Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: v55g9E/gUcjUPuIu34NcNFyyQmNVzPwnAZ1OLV7j87w=
Subject key identifier: 7E:6D:1A:70:C8:93:E1:16:94:C8:B9:3E:79:1E:BF:28:F6:10:62:06
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01935350F2789004EFA4417E2C7AA015944B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0281
Signing time: Fri 22 Nov 2024 10:00:33 +0000
Manifest this update: Fri 22 Nov 2024 10:00:33 +0000
Manifest next update: Sat 23 Nov 2024 10:00:33 +0000
Files and hashes: 1: JIrwaCbF1GaIOnsqD38sxLoqUZM.roa (hash: KpOTpPAkot1DA5uY6aJEyvT3lzocZxVZbB1bM1oRZqY=)
2: MVI-szjf8jEosg5jzW7ps6FeDpY.roa (hash: 1xlp6/7HRUqVMVkFv+bCDJBMpblNy6SZ7fofQwXvQYE=)
3: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: f336jlDDWI6i/+wMt61hkBohqx1ahbMj8XLcSj/Kb+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:f2:78:90:04:ef:a4:41:7e:2c:7a:a0:15:94:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Nov 22 10:00:33 2024 GMT
Not After : Nov 23 10:00:33 2024 GMT
Subject: CN=7e6d1a70c893e11694c8b93e791ebf28f6106206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:73:11:56:c3:b9:77:68:ae:fc:6f:cb:02:
99:27:42:a3:1f:12:44:a1:34:7a:42:0b:0b:0d:f9:
e4:27:aa:cc:68:81:e6:ad:9d:df:d0:34:8c:d8:02:
30:1a:00:cd:61:e2:a6:a3:cf:39:70:a3:35:4f:85:
ff:5a:f5:c4:bf:3b:5b:9b:7c:67:84:11:e9:bf:47:
56:86:7b:a2:ca:35:51:27:1d:9e:63:8e:94:0c:76:
dd:d8:d2:8e:72:b3:c3:a3:a3:84:94:7c:39:95:d5:
9e:86:19:1d:c0:17:a4:86:1a:0c:05:97:fb:a3:bd:
15:56:06:a6:98:33:0f:44:b7:03:86:9d:28:d9:73:
37:5b:2f:e5:5d:87:d3:de:73:80:0a:16:62:e7:13:
9c:2c:b0:05:bf:60:ca:c7:dd:0b:24:38:c1:db:e5:
43:80:f9:bf:40:c8:92:f3:53:3a:cd:54:ac:98:e4:
14:b2:d4:f4:83:c2:18:7a:cf:9e:b1:45:90:c3:d8:
55:00:4e:40:5f:f5:d9:45:22:42:96:4d:65:6d:69:
50:e3:d7:0f:f5:00:44:b1:7f:2b:f9:f2:83:78:6b:
8a:a3:cb:ec:b8:7a:b9:37:da:00:0d:2f:44:2b:dc:
ac:23:5d:78:86:3f:51:cc:60:f6:4c:68:f3:d3:26:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:1A:70:C8:93:E1:16:94:C8:B9:3E:79:1E:BF:28:F6:10:62:06
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:af:57:5c:98:55:26:8e:1a:46:0f:64:9f:95:96:1f:8a:
36:12:72:c0:ff:74:af:68:95:06:62:e5:80:3b:b9:2e:67:c1:
9d:37:20:07:8a:9b:8e:21:cc:6a:1c:b4:1d:a4:f8:7d:ae:b2:
1a:d9:1b:95:d7:1e:88:5c:1b:4d:3c:26:de:63:4e:a1:8a:16:
ae:51:ae:d3:f3:36:61:ad:78:8c:aa:c9:b1:cd:a8:1f:8d:61:
37:74:d3:eb:54:d7:75:a4:35:31:34:7e:1c:42:d0:ad:c8:4b:
4c:5e:a5:ed:fa:3f:54:f5:e5:68:cf:f2:5b:e3:67:73:8f:04:
f6:37:72:1e:84:78:15:94:d7:f6:0e:62:5d:d0:6e:cf:82:f2:
8e:af:f7:bd:f9:42:a4:3a:c3:86:08:e1:13:37:45:e3:47:42:
41:e8:a0:d2:6e:2c:4e:0b:49:47:f2:83:b5:af:1d:ae:90:d7:
26:97:17:37:a0:6a:3a:21:ca:a4:fc:19:95:36:99:cc:25:01:
54:dc:36:0a:e7:87:e6:83:7d:28:65:db:4a:ce:39:2b:41:77:
84:e1:a3:cf:96:2c:69:61:b2:57:75:b9:9e:7d:67:14:b1:c6:
30:cc:84:df:d9:17:9a:2d:38:ff:34:88:86:18:b6:13:21:34:
89:01:6a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTUPJ4kATvpEF+LHqgFZRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZjODA5Yjc2MDVmNmQ1Y2UxMjdiZDJkOGI3Njc0MzUw
YjhiMTEwHhcNMjQxMTIyMTAwMDMzWhcNMjQxMTIzMTAwMDMzWjAzMTEwLwYDVQQD
Eyg3ZTZkMWE3MGM4OTNlMTE2OTRjOGI5M2U3OTFlYmYyOGY2MTA2MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqRzEVbDuXdorvxvywKZJ0KjHxJE
oTR6QgsLDfnkJ6rMaIHmrZ3f0DSM2AIwGgDNYeKmo885cKM1T4X/WvXEvztbm3xn
hBHpv0dWhnuiyjVRJx2eY46UDHbd2NKOcrPDo6OElHw5ldWehhkdwBekhhoMBZf7
o70VVgammDMPRLcDhp0o2XM3Wy/lXYfT3nOAChZi5xOcLLAFv2DKx90LJDjB2+VD
gPm/QMiS81M6zVSsmOQUstT0g8IYes+esUWQw9hVAE5AX/XZRSJClk1lbWlQ49cP
9QBEsX8r+fKDeGuKo8vsuHq5N9oADS9EK9ysI114hj9RzGD2TGjz0yZmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5tGnDIk+EWlMi5Pnkevyj2EGIGMB8GA1UdIwQY
MBaAFFgGyAm3YF9tXOEnvS2LdnQ1C4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjct
YzMwNjY0YWVlYzE0LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjctYzMwNjY0YWVlYzE0
LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGySvV1yY
VSaOGkYPZJ+Vlh+KNhJywP90r2iVBmLlgDu5LmfBnTcgB4qbjiHMahy0HaT4fa6y
GtkbldceiFwbTTwm3mNOoYoWrlGu0/M2Ya14jKrJsc2oH41hN3TT61TXdaQ1MTR+
HELQrchLTF6l7fo/VPXlaM/yW+Nnc48E9jdyHoR4FZTX9g5iXdBuz4Lyjq/3vflC
pDrDhgjhEzdF40dCQeig0m4sTgtJR/KDta8drpDXJpcXN6BqOiHKpPwZlTaZzCUB
VNw2CueH5oN9KGXbSs45K0F3hOGjz5YsaWGyV3W5nn1nFLHGMMyE39kXmi04/zSI
hhi2EyE0iQFqng==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:39 2024 by rpki-client on console-ams.rpki-client.org