Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: jOUJcueamoz07a59cbIhUiQEHtglJApcEasD/LZSNb0=
Subject key identifier: 69:1F:DA:A9:20:E5:E0:EC:18:47:2B:AC:D4:57:5F:7C:55:C8:F3:CA
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0193512B4975B003AAB0397670BDC84535B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 137E
Signing time: Fri 22 Nov 2024 00:00:10 +0000
Manifest this update: Fri 22 Nov 2024 00:00:10 +0000
Manifest next update: Sat 23 Nov 2024 00:00:10 +0000
Files and hashes: 1: PwiL-3_RKSywAIq4fdiAdS0m9lM.roa (hash: fZyLaCBtwWWabXA0Z9WtkFkfvPQMhjBhSx3zRNfK/Kg=)
2: aow0mHspZq0Ze2XXV5ymf47Td7I.roa (hash: CN+uxs7pII+RiBmaQzdieedqsTl6usjThDDfL3BVlTU=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: 0NjZffEbf+4EWG601DR4TGP1WB6NcM94CqDkrTi42fg=)
4: zPOAUrQzpPNGvvVmITAD6-vBcCE.roa (hash: 9+7ni7YGNzagY72NhA/qJS71IT3VmeuFI+MuYWb9VGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:49:75:b0:03:aa:b0:39:76:70:bd:c8:45:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Nov 22 00:00:10 2024 GMT
Not After : Nov 23 00:00:10 2024 GMT
Subject: CN=691fdaa920e5e0ec18472bacd4575f7c55c8f3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:c2:99:c7:91:70:1e:2e:4c:08:95:90:54:
69:e2:57:d6:e8:17:25:65:0f:6e:72:83:9f:bb:2a:
00:b2:c5:7b:86:35:0f:77:4d:6f:1b:db:42:74:65:
39:c6:ea:13:fd:ed:ba:d7:35:29:9e:e5:5e:87:80:
1f:18:cd:a3:61:9d:db:19:c4:58:11:21:ae:8c:ba:
01:05:22:b2:89:50:84:90:36:32:65:9f:9b:e6:a4:
d1:09:59:fd:3c:96:ee:94:6f:eb:57:bd:c0:7d:3f:
d4:83:40:6a:4f:2b:f2:7b:fc:e0:e9:f3:e9:16:3d:
72:0e:b2:87:8f:53:2b:ee:9e:ae:d4:6a:42:c7:ee:
db:87:a0:f5:96:c8:13:48:6e:e0:81:f9:ba:f1:f1:
45:ca:ae:9b:9b:e0:0b:e6:c7:4b:47:f1:75:4b:ac:
a9:04:cc:a7:3e:36:7a:28:22:59:96:0b:f7:25:bb:
99:0e:56:02:1a:17:4e:ed:f7:78:2b:d4:8d:41:72:
98:dd:93:25:1c:2e:69:26:a1:1f:11:c9:34:78:5b:
a8:45:d9:9d:9b:24:73:23:cf:11:9e:e1:f2:5e:f9:
64:96:62:64:fb:0a:0f:2c:da:0b:6c:48:31:f9:6f:
65:8e:f2:af:6f:8e:94:56:ca:e4:50:be:3e:c0:40:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:DA:A9:20:E5:E0:EC:18:47:2B:AC:D4:57:5F:7C:55:C8:F3:CA
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ed:56:a7:49:fb:7c:a4:d5:b2:9d:13:1e:8f:05:f3:db:0f:
30:9d:60:4c:16:68:3e:75:1d:2b:d6:11:b4:69:ce:10:f0:98:
f5:91:9d:67:80:26:c3:b0:49:d2:dc:28:32:d1:0d:d0:a5:0c:
1f:db:9a:80:3d:55:f6:cc:88:bb:48:aa:27:20:8a:7e:71:e3:
61:3a:1d:32:1e:23:9a:c2:09:96:c8:9e:75:1d:42:c2:ee:39:
0a:c8:64:92:04:ed:c7:46:83:4b:60:18:82:ce:d3:31:bc:6c:
1c:e1:0e:4a:bc:32:7b:10:3b:2e:a5:d4:e0:9a:7d:83:e7:0a:
a6:24:d9:9d:f6:48:93:54:e5:48:75:b4:64:17:4c:36:0e:73:
f0:17:ad:5a:d4:37:cb:5a:0f:b1:21:7a:50:39:21:f7:9c:28:
e1:70:50:8b:e7:4d:33:75:55:64:ff:61:a8:4d:b4:d6:6e:66:
ed:81:ed:fe:72:13:25:05:f3:e0:78:6f:08:7e:3f:04:ef:db:
4a:af:5c:92:38:71:80:fa:5e:88:8e:d6:fb:77:16:af:33:2b:
03:e8:f2:66:63:8a:42:63:14:38:34:08:f8:aa:88:ff:ff:c1:
e2:a0:7d:c7:17:ce:55:1f:d1:d0:06:8a:f4:2d:4e:a0:cc:fb:
06:f4:37:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK0l1sAOqsDl2cL3IRTW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjQxMTIyMDAwMDEwWhcNMjQxMTIzMDAwMDEwWjAzMTEwLwYDVQQD
Eyg2OTFmZGFhOTIwZTVlMGVjMTg0NzJiYWNkNDU3NWY3YzU1YzhmM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3DCmceRcB4uTAiVkFRp4lfW6Bcl
ZQ9ucoOfuyoAssV7hjUPd01vG9tCdGU5xuoT/e261zUpnuVeh4AfGM2jYZ3bGcRY
ESGujLoBBSKyiVCEkDYyZZ+b5qTRCVn9PJbulG/rV73AfT/Ug0BqTyvye/zg6fPp
Fj1yDrKHj1Mr7p6u1GpCx+7bh6D1lsgTSG7ggfm68fFFyq6bm+AL5sdLR/F1S6yp
BMynPjZ6KCJZlgv3JbuZDlYCGhdO7fd4K9SNQXKY3ZMlHC5pJqEfEck0eFuoRdmd
myRzI88RnuHyXvlklmJk+woPLNoLbEgx+W9ljvKvb46UVsrkUL4+wEDYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkf2qkg5eDsGEcrrNRXX3xVyPPKMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO1Wp0n7
fKTVsp0THo8F89sPMJ1gTBZoPnUdK9YRtGnOEPCY9ZGdZ4Amw7BJ0twoMtEN0KUM
H9uagD1V9syIu0iqJyCKfnHjYTodMh4jmsIJlsiedR1Cwu45CshkkgTtx0aDS2AY
gs7TMbxsHOEOSrwyexA7LqXU4Jp9g+cKpiTZnfZIk1TlSHW0ZBdMNg5z8BetWtQ3
y1oPsSF6UDkh95wo4XBQi+dNM3VVZP9hqE201m5m7YHt/nITJQXz4HhvCH4/BO/b
Sq9ckjhxgPpeiI7W+3cWrzMrA+jyZmOKQmMUODQI+KqI///B4qB9xxfOVR/R0AaK
9C1OoMz7BvQ3qg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:56 2024 by rpki-client on console-fra.rpki-client.org