Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: ch6grUHjui52hr3+Pdg63X399NDScV77Pt3RYR2xlII=
Subject key identifier: 04:0F:C0:EB:E4:E4:B3:FB:DB:3A:C8:0D:45:D3:CB:8C:76:29:3C:5F
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019357D23D0CF287E71C52D50F3ABB145512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 1016
Signing time: Sat 23 Nov 2024 07:00:16 +0000
Manifest this update: Sat 23 Nov 2024 07:00:16 +0000
Manifest next update: Sun 24 Nov 2024 07:00:16 +0000
Files and hashes: 1: 7bQyCINYjMV6N4VaoHucYY2Lwz4.roa (hash: CJRTFUZxiJwonztNUoNxTI+zaXB+LjaETfftcRL1LF4=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: BVXvvULSGOLfqLF5Vb8iaDUjRinB19vIPcJYLC5OvIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:3d:0c:f2:87:e7:1c:52:d5:0f:3a:bb:14:55:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Nov 23 07:00:16 2024 GMT
Not After : Nov 24 07:00:16 2024 GMT
Subject: CN=040fc0ebe4e4b3fbdb3ac80d45d3cb8c76293c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:06:7a:b3:c3:8a:35:fd:fe:03:86:5b:f4:
21:cf:b1:96:9b:fa:6d:59:17:e0:07:fa:a0:8c:c9:
df:74:5c:60:37:c6:a8:ea:e1:fa:4a:dd:49:31:31:
ab:99:0c:3e:c8:89:bf:9c:23:43:f4:a0:f8:6f:ec:
63:02:bf:11:a9:df:c7:9b:1e:56:92:79:50:cb:6a:
5e:d2:84:df:e5:c9:9c:41:5f:c6:b3:83:22:d1:a6:
1a:ab:ec:01:4f:6a:b3:6b:e4:94:ae:38:de:8b:89:
db:f1:4d:24:42:8b:aa:2e:35:8b:76:8d:47:95:2e:
31:75:03:c4:ce:9c:9f:b2:23:13:c4:73:c8:20:b0:
e1:fd:13:da:62:73:1a:5e:ca:f2:ee:11:88:1d:b7:
84:4f:c0:fe:fe:fe:41:aa:df:93:af:e9:8f:3c:b6:
ea:b4:38:da:96:1c:2c:ef:7f:3b:f5:31:6e:6d:88:
35:05:18:4a:08:e2:65:05:e4:91:a2:46:81:ce:f5:
f9:e8:63:0f:e5:ef:0a:ad:3a:01:5e:9e:20:11:45:
11:fc:21:ac:fc:ce:1f:ba:e0:4a:f4:43:87:78:67:
48:8d:f9:ac:b5:73:cc:5d:48:a2:b0:4b:fa:13:00:
02:d9:5f:63:48:9a:3a:16:58:3f:c2:36:16:9a:8f:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:C0:EB:E4:E4:B3:FB:DB:3A:C8:0D:45:D3:CB:8C:76:29:3C:5F
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:26:5a:88:93:33:9e:a2:89:1b:23:7a:05:78:a3:d1:68:6a:
bb:21:a3:3b:48:e9:3e:99:fd:79:9c:70:fc:e3:81:9f:28:7d:
7f:43:64:73:30:c9:dc:24:a9:ff:48:20:82:99:fa:33:92:3a:
b2:6b:8a:b6:6e:8e:6e:f7:71:95:9f:e9:37:8b:56:b2:82:92:
c0:fc:34:b1:1b:bb:27:62:90:97:d7:5c:9a:4a:c1:9f:28:6f:
5a:ae:e1:a4:41:89:53:fe:af:34:89:4d:7b:21:e3:a1:d9:14:
67:e0:4c:12:9b:24:d6:4d:c9:9a:7a:ce:88:9f:67:65:11:02:
74:92:11:55:e1:56:e9:12:a1:a8:83:b4:13:9b:0f:63:52:b3:
5b:3b:87:91:77:fa:23:79:bb:25:a6:9a:81:4a:02:61:b5:18:
e0:e7:09:7e:79:a4:52:fa:ab:a8:4b:a8:eb:e1:57:38:dd:3e:
91:0b:7d:61:6a:43:2b:9a:67:f2:78:56:f3:b6:d3:62:b4:e4:
a0:71:6b:23:ac:a4:1c:67:d1:04:b4:61:df:4d:5d:0f:bb:11:
1e:d2:32:f9:12:1f:3e:dc:21:93:d9:2b:19:b3:0b:9b:41:70:
ab:07:38:c8:66:e2:7b:fb:36:d7:01:d2:fe:42:9c:6e:3a:91:
a8:e8:f8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0j0M8ofnHFLVDzq7FFUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4
NTY2ZTgwHhcNMjQxMTIzMDcwMDE2WhcNMjQxMTI0MDcwMDE2WjAzMTEwLwYDVQQD
EygwNDBmYzBlYmU0ZTRiM2ZiZGIzYWM4MGQ0NWQzY2I4Yzc2MjkzYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmkGerPDijX9/gOGW/Qhz7GWm/pt
WRfgB/qgjMnfdFxgN8ao6uH6St1JMTGrmQw+yIm/nCND9KD4b+xjAr8Rqd/Hmx5W
knlQy2pe0oTf5cmcQV/Gs4Mi0aYaq+wBT2qza+SUrjjei4nb8U0kQouqLjWLdo1H
lS4xdQPEzpyfsiMTxHPIILDh/RPaYnMaXsry7hGIHbeET8D+/v5Bqt+Tr+mPPLbq
tDjalhws73879TFubYg1BRhKCOJlBeSRokaBzvX56GMP5e8KrToBXp4gEUUR/CGs
/M4fuuBK9EOHeGdIjfmstXPMXUiisEv6EwAC2V9jSJo6Flg/wjYWmo/gmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQPwOvk5LP72zrIDUXTy4x2KTxfMB8GA1UdIwQY
MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt
MjJkMzcxZDZjZGVlLzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl
LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSZaiJMz
nqKJGyN6BXij0WhquyGjO0jpPpn9eZxw/OOBnyh9f0NkczDJ3CSp/0gggpn6M5I6
smuKtm6ObvdxlZ/pN4tWsoKSwPw0sRu7J2KQl9dcmkrBnyhvWq7hpEGJU/6vNIlN
eyHjodkUZ+BMEpsk1k3JmnrOiJ9nZRECdJIRVeFW6RKhqIO0E5sPY1KzWzuHkXf6
I3m7JaaagUoCYbUY4OcJfnmkUvqrqEuo6+FXON0+kQt9YWpDK5pn8nhW87bTYrTk
oHFrI6ykHGfRBLRh301dD7sRHtIy+RIfPtwhk9krGbMLm0Fwqwc4yGbie/s21wHS
/kKcbjqRqOj42A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:19 2024 by rpki-client on console-fra.rpki-client.org