Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: GcyyYu5HYAXlFzXnnpVL61WXp2OK3nrjbANPsP5QMws=
Subject key identifier: D4:9F:2E:C3:9C:01:2D:99:82:76:7F:DA:20:7E:FC:09:89:79:D6:14
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 01936AB45A66581567EC054A146320B96655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0A0C
Signing time: Tue 26 Nov 2024 23:00:24 +0000
Manifest this update: Tue 26 Nov 2024 23:00:24 +0000
Manifest next update: Wed 27 Nov 2024 23:00:24 +0000
Files and hashes: 1: 1wSat9pGHQy7ydyiNfXByzfu7as.roa (hash: Wo3KEaJaBpNMuqocNOu+DJF/Ef2apezcGDTX2WI3oMc=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: G3Kl9us2GrdiagMWfueYNGpS9uULKzEOyZp62DFLvEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:5a:66:58:15:67:ec:05:4a:14:63:20:b9:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Nov 26 23:00:24 2024 GMT
Not After : Nov 27 23:00:24 2024 GMT
Subject: CN=d49f2ec39c012d9982767fda207efc098979d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:ca:99:e5:55:b2:92:4b:4c:1c:d4:91:d8:
f2:a9:fd:de:62:bf:75:54:78:1d:cb:ff:e9:c2:9a:
91:96:b6:6c:a7:dc:52:73:97:3d:91:ac:53:78:32:
a0:4a:70:f6:61:63:43:76:e8:4c:fb:43:45:7c:5b:
d7:e0:19:54:84:3d:36:f5:9d:5d:83:71:98:21:2c:
3a:36:97:12:e4:12:cc:78:c1:78:ff:9f:10:a3:4d:
44:4d:69:52:1d:a1:34:27:0f:4d:e1:a1:f7:57:51:
71:bc:40:3a:28:25:0c:ab:07:ba:c4:ca:a5:ff:de:
db:e3:50:e7:3e:15:81:09:b2:21:5d:07:a5:72:78:
63:fb:e0:3a:3f:cd:1f:5c:cc:1b:3e:6f:7c:0c:73:
f6:ab:57:20:a3:aa:23:f8:12:35:57:14:ae:48:53:
73:9b:af:7d:df:4d:41:47:d9:55:22:4e:58:0f:68:
7c:e5:96:58:07:0a:fc:f6:21:94:b6:e1:cb:64:83:
b9:96:a6:16:4c:50:80:fd:68:e4:ab:e9:c3:21:af:
02:e1:11:31:52:c8:f7:1e:e6:09:85:42:52:30:8b:
29:a4:35:96:f8:7a:71:58:1c:6c:b7:bd:ab:89:44:
47:b9:79:94:3c:ca:e3:dd:f3:c0:80:03:6a:05:6b:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:2E:C3:9C:01:2D:99:82:76:7F:DA:20:7E:FC:09:89:79:D6:14
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:94:4d:2e:6d:98:0d:ee:da:24:bf:dc:74:0d:cb:f6:29:
94:e2:49:b1:15:41:f5:53:c2:50:66:44:86:3d:e6:80:9a:49:
9c:5d:fd:40:7b:6a:c4:88:ad:a3:d3:5a:e2:fb:07:8e:8a:9c:
6c:2b:b8:39:a1:5f:87:31:15:e0:48:64:1a:12:ea:37:35:05:
be:4f:cc:18:68:4e:e2:05:b5:1f:f5:ff:f2:de:aa:64:c9:9f:
52:91:dd:7a:9b:03:c6:ae:7c:da:02:2a:45:51:b6:23:6c:4f:
a8:87:09:02:88:d3:c4:45:63:9e:54:cb:c2:ef:0d:4b:ab:cc:
87:3b:86:8b:95:b6:48:95:d8:11:7f:7c:74:3f:2c:dc:81:86:
49:10:7e:7f:0d:d3:d3:31:96:6e:7c:f4:97:3d:34:49:b4:3f:
f1:19:4d:83:33:06:ac:66:96:92:86:f5:1b:82:df:83:33:ec:
92:7e:87:66:8e:e8:90:aa:d7:70:f1:36:94:44:67:68:fc:61:
5c:bd:49:22:6f:44:64:8c:24:01:78:eb:41:ac:56:7e:32:c2:
8d:37:bf:49:a1:47:75:ef:b1:d9:0e:17:c0:d2:22:da:31:64:
96:ad:67:0d:f3:bf:2b:7c:9a:9d:f1:b9:99:cd:f9:37:73:57:
4e:76:9a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtFpmWBVn7AVKFGMguWZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw
NTFhMTkwHhcNMjQxMTI2MjMwMDI0WhcNMjQxMTI3MjMwMDI0WjAzMTEwLwYDVQQD
EyhkNDlmMmVjMzljMDEyZDk5ODI3NjdmZGEyMDdlZmMwOTg5NzlkNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKDKmeVVspJLTBzUkdjyqf3eYr91
VHgdy//pwpqRlrZsp9xSc5c9kaxTeDKgSnD2YWNDduhM+0NFfFvX4BlUhD029Z1d
g3GYISw6NpcS5BLMeMF4/58Qo01ETWlSHaE0Jw9N4aH3V1FxvEA6KCUMqwe6xMql
/97b41DnPhWBCbIhXQelcnhj++A6P80fXMwbPm98DHP2q1cgo6oj+BI1VxSuSFNz
m699301BR9lVIk5YD2h85ZZYBwr89iGUtuHLZIO5lqYWTFCA/Wjkq+nDIa8C4REx
Usj3HuYJhUJSMIsppDWW+HpxWBxst72riURHuXmUPMrj3fPAgANqBWvKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSfLsOcAS2ZgnZ/2iB+/AmJedYUMB8GA1UdIwQY
MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt
M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh
LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu6UTS5t
mA3u2iS/3HQNy/YplOJJsRVB9VPCUGZEhj3mgJpJnF39QHtqxIito9Na4vsHjoqc
bCu4OaFfhzEV4EhkGhLqNzUFvk/MGGhO4gW1H/X/8t6qZMmfUpHdepsDxq582gIq
RVG2I2xPqIcJAojTxEVjnlTLwu8NS6vMhzuGi5W2SJXYEX98dD8s3IGGSRB+fw3T
0zGWbnz0lz00SbQ/8RlNgzMGrGaWkob1G4LfgzPskn6HZo7okKrXcPE2lERnaPxh
XL1JIm9EZIwkAXjrQaxWfjLCjTe/SaFHde+x2Q4XwNIi2jFklq1nDfO/K3yanfG5
mc35N3NXTnaabA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:31 2024 by rpki-client on console-fra.rpki-client.org