Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: k5MGTmxl+SBDxNkYjTXfxMxyTFPIAAx4WbI3crV0U/Y=
Subject key identifier: E9:F3:F3:E2:C6:10:A4:97:9E:54:FB:38:03:42:6F:D1:43:60:0A:68
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 0193640FA5B6AE4861282E5F9203DAC342C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0435
Signing time: Mon 25 Nov 2024 16:02:47 +0000
Manifest this update: Mon 25 Nov 2024 16:02:47 +0000
Manifest next update: Tue 26 Nov 2024 16:02:47 +0000
Files and hashes: 1: KZZa85m8al-qtS4ZqFjyiCdj7-A.roa (hash: MnXipwiCBwZ4iTm/qORZBhrosrO0FH5e3AtOUYg6Myc=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: YclK9HVQiu854dO/OlC0etMyLnEdDal3eRmsFvXDHcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0f:a5:b6:ae:48:61:28:2e:5f:92:03:da:c3:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Nov 25 16:02:47 2024 GMT
Not After : Nov 26 16:02:47 2024 GMT
Subject: CN=e9f3f3e2c610a4979e54fb3803426fd143600a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:0f:dd:13:3b:ec:7d:96:08:54:f2:c0:29:
2f:c7:18:84:ca:fd:18:4e:55:98:e5:b5:43:ad:46:
a3:c9:38:c5:66:3b:99:c7:04:65:08:28:6d:f5:df:
58:ed:ae:07:b7:a7:d0:35:55:25:e4:8a:24:9f:56:
a9:a4:f0:90:62:dc:c4:43:7d:84:79:0c:1c:86:fa:
7b:bf:67:d9:76:6a:bb:16:bc:02:66:ff:64:2c:b3:
f3:01:e5:d9:26:d2:12:0b:de:60:f7:ee:a9:c6:9c:
18:f2:68:2a:18:32:24:f2:36:a7:8f:0a:56:a5:42:
39:12:27:9f:67:83:99:46:7b:9c:eb:db:97:d6:9d:
38:87:a7:98:08:c1:b3:d8:54:b4:ae:24:0a:ab:62:
01:44:77:40:c4:16:83:53:41:a4:9f:73:bb:b6:ef:
70:a2:77:26:de:b3:94:fb:f9:27:dc:20:a1:4e:0b:
71:a0:b3:18:af:c1:bf:c4:41:b7:d3:ac:b7:31:99:
ff:9f:c6:94:36:5a:1f:da:a6:d3:fc:4c:14:e8:55:
a4:45:b7:eb:58:9c:cc:21:8a:4e:19:ff:a4:ab:e3:
65:66:58:01:30:f0:3c:c4:aa:2d:2c:6a:ea:3f:f4:
ca:ab:0e:21:c8:e1:de:98:f9:19:77:47:34:5d:20:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:F3:E2:C6:10:A4:97:9E:54:FB:38:03:42:6F:D1:43:60:0A:68
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fb:bd:cd:49:fd:cc:f5:75:95:05:4d:87:b4:8a:b2:bd:74:
4f:6a:cb:03:c6:3d:6d:b0:2d:e2:81:03:60:a6:ca:25:25:bc:
7b:ea:eb:d8:71:2e:fc:e6:fc:98:27:fc:26:20:d9:ed:c1:9b:
9b:ec:08:b1:5c:9f:61:29:d5:bd:1d:36:ee:ac:01:8a:b4:d7:
bd:65:9f:c5:e4:1f:97:de:3a:b7:e9:2a:5b:c7:b5:17:07:3e:
ab:27:97:ee:07:bc:87:07:84:0e:29:6d:93:b8:ad:99:39:91:
e2:76:29:7b:fe:04:51:52:07:26:f4:8d:b0:ee:53:46:c3:ea:
83:b5:b2:bc:12:aa:20:19:d1:57:6a:3f:48:5e:2e:cd:e2:58:
53:f0:a7:13:c3:1e:fc:3a:c0:4e:29:8a:b4:e0:4b:bb:a6:06:
bd:db:a1:47:79:3c:5c:8c:64:8c:83:3a:27:e9:b2:63:81:c1:
3f:37:b7:13:69:2e:41:74:d9:3a:be:ff:58:4f:59:3a:30:54:
5c:42:f9:51:ca:86:59:37:b9:a9:41:cb:49:74:da:2b:d0:68:
a4:0e:3d:fd:0c:f1:70:5e:81:50:31:4f:c7:22:c5:ff:d8:ea:
14:d3:3d:3d:70:94:2a:ee:7a:aa:8a:c5:50:1b:3e:67:8c:7f:
fe:fd:31:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkD6W2rkhhKC5fkgPaw0LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTRkNWJmM2RiN2Q2NzM0ZGNmMWJlNjIyZDVmZGVlMmZl
YzNiOGYwHhcNMjQxMTI1MTYwMjQ3WhcNMjQxMTI2MTYwMjQ3WjAzMTEwLwYDVQQD
EyhlOWYzZjNlMmM2MTBhNDk3OWU1NGZiMzgwMzQyNmZkMTQzNjAwYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMP3RM77H2WCFTywCkvxxiEyv0Y
TlWY5bVDrUajyTjFZjuZxwRlCCht9d9Y7a4Ht6fQNVUl5Iokn1appPCQYtzEQ32E
eQwchvp7v2fZdmq7FrwCZv9kLLPzAeXZJtISC95g9+6pxpwY8mgqGDIk8janjwpW
pUI5EiefZ4OZRnuc69uX1p04h6eYCMGz2FS0riQKq2IBRHdAxBaDU0Gkn3O7tu9w
oncm3rOU+/kn3CChTgtxoLMYr8G/xEG306y3MZn/n8aUNlof2qbT/EwU6FWkRbfr
WJzMIYpOGf+kq+NlZlgBMPA8xKotLGrqP/TKqw4hyOHemPkZd0c0XSAr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnz8+LGEKSXnlT7OANCb9FDYApoMB8GA1UdIwQY
MBaAFJ6U1b89t9ZzTc8b5iLV/e4v7DuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUt
OWNlZTIzYTYwNTY2LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUtOWNlZTIzYTYwNTY2
LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvu9zUn9
zPV1lQVNh7SKsr10T2rLA8Y9bbAt4oEDYKbKJSW8e+rr2HEu/Ob8mCf8JiDZ7cGb
m+wIsVyfYSnVvR027qwBirTXvWWfxeQfl946t+kqW8e1Fwc+qyeX7ge8hweEDilt
k7itmTmR4nYpe/4EUVIHJvSNsO5TRsPqg7WyvBKqIBnRV2o/SF4uzeJYU/CnE8Me
/DrATimKtOBLu6YGvduhR3k8XIxkjIM6J+myY4HBPze3E2kuQXTZOr7/WE9ZOjBU
XEL5UcqGWTe5qUHLSXTaK9BopA49/QzxcF6BUDFPxyLF/9jqFNM9PXCUKu56qorF
UBs+Z4x//v0x/w==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:32:21 2024 by rpki-client on console-fra.rpki-client.org