Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: SPtt33Lks5CrC1UaLcekFEa6lkSxSVqKs8+LIematgY=
Subject key identifier: 43:BE:1F:10:66:EF:07:72:11:10:CF:3C:16:E1:D8:34:66:84:F5:DA
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0193579BB4E0211CA770A8BB60C9294E12F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 06:00:42 +0000
Manifest this update: Sat 23 Nov 2024 06:00:42 +0000
Manifest next update: Sun 24 Nov 2024 06:00:42 +0000
Files and hashes: 1: NXa0Jn2EOZpZ9o5-G_yLeqzdbfA.roa (hash: fUsqxu90wZY4nkT8hbZYL1H13qTTj+Am1AJTnI8OPo0=)
2: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: GqUOgGxwBFWYd4/kjA0As2wfa0YD6TtiIN+EtMauhMs=)
3: nolVBQMsdD3Cim807CDLfPjeTQM.roa (hash: 6vm7YCY4YMErHSvPm9g8hTEqA+rxoG4ryB5ZS41e9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b4:e0:21:1c:a7:70:a8:bb:60:c9:29:4e:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Nov 23 06:00:42 2024 GMT
Not After : Nov 24 06:00:42 2024 GMT
Subject: CN=43be1f1066ef07721110cf3c16e1d8346684f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:06:fa:06:4b:fc:0f:58:a8:e3:1f:b5:4f:
0d:e3:0c:64:0a:8f:d2:be:4a:c5:b9:ef:50:18:49:
53:ca:c8:b4:18:01:99:dc:c9:37:c9:52:cd:75:aa:
08:69:6c:31:da:fd:10:56:e5:c9:63:28:7d:e9:66:
72:93:7d:61:03:91:69:33:37:f4:cc:3f:e2:fc:99:
a9:e5:a9:2c:95:ed:dd:79:11:d8:60:98:80:14:25:
c0:e0:5a:5e:f0:e9:d5:7f:09:22:5b:8a:27:35:0a:
65:2e:b0:b6:c9:8c:6b:75:fa:35:11:3d:a6:5b:2c:
10:5c:44:84:1b:7a:6e:2c:c1:48:ce:c1:c9:00:04:
3b:4c:cb:95:6d:ac:76:61:15:2a:e5:36:88:cb:ff:
9d:15:a5:1a:16:3a:65:5b:0a:74:d6:a2:02:a2:35:
c4:13:8a:26:81:92:b7:50:96:b4:40:75:e9:24:42:
60:07:0f:2d:de:27:c8:e3:94:c3:35:d8:74:da:50:
2f:5a:04:33:d0:f9:33:cb:33:35:fa:d2:35:43:14:
d3:d8:b9:cc:73:a5:6d:a2:f5:8d:a6:1f:25:de:c9:
85:90:a4:cb:fc:bd:c2:48:c7:c8:4b:fa:48:4e:ce:
31:ee:1c:ef:5f:bb:19:be:80:70:d3:7e:73:0d:fe:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:1F:10:66:EF:07:72:11:10:CF:3C:16:E1:D8:34:66:84:F5:DA
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:a9:63:29:ff:0d:22:67:55:e5:3c:f8:b4:27:01:46:be:
92:23:2c:5d:d6:49:5f:e6:94:c9:d8:51:ce:03:03:f9:7e:d3:
bd:1c:c6:0f:1c:7b:a1:bf:de:fd:2b:01:31:bf:07:b5:2b:6c:
e6:9c:03:fc:b3:b4:ad:a6:01:fc:4c:07:aa:ce:61:5f:aa:b8:
fc:80:00:bf:2b:cd:73:d0:86:f3:f6:2c:2d:96:54:12:79:71:
61:0e:05:4c:47:f5:84:c7:9a:f8:b7:a5:f7:8f:a7:f1:67:5d:
28:b3:93:21:d2:b1:62:17:b4:bf:95:af:6f:62:f3:1e:c0:6e:
1e:35:1d:60:10:e6:30:83:66:9a:19:ec:fc:dd:24:91:5d:60:
00:12:56:83:04:7a:85:33:9b:69:c7:d1:94:9e:e6:ad:d9:9a:
a7:89:0e:97:f0:67:3d:18:da:eb:25:5f:5c:ba:f0:45:b1:02:
3a:cd:ca:8a:5c:fd:50:d7:e7:e3:05:ef:4f:53:7c:71:ce:18:
e3:b9:81:16:2f:44:13:3e:69:ca:10:95:16:3e:df:a5:e4:1b:
8c:77:05:d3:ff:e0:33:2b:ad:7a:52:ad:3f:b6:8b:45:1b:8d:
75:fe:61:f0:a6:2c:77:b4:40:be:c7:88:30:b2:8a:62:ac:17:
3b:da:dd:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm7TgIRyncKi7YMkpThL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm
ZmQ5NzYwHhcNMjQxMTIzMDYwMDQyWhcNMjQxMTI0MDYwMDQyWjAzMTEwLwYDVQQD
Eyg0M2JlMWYxMDY2ZWYwNzcyMTExMGNmM2MxNmUxZDgzNDY2ODRmNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcwG+gZL/A9YqOMftU8N4wxkCo/S
vkrFue9QGElTysi0GAGZ3Mk3yVLNdaoIaWwx2v0QVuXJYyh96WZyk31hA5FpMzf0
zD/i/Jmp5aksle3deRHYYJiAFCXA4Fpe8OnVfwkiW4onNQplLrC2yYxrdfo1ET2m
WywQXESEG3puLMFIzsHJAAQ7TMuVbax2YRUq5TaIy/+dFaUaFjplWwp01qICojXE
E4omgZK3UJa0QHXpJEJgBw8t3ifI45TDNdh02lAvWgQz0PkzyzM1+tI1QxTT2LnM
c6VtovWNph8l3smFkKTL/L3CSMfIS/pITs4x7hzvX7sZvoBw035zDf4pbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO+HxBm7wdyERDPPBbh2DRmhPXaMB8GA1UdIwQY
MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct
MTJhZDE0NjY1NWNlLzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl
LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD22pYyn/
DSJnVeU8+LQnAUa+kiMsXdZJX+aUydhRzgMD+X7TvRzGDxx7ob/e/SsBMb8HtSts
5pwD/LO0raYB/EwHqs5hX6q4/IAAvyvNc9CG8/YsLZZUEnlxYQ4FTEf1hMea+Lel
94+n8WddKLOTIdKxYhe0v5Wvb2LzHsBuHjUdYBDmMINmmhns/N0kkV1gABJWgwR6
hTObacfRlJ7mrdmap4kOl/BnPRja6yVfXLrwRbECOs3Kilz9UNfn4wXvT1N8cc4Y
47mBFi9EEz5pyhCVFj7fpeQbjHcF0//gMyutelKtP7aLRRuNdf5h8KYsd7RAvseI
MLKKYqwXO9rdhw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:09 2024 by rpki-client on console-ams.rpki-client.org