Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: QjMk4dBvEGX2eRTgg/NluZgPCjitDLSVCzahMVuawMQ=
Subject key identifier: 55:FD:EA:3C:0C:C1:7C:70:B4:F6:C0:A4:8E:C0:CE:3D:3E:46:A5:4B
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01935162606CA4E71C3FDF110BDC2970E0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 01:00:21 +0000
Manifest this update: Fri 22 Nov 2024 01:00:21 +0000
Manifest next update: Sat 23 Nov 2024 01:00:21 +0000
Files and hashes: 1: ZtanexAjnASLIyjImlPsjusJZ0Y.roa (hash: lCmO2Je6tKQjaYjobZPZRUNxx0G62xuxkbA/4WCFa1Y=)
2: hlbBIyTcK6rDdM4CpTZX68UbXp4.roa (hash: o4P1QqYRGpGU6CCD/diIE28ER8KkY1e25BXvTJ4Q3L0=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: IQNQhzohkxWbhXSLXpADRgFnGUdxYRTel55G1bPuFco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:60:6c:a4:e7:1c:3f:df:11:0b:dc:29:70:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Nov 22 01:00:21 2024 GMT
Not After : Nov 23 01:00:21 2024 GMT
Subject: CN=55fdea3c0cc17c70b4f6c0a48ec0ce3d3e46a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ae:a8:ba:14:51:00:1c:29:ea:77:e1:00:0e:
1d:05:2e:08:79:1c:5a:45:69:41:6a:ac:50:45:f1:
ff:0e:d1:63:30:2c:e9:f8:58:93:e5:53:d3:90:76:
37:3a:cd:01:75:88:6c:27:c8:d5:a4:c5:be:f8:f5:
76:f7:2e:a2:f3:60:1b:0d:08:87:ff:54:05:96:1b:
c5:79:28:de:5c:b5:b4:2a:7d:5a:5c:66:81:c8:c6:
32:c2:d7:c3:a3:9a:c3:26:45:fb:d3:24:20:5b:2e:
ac:c2:88:cc:15:36:a6:5f:c9:1f:d4:24:30:70:23:
5b:dc:4e:f6:65:fd:b9:84:aa:af:b1:ba:0f:67:45:
80:32:40:b2:0f:be:f1:c6:4a:32:e0:88:08:6c:d1:
51:9b:e5:1f:88:f1:0a:61:5d:fe:88:b3:26:6e:bb:
73:fa:84:81:71:f1:e0:8d:68:0d:a7:28:9e:b1:32:
de:fb:85:c6:7a:38:94:24:b3:36:85:d4:82:03:e2:
a8:d1:4b:1a:d0:c4:c6:58:51:17:81:9d:7c:05:a5:
0b:52:f5:32:89:a6:12:e0:4c:e8:9a:75:18:f3:e4:
53:98:39:e4:bd:d0:84:48:6a:af:9a:33:82:af:42:
21:f1:82:5b:74:cb:3c:d3:79:fd:b9:af:d3:b5:ae:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:EA:3C:0C:C1:7C:70:B4:F6:C0:A4:8E:C0:CE:3D:3E:46:A5:4B
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:02:eb:41:1e:bc:0f:15:9a:a5:ed:f7:0b:36:b9:1f:18:
c0:67:04:ec:aa:d5:50:84:d6:5e:d0:85:34:91:cc:89:ac:12:
6e:ff:9f:55:04:3b:33:cf:70:22:b0:b0:76:d1:9e:f0:c8:bc:
e5:b0:76:4a:47:a5:77:f0:a1:f7:be:8e:82:9f:9f:2f:6f:bd:
e3:e2:8c:af:59:d2:81:68:8c:e6:c0:24:f5:f5:7b:dc:67:ad:
6c:0e:85:2f:cd:a1:ba:9a:f6:dc:d3:5f:b0:cc:d8:59:b7:03:
9a:55:51:a5:3f:ec:4a:a2:5d:ca:9b:05:30:71:42:b7:07:5e:
7e:b7:5a:97:f9:a3:65:93:bc:08:5a:93:25:40:99:54:ab:6b:
af:38:75:0a:f3:74:03:bb:62:05:9a:09:c6:83:44:67:d9:79:
a5:87:57:a8:f8:da:71:27:15:32:6a:22:cb:95:d3:9b:ef:00:
bd:ce:15:7e:c7:d4:ee:f9:c5:70:4d:26:46:61:96:70:22:2b:
5b:cc:29:fd:4e:81:28:a2:6f:a9:39:5c:7e:29:25:3b:e6:1d:
9c:66:ac:8c:74:f7:f5:94:c8:b6:65:ae:ce:d5:58:64:4f:9f:
b7:70:54:e6:3b:a8:4c:c1:98:c3:f9:6e:2a:c2:66:82:e5:3e:
63:7d:d6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYmBspOccP98RC9wpcODgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjdjMDJkZTdmYzhkMTFhMWFmZTdhZTYyYzU4NTRkMTc3
Njc1NTMwHhcNMjQxMTIyMDEwMDIxWhcNMjQxMTIzMDEwMDIxWjAzMTEwLwYDVQQD
Eyg1NWZkZWEzYzBjYzE3YzcwYjRmNmMwYTQ4ZWMwY2UzZDNlNDZhNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+a6ouhRRABwp6nfhAA4dBS4IeRxa
RWlBaqxQRfH/DtFjMCzp+FiT5VPTkHY3Os0BdYhsJ8jVpMW++PV29y6i82AbDQiH
/1QFlhvFeSjeXLW0Kn1aXGaByMYywtfDo5rDJkX70yQgWy6swojMFTamX8kf1CQw
cCNb3E72Zf25hKqvsboPZ0WAMkCyD77xxkoy4IgIbNFRm+UfiPEKYV3+iLMmbrtz
+oSBcfHgjWgNpyiesTLe+4XGejiUJLM2hdSCA+Ko0Usa0MTGWFEXgZ18BaULUvUy
iaYS4EzomnUY8+RTmDnkvdCESGqvmjOCr0Ih8YJbdMs803n9ua/Tta6QGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX96jwMwXxwtPbApI7Azj0+RqVLMB8GA1UdIwQY
MBaAFJtnwC3n/I0Roa/nrmLFhU0XdnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYt
YzgxNzQzYjJjYWU2LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTRlODEtMzMxNy00MjgzLWI0NWYtYzgxNzQzYjJjYWU2
LzEvbTJmQUxlZjhqUkdoci1ldVlzV0ZUUmQyZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4EC60Ee
vA8VmqXt9ws2uR8YwGcE7KrVUITWXtCFNJHMiawSbv+fVQQ7M89wIrCwdtGe8Mi8
5bB2Skeld/Ch976Ogp+fL2+94+KMr1nSgWiM5sAk9fV73GetbA6FL82hupr23NNf
sMzYWbcDmlVRpT/sSqJdypsFMHFCtwdefrdal/mjZZO8CFqTJUCZVKtrrzh1CvN0
A7tiBZoJxoNEZ9l5pYdXqPjacScVMmoiy5XTm+8Avc4VfsfU7vnFcE0mRmGWcCIr
W8wp/U6BKKJvqTlcfiklO+YdnGasjHT39ZTItmWuztVYZE+ft3BU5juoTMGYw/lu
KsJmguU+Y33WQg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:15 2024 by rpki-client on console-fra.rpki-client.org