Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
File: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft (raw, json)
Hash identifier: vs+Jd/UvJ09pprQqKkV7t8Jw+o3symi/mVgrxHB1pSM=
Subject key identifier: 7D:9A:BF:38:BD:94:EF:FE:B9:6E:B1:C9:01:EE:24:34:47:7A:83:5C
Authority key identifier: 38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
Certificate issuer: /CN=385e4d3a6709740dd91b98f5590687b5d596d806
Certificate serial: 019355AD51CFE6D062096A66FAD10AE61BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
Manifest number: 06B0
Signing time: Fri 22 Nov 2024 21:00:42 +0000
Manifest this update: Fri 22 Nov 2024 21:00:42 +0000
Manifest next update: Sat 23 Nov 2024 21:00:42 +0000
Files and hashes: 1: MT7641y4MmWsW36X22pQedAMsLQ.roa (hash: 5Sly1HOFjNQL84dvgbN+qLrFW0OcEgpimqUwCE7ipvw=)
2: OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl (hash: DY5faRRGPDam+36SUcJEzakh4dG89zDWpPL++aTwuTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:51:cf:e6:d0:62:09:6a:66:fa:d1:0a:e6:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385e4d3a6709740dd91b98f5590687b5d596d806
Validity
Not Before: Nov 22 21:00:42 2024 GMT
Not After : Nov 23 21:00:42 2024 GMT
Subject: CN=7d9abf38bd94effeb96eb1c901ee2434477a835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:ee:c4:c3:9c:89:1b:ca:39:fa:84:99:50:
bc:4b:63:fe:e6:6c:1b:2c:b2:6f:dc:66:86:f4:17:
e8:b6:bb:91:b0:df:9a:06:88:f1:0c:ee:c1:ae:a2:
a2:be:85:13:50:be:3f:e6:82:d4:c7:ae:46:97:40:
68:b7:21:2b:ed:f7:26:26:38:9f:fd:b8:59:42:1d:
d3:5b:0f:e6:98:13:72:d3:c3:ea:b1:a5:a1:c9:d0:
e3:98:3e:1b:12:ad:6e:e0:33:55:b4:2d:20:53:f4:
80:98:48:1c:b6:f6:a2:b2:e3:1b:9c:e9:34:9b:73:
06:e8:bd:6c:8a:90:e0:98:ef:57:48:d5:cc:28:af:
22:b3:02:7d:1d:41:a5:1e:0c:c6:ea:66:bc:59:0f:
7d:28:64:b2:ff:5e:be:cc:d3:80:f5:8e:92:c9:f2:
32:12:be:e8:3d:72:2c:41:93:49:ef:c2:17:34:c1:
ba:69:82:0b:31:41:3c:d8:72:33:2b:39:63:bb:b6:
1b:bc:05:f9:09:ae:0d:05:23:c5:01:73:1d:47:bd:
fb:31:e5:87:77:52:9c:9a:3f:7f:43:57:d0:c4:d3:
76:7b:2b:32:1b:ad:cf:b7:ce:47:4e:52:05:98:a6:
b6:14:3b:01:65:58:de:10:09:47:fd:69:b3:d1:4f:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:BF:38:BD:94:EF:FE:B9:6E:B1:C9:01:EE:24:34:47:7A:83:5C
X509v3 Authority Key Identifier:
keyid:38:5E:4D:3A:67:09:74:0D:D9:1B:98:F5:59:06:87:B5:D5:96:D8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0661d0-8478-44f3-92d2-f0cd98bd4d98/1/OF5NOmcJdA3ZG5j1WQaHtdWW2AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:3b:f9:a6:3e:7e:d3:91:c5:89:ee:7f:62:36:d7:0a:0f:
ca:c7:e5:fe:4b:a9:68:bd:c2:fd:bb:c2:4b:df:e2:ae:4f:9a:
76:06:ed:20:c5:74:5d:19:ca:96:66:0c:b8:e7:56:c1:9d:c2:
52:0a:57:31:02:a8:9e:6c:91:2e:7c:51:7e:a2:cd:54:56:ee:
91:5b:5c:73:8c:0f:b2:52:f9:6b:ac:fb:a6:54:fc:b5:22:6a:
30:29:97:71:e7:5b:62:4e:12:95:6b:c4:97:78:fc:bc:5b:9e:
16:63:0e:ea:a5:ac:86:1e:b8:b5:a0:8c:a5:47:57:6b:3c:c6:
ac:af:f0:69:46:60:fc:c7:af:6c:94:37:ea:ec:8f:93:e4:97:
40:6f:14:fe:94:57:29:cb:5a:af:4e:63:15:db:3f:57:57:51:
e0:80:d9:0b:1b:27:68:e1:9e:0b:5a:cc:ff:86:98:2f:8f:36:
73:1e:cd:24:91:68:7b:c5:95:96:73:85:a1:3d:48:c4:08:6c:
97:be:d3:c9:bd:ce:9e:4b:1f:d7:f1:00:c4:cd:aa:0f:3e:9c:
41:fc:da:b3:96:24:f5:70:00:c3:57:4b:4d:01:4f:f0:ab:d4:
2c:8f:9d:fe:ab:75:48:a1:86:3d:30:ec:fa:90:0d:ff:56:8f:
f0:b8:af:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrVHP5tBiCWpm+tEK5hvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NWU0ZDNhNjcwOTc0MGRkOTFiOThmNTU5MDY4N2I1ZDU5
NmQ4MDYwHhcNMjQxMTIyMjEwMDQyWhcNMjQxMTIzMjEwMDQyWjAzMTEwLwYDVQQD
Eyg3ZDlhYmYzOGJkOTRlZmZlYjk2ZWIxYzkwMWVlMjQzNDQ3N2E4MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9juxMOciRvKOfqEmVC8S2P+5mwb
LLJv3GaG9BfotruRsN+aBojxDO7BrqKivoUTUL4/5oLUx65Gl0BotyEr7fcmJjif
/bhZQh3TWw/mmBNy08PqsaWhydDjmD4bEq1u4DNVtC0gU/SAmEgctvaisuMbnOk0
m3MG6L1sipDgmO9XSNXMKK8iswJ9HUGlHgzG6ma8WQ99KGSy/16+zNOA9Y6SyfIy
Er7oPXIsQZNJ78IXNMG6aYILMUE82HIzKzlju7YbvAX5Ca4NBSPFAXMdR737MeWH
d1Kcmj9/Q1fQxNN2eysyG63Pt85HTlIFmKa2FDsBZVjeEAlH/Wmz0U9zGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2avzi9lO/+uW6xyQHuJDRHeoNcMB8GA1UdIwQY
MBaAFDheTTpnCXQN2RuY9VkGh7XVltgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Y1Tk9tY0pkQTNaRzVqMVdRYUh0ZFdXMkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNjYxZDAtODQ3OC00NGYzLTkyZDIt
ZjBjZDk4YmQ0ZDk4LzEvT0Y1Tk9tY0pkQTNaRzVqMVdRYUh0ZFdXMkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wNjYxZDAtODQ3OC00NGYzLTkyZDItZjBjZDk4YmQ0ZDk4
LzEvT0Y1Tk9tY0pkQTNaRzVqMVdRYUh0ZFdXMkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHo7+aY+
ftORxYnuf2I21woPysfl/kupaL3C/bvCS9/irk+adgbtIMV0XRnKlmYMuOdWwZ3C
UgpXMQKonmyRLnxRfqLNVFbukVtcc4wPslL5a6z7plT8tSJqMCmXcedbYk4SlWvE
l3j8vFueFmMO6qWshh64taCMpUdXazzGrK/waUZg/MevbJQ36uyPk+SXQG8U/pRX
Kctar05jFds/V1dR4IDZCxsnaOGeC1rM/4aYL482cx7NJJFoe8WVlnOFoT1IxAhs
l77Tyb3Onksf1/EAxM2qDz6cQfzas5Yk9XAAw1dLTQFP8KvULI+d/qt1SKGGPTDs
+pAN/1aP8Liv7Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:31 2024 by rpki-client on console-fra.rpki-client.org