Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: CCwyqdj5TymqT5FcwWcLhGWAPryDe8BbIY5TD+lzH98=
Subject key identifier: B5:8B:3E:42:EE:43:63:14:06:10:0A:11:97:16:C2:44:70:C0:E9:CE
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019352078B27A2F8EF7AADA239E1D831F420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0B0E
Signing time: Fri 22 Nov 2024 04:00:46 +0000
Manifest this update: Fri 22 Nov 2024 04:00:46 +0000
Manifest next update: Sat 23 Nov 2024 04:00:46 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: Asv/HPStsjtn/oQ5uIvSmKCULJwwgbUSojpWCtBJ2Uk=)
2: LiZKylfB_9lz4JVojj0zepUxYQw.roa (hash: ug2Y+chqy8b+LzbFJTXkRcJet30DxpYDG2xFDnLUd0w=)
3: M0li5ZO2VSVQdOqxfYUpYMzwP48.roa (hash: sJlzVcpVKqzFOz7t3gpNOngRXsb1sbSbZAu0XFGux70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:8b:27:a2:f8:ef:7a:ad:a2:39:e1:d8:31:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Nov 22 04:00:46 2024 GMT
Not After : Nov 23 04:00:46 2024 GMT
Subject: CN=b58b3e42ee43631406100a119716c24470c0e9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:7e:6b:1c:4d:1e:78:e0:6e:fe:31:52:44:
89:8e:80:b6:d0:cc:9c:cc:e1:4b:02:82:5e:cd:2b:
d5:46:15:1c:49:4f:3e:f7:47:b7:b4:ff:c0:6f:22:
26:6c:09:ff:d6:3d:b1:86:7e:8d:99:0b:9f:6c:98:
f0:0a:3c:7e:8f:22:9e:e9:7f:12:c0:14:90:59:d2:
59:61:8a:53:21:b2:89:85:4f:f5:3a:3a:e6:99:b2:
61:41:ba:55:69:31:b1:29:74:21:e0:07:8f:ef:b4:
9e:3f:66:ba:f4:95:ba:42:e1:81:fc:46:f4:7b:8c:
09:1f:a6:b0:63:74:d4:c7:de:e3:76:8c:35:c6:f4:
9a:f2:3b:6f:46:3b:7b:cc:8b:7b:92:18:f6:98:03:
88:4e:03:57:78:cb:03:c5:ff:6b:0b:66:78:35:82:
1c:d8:b5:e7:0b:ae:8e:a2:a3:8b:2e:e3:e0:a8:a1:
58:89:34:37:a9:5f:d0:fb:35:60:b1:82:ff:95:0d:
1a:b0:05:4d:86:b2:81:91:80:6d:94:8d:2d:c4:97:
c5:ea:b5:a4:96:f5:f8:c1:0b:eb:33:21:d8:76:ef:
56:24:59:25:f5:af:c8:dc:bf:ab:37:6a:a4:72:a5:
d9:7f:b1:57:67:a8:5a:31:cf:c7:94:0c:23:a8:3b:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8B:3E:42:EE:43:63:14:06:10:0A:11:97:16:C2:44:70:C0:E9:CE
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:69:16:45:53:c9:a7:cc:d9:2d:b4:d0:a1:e8:ae:d8:ee:22:
4d:56:56:00:53:87:e6:8f:86:2e:08:07:c1:2b:74:4e:50:4f:
26:a1:b4:26:93:12:83:97:5e:0a:03:a8:17:cb:d8:24:e4:6c:
a4:45:80:46:f2:61:67:d2:7c:67:bc:fd:fe:7b:c6:85:e0:23:
b9:6c:1b:97:16:c1:63:bd:47:01:26:73:f7:e0:af:89:7b:5c:
b5:36:e3:ca:5c:22:d4:6b:86:54:62:89:bd:71:b3:d6:b8:c9:
bc:41:92:3f:6f:6a:ca:9c:cf:8b:15:af:57:31:f8:8f:be:68:
73:a4:11:f8:cb:f7:33:c0:d7:3f:c5:4e:34:91:97:08:db:61:
1e:ff:79:23:74:5e:78:38:cb:19:55:4f:73:43:44:8e:ad:32:
fc:b9:08:07:ef:10:5d:03:88:ff:4b:cd:f4:8e:16:ce:79:88:
a0:8b:ce:6a:a2:6d:1f:3b:75:56:dd:d8:cd:cf:32:05:4e:81:
81:c1:4a:3f:04:23:e6:b8:05:90:d9:4b:88:e9:e0:71:a3:90:
a1:21:91:90:bf:2f:ba:86:69:e0:11:41:0b:7b:9e:ed:1e:31:
7c:fb:cf:2b:c0:cc:58:9d:8d:af:8c:1e:54:20:ba:3d:d8:a3:
d8:f9:e7:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNSB4snovjveq2iOeHYMfQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk
YTk3ZjAwHhcNMjQxMTIyMDQwMDQ2WhcNMjQxMTIzMDQwMDQ2WjAzMTEwLwYDVQQD
EyhiNThiM2U0MmVlNDM2MzE0MDYxMDBhMTE5NzE2YzI0NDcwYzBlOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5V+axxNHnjgbv4xUkSJjoC20Myc
zOFLAoJezSvVRhUcSU8+90e3tP/AbyImbAn/1j2xhn6NmQufbJjwCjx+jyKe6X8S
wBSQWdJZYYpTIbKJhU/1OjrmmbJhQbpVaTGxKXQh4AeP77SeP2a69JW6QuGB/Eb0
e4wJH6awY3TUx97jdow1xvSa8jtvRjt7zIt7khj2mAOITgNXeMsDxf9rC2Z4NYIc
2LXnC66OoqOLLuPgqKFYiTQ3qV/Q+zVgsYL/lQ0asAVNhrKBkYBtlI0txJfF6rWk
lvX4wQvrMyHYdu9WJFkl9a/I3L+rN2qkcqXZf7FXZ6haMc/HlAwjqDu9kQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLWLPkLuQ2MUBhAKEZcWwkRwwOnOMB8GA1UdIwQY
MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2
LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2
NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGkW
RVPJp8zZLbTQoeiu2O4iTVZWAFOH5o+GLggHwSt0TlBPJqG0JpMSg5deCgOoF8vY
JORspEWARvJhZ9J8Z7z9/nvGheAjuWwblxbBY71HASZz9+CviXtctTbjylwi1GuG
VGKJvXGz1rjJvEGSP29qypzPixWvVzH4j75oc6QR+Mv3M8DXP8VONJGXCNthHv95
I3ReeDjLGVVPc0NEjq0y/LkIB+8QXQOI/0vN9I4WznmIoIvOaqJtHzt1Vt3Yzc8y
BU6BgcFKPwQj5rgFkNlLiOngcaOQoSGRkL8vuoZp4BFBC3ue7R4xfPvPK8DMWJ2N
r4weVCC6Pdij2PnnNg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:44 2024 by rpki-client on console-fra.rpki-client.org