Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: G4rYFIwcuyQjl1/hH0zIiSFaLYuTtLgZWaQDdb7n4RU=
Subject key identifier: 1A:1C:C2:F5:CA:C3:F1:67:6A:35:D2:28:05:CF:6D:AE:95:36:3D:1B
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019352E2E093FB4105BF3ED9FCEB1EDC7A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 010D
Signing time: Fri 22 Nov 2024 08:00:20 +0000
Manifest this update: Fri 22 Nov 2024 08:00:20 +0000
Manifest next update: Sat 23 Nov 2024 08:00:20 +0000
Files and hashes: 1: TUrXkPd4Y5jnlsfVv8gZw4wCLXw.roa (hash: ljm6OPhw1dLRmI07/VS39Ngd7Ba2RrlkEbwUQ7Y1a/8=)
2: jsqmfOOlDxV3S5NEuOiokCpm-HY.roa (hash: 35GNGpMX1eKoWaTDnAoj+8UotrnrkMkEFYm4/uW5/W4=)
3: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: xd/hohpXK4DnrfRJGO8XSCggnzqiKABPvo71nF8AIT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:e0:93:fb:41:05:bf:3e:d9:fc:eb:1e:dc:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Nov 22 08:00:20 2024 GMT
Not After : Nov 23 08:00:20 2024 GMT
Subject: CN=1a1cc2f5cac3f1676a35d22805cf6dae95363d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:3e:45:d2:3d:fd:ce:d3:c7:66:f0:c9:3e:
06:4e:5e:6f:fc:95:1b:af:1d:8c:70:e7:73:3e:3d:
88:a7:08:31:9e:78:d0:08:7b:b4:e0:12:52:ed:aa:
71:f8:09:82:9a:1c:ad:d0:df:85:44:d6:e0:53:65:
1d:cf:9c:4b:8b:be:a8:56:f7:21:07:a3:49:eb:40:
90:11:0b:62:5d:94:f9:b0:f6:08:68:33:56:3d:b8:
5a:c0:7f:a9:90:e9:53:ee:d0:64:d0:13:35:0e:63:
1d:72:7f:d1:98:6f:05:87:c0:8f:49:b6:a9:2d:57:
ca:0b:af:0a:d1:ca:14:27:b2:e5:dc:61:4a:89:28:
c6:4c:8d:74:8d:9e:e4:36:2b:02:b1:19:5a:13:71:
5f:45:d5:2b:af:ef:67:70:86:79:45:aa:c8:49:3b:
1d:43:e3:43:94:a4:d9:d1:a9:63:cb:e3:04:91:d4:
14:b7:17:3f:75:28:da:ee:31:1d:5b:b4:ec:5d:40:
4e:c5:29:cc:6e:93:01:7c:6c:d5:64:28:0a:5c:1f:
82:d5:31:f1:2d:89:4d:7e:e9:2e:42:0d:3b:eb:b1:
9a:cc:94:73:15:5b:44:d0:db:86:14:0f:1e:50:12:
c8:60:88:40:b2:2b:c0:32:dc:46:db:74:b7:d8:d8:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:C2:F5:CA:C3:F1:67:6A:35:D2:28:05:CF:6D:AE:95:36:3D:1B
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:15:a1:d3:1e:42:c4:2f:78:cd:e8:26:09:15:43:b9:ea:84:
f9:7e:d5:f0:ba:e1:15:ef:02:eb:4d:40:2b:3e:84:f6:eb:f3:
10:34:ba:f7:4b:9a:fe:ff:61:97:0f:bf:ef:23:f3:f0:c0:22:
f4:57:82:cc:ca:97:12:b7:e7:d2:ab:53:ad:da:d8:1d:3b:43:
5c:ab:4c:4b:4a:ec:37:77:82:4b:28:b0:d5:90:b3:55:8d:6a:
f4:40:b1:ce:2a:2e:25:44:2c:52:9c:36:3f:6f:42:15:a8:a2:
9c:39:0a:3f:58:df:7d:55:3e:9a:d8:52:1d:94:f2:32:6c:82:
a5:07:66:92:7e:39:e7:e3:69:b5:89:fd:cd:93:2d:05:aa:67:
50:dc:a3:97:d2:5f:b7:74:6b:d2:ed:5f:c1:52:70:dd:68:99:
80:95:ff:1e:e2:be:9e:7e:49:94:16:85:92:50:8e:93:35:f8:
ff:87:41:2f:0e:34:5f:c2:27:db:bb:cc:6f:05:54:af:b4:73:
ea:c2:80:ce:2e:f7:97:ba:00:ed:26:64:e5:a6:9a:cf:5e:94:
5d:3b:79:ad:b5:97:b4:7c:07:ea:b6:d9:50:6e:da:fe:a2:5a:
86:14:59:f5:4d:91:54:68:71:6b:b3:8d:c6:bf:2f:ad:d9:93:
19:4a:7b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNS4uCT+0EFvz7Z/Ose3HowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDA3OGEyN2YxMDAzMjYzYzRjNTYxYjAyNTA3NjZmMmY1
MjZlN2QwHhcNMjQxMTIyMDgwMDIwWhcNMjQxMTIzMDgwMDIwWjAzMTEwLwYDVQQD
EygxYTFjYzJmNWNhYzNmMTY3NmEzNWQyMjgwNWNmNmRhZTk1MzYzZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4I+RdI9/c7Tx2bwyT4GTl5v/JUb
rx2McOdzPj2IpwgxnnjQCHu04BJS7apx+AmCmhyt0N+FRNbgU2Udz5xLi76oVvch
B6NJ60CQEQtiXZT5sPYIaDNWPbhawH+pkOlT7tBk0BM1DmMdcn/RmG8Fh8CPSbap
LVfKC68K0coUJ7Ll3GFKiSjGTI10jZ7kNisCsRlaE3FfRdUrr+9ncIZ5RarISTsd
Q+NDlKTZ0aljy+MEkdQUtxc/dSja7jEdW7TsXUBOxSnMbpMBfGzVZCgKXB+C1THx
LYlNfukuQg0767GazJRzFVtE0NuGFA8eUBLIYIhAsivAMtxG23S32NitMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBocwvXKw/FnajXSKAXPba6VNj0bMB8GA1UdIwQY
MBaAFLwAeKJ/EAMmPExWGwJQdm8vUm59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2Mt
YzE0YWFjNDFhMWMyLzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2MtYzE0YWFjNDFhMWMy
LzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRWh0x5C
xC94zegmCRVDueqE+X7V8LrhFe8C601AKz6E9uvzEDS690ua/v9hlw+/7yPz8MAi
9FeCzMqXErfn0qtTrdrYHTtDXKtMS0rsN3eCSyiw1ZCzVY1q9ECxziouJUQsUpw2
P29CFaiinDkKP1jffVU+mthSHZTyMmyCpQdmkn455+NptYn9zZMtBapnUNyjl9Jf
t3Rr0u1fwVJw3WiZgJX/HuK+nn5JlBaFklCOkzX4/4dBLw40X8In27vMbwVUr7Rz
6sKAzi73l7oA7SZk5aaaz16UXTt5rbWXtHwH6rbZUG7a/qJahhRZ9U2RVGhxa7ON
xr8vrdmTGUp7qA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:12 2024 by rpki-client on console-fra.rpki-client.org