Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: roDezwag2nJlgRQH8WVEa+SeaZ7v0v9nY9Kfhbb8Bo8=
Subject key identifier: CA:BD:CD:6C:63:53:F2:61:D7:D7:BB:59:EF:43:B0:0E:BF:88:CA:8D
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019406B3FF5A664EF925A44F518DFB1177F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0246
Signing time: Fri 27 Dec 2024 06:00:47 +0000
Manifest this update: Fri 27 Dec 2024 06:00:47 +0000
Manifest next update: Sat 28 Dec 2024 06:00:47 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: Lt1tsy9kBTejhu4HR7dayy/X0VyuMxrAN9yJhe0mYHk=)
2: toTv4whlg9fhMWkYjCedIkuK7Tw.roa (hash: SGkpA3C2QkTwud0AXn03BzTQVbgMw3a+IksnJYn/5qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:ff:5a:66:4e:f9:25:a4:4f:51:8d:fb:11:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Dec 27 06:00:47 2024 GMT
Not After : Dec 28 06:00:47 2024 GMT
Subject: CN=cabdcd6c6353f261d7d7bb59ef43b00ebf88ca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:fe:ea:a5:72:55:c1:3c:3c:42:7b:79:ba:
7d:1e:cc:c3:c2:c9:9c:12:c8:7e:ef:18:63:a3:c9:
77:dd:0f:85:07:a9:78:c7:48:47:0a:43:e0:51:d6:
7f:28:38:fa:30:60:81:43:26:cb:3a:4e:29:bd:cc:
90:c7:50:85:e4:50:f7:08:00:a1:7b:17:cb:d5:c5:
d8:57:65:5b:47:6e:0c:86:28:ea:b3:35:26:88:e1:
53:63:06:9b:91:45:88:de:89:28:d0:dd:9c:45:12:
58:1f:04:0d:10:4e:c7:70:88:f2:0e:2f:ce:58:3f:
b2:c6:b9:fb:5a:5d:6b:af:71:a2:88:65:23:4b:51:
23:c8:1b:a3:9a:29:85:95:1f:37:67:2c:8b:82:55:
c0:3f:f0:2a:e9:5d:8b:0f:de:4e:f2:48:7a:9a:2b:
f8:f8:45:f2:f7:7c:55:3e:8d:ca:a4:2e:81:2b:46:
41:85:07:15:5f:1b:e9:49:a1:93:50:bf:2a:6d:29:
34:e5:f9:d2:36:ef:ee:32:45:57:8d:f3:b4:d8:85:
d2:18:22:a8:f5:5e:27:3f:43:22:b2:c0:ce:c1:ba:
09:4c:c7:41:c9:8b:28:7b:76:5f:0e:f1:6a:f5:fe:
16:ad:d5:6c:06:dc:ed:5b:e9:20:11:1d:f1:6e:84:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BD:CD:6C:63:53:F2:61:D7:D7:BB:59:EF:43:B0:0E:BF:88:CA:8D
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:27:97:c0:7c:bf:30:20:a5:46:da:51:55:70:33:d2:7f:
cb:2b:5f:71:b0:d1:e3:72:34:3c:df:d7:88:00:8c:a8:b1:c6:
4c:0f:3a:17:33:0c:00:b8:25:a6:ba:31:54:32:97:30:ce:69:
d9:91:53:e5:e2:de:d3:c8:fd:fe:65:6a:4b:03:83:82:7c:b8:
6b:00:20:22:10:c7:0c:43:dd:5f:94:e2:d4:eb:52:ee:e2:a0:
74:4b:d3:67:56:01:a5:21:8b:16:07:c5:33:d9:d6:6c:d3:6d:
02:5e:58:53:77:4e:9b:18:0f:68:ad:46:6a:1c:33:d0:bd:21:
b7:90:89:fd:81:35:36:14:52:1a:27:ef:da:a1:11:6c:d0:b8:
58:55:61:fc:0e:70:63:1d:55:ed:94:79:97:45:c6:be:8d:83:
84:87:76:b2:9f:31:d0:6e:b2:5f:46:1a:ed:77:23:f0:1e:14:
be:79:df:a7:c9:9b:b4:68:cd:c8:d3:86:4c:11:bc:93:32:77:
44:31:6c:2a:1e:36:ac:24:88:fe:f2:ba:2c:32:01:f3:87:30:
50:9b:4b:8b:be:78:48:bc:5c:0b:ce:78:28:b1:b8:1a:7f:b9:
dc:25:5a:55:dd:74:cc:84:18:d8:e0:a9:2c:a1:0c:f2:d4:15:
64:00:2a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGs/9aZk75JaRPUY37EXf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk
Y2M3OWUwHhcNMjQxMjI3MDYwMDQ3WhcNMjQxMjI4MDYwMDQ3WjAzMTEwLwYDVQQD
EyhjYWJkY2Q2YzYzNTNmMjYxZDdkN2JiNTllZjQzYjAwZWJmODhjYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0n+6qVyVcE8PEJ7ebp9HszDwsmc
Esh+7xhjo8l33Q+FB6l4x0hHCkPgUdZ/KDj6MGCBQybLOk4pvcyQx1CF5FD3CACh
exfL1cXYV2VbR24MhijqszUmiOFTYwabkUWI3oko0N2cRRJYHwQNEE7HcIjyDi/O
WD+yxrn7Wl1rr3GiiGUjS1EjyBujmimFlR83ZyyLglXAP/Aq6V2LD95O8kh6miv4
+EXy93xVPo3KpC6BK0ZBhQcVXxvpSaGTUL8qbSk05fnSNu/uMkVXjfO02IXSGCKo
9V4nP0MissDOwboJTMdByYsoe3ZfDvFq9f4WrdVsBtztW+kgER3xboSdNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq9zWxjU/Jh19e7We9DsA6/iMqNMB8GA1UdIwQY
MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt
OTEzNTc1YzU4ZjRhLzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh
LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClYnl8B8
vzAgpUbaUVVwM9J/yytfcbDR43I0PN/XiACMqLHGTA86FzMMALglproxVDKXMM5p
2ZFT5eLe08j9/mVqSwODgny4awAgIhDHDEPdX5Ti1OtS7uKgdEvTZ1YBpSGLFgfF
M9nWbNNtAl5YU3dOmxgPaK1Gahwz0L0ht5CJ/YE1NhRSGifv2qERbNC4WFVh/A5w
Yx1V7ZR5l0XGvo2DhId2sp8x0G6yX0Ya7Xcj8B4Uvnnfp8mbtGjNyNOGTBG8kzJ3
RDFsKh42rCSI/vK6LDIB84cwUJtLi754SLxcC854KLG4Gn+53CVaVd10zIQY2OCp
LKEM8tQVZAAqHQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:56:16 2024 by rpki-client on console-fra.rpki-client.org