Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: NrEpyYmVyeHIzwtqsFeWUp93iSJIxZt92XaBjKdo1Hg=
Subject key identifier: 16:21:59:1F:1A:C8:D5:C4:F9:15:F7:2E:10:90:2F:96:29:BB:C2:C5
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019238B9DD61F90581D960387CF123D285A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 126D
Signing time: Sat 28 Sep 2024 13:02:37 +0000
Manifest this update: Sat 28 Sep 2024 13:02:37 +0000
Manifest next update: Sun 29 Sep 2024 13:02:37 +0000
Files and hashes: 1: PoMqaupMaYcNil7cYiCSQQsLqgU.roa (hash: a/QQKTLK/TmpbE0y3OVINDuo62hiXwAn0dboMsPwReQ=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: v63nxwEKzx3NqBGVdKSgh8BRBfd3VOJ1xc6vl20x2CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:b9:dd:61:f9:05:81:d9:60:38:7c:f1:23:d2:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Sep 28 13:02:37 2024 GMT
Not After : Sep 29 13:02:37 2024 GMT
Subject: CN=1621591f1ac8d5c4f915f72e10902f9629bbc2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:81:09:fa:5c:57:a5:85:06:9d:92:0a:fb:
a2:3a:74:32:7b:a6:76:5c:55:e1:e8:0e:39:d9:c9:
ee:9a:ab:68:87:73:b0:1e:e3:c2:3b:1a:73:aa:81:
81:5d:b9:f5:e1:d5:0c:66:7c:33:ca:ef:1d:93:07:
5b:6b:c6:26:85:85:76:48:95:59:56:30:4f:16:aa:
68:1d:f9:d1:62:a5:61:c8:10:30:99:9b:0e:09:9a:
1c:47:02:6b:99:78:ce:36:8e:e3:74:8f:1d:66:5c:
0a:ee:4e:55:1e:2f:87:d9:8c:1f:e3:b4:f4:8a:35:
eb:5d:6c:c8:a7:2e:78:4b:8f:fa:f9:52:70:1a:34:
83:35:40:43:37:f4:a5:c1:9e:c7:65:8f:e4:1f:c9:
2e:19:e3:05:e3:84:45:71:ae:f6:9a:e4:48:47:20:
aa:78:96:ea:39:4e:de:e0:b6:0c:f4:dc:05:3e:02:
91:65:be:50:e3:fe:d3:cb:e6:ac:0a:c6:59:aa:d3:
21:b5:31:95:19:66:86:11:68:f2:b4:56:53:38:67:
d3:e5:6e:28:85:bc:41:f3:e5:09:54:3a:c1:ce:52:
a0:bc:ea:1d:c9:c1:8f:1a:54:04:d2:55:80:18:80:
f6:78:40:6b:ba:5e:d8:78:97:e9:bf:ee:a2:e4:6c:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:59:1F:1A:C8:D5:C4:F9:15:F7:2E:10:90:2F:96:29:BB:C2:C5
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:da:ea:cd:2a:46:30:9f:bd:18:50:36:52:57:88:8a:2e:6c:
11:89:4b:3c:8f:08:5e:c6:80:ac:7d:0d:4c:55:19:b8:4a:fd:
20:95:89:6c:6f:4a:cf:d5:e0:77:c8:01:23:a9:81:11:7f:00:
a2:12:c0:9f:44:7b:39:40:60:ff:7c:a1:4f:2e:27:16:7c:6b:
69:7c:25:8d:0b:93:7c:c3:5b:07:16:06:4b:01:33:91:13:5e:
29:31:91:8f:f7:d6:8e:4a:3b:d3:9f:ab:c4:3f:b6:0b:1a:2b:
3d:27:4d:bb:2d:eb:6b:5c:1b:08:82:86:6a:14:65:2e:3a:39:
13:2a:a4:63:07:47:6c:bd:f9:3a:fe:6a:7c:ed:84:b8:91:94:
61:63:2e:64:08:1c:9f:d5:1a:a8:41:65:90:8c:d5:7c:7d:33:
92:21:91:11:53:47:fe:7c:83:91:a8:6b:15:4f:0a:68:23:3f:
9f:77:59:20:20:a2:e2:58:87:10:84:c2:18:fc:db:5e:01:f8:
70:96:25:5f:7d:3b:c6:3a:f8:6f:44:27:38:31:11:44:8e:b5:
05:84:de:b2:9f:ab:10:81:1b:64:df:3a:0a:0c:d4:4a:4c:31:
99:87:2c:e0:e9:39:87:bc:3e:f5:c6:66:fb:83:eb:aa:69:6d:
e3:0a:f9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4ud1h+QWB2WA4fPEj0oWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3
YjdjNjEwHhcNMjQwOTI4MTMwMjM3WhcNMjQwOTI5MTMwMjM3WjAzMTEwLwYDVQQD
EygxNjIxNTkxZjFhYzhkNWM0ZjkxNWY3MmUxMDkwMmY5NjI5YmJjMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZuBCfpcV6WFBp2SCvuiOnQye6Z2
XFXh6A452cnumqtoh3OwHuPCOxpzqoGBXbn14dUMZnwzyu8dkwdba8YmhYV2SJVZ
VjBPFqpoHfnRYqVhyBAwmZsOCZocRwJrmXjONo7jdI8dZlwK7k5VHi+H2Ywf47T0
ijXrXWzIpy54S4/6+VJwGjSDNUBDN/SlwZ7HZY/kH8kuGeMF44RFca72muRIRyCq
eJbqOU7e4LYM9NwFPgKRZb5Q4/7Ty+asCsZZqtMhtTGVGWaGEWjytFZTOGfT5W4o
hbxB8+UJVDrBzlKgvOodycGPGlQE0lWAGID2eEBrul7YeJfpv+6i5GxEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYhWR8ayNXE+RX3LhCQL5Ypu8LFMB8GA1UdIwQY
MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt
MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk
LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3trqzSpG
MJ+9GFA2UleIii5sEYlLPI8IXsaArH0NTFUZuEr9IJWJbG9Kz9Xgd8gBI6mBEX8A
ohLAn0R7OUBg/3yhTy4nFnxraXwljQuTfMNbBxYGSwEzkRNeKTGRj/fWjko705+r
xD+2CxorPSdNuy3ra1wbCIKGahRlLjo5EyqkYwdHbL35Ov5qfO2EuJGUYWMuZAgc
n9UaqEFlkIzVfH0zkiGREVNH/nyDkahrFU8KaCM/n3dZICCi4liHEITCGPzbXgH4
cJYlX307xjr4b0QnODERRI61BYTesp+rEIEbZN86CgzUSkwxmYcs4Ok5h7w+9cZm
+4Prqmlt4wr5+A==
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:02:55 2024 by rpki-client on console-fra.rpki-client.org