Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
File: S4UouKy8h0J2SlgajZeaGEKVZj4.mft (raw, json)
Hash identifier: bJlcpJjFSgt8pqJ+Vzn+J3IfraiTyVx/1bBpuQ2EEF8=
Subject key identifier: 7C:75:53:6E:32:4C:0D:FC:EE:3F:FF:CA:3E:6E:90:10:D3:91:29:D2
Authority key identifier: 4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
Certificate issuer: /CN=4b8528b8acbc8742764a581a8d979a184295663e
Certificate serial: 019357D29B33D09944C6A4221A8C46E2DABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
Manifest number: 011F
Signing time: Sat 23 Nov 2024 07:00:40 +0000
Manifest this update: Sat 23 Nov 2024 07:00:40 +0000
Manifest next update: Sun 24 Nov 2024 07:00:40 +0000
Files and hashes: 1: RFB7jUvhuZPlswB0DE5N0P3Up18.roa (hash: T3dPoQHKHgo/arimJ+YAEJp/I8F5dVE79Xh5Cdk2sW8=)
2: S4UouKy8h0J2SlgajZeaGEKVZj4.crl (hash: i9N0H7CwhmWEXZUPQ+jZYQpm4Paij2Cg3Kasg8x0fS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:9b:33:d0:99:44:c6:a4:22:1a:8c:46:e2:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8528b8acbc8742764a581a8d979a184295663e
Validity
Not Before: Nov 23 07:00:40 2024 GMT
Not After : Nov 24 07:00:40 2024 GMT
Subject: CN=7c75536e324c0dfcee3fffca3e6e9010d39129d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:90:62:67:e7:d7:6a:af:97:a3:1a:00:24:
9f:99:e8:3a:c9:df:85:78:d8:9e:cd:83:9b:26:e7:
f8:57:c8:6f:1c:d4:ef:9b:17:62:65:17:12:83:5f:
5e:2d:93:0f:31:e8:f2:86:e6:8e:80:85:fa:d0:33:
5f:f9:58:e7:df:e8:2f:49:d5:2a:56:d0:8c:8a:72:
e8:f6:67:ed:50:93:5b:9e:d3:9a:f7:68:8a:ae:0a:
22:38:19:a0:0d:d0:c8:20:08:83:1d:27:d9:5b:96:
c1:0e:cc:47:57:8b:4e:57:be:69:d6:6c:92:27:3a:
93:43:bf:84:1a:b2:c4:65:49:2f:a9:c3:a8:9c:bd:
ec:d9:af:5a:6a:ef:a6:bc:d3:75:7f:20:6b:e6:11:
bb:a1:8e:2c:d6:ad:3d:71:ee:bc:8f:79:ed:d2:c1:
b0:7e:f4:28:1d:39:3e:7e:5d:dd:30:19:62:5b:c7:
52:dd:73:78:c6:96:d0:af:7d:42:53:fd:45:24:5d:
e5:7d:18:db:36:7b:65:1d:3a:7d:c8:45:1c:f2:3b:
14:f7:61:e3:a3:75:e7:56:d2:f1:31:4f:c5:62:d2:
2f:2f:54:db:fd:9c:f3:82:c2:e4:ca:42:a1:f6:d9:
3a:63:4c:48:d8:ab:85:8c:0c:cd:cd:21:58:36:55:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:53:6E:32:4C:0D:FC:EE:3F:FF:CA:3E:6E:90:10:D3:91:29:D2
X509v3 Authority Key Identifier:
keyid:4B:85:28:B8:AC:BC:87:42:76:4A:58:1A:8D:97:9A:18:42:95:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4UouKy8h0J2SlgajZeaGEKVZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d777e6-0e58-4345-b0a4-4cbd22917d65/1/S4UouKy8h0J2SlgajZeaGEKVZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:c5:57:40:43:2e:e6:31:af:93:9c:fb:0f:64:ef:9f:e2:
2d:bc:c9:2d:a6:83:ac:ab:66:46:5a:ea:e9:6c:0e:be:79:cd:
06:4e:57:9e:e5:91:18:a2:ab:de:10:4b:8e:94:31:2d:33:b2:
84:b3:a4:4f:80:69:e0:d9:a0:19:c5:d4:f2:41:e2:6c:e5:ed:
e3:a0:25:4d:8c:b2:dd:f5:25:ef:85:8a:64:b4:cf:bb:cc:ec:
4a:d6:73:c8:93:90:c9:9c:31:c5:bf:35:81:97:20:97:b7:d8:
06:92:4c:71:b5:e1:f3:27:b2:13:d1:5c:18:dd:00:14:ce:ff:
87:55:45:4f:b5:5c:08:df:3e:49:08:75:75:44:d2:5b:be:95:
6b:53:37:90:6c:84:94:c7:99:40:a3:cf:5b:bf:13:c5:1d:de:
13:f3:c7:1e:bf:f5:e3:ea:20:3b:98:d4:48:63:e8:2a:6c:d6:
04:f5:67:5f:d4:83:b4:38:51:35:2e:fc:6b:a9:a0:f2:48:82:
77:41:a8:97:c0:fe:f4:2a:85:b2:29:ce:37:d5:25:48:9c:20:
a4:fa:ad:57:78:8a:44:a6:8b:2c:8a:22:e6:26:cf:1a:b7:aa:
3f:fd:6e:96:fa:99:4d:18:c8:9e:8d:6a:7e:7d:5d:46:07:b5:
2a:39:65:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0psz0JlExqQiGoxG4tq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODUyOGI4YWNiYzg3NDI3NjRhNTgxYThkOTc5YTE4NDI5
NTY2M2UwHhcNMjQxMTIzMDcwMDQwWhcNMjQxMTI0MDcwMDQwWjAzMTEwLwYDVQQD
Eyg3Yzc1NTM2ZTMyNGMwZGZjZWUzZmZmY2EzZTZlOTAxMGQzOTEyOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjeQYmfn12qvl6MaACSfmeg6yd+F
eNiezYObJuf4V8hvHNTvmxdiZRcSg19eLZMPMejyhuaOgIX60DNf+Vjn3+gvSdUq
VtCMinLo9mftUJNbntOa92iKrgoiOBmgDdDIIAiDHSfZW5bBDsxHV4tOV75p1myS
JzqTQ7+EGrLEZUkvqcOonL3s2a9aau+mvNN1fyBr5hG7oY4s1q09ce68j3nt0sGw
fvQoHTk+fl3dMBliW8dS3XN4xpbQr31CU/1FJF3lfRjbNntlHTp9yEUc8jsU92Hj
o3XnVtLxMU/FYtIvL1Tb/ZzzgsLkykKh9tk6Y0xI2KuFjAzNzSFYNlWDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx1U24yTA387j//yj5ukBDTkSnSMB8GA1UdIwQY
MBaAFEuFKLisvIdCdkpYGo2XmhhClWY+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQt
NGNiZDIyOTE3ZDY1LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kNzc3ZTYtMGU1OC00MzQ1LWIwYTQtNGNiZDIyOTE3ZDY1
LzEvUzRVb3VLeThoMEoyU2xnYWpaZWFHRUtWWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckDFV0BD
LuYxr5Oc+w9k75/iLbzJLaaDrKtmRlrq6WwOvnnNBk5XnuWRGKKr3hBLjpQxLTOy
hLOkT4Bp4NmgGcXU8kHibOXt46AlTYyy3fUl74WKZLTPu8zsStZzyJOQyZwxxb81
gZcgl7fYBpJMcbXh8yeyE9FcGN0AFM7/h1VFT7VcCN8+SQh1dUTSW76Va1M3kGyE
lMeZQKPPW78TxR3eE/PHHr/14+ogO5jUSGPoKmzWBPVnX9SDtDhRNS78a6mg8kiC
d0Gol8D+9CqFsinON9UlSJwgpPqtV3iKRKaLLIoi5ibPGreqP/1ulvqZTRjIno1q
fn1dRge1KjllJw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:26 2024 by rpki-client on console-fra.rpki-client.org