Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json)
Hash identifier: cQDlJhNVD3R6aNskfbt2860UYZMGKkv0RJFiCuIM4FA=
Subject key identifier: A9:32:D3:55:F7:10:B7:79:73:F9:C0:1E:DB:84:7C:E6:8D:63:97:3C
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 0193568B0BC15D5B07B213785A7977C2A95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
Manifest number: 0C25
Signing time: Sat 23 Nov 2024 01:02:53 +0000
Manifest this update: Sat 23 Nov 2024 01:02:53 +0000
Manifest next update: Sun 24 Nov 2024 01:02:53 +0000
Files and hashes: 1: c_v__ltq0xFRgvrlwys7R44AQLg.roa (hash: RattaJiwr0sQtv5ZC0rvTS4y2HiOYHxIDvBWBwAEUqU=)
2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: XTBq2hw0UUmaPlvC+DWSIzv/F40HhW9/JC/aKvMC0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:0b:c1:5d:5b:07:b2:13:78:5a:79:77:c2:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Nov 23 01:02:53 2024 GMT
Not After : Nov 24 01:02:53 2024 GMT
Subject: CN=a932d355f710b77973f9c01edb847ce68d63973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:5c:36:a1:4d:ab:34:ea:72:75:f7:05:8b:
e9:80:1f:ac:3f:8b:1b:b7:70:95:eb:ca:3e:e1:cc:
11:85:c0:36:72:06:de:44:94:1e:99:e8:98:ea:f1:
04:52:9c:55:4d:24:4f:c4:1a:b8:35:41:ee:84:ed:
25:32:6f:4c:d0:be:c3:c1:17:4d:9c:9b:d3:a2:9c:
6a:1e:d0:59:8e:b8:c8:2e:53:15:73:23:b2:88:6b:
70:27:81:46:f8:25:46:e4:f1:2a:87:11:e9:42:d9:
2a:be:d5:90:cc:0c:6e:e3:1d:9f:0f:68:6b:5d:d7:
0c:79:d6:e8:2a:63:c2:8e:2f:ec:da:f1:33:d0:96:
40:31:1b:92:55:1e:5c:82:d9:e1:a5:05:3e:59:90:
58:41:c8:06:0e:16:9a:7e:10:71:20:f7:5f:03:97:
a9:01:e5:0f:7e:10:1c:dd:72:2b:71:e4:df:f8:13:
68:89:c6:72:f5:0e:78:e3:8f:bb:90:68:8b:6b:36:
57:b3:e5:aa:d9:02:cd:41:f9:fe:49:75:bc:89:fb:
2b:c0:32:e4:ce:b2:1d:25:f7:c7:ba:6f:b0:8b:28:
ed:fa:22:0d:66:5e:e4:6a:3f:7b:7b:f0:d1:21:2c:
55:0f:88:63:58:d6:9d:3d:ca:7d:35:16:68:cf:27:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:D3:55:F7:10:B7:79:73:F9:C0:1E:DB:84:7C:E6:8D:63:97:3C
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:86:b4:f9:3f:df:c9:51:09:04:3f:a1:71:08:89:9a:a7:74:
52:eb:ea:85:ca:a1:77:1d:3a:59:99:d0:30:a2:ad:02:dc:a2:
c2:6e:7c:36:13:db:61:e5:62:aa:73:9a:f1:cb:ea:b3:74:a6:
b5:e6:13:24:db:32:53:68:c3:5c:7c:e0:05:d5:79:a0:b6:3c:
4f:72:d0:cf:f3:59:eb:73:b7:5c:bb:fb:7a:81:18:12:c0:72:
50:73:1a:de:7d:91:1e:0a:30:7c:d4:09:71:3b:d9:34:1d:90:
64:1b:93:14:7a:0f:68:a9:55:4e:b6:21:92:bb:cd:90:5b:49:
1d:e6:fb:ca:d1:24:6c:04:67:77:2d:aa:eb:33:2e:c5:b3:94:
c7:ba:19:18:07:40:4b:ee:ff:5d:1c:6c:9e:c3:43:49:d4:36:
b4:ac:51:4f:c1:eb:61:f8:72:ec:15:f5:9e:f7:34:06:38:ba:
61:3c:46:6c:be:42:07:a5:ec:b8:4f:83:f5:15:94:05:ff:b1:
5c:7f:4f:98:07:63:ce:0d:01:a3:c3:98:74:90:11:34:68:71:
94:20:76:d5:b4:a6:10:00:f4:5c:9e:ae:98:c3:d9:fe:15:54:
88:0f:20:46:69:9a:2a:06:3c:d7:23:85:6d:11:c8:f9:51:69:
8a:61:02:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiwvBXVsHshN4Wnl3wqlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3
NDU1MWEwHhcNMjQxMTIzMDEwMjUzWhcNMjQxMTI0MDEwMjUzWjAzMTEwLwYDVQQD
EyhhOTMyZDM1NWY3MTBiNzc5NzNmOWMwMWVkYjg0N2NlNjhkNjM5NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokhcNqFNqzTqcnX3BYvpgB+sP4sb
t3CV68o+4cwRhcA2cgbeRJQemeiY6vEEUpxVTSRPxBq4NUHuhO0lMm9M0L7DwRdN
nJvTopxqHtBZjrjILlMVcyOyiGtwJ4FG+CVG5PEqhxHpQtkqvtWQzAxu4x2fD2hr
XdcMedboKmPCji/s2vEz0JZAMRuSVR5cgtnhpQU+WZBYQcgGDhaafhBxIPdfA5ep
AeUPfhAc3XIrceTf+BNoicZy9Q5444+7kGiLazZXs+Wq2QLNQfn+SXW8ifsrwDLk
zrIdJffHum+wiyjt+iINZl7kaj97e/DRISxVD4hjWNadPcp9NRZozydiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKky01X3ELd5c/nAHtuEfOaNY5c8MB8GA1UdIwQY
MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt
ZjNiNTBjNjVmODIwLzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw
LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIa0+T/f
yVEJBD+hcQiJmqd0Uuvqhcqhdx06WZnQMKKtAtyiwm58NhPbYeViqnOa8cvqs3Sm
teYTJNsyU2jDXHzgBdV5oLY8T3LQz/NZ63O3XLv7eoEYEsByUHMa3n2RHgowfNQJ
cTvZNB2QZBuTFHoPaKlVTrYhkrvNkFtJHeb7ytEkbARndy2q6zMuxbOUx7oZGAdA
S+7/XRxsnsNDSdQ2tKxRT8HrYfhy7BX1nvc0Bji6YTxGbL5CB6XsuE+D9RWUBf+x
XH9PmAdjzg0Bo8OYdJARNGhxlCB21bSmEAD0XJ6umMPZ/hVUiA8gRmmaKgY81yOF
bRHI+VFpimEC2w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:54 2024 by rpki-client on console-ams.rpki-client.org