Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: BqV8mhWON78EB3p+vnH0xp4ESS9dvmexW/Tb28U4OK4=
Subject key identifier: AF:0C:E0:4F:64:08:94:46:AE:BB:52:66:25:84:1E:4A:DA:D6:9E:38
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019352AC82F188A39FCAAC4519B069877E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 108C
Signing time: Fri 22 Nov 2024 07:00:57 +0000
Manifest this update: Fri 22 Nov 2024 07:00:57 +0000
Manifest next update: Sat 23 Nov 2024 07:00:57 +0000
Files and hashes: 1: G3EXCjWzNbf1OUMTAU5RPsU7nWk.roa (hash: G4Xt9Jy6j0QGf2SOYxyL1n9XimHtadTCNkniTTBQGDk=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: eDMmiPs+etmsuhvM42AHONKic8UglOu5tu5lY5+bLJo=)
3: w6tXki7XyTThSkpxNr4x988KgJM.roa (hash: 69VBdr0KGUnHLsYO5nw6msSO5Q4pY/8Ppfm+lfb6xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:82:f1:88:a3:9f:ca:ac:45:19:b0:69:87:7e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Nov 22 07:00:57 2024 GMT
Not After : Nov 23 07:00:57 2024 GMT
Subject: CN=af0ce04f64089446aebb526625841e4adad69e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:37:19:a1:28:a4:5f:9c:fb:20:9d:5e:c5:
c1:1b:6f:bc:f0:5b:ac:a3:41:3e:27:12:74:80:83:
4e:f1:b0:ad:f3:84:a3:ed:bb:20:fb:5a:c8:a5:4e:
00:15:12:d2:a8:1b:87:53:70:58:fe:0f:bf:18:d8:
de:d8:51:10:b7:b9:59:3b:5c:e4:2e:8f:d2:2c:da:
bd:e3:ea:9d:d5:d4:4a:a5:d1:7e:36:2c:18:99:7f:
51:30:e3:9c:42:89:15:81:e9:4f:ab:4a:cf:b5:e7:
da:7a:db:37:e7:44:8f:14:a5:cc:38:9f:a8:8e:37:
23:5b:71:3f:7b:2b:fa:60:a6:88:db:65:f1:e1:af:
53:37:31:97:c0:7a:f9:af:f1:57:f1:42:24:7c:42:
ac:b0:28:6b:84:3d:f3:c8:4c:10:a0:85:a7:ca:25:
8c:02:82:9b:3f:a9:b3:f4:ad:38:49:a4:71:e9:d3:
bc:0d:70:0a:1b:44:ef:68:1e:28:1d:26:81:39:9f:
dc:5d:6c:30:fc:a4:26:1d:1b:54:bc:c0:33:dd:f0:
bc:d4:f0:c5:2b:af:2d:01:71:70:b8:42:8a:56:9e:
fb:80:1f:0b:f6:57:62:0f:48:4e:97:3a:4b:27:9f:
10:aa:2a:ba:47:21:87:20:67:c2:23:cd:ed:2a:a9:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:E0:4F:64:08:94:46:AE:BB:52:66:25:84:1E:4A:DA:D6:9E:38
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:22:bd:a2:de:97:32:3c:a5:5e:ce:9a:0e:d4:6c:ab:ee:24:
73:ba:ec:2b:9c:82:06:ce:1a:92:db:0d:6c:13:9b:b6:9b:87:
03:61:a8:d4:23:d8:9d:38:90:77:2e:d3:da:10:99:06:44:ad:
03:35:9d:b5:01:c0:2f:96:a3:0b:95:e3:8e:65:0b:ae:74:70:
7c:6c:6c:15:f4:0d:2a:61:7a:09:2b:18:ec:4d:c7:1c:c4:0c:
a2:d4:44:5e:d2:11:ba:69:1a:f7:b1:18:83:34:67:70:a1:d2:
e9:09:13:eb:f4:82:d5:db:ef:8b:f1:78:f0:83:cc:c4:75:ef:
52:3d:eb:0b:34:94:96:63:eb:90:92:88:81:e6:5c:bb:05:76:
6e:b9:c8:7e:bc:02:e6:96:3d:f7:07:15:90:2e:a1:a1:81:73:
fd:dd:7b:22:22:bc:d3:3b:2a:10:3f:52:c0:84:92:d1:c1:b5:
27:08:ab:23:d0:19:d9:66:c1:15:1f:8c:f7:74:6c:99:44:7d:
8b:7d:25:7c:7f:f2:ab:cf:43:b8:73:3f:93:bd:ac:00:5e:ec:
8c:3e:3a:27:5d:f1:ff:e1:ac:43:9e:d4:77:63:06:81:d8:91:
27:51:11:62:f9:1f:2c:be:8f:3d:1a:40:83:dc:db:f2:75:ea:
0e:bf:eb:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrILxiKOfyqxFGbBph35fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjQxMTIyMDcwMDU3WhcNMjQxMTIzMDcwMDU3WjAzMTEwLwYDVQQD
EyhhZjBjZTA0ZjY0MDg5NDQ2YWViYjUyNjYyNTg0MWU0YWRhZDY5ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU03GaEopF+c+yCdXsXBG2+88Fus
o0E+JxJ0gINO8bCt84Sj7bsg+1rIpU4AFRLSqBuHU3BY/g+/GNje2FEQt7lZO1zk
Lo/SLNq94+qd1dRKpdF+NiwYmX9RMOOcQokVgelPq0rPtefaets350SPFKXMOJ+o
jjcjW3E/eyv6YKaI22Xx4a9TNzGXwHr5r/FX8UIkfEKssChrhD3zyEwQoIWnyiWM
AoKbP6mz9K04SaRx6dO8DXAKG0TvaB4oHSaBOZ/cXWww/KQmHRtUvMAz3fC81PDF
K68tAXFwuEKKVp77gB8L9ldiD0hOlzpLJ58Qqiq6RyGHIGfCI83tKqmMVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8M4E9kCJRGrrtSZiWEHkra1p44MB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyK9ot6X
MjylXs6aDtRsq+4kc7rsK5yCBs4aktsNbBObtpuHA2Go1CPYnTiQdy7T2hCZBkSt
AzWdtQHAL5ajC5XjjmULrnRwfGxsFfQNKmF6CSsY7E3HHMQMotREXtIRumka97EY
gzRncKHS6QkT6/SC1dvvi/F48IPMxHXvUj3rCzSUlmPrkJKIgeZcuwV2brnIfrwC
5pY99wcVkC6hoYFz/d17IiK80zsqED9SwISS0cG1JwirI9AZ2WbBFR+M93RsmUR9
i30lfH/yq89DuHM/k72sAF7sjD46J13x/+GsQ57Ud2MGgdiRJ1ERYvkfLL6PPRpA
g9zb8nXqDr/rKQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:11 2024 by rpki-client on console-ams.rpki-client.org