Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: tT8vgnYBCvrTOctjsdeCr1NlKJo2WmWNO0eM9CVIzDs=
Subject key identifier: BD:83:3E:8A:27:22:16:79:78:F5:B6:B2:29:61:EA:B2:B9:FB:4D:21
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 01936B2282A0DA94E988992F8DEA8B82AFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 137C
Signing time: Wed 27 Nov 2024 01:00:43 +0000
Manifest this update: Wed 27 Nov 2024 01:00:43 +0000
Manifest next update: Thu 28 Nov 2024 01:00:43 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: I1afUTFRb8Ymu2tF7e0rxvFJAWFATKa5XnlQtQslzgY=)
2: kTUEAWMp1gTCCcWjTzQAwttndPc.roa (hash: on6lGaldRMbBmLtXikwnmsodKEuUDfHXj3g4c87+P0w=)
3: xcEpK4OVJA5luMMsh_hF9fUgl-0.roa (hash: cqShahf00yuAjJopoGIhz437ZnCsQF04VH42q4TjNEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:82:a0:da:94:e9:88:99:2f:8d:ea:8b:82:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Nov 27 01:00:43 2024 GMT
Not After : Nov 28 01:00:43 2024 GMT
Subject: CN=bd833e8a2722167978f5b6b22961eab2b9fb4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:d6:25:28:b9:d2:97:07:56:da:ec:a2:df:
08:97:40:55:bb:f0:6f:03:8c:b8:4a:87:fd:8a:01:
2d:8b:f2:e0:0a:5c:70:e0:8d:4c:e9:7d:c0:61:86:
4b:5b:bd:18:90:9a:4f:a9:09:cd:57:fd:ae:92:1c:
c2:17:27:ed:58:cf:28:7c:3c:c0:d4:f5:fa:b4:ca:
7c:ce:b8:2a:91:e2:b6:1c:29:d0:29:8d:a9:8c:8f:
46:77:bc:43:b9:63:19:e8:de:0d:f8:bd:f0:ab:02:
c5:9e:9e:0e:00:67:71:74:fb:1f:83:b3:0d:40:d3:
6b:65:44:ff:b0:2f:65:50:33:fc:19:07:67:be:bd:
07:7c:b4:d1:46:cc:d3:07:c2:d3:5b:d1:e0:4e:27:
3d:b4:65:bf:dd:7d:2a:3c:50:ab:9d:ab:9f:32:73:
18:d6:49:15:ce:ed:ac:f0:14:5c:97:3d:89:24:8e:
50:72:7b:be:74:15:03:3b:e8:53:e6:69:ff:ee:79:
70:46:78:47:26:f4:52:d8:f7:b1:07:4f:63:7d:32:
38:25:4c:84:bc:00:ca:f6:85:57:fa:f6:2e:24:fa:
ae:4d:11:7c:50:80:d9:1c:28:b0:31:f3:c5:bd:3c:
b7:9c:7b:70:86:b9:2e:f0:2f:7e:44:78:f0:24:d0:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:3E:8A:27:22:16:79:78:F5:B6:B2:29:61:EA:B2:B9:FB:4D:21
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fc:fc:6c:ef:1b:62:65:3c:8d:70:34:14:ac:36:fe:dd:6b:
e9:27:72:26:d0:34:67:6b:d5:38:1d:9e:04:05:b7:e1:d3:5b:
5c:d9:92:6b:28:56:a4:b5:e3:ea:1e:d9:c4:ba:7c:d7:0f:87:
48:6a:3c:23:4d:0c:95:e5:d4:b0:46:77:7c:db:94:2d:79:12:
51:80:2b:cf:c0:d4:2d:4c:f8:ec:17:47:f7:8c:2b:a0:3e:c7:
21:ba:80:08:87:2a:22:c4:8c:f9:97:b2:e3:9a:7d:47:39:7b:
d5:7c:6e:85:2d:f9:91:01:0f:62:83:bb:2d:23:ef:af:02:93:
c6:aa:a7:ac:bd:14:49:f5:d5:0c:a8:11:28:83:73:3d:9b:6c:
79:d0:f5:2b:70:f6:2a:e9:b2:8a:bc:a6:f4:76:14:fa:08:0c:
70:49:77:56:cf:33:ea:ba:e2:47:1c:4c:f7:24:90:4d:4b:28:
a9:2a:cb:ef:99:1c:dd:b6:41:98:1b:f8:95:bd:59:dc:a3:a6:
8b:d4:0a:4f:20:0b:47:de:db:da:63:89:f5:fa:82:c8:3f:6c:
e8:a4:cd:69:9f:6d:c0:08:b1:ed:c0:d9:16:cb:fa:74:e1:f9:
d7:96:80:1b:7c:29:05:2e:8b:0d:e6:54:63:2c:73:8d:9b:df:
78:07:8e:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIoKg2pTpiJkvjeqLgq/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzc1MjIzMjFjMjNkMTY5ZWQzMzJmZjQ5ODc5Y2NjMjQ1
MTcyZGIwHhcNMjQxMTI3MDEwMDQzWhcNMjQxMTI4MDEwMDQzWjAzMTEwLwYDVQQD
EyhiZDgzM2U4YTI3MjIxNjc5NzhmNWI2YjIyOTYxZWFiMmI5ZmI0ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc7WJSi50pcHVtrsot8Il0BVu/Bv
A4y4Sof9igEti/LgClxw4I1M6X3AYYZLW70YkJpPqQnNV/2ukhzCFyftWM8ofDzA
1PX6tMp8zrgqkeK2HCnQKY2pjI9Gd7xDuWMZ6N4N+L3wqwLFnp4OAGdxdPsfg7MN
QNNrZUT/sC9lUDP8GQdnvr0HfLTRRszTB8LTW9HgTic9tGW/3X0qPFCrnaufMnMY
1kkVzu2s8BRclz2JJI5Qcnu+dBUDO+hT5mn/7nlwRnhHJvRS2PexB09jfTI4JUyE
vADK9oVX+vYuJPquTRF8UIDZHCiwMfPFvTy3nHtwhrku8C9+RHjwJNAEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2DPoonIhZ5ePW2silh6rK5+00hMB8GA1UdIwQY
MBaAFB3HUiMhwj0WntMy/0mHnMwkUXLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYt
NzA1NTM5M2Y3NWZlLzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81MjBkMDQtZTkxMi00ZjQ2LWE5ZTYtNzA1NTM5M2Y3NWZl
LzEvSGNkU0l5SENQUmFlMHpMX1NZZWN6Q1JSY3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfz8bO8b
YmU8jXA0FKw2/t1r6SdyJtA0Z2vVOB2eBAW34dNbXNmSayhWpLXj6h7ZxLp81w+H
SGo8I00MleXUsEZ3fNuULXkSUYArz8DULUz47BdH94wroD7HIbqACIcqIsSM+Zey
45p9Rzl71XxuhS35kQEPYoO7LSPvrwKTxqqnrL0USfXVDKgRKINzPZtsedD1K3D2
Kumyirym9HYU+ggMcEl3Vs8z6rriRxxM9ySQTUsoqSrL75kc3bZBmBv4lb1Z3KOm
i9QKTyALR97b2mOJ9fqCyD9s6KTNaZ9twAix7cDZFsv6dOH515aAG3wpBS6LDeZU
YyxzjZvfeAeOFg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:21 2024 by rpki-client on console-fra.rpki-client.org