Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: QUUb3I2FVhHb+PX6yYmgX9sQ8zj+67KOaFo/949FS+E=
Subject key identifier: 9D:5B:FF:9E:66:19:FB:35:F1:6A:C2:C6:7B:64:9B:BB:54:D0:BE:4A
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 01935764FB496A0B5C7A6115BAC9AAB1BF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 0F91
Signing time: Sat 23 Nov 2024 05:00:55 +0000
Manifest this update: Sat 23 Nov 2024 05:00:55 +0000
Manifest next update: Sun 24 Nov 2024 05:00:55 +0000
Files and hashes: 1: j7CHbXKRhGxmHg_7B4RIZSg-2ks.roa (hash: OnMS1WwwdG/fc/hqdyHv+/Od3D99OQzABwILH96W1Hk=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: 2TcCn3EvexzeFsmrcEkrmMQKYP8VXWRCYIDcEagJfe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:fb:49:6a:0b:5c:7a:61:15:ba:c9:aa:b1:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Nov 23 05:00:55 2024 GMT
Not After : Nov 24 05:00:55 2024 GMT
Subject: CN=9d5bff9e6619fb35f16ac2c67b649bbb54d0be4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:ce:34:8b:3b:79:b4:86:b4:64:72:94:20:
f5:38:9a:4b:6a:60:d8:3f:1a:49:8d:85:c4:2d:75:
44:b8:77:1b:df:c6:af:dc:51:e1:1f:e1:2a:90:7b:
28:19:d1:83:f8:e4:06:fd:20:28:21:e0:f8:f7:ea:
50:28:ec:44:f7:0d:6c:28:1f:b6:2f:d1:7b:bb:17:
72:f7:e8:35:97:83:ca:82:43:02:32:74:e6:99:97:
ae:6d:7a:79:c9:e3:63:be:8b:7e:54:24:b1:db:71:
96:2e:6a:e4:3c:bb:a2:19:5e:da:08:f4:40:5d:86:
32:c0:84:a5:c4:8d:f3:2e:f0:db:c6:66:01:3f:0f:
2d:b6:a7:26:85:97:17:53:5b:d4:dc:18:ba:7c:a0:
81:64:45:90:04:0a:3f:1b:f8:d8:28:d5:52:00:58:
6f:72:f9:60:97:05:aa:98:0a:f2:b9:e1:da:30:a8:
33:e6:3a:9f:22:49:fc:d8:8d:d2:91:c6:79:7d:94:
57:12:95:28:6e:9b:4c:dc:a2:d1:80:30:f4:88:f5:
df:73:d7:e4:9d:a0:55:54:7b:7c:f4:ea:24:02:fd:
2b:18:6d:ba:8f:b0:cd:e6:9f:d8:a1:6b:ae:84:5e:
e7:a5:f0:4f:cc:14:67:a9:25:70:01:3b:51:38:0d:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:FF:9E:66:19:FB:35:F1:6A:C2:C6:7B:64:9B:BB:54:D0:BE:4A
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b9:37:b9:bd:53:30:bf:08:0f:48:dd:d8:b5:0b:9f:de:bb:
31:60:16:70:c3:59:c1:f0:b9:19:4b:fe:cd:2a:72:80:50:5a:
da:db:4e:2e:78:c5:ed:9e:6f:63:82:69:da:f9:39:c5:97:f4:
65:39:30:a7:55:af:55:5d:dd:64:c3:be:8c:ec:c6:5f:71:b1:
80:1a:84:9b:00:c1:0c:30:19:6a:8d:18:b2:a5:80:fd:15:9b:
86:3f:bb:8a:b2:14:b0:ec:16:7c:08:6b:05:2b:56:c0:12:30:
20:f6:25:51:c1:dc:72:c3:1e:c6:a7:f4:12:1d:ad:7f:02:40:
dd:22:93:ac:81:88:f7:1d:e8:b3:76:24:38:7c:41:ac:23:ff:
de:e8:86:9e:db:31:d0:33:f9:31:82:14:b2:76:db:e3:a5:0a:
28:75:01:7f:a6:b6:ac:29:b7:d9:d8:17:c7:7b:41:a4:29:2a:
ea:6d:d2:54:44:73:02:c2:2a:63:1e:5c:95:fc:ca:19:26:a2:
84:ba:f7:a8:1a:cc:f4:c2:fb:9d:7a:51:91:55:76:ba:21:2c:
d6:99:a8:33:d5:ad:6a:fe:e4:20:bb:cf:2d:d1:c0:34:4b:64:
a7:69:a2:3a:a6:69:f1:c3:c2:8d:4c:0e:7b:e8:37:d9:2b:23:
70:57:ef:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZPtJagtcemEVusmqsb8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNzVjZjZjNjAxOWYwNTllNDY1ZTRkZWIyMDRjZDI0MmJk
NGI0NjUwHhcNMjQxMTIzMDUwMDU1WhcNMjQxMTI0MDUwMDU1WjAzMTEwLwYDVQQD
Eyg5ZDViZmY5ZTY2MTlmYjM1ZjE2YWMyYzY3YjY0OWJiYjU0ZDBiZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskTONIs7ebSGtGRylCD1OJpLamDY
PxpJjYXELXVEuHcb38av3FHhH+EqkHsoGdGD+OQG/SAoIeD49+pQKOxE9w1sKB+2
L9F7uxdy9+g1l4PKgkMCMnTmmZeubXp5yeNjvot+VCSx23GWLmrkPLuiGV7aCPRA
XYYywISlxI3zLvDbxmYBPw8ttqcmhZcXU1vU3Bi6fKCBZEWQBAo/G/jYKNVSAFhv
cvlglwWqmAryueHaMKgz5jqfIkn82I3SkcZ5fZRXEpUobptM3KLRgDD0iPXfc9fk
naBVVHt89OokAv0rGG26j7DN5p/YoWuuhF7npfBPzBRnqSVwATtROA30RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1b/55mGfs18WrCxntkm7tU0L5KMB8GA1UdIwQY
MBaAFJ11z2xgGfBZ5GXk3rIEzSQr1LRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblhYUGJHQVo4Rm5rWmVUZXNnVE5KQ3ZVdEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMDRmMWItMDc0Yy00OTVlLWE0MzEt
NzZiMWFlNjJmMDcyLzEvblhYUGJHQVo4Rm5rWmVUZXNnVE5KQ3ZVdEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMDRmMWItMDc0Yy00OTVlLWE0MzEtNzZiMWFlNjJmMDcy
LzEvblhYUGJHQVo4Rm5rWmVUZXNnVE5KQ3ZVdEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7k3ub1T
ML8ID0jd2LULn967MWAWcMNZwfC5GUv+zSpygFBa2ttOLnjF7Z5vY4Jp2vk5xZf0
ZTkwp1WvVV3dZMO+jOzGX3GxgBqEmwDBDDAZao0YsqWA/RWbhj+7irIUsOwWfAhr
BStWwBIwIPYlUcHccsMexqf0Eh2tfwJA3SKTrIGI9x3os3YkOHxBrCP/3uiGntsx
0DP5MYIUsnbb46UKKHUBf6a2rCm32dgXx3tBpCkq6m3SVERzAsIqYx5clfzKGSai
hLr3qBrM9ML7nXpRkVV2uiEs1pmoM9Wtav7kILvPLdHANEtkp2miOqZp8cPCjUwO
e+g32SsjcFfvUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:52 2024 by rpki-client on console-fra.rpki-client.org