Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: jlYUfORqOA9FVBv8uY4TA39ZUophkT/oxMAZlh3Hgpo=
Subject key identifier: 9A:1D:C9:ED:F6:6A:60:7A:B3:17:94:FB:24:4D:05:CA:B7:E8:75:98
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 0193568AE447417E192C31073DC474CB1BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 045A
Signing time: Sat 23 Nov 2024 01:02:43 +0000
Manifest this update: Sat 23 Nov 2024 01:02:43 +0000
Manifest next update: Sun 24 Nov 2024 01:02:43 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: x9/vd4Sl+L2OXJE8A9Nfgz7qS5dkbzC/NZuYDuTNqPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:e4:47:41:7e:19:2c:31:07:3d:c4:74:cb:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Nov 23 01:02:43 2024 GMT
Not After : Nov 24 01:02:43 2024 GMT
Subject: CN=9a1dc9edf66a607ab31794fb244d05cab7e87598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:9c:48:f2:c1:dc:88:cc:16:25:b3:16:c9:
b9:7b:1e:50:02:c9:98:7a:16:93:56:bf:31:2c:08:
48:d5:c6:0c:fb:cb:b3:80:23:4d:1d:e8:8f:b9:ca:
0b:7a:8e:b0:fc:0d:25:f6:43:c1:e6:7f:32:97:f0:
23:12:d8:e1:1a:07:cf:20:18:75:69:8e:c3:ce:5b:
a2:2e:db:61:79:35:11:8e:cf:96:23:14:f3:74:c6:
ec:e0:ae:b3:e2:b1:00:e1:9d:4e:c2:f5:5d:0b:77:
02:1f:f1:2d:19:32:e4:07:f6:85:cd:ba:a1:12:08:
6f:77:d0:de:92:e2:5b:bd:20:48:0f:d3:90:2f:a6:
4a:cb:22:f5:f0:b2:b1:80:a4:ef:d9:bd:35:1d:c3:
5b:14:98:04:d4:b9:4a:28:2f:b6:a1:5e:f4:ee:b3:
10:34:df:46:d3:dc:4a:1f:57:b7:4d:1d:90:5d:aa:
bd:11:4a:ac:02:26:ce:d7:f0:dc:92:d4:12:84:7a:
d4:31:a7:82:3f:e5:a6:3e:70:7f:a9:a9:77:63:8e:
76:b2:58:b2:06:fa:ba:06:cc:cf:96:2a:45:28:98:
d6:02:e6:67:89:40:1f:75:35:b9:86:85:56:14:db:
6e:f6:59:f5:82:e7:46:14:24:01:72:49:f5:f4:57:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:C9:ED:F6:6A:60:7A:B3:17:94:FB:24:4D:05:CA:B7:E8:75:98
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:a8:9a:51:de:67:a5:2f:d1:04:b4:70:02:d1:92:30:e0:
05:b3:b0:f6:52:c2:d7:ac:ea:32:88:45:b7:8d:fc:14:55:e7:
19:78:ff:0c:1b:2d:15:00:4e:e7:3d:01:55:c8:e5:4b:95:5b:
21:c9:37:2d:07:d9:f3:1a:38:37:e0:8f:fa:5c:8f:95:b8:7a:
9a:d8:14:d5:4f:03:dd:5c:ae:d4:72:92:0f:ea:23:a1:a2:d4:
0e:bf:ed:5b:af:80:98:c7:ac:62:1a:b9:df:27:bb:6e:fd:f3:
89:fa:ae:aa:41:e2:d6:8a:ea:bf:21:fb:67:5d:85:18:0a:04:
bc:0a:ec:5c:9a:dc:9c:9c:1a:92:95:82:63:26:ef:00:b1:90:
d2:6d:3b:59:ba:c6:6c:b8:a0:fa:bb:08:bf:7f:16:97:ac:99:
6d:57:d3:68:63:00:43:6f:8f:72:a2:fe:42:98:d1:84:69:3c:
e4:3b:1b:f8:d3:72:68:04:7e:89:a8:d9:0b:94:c1:9e:07:ed:
5e:d8:95:11:21:03:03:d6:f6:8a:b8:0b:e8:b8:9c:97:15:0b:
44:8a:85:4e:30:a3:1d:95:1c:27:00:07:51:51:6c:7b:bf:15:
d0:44:65:3e:55:b0:69:2e:13:48:0f:d6:87:73:7b:23:f3:52:
fb:51:59:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiuRHQX4ZLDEHPcR0yxvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTU4MzZlY2Q2NTUzMTNkZWExOTcxNmZmNmI5NmJkMGU2
OTkxYWYwHhcNMjQxMTIzMDEwMjQzWhcNMjQxMTI0MDEwMjQzWjAzMTEwLwYDVQQD
Eyg5YTFkYzllZGY2NmE2MDdhYjMxNzk0ZmIyNDRkMDVjYWI3ZTg3NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qGcSPLB3IjMFiWzFsm5ex5QAsmY
ehaTVr8xLAhI1cYM+8uzgCNNHeiPucoLeo6w/A0l9kPB5n8yl/AjEtjhGgfPIBh1
aY7DzluiLttheTURjs+WIxTzdMbs4K6z4rEA4Z1OwvVdC3cCH/EtGTLkB/aFzbqh
Eghvd9DekuJbvSBID9OQL6ZKyyL18LKxgKTv2b01HcNbFJgE1LlKKC+2oV707rMQ
NN9G09xKH1e3TR2QXaq9EUqsAibO1/DcktQShHrUMaeCP+WmPnB/qal3Y452sliy
Bvq6BszPlipFKJjWAuZniUAfdTW5hoVWFNtu9ln1gudGFCQBckn19Fch9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJodye32amB6sxeU+yRNBcq36HWYMB8GA1UdIwQY
MBaAFLxVg27NZVMT3qGXFv9rlr0OaZGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYt
ZjMwMmUyYWU5ZDNjLzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYtZjMwMmUyYWU5ZDNj
LzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ+omlHe
Z6Uv0QS0cALRkjDgBbOw9lLC16zqMohFt438FFXnGXj/DBstFQBO5z0BVcjlS5Vb
Ick3LQfZ8xo4N+CP+lyPlbh6mtgU1U8D3Vyu1HKSD+ojoaLUDr/tW6+AmMesYhq5
3ye7bv3zifquqkHi1orqvyH7Z12FGAoEvArsXJrcnJwakpWCYybvALGQ0m07WbrG
bLig+rsIv38Wl6yZbVfTaGMAQ2+PcqL+QpjRhGk85Dsb+NNyaAR+iajZC5TBngft
XtiVESEDA9b2irgL6LiclxULRIqFTjCjHZUcJwAHUVFse78V0ERlPlWwaS4TSA/W
h3N7I/NS+1FZZA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:02 2024 by rpki-client on console-fra.rpki-client.org