Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: aqsHcodYScw75D0HcoQePFGTSfK2ehckDLLCbygkQUI=
Subject key identifier: 8F:BE:CA:60:C9:06:EF:9D:88:09:F0:C9:1B:F9:E1:78:20:54:E5:A2
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01935689D6AB849FAAA4572EC8B73A380B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0D2E
Signing time: Sat 23 Nov 2024 01:01:34 +0000
Manifest this update: Sat 23 Nov 2024 01:01:34 +0000
Manifest next update: Sun 24 Nov 2024 01:01:34 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: ALxfO1n5j8bYL0tz1ymGI51JbMINd2COYjVcQm4BcSE=)
2: NTKDgPRNdTrWCrIDK8tCwP4gPkw.roa (hash: HOwVFviUquVqBFv7SxcB3OvqlWJ1xXPRgZpzKMOAvcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:d6:ab:84:9f:aa:a4:57:2e:c8:b7:3a:38:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Nov 23 01:01:34 2024 GMT
Not After : Nov 24 01:01:34 2024 GMT
Subject: CN=8fbeca60c906ef9d8809f0c91bf9e1782054e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:58:8e:85:c4:88:a6:d9:95:e7:02:0b:97:
54:3c:a3:0b:ec:be:fd:0c:d5:16:a5:67:b8:00:9f:
de:9e:c8:23:61:fd:87:bf:ae:85:52:15:0b:cf:cb:
ca:af:6f:fa:2f:d3:36:a8:c2:1f:b1:a2:52:d1:06:
45:51:8c:3c:b6:60:d2:de:d4:be:d6:7b:83:3f:7b:
d4:b7:cc:54:e9:05:b3:d1:12:35:a6:39:61:c7:49:
99:36:52:26:85:70:63:3a:bb:ce:d5:83:2f:80:93:
50:9b:24:c7:32:3e:e4:be:61:70:63:ec:e7:20:6d:
ba:ff:d0:ba:ed:ae:81:58:c2:44:12:fe:ec:d2:14:
8b:4f:01:b8:82:5b:32:49:f5:ef:3e:10:15:30:fa:
14:c8:f3:f6:9c:b0:92:8b:dd:d8:da:65:74:c1:5c:
58:6b:4a:df:31:94:34:21:78:5e:6d:81:c6:75:46:
f8:eb:40:47:c3:ab:9b:41:12:f5:de:f6:bf:77:a1:
de:62:84:57:2f:cd:52:91:0f:a1:bb:0e:b8:3b:ef:
e5:26:71:32:41:ea:40:73:54:8e:c5:58:8e:91:4b:
c9:57:cd:cc:3d:41:48:8b:a4:cd:fe:e9:b3:f5:11:
24:51:8e:10:de:c1:e9:31:b2:c4:c4:2d:9e:a5:f0:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:CA:60:C9:06:EF:9D:88:09:F0:C9:1B:F9:E1:78:20:54:E5:A2
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:b6:5e:b8:a5:81:3d:4a:6a:e5:4f:ae:d6:62:82:2b:76:
f4:ea:81:85:ac:b9:02:ad:58:fa:35:06:a3:97:03:68:2f:44:
8e:bd:9e:2c:0a:6c:10:bb:36:c2:c6:d4:0a:0d:e1:68:83:d6:
51:d1:3c:a0:a9:64:e4:7c:de:46:13:fd:d2:e2:b2:37:c0:23:
3f:d1:6b:49:38:3d:95:15:ea:bd:24:ad:7d:38:db:aa:13:26:
81:ec:ed:98:00:15:d4:fc:1e:7d:b9:de:3a:40:42:37:04:01:
fd:79:96:93:fd:38:a0:07:e4:6d:b0:19:90:55:81:8e:05:f3:
55:73:7f:e1:89:0c:62:56:41:0d:f7:a1:ba:e0:09:a2:e7:b1:
17:a7:92:44:ba:d1:c2:c3:b7:94:65:bd:11:f3:ca:9e:fe:ab:
7b:d6:44:8c:71:94:45:5b:a8:19:93:26:ee:1a:be:7a:aa:84:
3d:27:42:f7:ad:a9:10:da:27:a9:e7:e1:b6:a6:98:a1:40:88:
86:2f:9b:8b:29:04:c9:0e:a3:d0:58:2f:6c:cf:a0:6e:17:25:
ff:32:3c:5b:48:ac:f4:64:1d:cf:a0:9e:cb:7c:4c:66:56:03:
38:d6:5e:f1:8b:02:8f:5f:bf:29:0d:1d:77:6b:66:9a:a8:5a:
be:df:18:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWidarhJ+qpFcuyLc6OAtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjQxMTIzMDEwMTM0WhcNMjQxMTI0MDEwMTM0WjAzMTEwLwYDVQQD
Eyg4ZmJlY2E2MGM5MDZlZjlkODgwOWYwYzkxYmY5ZTE3ODIwNTRlNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhlYjoXEiKbZlecCC5dUPKML7L79
DNUWpWe4AJ/ensgjYf2Hv66FUhULz8vKr2/6L9M2qMIfsaJS0QZFUYw8tmDS3tS+
1nuDP3vUt8xU6QWz0RI1pjlhx0mZNlImhXBjOrvO1YMvgJNQmyTHMj7kvmFwY+zn
IG26/9C67a6BWMJEEv7s0hSLTwG4glsySfXvPhAVMPoUyPP2nLCSi93Y2mV0wVxY
a0rfMZQ0IXhebYHGdUb460BHw6ubQRL13va/d6HeYoRXL81SkQ+huw64O+/lJnEy
QepAc1SOxViOkUvJV83MPUFIi6TN/umz9REkUY4Q3sHpMbLExC2epfCpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI++ymDJBu+diAnwyRv54XggVOWiMB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9W2Xril
gT1KauVPrtZigit29OqBhay5Aq1Y+jUGo5cDaC9Ejr2eLApsELs2wsbUCg3haIPW
UdE8oKlk5HzeRhP90uKyN8AjP9FrSTg9lRXqvSStfTjbqhMmgeztmAAV1Pwefbne
OkBCNwQB/XmWk/04oAfkbbAZkFWBjgXzVXN/4YkMYlZBDfehuuAJouexF6eSRLrR
wsO3lGW9EfPKnv6re9ZEjHGURVuoGZMm7hq+eqqEPSdC962pENonqefhtqaYoUCI
hi+biykEyQ6j0FgvbM+gbhcl/zI8W0is9GQdz6Cey3xMZlYDONZe8YsCj1+/KQ0d
d2tmmqhavt8YHA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:23 2024 by rpki-client on console-fra.rpki-client.org