Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: ZtB8SnHMrC2A10t4xvnzKH1vk9kVflRhpj/y/kVRaRM=
Subject key identifier: B3:1B:8D:25:94:3D:D7:9A:42:FE:71:52:FF:1E:4A:7E:12:3C:8A:99
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0193549CC14AF5326E1375E24DBA751484AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 1006
Signing time: Fri 22 Nov 2024 16:02:59 +0000
Manifest this update: Fri 22 Nov 2024 16:02:59 +0000
Manifest next update: Sat 23 Nov 2024 16:02:59 +0000
Files and hashes: 1: 0Pe35IPu0g7sXCJZwLBLy1tHo-s.roa (hash: g+oFRbxupl8j/qAfRa9GiWRsj5x3EmayfKtS8X0miwQ=)
2: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: zwJDEi3qNbBXoHvm/l56oBgZ5bAAFe7i+yZZ120+XEo=)
3: xliANCt49iI2_u-jDN_qmqO4woI.roa (hash: KB2NA65afl5vZKoUN0Sktfu90zovLQgnUFNFR5wKtoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:c1:4a:f5:32:6e:13:75:e2:4d:ba:75:14:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Nov 22 16:02:59 2024 GMT
Not After : Nov 23 16:02:59 2024 GMT
Subject: CN=b31b8d25943dd79a42fe7152ff1e4a7e123c8a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:7c:8d:e2:fd:43:10:ae:6a:78:d2:3b:55:
63:f2:20:b7:81:a7:0d:b3:77:b5:7e:27:df:92:7b:
95:1e:49:cc:d4:5d:3a:0e:87:b2:da:3b:d6:e9:bd:
bd:38:16:5c:c7:ac:7a:d2:11:59:8b:ac:18:15:38:
24:06:70:c5:ca:b7:59:27:aa:26:3f:3b:bd:f5:92:
8c:06:77:e4:77:09:75:96:26:00:13:3f:20:6d:3e:
11:ea:a3:13:cc:9a:7d:7a:4f:2c:c7:cf:f4:13:29:
dd:8e:41:70:8b:a6:9c:aa:c6:bd:66:c0:b7:de:2a:
3f:34:2c:65:02:76:b7:84:44:6b:ec:d1:b4:cd:a7:
0d:7b:e5:37:68:72:ac:dd:29:42:3a:3b:ed:67:f7:
52:dd:c4:15:26:3f:ee:47:37:7b:bb:1d:d8:3d:7a:
b6:c3:1d:88:17:4b:fa:16:66:7b:23:79:72:12:3f:
96:c6:25:65:ad:a7:fd:a0:7e:76:2b:0b:9b:e6:83:
aa:5d:d4:ac:7f:84:fe:dd:77:9b:f0:70:cd:ff:1f:
63:8e:24:02:a8:36:cd:c4:c3:60:36:0d:b9:a1:0f:
86:cd:5b:0d:82:40:4f:00:08:ce:90:5d:76:86:b7:
1e:e3:dc:ae:17:95:e1:35:a2:6b:4b:f5:95:6a:c8:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:8D:25:94:3D:D7:9A:42:FE:71:52:FF:1E:4A:7E:12:3C:8A:99
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:bf:00:d8:0f:32:05:c5:ca:a0:0a:3f:1a:e1:74:6b:fa:
a5:81:2b:5e:95:0d:5f:84:e2:38:23:4f:4d:bf:d3:b0:11:85:
10:f2:62:9f:7f:86:98:71:13:e9:2f:d4:eb:84:d0:96:70:30:
62:95:c5:96:28:d9:a9:0c:e5:8b:ee:a2:ec:26:a9:71:54:53:
1a:a3:13:e9:7c:bb:c7:ff:d9:f3:1a:03:ac:67:33:01:ed:0a:
11:ce:97:ee:46:85:9b:3b:7f:85:c2:7b:91:a5:95:a1:d6:c6:
c0:1c:0a:82:02:d9:e0:51:e1:a7:cb:04:59:f3:5c:52:5a:38:
97:60:c8:b7:59:ef:88:a8:67:46:80:16:6e:9d:c5:36:e7:18:
11:11:1a:8e:19:24:5c:80:9c:72:99:03:30:88:8a:38:c3:b2:
f9:01:67:b1:a4:ec:59:77:d5:f7:fd:9e:0b:2b:b4:f9:1e:4e:
c0:a8:66:ad:1f:fe:b1:26:45:7a:6c:ab:04:ed:9e:f9:14:e0:
8c:ab:d2:c4:9a:25:c3:a4:a0:bb:9e:b6:89:a3:df:79:93:24:
7b:30:df:b4:6b:0b:8a:14:03:6f:dd:0b:37:dd:59:e2:f9:1d:
72:28:7e:dd:45:99:e3:a7:75:b7:fd:24:83:98:6f:f8:37:31:
a2:7d:ad:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnMFK9TJuE3XiTbp1FISqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTM3MjAwYzllYTE1NjBhM2Y0MmZkN2UxMDBlZDI4NDEx
NDE2YmMwHhcNMjQxMTIyMTYwMjU5WhcNMjQxMTIzMTYwMjU5WjAzMTEwLwYDVQQD
EyhiMzFiOGQyNTk0M2RkNzlhNDJmZTcxNTJmZjFlNGE3ZTEyM2M4YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDV8jeL9QxCuanjSO1Vj8iC3gacN
s3e1fiffknuVHknM1F06Doey2jvW6b29OBZcx6x60hFZi6wYFTgkBnDFyrdZJ6om
Pzu99ZKMBnfkdwl1liYAEz8gbT4R6qMTzJp9ek8sx8/0EyndjkFwi6acqsa9ZsC3
3io/NCxlAna3hERr7NG0zacNe+U3aHKs3SlCOjvtZ/dS3cQVJj/uRzd7ux3YPXq2
wx2IF0v6FmZ7I3lyEj+WxiVlraf9oH52Kwub5oOqXdSsf4T+3Xeb8HDN/x9jjiQC
qDbNxMNgNg25oQ+GzVsNgkBPAAjOkF12hrce49yuF5XhNaJrS/WVasjlMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMbjSWUPdeaQv5xUv8eSn4SPIqZMB8GA1UdIwQY
MBaAFI8TcgDJ6hVgo/Qv1+EA7ShBFBa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhOeUFNbnFGV0NqOUNfWDRRRHRLRUVVRnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZGJiYWItNWVkYy00YTE0LWIwZTct
ZWI4MDIyMWU1MzhkLzEvanhOeUFNbnFGV0NqOUNfWDRRRHRLRUVVRnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kZGJiYWItNWVkYy00YTE0LWIwZTctZWI4MDIyMWU1Mzhk
LzEvanhOeUFNbnFGV0NqOUNfWDRRRHRLRUVVRnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxC/ANgP
MgXFyqAKPxrhdGv6pYErXpUNX4TiOCNPTb/TsBGFEPJin3+GmHET6S/U64TQlnAw
YpXFlijZqQzli+6i7CapcVRTGqMT6Xy7x//Z8xoDrGczAe0KEc6X7kaFmzt/hcJ7
kaWVodbGwBwKggLZ4FHhp8sEWfNcUlo4l2DIt1nviKhnRoAWbp3FNucYEREajhkk
XICccpkDMIiKOMOy+QFnsaTsWXfV9/2eCyu0+R5OwKhmrR/+sSZFemyrBO2e+RTg
jKvSxJolw6Sgu562iaPfeZMkezDftGsLihQDb90LN91Z4vkdcih+3UWZ46d1t/0k
g5hv+Dcxon2twg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:17 2024 by rpki-client on console-fra.rpki-client.org