Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: 2xfrI7NQwq/otYn7ilu8wgcPDt6utfzRgeYH6ca+oQ8=
Subject key identifier: E2:7D:A1:25:6F:52:4F:89:AF:1A:F0:0F:41:1B:70:2C:9F:4C:3B:FC
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 01935764FD13B3220E5DD599B062C9DF070D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 05:00:56 +0000
Manifest this update: Sat 23 Nov 2024 05:00:56 +0000
Manifest next update: Sun 24 Nov 2024 05:00:56 +0000
Files and hashes: 1: 0wHpflQI31kShgib9usWCa7OqTc.roa (hash: ygVcjqDZInZ09D1qOVG6xH2HYLeP60g26d7nIWj8JtI=)
2: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: 5CtYt/otMow2oZmgLoJeNMZ/vZDdkUrhxjzLbUhoXoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:fd:13:b3:22:0e:5d:d5:99:b0:62:c9:df:07:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Nov 23 05:00:56 2024 GMT
Not After : Nov 24 05:00:56 2024 GMT
Subject: CN=e27da1256f524f89af1af00f411b702c9f4c3bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:2d:c3:e2:18:53:54:ae:b7:ee:dc:9a:ee:
0e:49:71:cc:9b:fc:c8:97:9e:14:d1:29:76:40:0d:
38:e3:bc:e8:77:9c:7e:ba:bb:eb:fd:44:04:ab:bd:
8c:42:f7:2a:17:85:f9:06:16:43:19:4c:a4:ab:fb:
3a:46:ed:45:b5:08:2e:a8:05:08:7f:dd:95:12:0e:
c0:52:21:25:50:3e:6e:44:2f:bb:fe:e3:ae:83:6c:
4c:4e:5f:be:fd:49:dd:34:94:66:2a:a5:55:31:9e:
0d:72:22:81:8b:7c:37:1e:da:fb:14:25:c8:14:93:
76:d2:de:3b:07:b9:43:71:35:3a:1c:45:bb:3f:79:
a3:a0:1d:df:57:14:2d:1c:9e:e1:ae:f4:b6:7b:23:
c7:13:5b:fe:dc:cc:c4:a0:10:a7:5c:e1:89:bc:cb:
6d:c9:67:c5:07:cb:45:e3:5d:b8:88:84:99:d9:4a:
b4:a6:40:c2:2a:aa:ef:5a:f8:85:3b:2a:0d:71:b1:
80:23:76:62:d9:66:a4:44:7f:85:88:b7:0f:25:53:
9f:88:9c:42:9b:92:0c:47:fd:ac:23:f2:83:66:7b:
96:11:8a:19:65:ee:61:d8:c2:36:6d:5e:83:d0:04:
01:e0:a1:4d:55:23:42:4f:98:e2:31:30:5f:73:16:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:A1:25:6F:52:4F:89:AF:1A:F0:0F:41:1B:70:2C:9F:4C:3B:FC
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:7f:bc:6d:7c:3d:92:da:54:e8:57:d4:5d:32:5e:07:8f:
a2:4a:43:41:04:cb:bb:8a:c4:a3:21:26:f9:6a:d1:ce:d3:b6:
57:af:9a:53:9b:cf:73:de:92:1b:b8:98:68:8b:c5:8e:b8:a5:
20:ad:e2:bc:c8:a6:83:c3:29:6e:04:a3:8c:3d:66:3e:89:3c:
77:e3:a9:8f:ff:26:c3:b0:33:5d:06:ea:c1:1c:33:36:63:5c:
ea:9f:f2:33:35:61:67:ea:b0:7e:2d:71:9d:5d:60:c6:3b:cb:
c8:3f:d0:43:15:ac:a2:f3:e4:40:97:54:bc:bc:d4:cb:0c:31:
c3:bd:e7:c3:76:48:16:d4:ba:c4:85:34:87:14:93:40:7d:1b:
ea:fc:92:a6:ef:40:dc:3a:f4:ec:6a:31:b2:a2:21:66:79:b6:
b7:10:a6:40:e4:c4:4a:4d:f3:7c:f4:1c:27:e0:16:69:01:97:
70:90:cb:61:6d:09:e8:42:ff:cf:63:52:3e:74:06:84:6f:6c:
1c:a9:f6:a2:e7:84:ad:4c:c6:40:23:fd:8f:09:74:4a:a6:65:
3b:eb:b1:67:c5:9d:97:72:2b:59:04:35:4a:86:c6:65:29:f7:
f2:57:ce:47:1a:03:f9:6c:62:a9:b7:54:56:cc:3e:4f:6d:3d:
97:5d:fa:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZP0TsyIOXdWZsGLJ3wcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGUyMzU4ZjU3NDM5YzQ0ZjZiMTY2MmY1NTYxNWEwYWFi
NmJhY2IwHhcNMjQxMTIzMDUwMDU2WhcNMjQxMTI0MDUwMDU2WjAzMTEwLwYDVQQD
EyhlMjdkYTEyNTZmNTI0Zjg5YWYxYWYwMGY0MTFiNzAyYzlmNGMzYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+ktw+IYU1Sut+7cmu4OSXHMm/zI
l54U0Sl2QA0447zod5x+urvr/UQEq72MQvcqF4X5BhZDGUykq/s6Ru1FtQguqAUI
f92VEg7AUiElUD5uRC+7/uOug2xMTl++/UndNJRmKqVVMZ4NciKBi3w3Htr7FCXI
FJN20t47B7lDcTU6HEW7P3mjoB3fVxQtHJ7hrvS2eyPHE1v+3MzEoBCnXOGJvMtt
yWfFB8tF4124iISZ2Uq0pkDCKqrvWviFOyoNcbGAI3Zi2WakRH+FiLcPJVOfiJxC
m5IMR/2sI/KDZnuWEYoZZe5h2MI2bV6D0AQB4KFNVSNCT5jiMTBfcxaHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ9oSVvUk+JrxrwD0EbcCyfTDv8MB8GA1UdIwQY
MBaAFKzeI1j1dDnET2sWYvVWFaCqtrrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2Mt
ZGQ5OWQzOTdlNGQ2LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2MtZGQ5OWQzOTdlNGQ2
LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaR/vG18
PZLaVOhX1F0yXgePokpDQQTLu4rEoyEm+WrRztO2V6+aU5vPc96SG7iYaIvFjril
IK3ivMimg8MpbgSjjD1mPok8d+Opj/8mw7AzXQbqwRwzNmNc6p/yMzVhZ+qwfi1x
nV1gxjvLyD/QQxWsovPkQJdUvLzUywwxw73nw3ZIFtS6xIU0hxSTQH0b6vySpu9A
3Dr07GoxsqIhZnm2txCmQOTESk3zfPQcJ+AWaQGXcJDLYW0J6EL/z2NSPnQGhG9s
HKn2oueErUzGQCP9jwl0SqZlO+uxZ8Wdl3IrWQQ1SobGZSn38lfORxoD+WxiqbdU
Vsw+T209l136EQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:06 2024 by rpki-client on console-fra.rpki-client.org