Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: nfPC1Quoxn3pDWXFjj7VxY8h0Ndtxq0jDE9yYnhP7nE=
Subject key identifier: E6:5B:17:30:DB:4D:38:71:FE:F5:05:63:AB:6B:92:13:95:27:3A:48
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019355AD0A0B10A4D3D97F65E0CDDC425E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 89
Signing time: Fri 22 Nov 2024 21:00:23 +0000
Manifest this update: Fri 22 Nov 2024 21:00:23 +0000
Manifest next update: Sat 23 Nov 2024 21:00:23 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: UR2w9TttVMMid74s2hoBYrZ1PoegzYgHRBWlUmjtsQg=)
2: zo3jW1gQN6a6r9YTAR7kCkW9Kas.roa (hash: JRzIB6l7HWgGTIjDzBA2hJ8TeVLUgrrxd5lHpOGGKQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:0a:0b:10:a4:d3:d9:7f:65:e0:cd:dc:42:5e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Nov 22 21:00:23 2024 GMT
Not After : Nov 23 21:00:23 2024 GMT
Subject: CN=e65b1730db4d3871fef50563ab6b921395273a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:3e:62:cb:b2:c8:ca:a0:18:67:9a:dc:57:
c2:e5:f0:d1:e0:a2:2d:0a:1c:f2:37:c9:6c:42:7a:
cb:e6:2d:30:8f:10:f4:26:44:ee:b7:25:69:db:62:
cb:0b:95:31:05:ee:28:68:cc:5b:f4:ba:2b:e4:f9:
47:b6:40:5f:f0:f7:e9:0e:6c:73:68:97:9f:eb:61:
43:17:46:41:e0:8f:c9:88:e2:2d:80:e7:db:80:82:
6d:ab:92:78:95:c1:6f:db:45:40:00:31:8a:0a:8c:
4b:f6:3c:57:73:66:d3:c2:74:0d:3d:ce:83:21:d1:
89:da:d2:8e:36:a2:7a:1d:d1:79:d4:77:2d:0c:23:
b6:ea:1a:20:fb:0b:e1:b5:d2:0f:35:1a:9f:c9:7d:
1f:b5:7f:d5:d2:f4:4b:a0:09:52:87:8f:9e:01:f2:
57:9f:2d:f6:e0:39:13:63:73:af:36:a8:3f:a9:dc:
0d:93:65:64:3b:1f:bf:cf:b1:52:ad:6d:b0:d6:14:
07:f9:4a:ab:ff:54:4f:55:fb:97:43:1e:2d:9e:9b:
6b:e0:56:b1:95:8a:3d:46:ba:fb:c6:1b:ca:ac:c2:
4b:f9:81:db:4d:8a:c3:ec:0f:44:8e:db:13:c1:d2:
fc:d7:19:ce:d0:67:b5:1c:88:3c:83:90:3f:77:5e:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:17:30:DB:4D:38:71:FE:F5:05:63:AB:6B:92:13:95:27:3A:48
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:0e:f6:be:f5:84:81:0a:93:d6:1d:26:12:9d:7c:da:13:
9d:5d:af:29:eb:7e:2a:5f:38:5e:72:b7:b2:c4:b5:b4:5d:0b:
df:eb:46:79:e2:4d:c2:1f:77:b4:a2:96:1a:e7:c6:2a:35:8a:
77:1d:f6:44:3e:53:80:5b:7b:d6:5e:99:6d:20:50:84:39:ff:
00:90:db:bd:82:cd:7a:d6:af:a9:a2:ae:82:6a:f7:b2:5d:c7:
e0:5c:15:e7:0a:98:13:86:a8:48:e6:a6:d2:80:7d:f4:a7:d8:
22:e2:83:0c:01:96:df:f4:1e:94:a5:c0:31:b9:bd:e9:bb:e1:
34:6e:19:24:cb:c4:3e:20:f1:45:61:d6:83:08:50:7f:b8:0e:
fa:fe:51:2f:33:5b:f9:95:73:c0:cb:ef:44:4f:7f:f6:79:64:
42:8a:ed:a9:e0:35:1d:51:76:dd:7c:32:1e:e9:1c:a9:78:4f:
7e:d8:74:ba:7f:bf:55:41:f9:29:ac:0e:f0:61:9e:6b:42:8c:
6b:95:3c:54:4c:b5:1b:11:c1:75:43:04:58:1c:2d:bc:26:b5:
fd:ad:2c:89:e5:50:6d:41:ed:40:23:30:45:ec:2d:20:11:2f:
df:08:66:2d:61:47:4a:9d:9a:44:27:01:80:f6:87:92:d8:f6:
b1:77:15:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrQoLEKTT2X9l4M3cQl6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx
MTAyY2EwHhcNMjQxMTIyMjEwMDIzWhcNMjQxMTIzMjEwMDIzWjAzMTEwLwYDVQQD
EyhlNjViMTczMGRiNGQzODcxZmVmNTA1NjNhYjZiOTIxMzk1MjczYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAw+YsuyyMqgGGea3FfC5fDR4KIt
ChzyN8lsQnrL5i0wjxD0JkTutyVp22LLC5UxBe4oaMxb9Lor5PlHtkBf8PfpDmxz
aJef62FDF0ZB4I/JiOItgOfbgIJtq5J4lcFv20VAADGKCoxL9jxXc2bTwnQNPc6D
IdGJ2tKONqJ6HdF51HctDCO26hog+wvhtdIPNRqfyX0ftX/V0vRLoAlSh4+eAfJX
ny324DkTY3OvNqg/qdwNk2VkOx+/z7FSrW2w1hQH+Uqr/1RPVfuXQx4tnptr4Fax
lYo9Rrr7xhvKrMJL+YHbTYrD7A9EjtsTwdL81xnO0Ge1HIg8g5A/d14B6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZbFzDbTThx/vUFY6trkhOVJzpIMB8GA1UdIwQY
MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt
ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh
LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP4O9r71
hIEKk9YdJhKdfNoTnV2vKet+Kl84XnK3ssS1tF0L3+tGeeJNwh93tKKWGufGKjWK
dx32RD5TgFt71l6ZbSBQhDn/AJDbvYLNetavqaKugmr3sl3H4FwV5wqYE4aoSOam
0oB99KfYIuKDDAGW3/QelKXAMbm96bvhNG4ZJMvEPiDxRWHWgwhQf7gO+v5RLzNb
+ZVzwMvvRE9/9nlkQortqeA1HVF23XwyHukcqXhPfth0un+/VUH5KawO8GGea0KM
a5U8VEy1GxHBdUMEWBwtvCa1/a0sieVQbUHtQCMwRewtIBEv3whmLWFHSp2aRCcB
gPaHktj2sXcVzg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:11 2024 by rpki-client on console-fra.rpki-client.org