Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: 1x2NQtSr+IoHRt7sw8EQkp22uC4V/97KKehSJEiRmH4=
Subject key identifier: 63:17:0B:92:25:07:4F:73:9D:BB:7F:50:9A:9A:09:AD:23:99:07:CE
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0193519956F73C173A9541C1CC6407846A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 02:00:23 +0000
Manifest this update: Fri 22 Nov 2024 02:00:23 +0000
Manifest next update: Sat 23 Nov 2024 02:00:23 +0000
Files and hashes: 1: 77S24runDlBqidNoa4BcDJZOp-g.roa (hash: YEDFW1lDrniKz9rAO2iOV428V5iUG1mrLmp5yuKCkPc=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: kqE/YxqaC+ygTYF8sVoWdrg2MxkMIDdhsA4fQYx2cZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:56:f7:3c:17:3a:95:41:c1:cc:64:07:84:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Nov 22 02:00:23 2024 GMT
Not After : Nov 23 02:00:23 2024 GMT
Subject: CN=63170b9225074f739dbb7f509a9a09ad239907ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:79:06:05:fb:d1:05:20:3a:28:ee:cf:5e:
f1:3d:ab:d9:69:5a:ff:27:f3:61:4b:49:79:79:55:
b1:0a:11:2b:d7:88:f8:d2:7a:ce:ad:d3:96:a8:d7:
76:94:54:6c:a9:6c:15:5e:ce:c0:b6:c4:dc:21:3f:
22:b7:95:67:07:21:96:86:80:e1:c1:da:01:f3:46:
e0:1e:c9:ef:d7:7b:67:c4:a9:4f:f1:39:c1:ba:e9:
41:83:54:4f:07:a0:19:dc:4a:f1:97:02:78:2b:83:
00:f3:7d:af:e2:4c:fe:ef:f0:f2:31:8a:d2:89:0a:
20:01:aa:c0:e6:14:2f:f7:b5:cf:fc:f4:0f:be:7c:
0d:30:0d:6e:c4:4d:e9:9a:84:47:7a:5e:5c:7e:29:
b9:71:d7:1b:48:96:53:bb:6b:73:88:c1:ae:d4:b4:
dc:d2:d1:a3:79:5b:ee:ee:9d:45:35:ba:41:e5:21:
46:b4:09:ce:ba:ea:9b:42:24:e2:4d:80:aa:38:f7:
44:41:f3:83:e0:4f:4c:d8:c4:3a:01:06:f1:0c:67:
0f:0e:bf:4f:ba:26:f6:6d:ed:70:ef:84:35:1f:e2:
1b:6d:46:27:03:bf:b3:5c:5d:5e:c0:90:e7:a3:69:
47:b7:42:c2:ef:4b:30:0a:6b:75:51:3e:dc:42:6f:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:0B:92:25:07:4F:73:9D:BB:7F:50:9A:9A:09:AD:23:99:07:CE
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:91:9e:58:c5:cc:8c:e9:bf:ce:68:35:ec:5f:3c:72:10:
61:0a:99:55:cf:7c:8d:c5:9f:45:b1:09:9a:de:c7:4d:49:9f:
5e:63:74:f7:67:d5:6d:e6:34:88:f6:84:fa:6c:8a:28:bb:22:
8a:7a:ef:fc:97:58:bd:86:31:56:d3:30:e4:d0:de:c8:e6:a6:
20:13:db:c0:8b:ab:1d:34:a3:e9:ed:e0:5b:e3:94:89:03:ab:
07:f1:b4:b7:38:88:9d:9b:c8:c7:48:ea:24:a1:4f:41:a1:46:
be:94:29:9c:5a:32:34:f7:59:ca:81:d8:77:ff:a2:bf:6c:4b:
99:2e:8a:7a:85:a6:a8:96:6e:56:e4:7b:92:da:b5:39:a6:c6:
2c:56:d3:2e:c2:9c:7d:3f:5b:29:a5:46:0c:d8:1c:c9:07:26:
d6:d3:13:68:90:02:81:e9:e7:a2:96:db:ca:01:12:11:24:11:
fc:14:c7:36:76:a0:16:83:4d:08:bd:9a:d3:d2:36:c2:6d:c5:
42:17:65:eb:2c:0c:9e:50:12:11:e9:68:3e:ce:04:85:ea:7a:
fb:1c:23:73:fc:50:ec:38:93:5b:38:28:41:4a:1d:94:25:45:
98:2d:e7:94:44:f7:49:fd:87:a7:b1:28:02:d2:35:8f:05:c4:
8e:7d:80:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmVb3PBc6lUHBzGQHhGoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx
YTU0ZTcwHhcNMjQxMTIyMDIwMDIzWhcNMjQxMTIzMDIwMDIzWjAzMTEwLwYDVQQD
Eyg2MzE3MGI5MjI1MDc0ZjczOWRiYjdmNTA5YTlhMDlhZDIzOTkwN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX95BgX70QUgOijuz17xPavZaVr/
J/NhS0l5eVWxChEr14j40nrOrdOWqNd2lFRsqWwVXs7AtsTcIT8it5VnByGWhoDh
wdoB80bgHsnv13tnxKlP8TnBuulBg1RPB6AZ3ErxlwJ4K4MA832v4kz+7/DyMYrS
iQogAarA5hQv97XP/PQPvnwNMA1uxE3pmoRHel5cfim5cdcbSJZTu2tziMGu1LTc
0tGjeVvu7p1FNbpB5SFGtAnOuuqbQiTiTYCqOPdEQfOD4E9M2MQ6AQbxDGcPDr9P
uib2be1w74Q1H+IbbUYnA7+zXF1ewJDno2lHt0LC70swCmt1UT7cQm90SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMXC5IlB09znbt/UJqaCa0jmQfOMB8GA1UdIwQY
MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt
MDJmMzVhZDg3N2YzLzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz
LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhaRnljF
zIzpv85oNexfPHIQYQqZVc98jcWfRbEJmt7HTUmfXmN092fVbeY0iPaE+myKKLsi
inrv/JdYvYYxVtMw5NDeyOamIBPbwIurHTSj6e3gW+OUiQOrB/G0tziInZvIx0jq
JKFPQaFGvpQpnFoyNPdZyoHYd/+iv2xLmS6KeoWmqJZuVuR7ktq1OabGLFbTLsKc
fT9bKaVGDNgcyQcm1tMTaJACgennopbbygESESQR/BTHNnagFoNNCL2a09I2wm3F
Qhdl6ywMnlASEeloPs4Ehep6+xwjc/xQ7DiTWzgoQUodlCVFmC3nlET3Sf2Hp7Eo
AtI1jwXEjn2ANQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:17 2024 by rpki-client on console-ams.rpki-client.org