Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: G8UmD2eZUUSR+bMd8xilreyRMjODJviMRXOs56S0n9E=
Subject key identifier: 96:14:5F:A0:E0:83:6E:48:18:3A:8E:9C:D8:28:35:27:F4:41:D9:05
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 01936AEB347F78B6D2F98A7FB522105EB95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 137C
Signing time: Wed 27 Nov 2024 00:00:19 +0000
Manifest this update: Wed 27 Nov 2024 00:00:19 +0000
Manifest next update: Thu 28 Nov 2024 00:00:19 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: PayDfdzeixNPRxiRpyFOIQJC3C+iibxgZxfkWEThuUo=)
2: OAwzAJgXcirLln4EE83zIzfqBGI.roa (hash: 9vhyJnqOoMll2IghKTe9i1ni9kkld9g7tCM/p56Nm9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:34:7f:78:b6:d2:f9:8a:7f:b5:22:10:5e:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Nov 27 00:00:19 2024 GMT
Not After : Nov 28 00:00:19 2024 GMT
Subject: CN=96145fa0e0836e48183a8e9cd8283527f441d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:34:aa:15:0e:4b:40:29:64:6a:4d:80:37:
bb:03:92:70:89:fb:79:27:63:73:dd:b8:25:55:08:
c2:f6:98:c2:f7:7d:fe:ab:b8:0f:ff:a3:50:0d:d8:
ca:bb:5b:3d:47:72:bc:18:09:eb:3b:68:6b:c5:ca:
d2:a0:59:bc:18:25:dc:7a:8d:0a:11:96:f3:1c:46:
7b:14:f0:fe:f8:db:f2:53:be:aa:ed:b9:18:78:8b:
22:56:bc:fd:38:2a:02:c0:38:bc:f4:f0:e1:e6:f0:
d0:78:fb:f1:5e:da:18:67:7a:4f:e0:37:01:31:2d:
70:1b:94:52:d7:b1:8e:eb:e0:9e:7e:c6:25:74:43:
d4:5f:70:c2:bf:66:c5:88:42:f3:5b:32:8b:5a:f8:
62:47:1b:db:f8:43:5e:68:8e:5d:e2:b1:ad:93:e4:
66:4c:61:ce:05:69:14:dc:e8:ce:4b:45:af:36:ec:
d2:fd:b0:8d:75:b8:b0:49:8a:8e:24:56:24:d3:04:
c2:b7:da:2e:4c:44:33:93:be:83:71:6a:fd:e7:c2:
2f:5b:87:7d:90:07:bc:ad:ea:30:42:a7:48:36:c2:
56:1b:34:11:72:f7:44:2e:b9:8a:1b:e4:e4:85:06:
21:07:10:8b:a0:e8:68:c8:fe:7e:a4:73:93:0c:c7:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:5F:A0:E0:83:6E:48:18:3A:8E:9C:D8:28:35:27:F4:41:D9:05
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:90:9b:1f:31:cd:8a:51:2a:15:78:08:a4:52:d8:bf:7e:56:
82:31:2f:99:e4:78:ed:49:bb:cc:49:92:0e:4b:32:d9:08:a4:
eb:fa:74:22:3b:6b:47:66:05:50:61:fa:a3:69:a5:02:c9:45:
cd:0f:9b:e5:3a:37:31:e2:3a:fa:82:ed:60:2a:39:9e:8c:31:
11:d6:d5:ea:b9:e9:7c:0e:9b:6a:3f:08:ca:04:5e:e3:fa:aa:
b1:91:fa:c2:47:78:47:55:48:ec:6d:b7:a7:26:47:93:3d:fc:
47:39:4e:7b:ed:a7:95:8f:28:41:59:80:39:e4:b6:6f:d7:9b:
ac:f2:e6:9c:76:e6:b0:5e:41:2c:43:cf:df:34:07:d8:64:a5:
b9:28:6c:4f:90:cc:33:8f:55:8d:08:20:ff:ae:18:aa:c0:1e:
93:b0:10:46:24:a9:01:36:68:db:6f:ce:d5:b5:bc:35:d7:14:
b4:44:25:b6:27:82:e5:a7:18:aa:91:21:7f:60:69:5f:dc:56:
18:01:a5:c4:83:fc:a1:18:f3:57:6a:58:08:23:41:8b:47:d3:
56:b2:57:90:ba:78:2c:de:ea:8a:78:07:56:9f:d1:66:3e:eb:
ed:f3:0d:1c:c7:89:1a:ed:aa:ea:c5:11:b4:25:2b:7c:dc:2f:
71:1a:33:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq6zR/eLbS+Yp/tSIQXrlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl
MzgyMzMwHhcNMjQxMTI3MDAwMDE5WhcNMjQxMTI4MDAwMDE5WjAzMTEwLwYDVQQD
Eyg5NjE0NWZhMGUwODM2ZTQ4MTgzYThlOWNkODI4MzUyN2Y0NDFkOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVM0qhUOS0ApZGpNgDe7A5Jwift5
J2Nz3bglVQjC9pjC933+q7gP/6NQDdjKu1s9R3K8GAnrO2hrxcrSoFm8GCXceo0K
EZbzHEZ7FPD++NvyU76q7bkYeIsiVrz9OCoCwDi89PDh5vDQePvxXtoYZ3pP4DcB
MS1wG5RS17GO6+CefsYldEPUX3DCv2bFiELzWzKLWvhiRxvb+ENeaI5d4rGtk+Rm
TGHOBWkU3OjOS0WvNuzS/bCNdbiwSYqOJFYk0wTCt9ouTEQzk76DcWr958IvW4d9
kAe8reowQqdINsJWGzQRcvdELrmKG+TkhQYhBxCLoOhoyP5+pHOTDMe2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYUX6Dgg25IGDqOnNgoNSf0QdkFMB8GA1UdIwQY
MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt
ZjZmMzIzZmQ5NmUwLzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw
LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpCbHzHN
ilEqFXgIpFLYv35WgjEvmeR47Um7zEmSDksy2Qik6/p0IjtrR2YFUGH6o2mlAslF
zQ+b5To3MeI6+oLtYCo5nowxEdbV6rnpfA6baj8IygRe4/qqsZH6wkd4R1VI7G23
pyZHkz38RzlOe+2nlY8oQVmAOeS2b9ebrPLmnHbmsF5BLEPP3zQH2GSluShsT5DM
M49VjQgg/64YqsAek7AQRiSpATZo22/O1bW8NdcUtEQltieC5acYqpEhf2BpX9xW
GAGlxIP8oRjzV2pYCCNBi0fTVrJXkLp4LN7qingHVp/RZj7r7fMNHMeJGu2q6sUR
tCUrfNwvcRozvw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:59 2024 by rpki-client on console-ams.rpki-client.org