Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
File: H1PAbKeXbXN7I7xydooijDl_ry8.mft (raw, json)
Hash identifier: YGnNxKPTjz/A+rwhhKk+5GEavxGJmgu1JDZFAumnl8g=
Subject key identifier: 51:3D:73:2C:FB:E7:E7:FB:1B:29:C0:B3:F8:2A:2A:41:9D:C8:94:10
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 019369DA00E731FC1050A3C7E7D017797903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 19:01:54 +0000
Manifest this update: Tue 26 Nov 2024 19:01:54 +0000
Manifest next update: Wed 27 Nov 2024 19:01:54 +0000
Files and hashes: 1: AwSeIc7IhlV2IxIAzO4x9gqPBiM.roa (hash: OEX1ZLz/Q8W3VSD1Jl6R186nQf1ltgKwGWR2ZQtX67Q=)
2: H1PAbKeXbXN7I7xydooijDl_ry8.crl (hash: a5WWbshdgJ5STdBOlMaiqlBGN/RTg0YfAMBSNnL2ZEo=)
3: TGwpOWi-AJheGoPGrEc4BXQqHkw.roa (hash: 10AB8y1KmOv+A+cod240boMGbhvKEZ4R4VTxWH1/sYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:00:e7:31:fc:10:50:a3:c7:e7:d0:17:79:79:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Nov 26 19:01:54 2024 GMT
Not After : Nov 27 19:01:54 2024 GMT
Subject: CN=513d732cfbe7e7fb1b29c0b3f82a2a419dc89410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:e0:36:df:32:c2:64:64:da:03:fb:0c:f1:
5b:4a:1f:27:c1:57:51:ac:c1:cd:df:2b:74:7d:3d:
e7:89:8e:a7:cc:6f:e6:35:8c:75:4b:3a:38:4e:ab:
0b:11:38:91:81:44:f2:36:a1:90:4b:3b:08:d3:15:
e5:7d:6d:0f:67:fc:53:33:2d:39:fb:20:fa:66:27:
c9:99:17:f4:d7:ab:98:b3:06:87:65:71:13:c4:5d:
64:57:89:de:04:de:a5:41:49:18:b4:8e:52:c5:e2:
83:91:52:02:95:db:2b:01:08:e6:8d:53:f1:cd:da:
a7:dc:e0:18:1d:2e:60:37:ec:9a:e8:1d:aa:6e:79:
1d:0b:dd:73:e8:6c:00:e1:6f:3e:43:3f:ab:57:b3:
7f:a7:7b:ee:cf:f7:19:bf:ba:da:d1:95:40:ca:b3:
c3:16:de:c9:94:a6:e8:4f:54:ce:38:7f:25:42:00:
74:1b:1f:57:fd:27:bc:e9:98:ca:88:d9:c9:f8:3b:
db:08:a9:48:bd:d9:b9:f6:07:c2:ab:27:80:86:ca:
99:5a:2c:c9:dc:b1:6c:63:ec:0e:2c:c7:46:c1:78:
00:5f:88:bf:df:81:ba:9c:dd:47:52:5a:f9:76:2f:
fd:32:6c:ba:f4:29:86:f7:c6:67:ce:d6:04:de:2c:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:73:2C:FB:E7:E7:FB:1B:29:C0:B3:F8:2A:2A:41:9D:C8:94:10
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:21:0e:d5:eb:00:ec:fd:8b:e3:5d:0c:71:7c:31:91:a2:db:
7b:ef:18:ba:f3:56:af:19:24:da:44:02:e7:09:95:dc:cc:24:
e6:45:c1:a1:62:cf:51:e8:0f:b5:bd:07:0c:9e:cc:3c:1d:f7:
ed:85:51:fd:4a:dc:06:1f:be:4c:8e:31:31:1e:82:03:cc:31:
5a:1e:b8:79:8c:31:12:62:1a:37:e2:0c:12:99:d4:a3:f7:78:
c6:e9:b1:3c:ac:0f:12:b1:8f:63:83:6b:ca:0d:c1:cf:ea:78:
f9:ac:58:30:11:b0:ee:da:05:e0:a8:f4:0c:b6:45:93:4c:79:
42:40:15:6b:0d:04:38:e7:dc:1c:a3:a2:bd:72:ed:21:c8:43:
3e:81:52:9a:b3:ba:d0:ee:cd:76:73:09:ab:c2:80:b1:89:ee:
f0:fa:e8:88:eb:15:23:65:1f:95:af:d8:ec:5f:32:85:08:b2:
72:8d:50:1a:c5:1a:64:22:9e:98:34:fa:87:4d:e5:10:19:02:
99:ab:d0:24:cc:23:e3:e1:a8:b5:e0:f1:f8:fa:53:c4:08:5a:
8c:30:55:6b:00:4b:00:b2:18:89:d1:53:cb:87:c1:0d:25:64:
ca:0e:74:88:df:63:2a:5b:d0:a5:1f:7b:74:f9:1a:a8:00:a4:
01:d7:75:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2gDnMfwQUKPH59AXeXkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTNjMDZjYTc5NzZkNzM3YjIzYmM3Mjc2OGEyMjhjMzk3
ZmFmMmYwHhcNMjQxMTI2MTkwMTU0WhcNMjQxMTI3MTkwMTU0WjAzMTEwLwYDVQQD
Eyg1MTNkNzMyY2ZiZTdlN2ZiMWIyOWMwYjNmODJhMmE0MTlkYzg5NDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAvgNt8ywmRk2gP7DPFbSh8nwVdR
rMHN3yt0fT3niY6nzG/mNYx1Szo4TqsLETiRgUTyNqGQSzsI0xXlfW0PZ/xTMy05
+yD6ZifJmRf016uYswaHZXETxF1kV4neBN6lQUkYtI5SxeKDkVICldsrAQjmjVPx
zdqn3OAYHS5gN+ya6B2qbnkdC91z6GwA4W8+Qz+rV7N/p3vuz/cZv7ra0ZVAyrPD
Ft7JlKboT1TOOH8lQgB0Gx9X/Se86ZjKiNnJ+DvbCKlIvdm59gfCqyeAhsqZWizJ
3LFsY+wOLMdGwXgAX4i/34G6nN1HUlr5di/9Mmy69CmG98ZnztYE3iy5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE9cyz75+f7GynAs/gqKkGdyJQQMB8GA1UdIwQY
MBaAFB9TwGynl21zeyO8cnaKIow5f68vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2Mt
YmNlZmE0NTY1OGNjLzEvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2MtYmNlZmE0NTY1OGNj
LzEvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiEO1esA
7P2L410McXwxkaLbe+8YuvNWrxkk2kQC5wmV3Mwk5kXBoWLPUegPtb0HDJ7MPB33
7YVR/UrcBh++TI4xMR6CA8wxWh64eYwxEmIaN+IMEpnUo/d4xumxPKwPErGPY4Nr
yg3Bz+p4+axYMBGw7toF4Kj0DLZFk0x5QkAVaw0EOOfcHKOivXLtIchDPoFSmrO6
0O7NdnMJq8KAsYnu8ProiOsVI2Ufla/Y7F8yhQiyco1QGsUaZCKemDT6h03lEBkC
mavQJMwj4+GoteDx+PpTxAhajDBVawBLALIYidFTy4fBDSVkyg50iN9jKlvQpR97
dPkaqACkAdd1aQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:46 2024 by rpki-client on console-fra.rpki-client.org