Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
File: Fv4NAkzduvhoIpEiFYlxRysky00.mft (raw, json)
Hash identifier: bWLRFm4A+clwHlj9sADFbKEWAGeGh6fUQJgz5r2gcOo=
Subject key identifier: 9A:27:A3:0E:0D:B1:D1:8D:E0:C9:A8:34:2A:8F:76:A0:5C:2D:25:CC
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Certificate issuer: /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial: 01940721ACC99E15678AF52C44541FB8364B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 08:00:34 +0000
Manifest this update: Fri 27 Dec 2024 08:00:34 +0000
Manifest next update: Sat 28 Dec 2024 08:00:34 +0000
Files and hashes: 1: 1L_7GrhEojWz71Err50z2zeJmkM.roa (hash: O4sbn+sPxAS6Z60jMR6yykMYs4JgvCE7GenT6UM7pHQ=)
2: Fv4NAkzduvhoIpEiFYlxRysky00.crl (hash: LlVfkIAoY9vd/tio+xx8tWZTE25xiZERmdn97aiEFFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:ac:c9:9e:15:67:8a:f5:2c:44:54:1f:b8:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
Validity
Not Before: Dec 27 08:00:34 2024 GMT
Not After : Dec 28 08:00:34 2024 GMT
Subject: CN=9a27a30e0db1d18de0c9a8342a8f76a05c2d25cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:6e:68:db:55:84:48:04:e7:95:11:39:43:
68:8a:83:25:b3:6a:8d:56:82:f5:37:c9:aa:4e:54:
49:15:99:71:7d:e4:ff:69:97:52:3b:2e:e0:4a:64:
84:5a:b5:1b:62:d4:c2:03:53:39:07:31:0a:d5:29:
41:0a:45:8c:e9:91:97:b5:3b:03:3a:79:d3:e3:21:
4c:b8:1c:6c:9a:46:49:8c:0c:59:10:65:d1:0b:cf:
23:f9:fe:73:54:c4:8c:4f:d8:ba:5f:f7:7b:e1:ef:
f7:4d:7b:3a:fd:22:3f:b6:81:15:7c:2f:4b:ae:72:
0a:dd:d8:ed:64:ee:83:df:d9:97:bc:dc:9c:8e:2f:
9b:bd:cd:24:7a:e3:0e:c5:64:b9:9b:aa:25:08:5f:
73:69:9e:71:eb:b5:26:66:36:f5:24:5d:c6:3e:a3:
c4:c4:be:05:7d:5a:0b:66:2b:2e:07:4b:91:94:03:
3a:80:1a:8a:60:2a:0e:f4:cd:01:ac:c3:11:46:be:
ec:e1:06:ef:cb:07:9f:44:2d:67:16:d9:a4:86:28:
49:ca:5d:d2:f9:72:89:49:fe:c5:78:15:d4:ad:74:
7b:5a:71:50:4f:ee:42:1d:79:20:21:f0:27:03:d1:
1d:0d:49:7a:69:92:63:ca:a2:b1:75:65:a2:31:40:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:A3:0E:0D:B1:D1:8D:E0:C9:A8:34:2A:8F:76:A0:5C:2D:25:CC
X509v3 Authority Key Identifier:
keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:37:4a:f3:be:62:43:a9:71:90:7b:39:2f:7e:9a:5b:76:bb:
62:bc:46:fe:4f:a5:53:c8:a1:4c:82:1a:a8:a8:f8:00:05:0b:
a1:cc:4a:9a:ee:a1:be:f7:cc:b9:df:92:d3:24:6b:c6:c5:5e:
70:e9:ed:d8:15:12:59:64:39:43:55:5d:3e:1e:8f:04:73:66:
97:1b:ab:cc:e6:b1:47:28:53:75:9e:da:76:5d:eb:0b:10:36:
d8:e1:ba:ce:7d:3b:c2:08:16:14:ec:57:e4:ef:10:15:0c:f3:
31:76:c9:69:65:39:2b:0e:f6:f3:63:32:35:13:c9:7e:69:26:
36:73:b4:7e:02:3d:8e:72:45:59:b9:af:61:da:f6:40:e1:a8:
ad:dc:99:a2:d6:8e:9b:34:08:96:e3:68:5c:a6:ce:e9:4d:74:
f0:c9:bb:30:e8:c4:e4:49:73:f7:c7:0a:17:6c:2e:0f:bd:3c:
a6:11:f6:b6:2b:02:86:8b:60:46:a3:88:5f:d0:bb:4c:bc:2b:
6e:34:48:6b:82:b2:62:81:67:1d:4f:7a:d8:59:b0:1c:a0:e9:
02:4e:15:7e:28:83:4a:d2:ab:b4:25:e3:94:1b:5b:fe:12:b5:
a0:25:23:de:a4:70:b5:0c:45:93:c1:bb:41:83:d5:4b:c8:1b:
87:73:02:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIazJnhVnivUsRFQfuDZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmUwZDAyNGNkZGJhZjg2ODIyOTEyMjE1ODk3MTQ3MmIy
NGNiNGQwHhcNMjQxMjI3MDgwMDM0WhcNMjQxMjI4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg5YTI3YTMwZTBkYjFkMThkZTBjOWE4MzQyYThmNzZhMDVjMmQyNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyytuaNtVhEgE55UROUNoioMls2qN
VoL1N8mqTlRJFZlxfeT/aZdSOy7gSmSEWrUbYtTCA1M5BzEK1SlBCkWM6ZGXtTsD
OnnT4yFMuBxsmkZJjAxZEGXRC88j+f5zVMSMT9i6X/d74e/3TXs6/SI/toEVfC9L
rnIK3djtZO6D39mXvNycji+bvc0keuMOxWS5m6olCF9zaZ5x67UmZjb1JF3GPqPE
xL4FfVoLZisuB0uRlAM6gBqKYCoO9M0BrMMRRr7s4QbvywefRC1nFtmkhihJyl3S
+XKJSf7FeBXUrXR7WnFQT+5CHXkgIfAnA9EdDUl6aZJjyqKxdWWiMUBSDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJonow4NsdGN4MmoNCqPdqBcLSXMMB8GA1UdIwQY
MBaAFBb+DQJM3br4aCKRIhWJcUcrJMtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYt
NWIyZjkwZGY3OTZkLzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80NjE2ZDctZTgwOC00ZTQ3LWE2NDYtNWIyZjkwZGY3OTZk
LzEvRnY0TkFremR1dmhvSXBFaUZZbHhSeXNreTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjdK875i
Q6lxkHs5L36aW3a7YrxG/k+lU8ihTIIaqKj4AAULocxKmu6hvvfMud+S0yRrxsVe
cOnt2BUSWWQ5Q1VdPh6PBHNmlxurzOaxRyhTdZ7adl3rCxA22OG6zn07wggWFOxX
5O8QFQzzMXbJaWU5Kw7282MyNRPJfmkmNnO0fgI9jnJFWbmvYdr2QOGordyZotaO
mzQIluNoXKbO6U108Mm7MOjE5Elz98cKF2wuD708phH2tisChotgRqOIX9C7TLwr
bjRIa4KyYoFnHU962FmwHKDpAk4VfiiDStKrtCXjlBtb/hK1oCUj3qRwtQxFk8G7
QYPVS8gbh3MCFw==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:23 2024 by rpki-client on console-ams.rpki-client.org