JR7OE/QR4CJlKU
QYpw/GTW6JTmnVydwD0TZj4oxjYOZ5aPxR9Zx1XfsDgWAtaGItuAk5sIQN7Bye1w
pzuEzzoZpRH/lQdgWvB7/4U6MWK6blnY3/+awy0drxdA32lg1Fx5h5AC6qEUXzOp
/kxLgSn0l4X9uS8drHKIX6AYpj48JlallZQRFUTZYGAjd4aB9DocuaARAlbhS+6I
Nta/7VAVJjYdl6vMCqGnoru83M8k+DC3l711JjIcVqX95xwaYVWNaiCZYDbXJOxY
dypnfdAn+YZCrA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:02 2024 by rpki-client on console-ams.rpki-client.org