Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: o8uueFpRVH/Ku9ass3BcPbOUW6h9f6HfRA59G7EIw5Q=
Subject key identifier: 07:2B:EF:EB:38:0A:A7:AD:51:6C:A3:D4:12:07:27:2D:A9:FB:90:B6
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019369D8C114B70E97E0C21DA07BB9DC835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 19:00:33 +0000
Manifest this update: Tue 26 Nov 2024 19:00:33 +0000
Manifest next update: Wed 27 Nov 2024 19:00:33 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: JRRiYmfzec+ep5APLn1F6eI3giWUOlhn6YxL9+59vHk=)
2: GIFrF92NPU5XTTIbNn3vuETTj0I.roa (hash: lI4Ezy96OD3L3JGwgmqKncVC9HU2kqwJdx8gIVMnd0o=)
3: WlJroNaZJioA2oIouqos2zM1UrU.roa (hash: 4xFOWnLD5opWfW6WyF3V8GpscNZw7gScNfX4Gvf2VKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:c1:14:b7:0e:97:e0:c2:1d:a0:7b:b9:dc:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Nov 26 19:00:33 2024 GMT
Not After : Nov 27 19:00:33 2024 GMT
Subject: CN=072befeb380aa7ad516ca3d41207272da9fb90b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:bd:5e:c8:14:0a:11:c5:1d:b8:37:3e:fe:
87:5b:80:c6:86:3f:80:38:6b:02:37:fd:e3:1d:d8:
2a:1f:17:fc:ad:20:d0:11:17:cc:c1:68:60:4e:68:
c9:56:cd:c3:71:75:d2:67:b8:f5:75:ca:03:32:58:
b7:a1:62:40:13:a0:1f:bd:ff:93:1a:67:fa:7e:fe:
61:41:c7:5c:69:b7:97:dc:71:ff:e7:8b:30:e4:16:
6e:51:33:2d:12:fc:37:81:2d:2b:f5:99:cd:16:02:
dd:0e:f9:e1:a1:fe:b8:1c:56:ca:af:17:07:61:82:
b2:4a:8c:9f:be:98:91:5d:68:70:99:1f:a7:9f:cb:
3f:b6:25:83:c2:62:3f:96:d2:9e:76:8d:e0:f9:4b:
74:9a:7b:88:27:f9:f1:a4:ca:fa:e3:1a:c0:ea:8d:
99:fc:77:ea:6b:df:b8:e9:fa:30:ba:89:86:62:e9:
1c:f7:a1:2d:d2:da:cc:16:09:48:f4:42:3d:ca:fe:
b5:f0:c3:b9:8e:36:6e:b3:56:82:ea:0f:6b:7c:de:
50:82:11:bb:01:fc:31:ad:56:d0:1c:90:71:11:49:
a0:30:ed:49:27:f8:20:89:d5:b7:15:a5:87:d6:7e:
01:39:cc:a9:60:26:ea:43:d6:21:46:29:f4:f9:2a:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:EF:EB:38:0A:A7:AD:51:6C:A3:D4:12:07:27:2D:A9:FB:90:B6
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:fd:85:9b:c0:09:2b:25:c6:90:fb:66:59:1d:c3:1d:4e:
d4:9b:da:53:44:58:e3:90:23:e2:4c:ff:05:b1:ca:2a:ab:f6:
61:10:7c:5d:45:4d:4f:e9:6a:4d:22:31:84:16:2c:93:ff:93:
71:cf:dd:15:a6:7e:49:f5:17:07:ee:c9:e4:f0:56:40:78:79:
86:64:47:59:98:f1:cd:6f:12:4e:4f:c9:af:96:2b:de:ff:65:
88:6e:15:7e:9b:4b:cf:d8:0a:ad:3e:90:20:95:5b:e5:c5:f3:
ee:a5:e8:98:2d:12:3d:50:fa:10:42:28:6c:43:41:01:3a:77:
9b:d4:be:db:86:fb:c1:3b:6d:3b:ba:43:b1:8c:2f:c2:05:13:
63:bc:fc:80:15:b1:51:71:4f:b2:f6:23:8b:a8:91:9d:94:87:
9a:20:35:3b:e9:d6:98:cd:a0:9f:05:31:ac:a5:80:fb:db:72:
e4:a3:7a:91:62:a6:8b:69:e6:a4:0d:49:8f:e6:26:ff:da:86:
c1:06:8c:8d:8e:dd:80:9a:55:e9:29:ab:05:94:51:23:ab:9a:
75:9b:24:13:1a:70:5e:59:d2:a9:00:bf:9a:19:1a:96:0f:4e:
97:48:b6:72:fd:60:98:37:85:61:14:1f:d3:2d:92:cf:4f:07:
b2:15:3b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2MEUtw6X4MIdoHu53INaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2
MjliNjgwHhcNMjQxMTI2MTkwMDMzWhcNMjQxMTI3MTkwMDMzWjAzMTEwLwYDVQQD
EygwNzJiZWZlYjM4MGFhN2FkNTE2Y2EzZDQxMjA3MjcyZGE5ZmI5MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPy9XsgUChHFHbg3Pv6HW4DGhj+A
OGsCN/3jHdgqHxf8rSDQERfMwWhgTmjJVs3DcXXSZ7j1dcoDMli3oWJAE6Afvf+T
Gmf6fv5hQcdcabeX3HH/54sw5BZuUTMtEvw3gS0r9ZnNFgLdDvnhof64HFbKrxcH
YYKySoyfvpiRXWhwmR+nn8s/tiWDwmI/ltKedo3g+Ut0mnuIJ/nxpMr64xrA6o2Z
/Hfqa9+46fowuomGYukc96Et0trMFglI9EI9yv618MO5jjZus1aC6g9rfN5QghG7
AfwxrVbQHJBxEUmgMO1JJ/ggidW3FaWH1n4BOcypYCbqQ9YhRin0+Sp6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcr7+s4CqetUWyj1BIHJy2p+5C2MB8GA1UdIwQY
MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt
NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh
LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAap79hZvA
CSslxpD7Zlkdwx1O1JvaU0RY45Aj4kz/BbHKKqv2YRB8XUVNT+lqTSIxhBYsk/+T
cc/dFaZ+SfUXB+7J5PBWQHh5hmRHWZjxzW8STk/Jr5Yr3v9liG4VfptLz9gKrT6Q
IJVb5cXz7qXomC0SPVD6EEIobENBATp3m9S+24b7wTttO7pDsYwvwgUTY7z8gBWx
UXFPsvYji6iRnZSHmiA1O+nWmM2gnwUxrKWA+9ty5KN6kWKmi2nmpA1Jj+Ym/9qG
wQaMjY7dgJpV6SmrBZRRI6uadZskExpwXlnSqQC/mhkalg9Ol0i2cv1gmDeFYRQf
0y2Sz08HshU7/g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:37 2024 by rpki-client on console-ams.rpki-client.org