Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: flBmU3sWoB5Rn6NCciNfWKyOK90yJK94niug9N0ZQQc=
Subject key identifier: A9:2A:D6:BD:D0:C6:3E:31:E3:F9:EE:AD:0E:E0:A7:FF:5B:6A:DA:19
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0191F9A25344A9079601A7E68941948A81EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: A7
Signing time: Mon 16 Sep 2024 07:00:50 +0000
Manifest this update: Mon 16 Sep 2024 07:00:50 +0000
Manifest next update: Tue 17 Sep 2024 07:00:50 +0000
Files and hashes: 1: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: GRs9/EIZnUJ0MborCvPmJ+sFG68+boGVX9QpvMWhEhQ=)
2: xHHvkKE-zp50EAgcu8KqgYORezQ.roa (hash: HsZjPTwYboLt6qxIkDu+KNHfa36ZE0OUtQ6qkh8oQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:a2:53:44:a9:07:96:01:a7:e6:89:41:94:8a:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Sep 16 07:00:50 2024 GMT
Not After : Sep 17 07:00:50 2024 GMT
Subject: CN=a92ad6bdd0c63e31e3f9eead0ee0a7ff5b6ada19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:2e:af:25:34:da:62:13:f4:a4:29:7b:93:
58:7d:30:58:fb:fe:05:de:4a:38:99:31:10:f4:bc:
ed:b6:a1:44:39:eb:3b:06:3a:fe:dc:4c:59:fe:be:
2b:35:09:a3:02:ac:63:de:89:13:42:4b:15:d7:a7:
98:06:bf:9f:8e:e5:58:86:da:01:cc:49:02:82:b1:
0c:5a:98:ad:54:bc:17:a0:e4:b4:d7:8f:ce:56:20:
25:ea:cc:4a:36:d7:1a:a7:28:8e:6d:77:9b:69:5b:
ef:90:6a:22:61:1e:6b:20:94:2c:55:52:ec:ba:04:
b4:1c:b2:5b:e1:a0:ac:9a:bf:6f:cd:91:e6:cf:6d:
b1:f5:55:05:fc:46:bc:28:f9:80:57:f6:b1:4c:46:
ff:22:43:01:0c:9f:d5:b1:39:74:12:a4:ab:94:9d:
41:48:84:e3:85:92:04:1c:95:9c:39:f1:9a:51:31:
0d:2a:4b:9f:1f:a3:36:4f:21:42:41:87:cb:e1:84:
78:cb:3f:cd:25:9d:6c:6f:43:8e:5b:bf:da:b4:80:
0a:e8:9b:a0:e6:03:f1:24:52:ab:cf:b3:5d:84:31:
08:ac:0e:84:0d:52:72:10:6a:d9:0e:9b:c4:22:e7:
e6:cf:e1:4b:27:cf:be:e5:f9:50:cb:d6:2f:89:3f:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:D6:BD:D0:C6:3E:31:E3:F9:EE:AD:0E:E0:A7:FF:5B:6A:DA:19
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e0:c4:20:31:26:f6:25:c6:a7:9d:72:b6:eb:de:c9:06:5b:
cd:0d:40:7b:d5:a9:4d:74:d9:f3:0a:d4:36:cd:4c:2a:f3:62:
af:5d:7b:c6:20:5a:03:13:33:88:05:0a:d2:7e:dd:00:9d:09:
10:c2:d2:29:7c:57:5c:0b:28:2b:68:f5:d2:12:fa:28:7b:01:
24:5c:ca:50:eb:e3:22:af:d0:96:8f:13:55:22:ef:b4:8a:e0:
ec:2f:4a:63:63:83:8d:82:ff:b0:03:2d:52:8c:c7:85:1c:de:
ef:a2:e7:d9:5a:24:ae:0b:44:17:7d:37:33:1d:f9:82:17:8a:
5a:f9:03:fa:2b:10:b5:9a:ae:eb:17:f4:ed:88:5b:b3:27:34:
9b:cb:19:cd:c4:d6:fe:99:85:67:06:51:e1:d3:50:c4:a7:ae:
9a:64:a7:4c:eb:bf:4c:d9:05:57:e2:4c:3a:cb:f3:d7:cf:52:
91:bb:9b:b5:7a:d1:75:0a:f6:ef:ae:9b:a5:32:16:66:51:66:
66:04:f9:6a:65:3b:c7:38:3d:82:5c:59:c5:54:25:f2:b7:e8:
45:95:39:3c:ab:51:6d:f4:d9:03:92:38:a0:38:c3:05:f1:04:
3f:42:33:4f:40:4c:7a:48:4e:33:26:f5:a4:75:8f:b1:17:f8:
58:b9:8f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5olNEqQeWAafmiUGUioHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjQwOTE2MDcwMDUwWhcNMjQwOTE3MDcwMDUwWjAzMTEwLwYDVQQD
EyhhOTJhZDZiZGQwYzYzZTMxZTNmOWVlYWQwZWUwYTdmZjViNmFkYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3curyU02mIT9KQpe5NYfTBY+/4F
3ko4mTEQ9LzttqFEOes7Bjr+3ExZ/r4rNQmjAqxj3okTQksV16eYBr+fjuVYhtoB
zEkCgrEMWpitVLwXoOS014/OViAl6sxKNtcapyiObXebaVvvkGoiYR5rIJQsVVLs
ugS0HLJb4aCsmr9vzZHmz22x9VUF/Ea8KPmAV/axTEb/IkMBDJ/VsTl0EqSrlJ1B
SITjhZIEHJWcOfGaUTENKkufH6M2TyFCQYfL4YR4yz/NJZ1sb0OOW7/atIAK6Jug
5gPxJFKrz7NdhDEIrA6EDVJyEGrZDpvEIufmz+FLJ8++5flQy9YviT/ScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkq1r3Qxj4x4/nurQ7gp/9batoZMB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADODEIDEm
9iXGp51ytuveyQZbzQ1Ae9WpTXTZ8wrUNs1MKvNir117xiBaAxMziAUK0n7dAJ0J
EMLSKXxXXAsoK2j10hL6KHsBJFzKUOvjIq/Qlo8TVSLvtIrg7C9KY2ODjYL/sAMt
UozHhRze76Ln2VokrgtEF303Mx35gheKWvkD+isQtZqu6xf07Yhbsyc0m8sZzcTW
/pmFZwZR4dNQxKeummSnTOu/TNkFV+JMOsvz189SkbubtXrRdQr2766bpTIWZlFm
ZgT5amU7xzg9glxZxVQl8rfoRZU5PKtRbfTZA5I4oDjDBfEEP0IzT0BMekhOMyb1
pHWPsRf4WLmPRw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:19 2024 by rpki-client on console-fra.rpki-client.org