Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
File: aqNKS6w794E80qZrT0W5x4bdNUI.mft (raw, json)
Hash identifier: V5uMo3SoX1z7wkPbP+FaBfnlaDXtFhOZjye4/LlOQUw=
Subject key identifier: 49:ED:AD:4C:1C:43:47:57:86:63:0B:93:04:2F:17:18:98:DD:65:B0
Authority key identifier: 6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
Certificate issuer: /CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Certificate serial: 01935877A5BC8D439B1EB65AAC7BCC15CF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
Manifest number: 05C0
Signing time: Sat 23 Nov 2024 10:00:56 +0000
Manifest this update: Sat 23 Nov 2024 10:00:56 +0000
Manifest next update: Sun 24 Nov 2024 10:00:56 +0000
Files and hashes: 1: QQYxK_tkgXrigJ4YubeNJsjHcQk.roa (hash: RbybevO9NgPzwbsOqAMgT3fSDUB7Mq0qifvewxygxEs=)
2: aqNKS6w794E80qZrT0W5x4bdNUI.crl (hash: U8fFDS3df/Ce8A8rxLUS1/aFNS9e8obv8t3V6xDKht8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:a5:bc:8d:43:9b:1e:b6:5a:ac:7b:cc:15:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Validity
Not Before: Nov 23 10:00:56 2024 GMT
Not After : Nov 24 10:00:56 2024 GMT
Subject: CN=49edad4c1c43475786630b93042f171898dd65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:62:bd:37:0a:a7:8a:88:82:63:c4:da:78:
7c:1a:61:eb:2a:3b:2a:b8:14:6c:b1:78:59:60:d2:
b3:59:1c:2f:3e:1a:d5:49:01:dd:67:51:1f:ef:d8:
a7:73:08:84:14:98:64:52:1d:f1:ac:08:80:d2:df:
12:32:a1:96:81:90:5a:48:b5:a1:df:e5:9f:17:4d:
a8:57:b5:d2:26:17:7c:90:9f:5f:aa:ef:6c:32:39:
99:bd:71:d5:a7:7a:b1:ca:28:2f:e3:c4:a5:f8:6e:
ca:db:e4:4d:d2:59:d6:53:2b:ae:fb:ce:df:68:00:
30:aa:0f:66:58:b9:e9:a6:66:e5:98:d3:c4:8b:b8:
25:83:fc:ac:2b:2e:53:e2:46:48:78:08:bd:21:72:
45:0d:d1:f6:4a:2e:74:d7:0b:b3:05:67:1b:da:06:
87:57:8d:ef:9e:de:48:52:75:3d:7f:0a:c8:42:bd:
9b:3a:fb:40:ad:be:7b:da:b9:96:74:f4:0e:c9:88:
77:cc:0f:2b:ca:39:fa:22:03:1e:c9:78:a0:c0:67:
8e:cc:14:b6:15:44:42:af:56:22:5c:ef:64:75:74:
fe:ba:57:c7:16:86:78:94:f7:49:21:f4:eb:a9:31:
a2:5a:c5:66:6a:9b:46:7f:86:ba:8e:08:40:d8:1e:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:AD:4C:1C:43:47:57:86:63:0B:93:04:2F:17:18:98:DD:65:B0
X509v3 Authority Key Identifier:
keyid:6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:a9:be:4e:0c:76:92:14:70:04:50:50:2a:9c:b5:cd:24:
85:b9:41:be:0d:81:12:49:e0:e8:56:24:c4:67:f9:9f:8e:2e:
ed:ce:1e:19:08:b5:24:02:ad:bc:b1:ce:85:e9:61:5c:e0:1c:
14:35:02:c8:f0:24:18:49:5e:40:a7:a7:10:98:20:99:fa:f9:
47:8a:36:a5:bd:74:65:c1:f0:16:f5:66:3a:ee:31:8f:ac:e2:
a6:d0:29:bc:18:c7:74:8f:d7:0b:3a:d7:46:80:d4:04:5e:da:
bd:81:96:2f:be:64:dc:e4:15:25:97:53:4e:14:f4:09:05:ca:
84:e0:f5:22:b0:a7:60:bb:83:53:a2:5a:5c:b5:46:98:c4:56:
d5:5c:ce:e0:fb:66:2c:f1:2e:ee:a7:a1:aa:f3:6b:28:41:69:
6d:f7:dd:ea:07:2b:55:ba:69:7e:93:9d:1b:06:9a:54:0c:01:
24:39:30:0e:25:70:da:66:6b:4b:9e:9d:b0:f6:2e:db:1a:57:
5e:81:3c:31:cd:b9:f9:ca:b0:11:40:50:3a:48:6b:e6:82:04:
6a:35:cd:8b:2c:b5:6e:ae:d2:e3:0a:2f:3b:28:72:c9:62:e9:
34:23:7e:dc:e5:07:dd:36:9b:3f:5b:72:cb:4a:cf:5c:a0:79:
70:64:c5:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd6W8jUObHrZarHvMFc9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTM0YTRiYWMzYmY3ODEzY2QyYTY2YjRmNDViOWM3ODZk
ZDM1NDIwHhcNMjQxMTIzMTAwMDU2WhcNMjQxMTI0MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0OWVkYWQ0YzFjNDM0NzU3ODY2MzBiOTMwNDJmMTcxODk4ZGQ2NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUZivTcKp4qIgmPE2nh8GmHrKjsq
uBRssXhZYNKzWRwvPhrVSQHdZ1Ef79incwiEFJhkUh3xrAiA0t8SMqGWgZBaSLWh
3+WfF02oV7XSJhd8kJ9fqu9sMjmZvXHVp3qxyigv48Sl+G7K2+RN0lnWUyuu+87f
aAAwqg9mWLnppmblmNPEi7glg/ysKy5T4kZIeAi9IXJFDdH2Si501wuzBWcb2gaH
V43vnt5IUnU9fwrIQr2bOvtArb572rmWdPQOyYh3zA8ryjn6IgMeyXigwGeOzBS2
FURCr1YiXO9kdXT+ulfHFoZ4lPdJIfTrqTGiWsVmaptGf4a6jghA2B4WYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEntrUwcQ0dXhmMLkwQvFxiY3WWwMB8GA1UdIwQY
MBaAFGqjSkusO/eBPNKma09FuceG3TVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzkyMGQtODEwOS00MTE5LWI4NDAt
NjY0ZWYwZGE4YzMwLzEvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jYzkyMGQtODEwOS00MTE5LWI4NDAtNjY0ZWYwZGE4YzMw
LzEvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveSpvk4M
dpIUcARQUCqctc0khblBvg2BEkng6FYkxGf5n44u7c4eGQi1JAKtvLHOhelhXOAc
FDUCyPAkGEleQKenEJggmfr5R4o2pb10ZcHwFvVmOu4xj6ziptApvBjHdI/XCzrX
RoDUBF7avYGWL75k3OQVJZdTThT0CQXKhOD1IrCnYLuDU6JaXLVGmMRW1VzO4Ptm
LPEu7qehqvNrKEFpbffd6gcrVbppfpOdGwaaVAwBJDkwDiVw2mZrS56dsPYu2xpX
XoE8Mc25+cqwEUBQOkhr5oIEajXNiyy1bq7S4wovOyhyyWLpNCN+3OUH3TabP1ty
y0rPXKB5cGTF5Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:17 2024 by rpki-client on console-fra.rpki-client.org