Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: JwrYaEPSRkTgEBUD2eDgENrNnsfLl5mpOdq/DSyT5uE=
Subject key identifier: 08:9E:FF:3A:9D:ED:39:0B:88:2E:95:77:B8:AC:DF:4D:F1:96:FC:22
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 01936933EF6DFBC5566F31FDECAEB48C55DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0CB1
Signing time: Tue 26 Nov 2024 16:00:31 +0000
Manifest this update: Tue 26 Nov 2024 16:00:31 +0000
Manifest next update: Wed 27 Nov 2024 16:00:31 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: pqpCBLKcqcYdvm8Bo7DsWbNBlS7fypME+a0WPQPUv6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:ef:6d:fb:c5:56:6f:31:fd:ec:ae:b4:8c:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Nov 26 16:00:31 2024 GMT
Not After : Nov 27 16:00:31 2024 GMT
Subject: CN=089eff3a9ded390b882e9577b8acdf4df196fc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:79:46:44:27:21:8c:00:ba:c8:c5:c6:38:
fc:aa:57:0b:94:eb:72:3c:e5:f8:7e:dd:e7:31:9d:
d4:a8:89:84:7b:1b:cd:2c:e5:2f:18:f5:b6:2b:e3:
1e:14:b2:3e:f7:30:f3:ac:71:ff:61:66:29:2e:4e:
f3:4f:95:9b:5b:a7:96:65:23:3e:41:5d:cd:de:1e:
88:68:90:92:80:93:ff:99:c0:dc:53:12:79:4f:58:
c4:03:b4:a7:bc:d4:ed:ff:0d:73:0c:65:d7:9c:b2:
92:46:93:08:a3:4f:3c:87:f4:fa:d9:d7:91:64:ff:
98:5e:33:0d:ec:a6:89:7f:af:07:b9:6d:a0:07:0b:
43:bd:74:e0:1c:02:3f:64:38:e5:db:2b:63:a2:15:
e8:05:a5:24:46:1f:b5:90:8b:77:ec:57:3c:9b:89:
60:91:a3:18:7d:0d:04:ec:5e:01:fa:0b:59:5c:d4:
bb:3c:f5:76:c0:a2:5a:28:aa:13:5e:72:fa:b6:ba:
a3:11:a4:fd:45:57:85:6a:eb:1b:aa:3c:a7:61:53:
bf:a8:8b:fb:7a:d3:f0:38:3b:70:cd:75:3b:b5:a3:
ea:0f:ba:65:92:df:2c:03:0b:ee:68:97:a7:8a:33:
59:93:a8:20:ee:20:0f:40:15:fc:cd:bc:32:f8:d8:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:FF:3A:9D:ED:39:0B:88:2E:95:77:B8:AC:DF:4D:F1:96:FC:22
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:64:4c:97:e6:dd:cd:50:85:92:4d:6a:9d:f5:c8:dd:ec:
5c:68:88:13:3e:36:50:15:45:29:74:c5:e5:08:14:87:0d:1e:
bd:4b:57:7c:85:0f:2b:6d:33:57:e0:b8:17:0c:7c:61:b9:f5:
fa:47:a6:41:0e:75:c2:18:13:e3:04:47:b6:18:6a:e7:3f:dd:
f2:1a:25:9c:19:cf:d4:49:6a:7a:fa:0d:6a:ea:6d:f1:fc:32:
9e:60:0b:0c:f2:4c:11:85:f4:6a:9d:97:3d:91:6d:7f:03:63:
fc:02:31:59:e4:0b:33:b4:0b:b5:d6:4e:02:7a:12:64:86:10:
90:a7:d5:8e:73:41:22:56:3e:b9:fa:60:08:55:ed:08:00:ea:
99:6b:aa:4f:0d:e3:bb:e0:1e:09:a9:91:36:56:91:e5:d3:0c:
12:94:ac:6e:de:db:ef:f8:f9:13:0f:f4:33:18:18:36:6e:7b:
49:ba:57:0a:95:f2:e0:65:f9:e3:0c:aa:92:25:e0:dd:a9:3c:
ac:48:59:dd:6b:36:ac:57:f1:f4:b5:7e:f1:28:7a:0c:f7:84:
17:71:51:ee:fc:13:d6:aa:45:90:2e:50:4a:73:39:5c:e7:03:
b1:03:12:35:21:1f:cd:c1:5f:69:ac:3c:a1:72:79:2a:46:ca:
f6:bc:29:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpM+9t+8VWbzH97K60jFXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTMzY2Y3YTZkMGYxOTM2M2JmZmQyYTZmMmU5ZmM0NzI3
OTAxZmMwHhcNMjQxMTI2MTYwMDMxWhcNMjQxMTI3MTYwMDMxWjAzMTEwLwYDVQQD
EygwODllZmYzYTlkZWQzOTBiODgyZTk1NzdiOGFjZGY0ZGYxOTZmYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwt5RkQnIYwAusjFxjj8qlcLlOty
POX4ft3nMZ3UqImEexvNLOUvGPW2K+MeFLI+9zDzrHH/YWYpLk7zT5WbW6eWZSM+
QV3N3h6IaJCSgJP/mcDcUxJ5T1jEA7SnvNTt/w1zDGXXnLKSRpMIo088h/T62deR
ZP+YXjMN7KaJf68HuW2gBwtDvXTgHAI/ZDjl2ytjohXoBaUkRh+1kIt37Fc8m4lg
kaMYfQ0E7F4B+gtZXNS7PPV2wKJaKKoTXnL6trqjEaT9RVeFausbqjynYVO/qIv7
etPwODtwzXU7taPqD7plkt8sAwvuaJenijNZk6gg7iAPQBX8zbwy+NhF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAie/zqd7TkLiC6Vd7is303xlvwiMB8GA1UdIwQY
MBaAFBvjPPem0PGTY7/9Km8un8RyeQH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4Nzct
MmZjYTY5ZDBmZGVjLzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4NzctMmZjYTY5ZDBmZGVj
LzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHFkTJfm
3c1QhZJNap31yN3sXGiIEz42UBVFKXTF5QgUhw0evUtXfIUPK20zV+C4Fwx8Ybn1
+kemQQ51whgT4wRHthhq5z/d8holnBnP1ElqevoNaupt8fwynmALDPJMEYX0ap2X
PZFtfwNj/AIxWeQLM7QLtdZOAnoSZIYQkKfVjnNBIlY+ufpgCFXtCADqmWuqTw3j
u+AeCamRNlaR5dMMEpSsbt7b7/j5Ew/0MxgYNm57SbpXCpXy4GX54wyqkiXg3ak8
rEhZ3Ws2rFfx9LV+8Sh6DPeEF3FR7vwT1qpFkC5QSnM5XOcDsQMSNSEfzcFfaaw8
oXJ5KkbK9rwp1w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:48 2024 by rpki-client on console-fra.rpki-client.org