Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: I4DEmHbRiWdoysLXk/dnpnENJZXuTtWdR+3AB7a/vqA=
Subject key identifier: E6:DE:03:F2:92:D4:07:04:31:4E:87:A0:34:5E:4A:D6:44:C6:C3:A9
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019405A16CCA72C36C8F1705615564329101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 11D8
Signing time: Fri 27 Dec 2024 01:00:52 +0000
Manifest this update: Fri 27 Dec 2024 01:00:52 +0000
Manifest next update: Sat 28 Dec 2024 01:00:52 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: E5a+u3yzRDZJDJmr7bprwroE/4sqexIHREYzaFbv1PA=)
2: XdO2970itZEX9wGcRk6f70U2daM.roa (hash: Gvn5pfJhkSbB7iolsqaYfDXvDMqEgEAA1sL3P7q/Dhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:6c:ca:72:c3:6c:8f:17:05:61:55:64:32:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Dec 27 01:00:52 2024 GMT
Not After : Dec 28 01:00:52 2024 GMT
Subject: CN=e6de03f292d40704314e87a0345e4ad644c6c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:81:bb:f1:fa:50:45:f8:a9:d2:2a:58:c5:
5c:eb:e0:95:fd:36:d2:d4:bb:87:f4:dc:42:08:a1:
08:61:0d:a2:13:3f:9b:46:4c:0a:b1:5c:2c:62:d6:
06:89:1d:ad:c9:d7:73:3c:79:03:d3:84:7d:b1:53:
45:50:d3:d1:9e:6e:03:2a:0b:e9:29:c5:f5:c4:46:
d5:e8:61:fa:a0:4a:11:29:76:bf:c1:c6:1e:dd:2a:
8b:4d:20:e5:6e:cf:25:54:a0:22:6a:6a:ac:5f:09:
e3:8e:af:94:68:d8:57:ff:4c:17:e5:37:98:85:1e:
ad:5b:32:ee:57:e8:9e:d2:64:7d:70:6c:5e:93:09:
54:c1:a9:47:d8:ac:67:b6:f2:96:b7:98:2d:93:4e:
ad:c1:aa:72:fd:e7:b7:d3:cd:86:5a:ac:e9:26:16:
e3:f7:d4:1f:05:8f:07:f7:d3:ff:66:33:88:52:a2:
84:92:5a:46:c8:7d:69:8e:97:2d:04:32:29:a2:3a:
d6:05:74:e6:05:ca:72:af:02:74:7e:90:42:f2:ad:
30:d6:73:d3:13:82:d4:ef:4d:9c:a8:48:f9:9e:b9:
42:0e:aa:4d:8c:54:a4:99:e3:ba:60:58:22:e8:fa:
1a:ad:04:9a:e0:6d:2d:1f:25:4d:6a:8c:b9:75:e2:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:03:F2:92:D4:07:04:31:4E:87:A0:34:5E:4A:D6:44:C6:C3:A9
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6a:c7:4e:d8:d3:0f:9a:6b:27:bd:1f:da:d8:1f:43:7a:a6:
69:87:51:ea:c7:d7:c9:c9:7f:e7:e7:c2:a6:90:b5:6a:1c:e7:
ae:ad:be:ea:c0:1f:86:e7:ea:8e:30:80:c1:05:6a:6d:d7:92:
fe:85:e0:bc:02:33:85:83:21:fc:60:f5:bd:99:dd:ba:7b:ef:
23:39:7d:82:59:5a:80:43:b0:f9:91:d0:9c:8e:58:02:78:2c:
e1:6a:7b:ce:e8:44:53:d2:37:77:38:94:ba:d1:a5:9e:6b:22:
ac:c2:0e:6c:4d:fd:0c:89:df:de:f0:8c:b7:a0:81:7d:d7:78:
9c:e7:f9:2e:9c:4f:c6:d1:2d:e5:93:64:db:61:4f:b2:99:af:
1c:31:43:96:51:a7:4f:d6:d0:ec:8e:84:74:7d:e8:a5:b2:dc:
41:ec:02:e9:b3:dc:45:5a:6d:66:51:01:57:8a:94:c4:b5:9c:
38:f3:20:f2:95:19:a4:de:24:06:de:2c:80:8d:b6:74:e1:2d:
5d:60:14:d0:8f:ba:27:e4:a8:d1:2d:5c:88:21:df:b4:18:20:
42:d3:cc:b5:fa:13:9a:0d:50:ed:2f:69:e6:4a:c0:8f:86:33:
81:97:84:68:cb:33:8f:50:49:b0:0a:b7:39:00:82:02:1b:9f:
a2:63:82:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQFoWzKcsNsjxcFYVVkMpEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjQxMjI3MDEwMDUyWhcNMjQxMjI4MDEwMDUyWjAzMTEwLwYDVQQD
EyhlNmRlMDNmMjkyZDQwNzA0MzE0ZTg3YTAzNDVlNGFkNjQ0YzZjM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EmBu/H6UEX4qdIqWMVc6+CV/TbS
1LuH9NxCCKEIYQ2iEz+bRkwKsVwsYtYGiR2tyddzPHkD04R9sVNFUNPRnm4DKgvp
KcX1xEbV6GH6oEoRKXa/wcYe3SqLTSDlbs8lVKAiamqsXwnjjq+UaNhX/0wX5TeY
hR6tWzLuV+ie0mR9cGxekwlUwalH2KxntvKWt5gtk06twapy/ee3082GWqzpJhbj
99QfBY8H99P/ZjOIUqKEklpGyH1pjpctBDIpojrWBXTmBcpyrwJ0fpBC8q0w1nPT
E4LU702cqEj5nrlCDqpNjFSkmeO6YFgi6PoarQSa4G0tHyVNaoy5deIL3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFObeA/KS1AcEMU6HoDReStZExsOpMB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGrH
TtjTD5prJ70f2tgfQ3qmaYdR6sfXycl/5+fCppC1ahznrq2+6sAfhufqjjCAwQVq
bdeS/oXgvAIzhYMh/GD1vZndunvvIzl9gllagEOw+ZHQnI5YAngs4Wp7zuhEU9I3
dziUutGlnmsirMIObE39DInf3vCMt6CBfdd4nOf5LpxPxtEt5ZNk22FPspmvHDFD
llGnT9bQ7I6EdH3opbLcQewC6bPcRVptZlEBV4qUxLWcOPMg8pUZpN4kBt4sgI22
dOEtXWAU0I+6J+So0S1ciCHftBggQtPMtfoTmg1Q7S9p5krAj4YzgZeEaMszj1BJ
sAq3OQCCAhufomOCKg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:39 2024 by rpki-client on console-fra.rpki-client.org