Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: BStHyB6muV6SU4Hx7abBI5PG4UgcSjj4wwtEo0VV5mk=
Subject key identifier: 05:A4:47:8D:22:FD:B4:69:2A:F7:07:62:CF:92:C0:EB:A7:83:3B:C1
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019369D8B09C051FBA5EC7802BFAC64BC880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0A61
Signing time: Tue 26 Nov 2024 19:00:28 +0000
Manifest this update: Tue 26 Nov 2024 19:00:28 +0000
Manifest next update: Wed 27 Nov 2024 19:00:28 +0000
Files and hashes: 1: Lrg8uh-f9v3gPUMXkgYI806KlwM.roa (hash: nFzJtr+N04LmLmMSjMEO1UXQLRpKhzBjAg/PAXH0CFs=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: Zc4uGP6Q/p7yp5MhyHo2UBEFhYwb/KrLig4ZsG+FRX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:b0:9c:05:1f:ba:5e:c7:80:2b:fa:c6:4b:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Nov 26 19:00:28 2024 GMT
Not After : Nov 27 19:00:28 2024 GMT
Subject: CN=05a4478d22fdb4692af70762cf92c0eba7833bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:e1:e3:69:a1:73:14:19:11:e5:8f:7e:a0:
2e:b9:c0:d0:af:77:e2:49:73:dc:2f:ff:7e:33:a1:
04:58:bc:ad:e3:45:60:75:c2:21:2d:33:c5:dc:2a:
ee:b5:07:e0:b6:2f:a0:a9:0f:3a:fb:1f:d2:b5:55:
62:f5:81:03:cd:2f:55:65:c1:c9:0e:9d:d6:72:d7:
29:bd:dd:e0:5e:80:77:2f:f2:8b:74:2f:28:95:e1:
c2:7e:5b:9e:03:22:6c:30:b3:af:a2:7e:96:8b:ce:
c1:db:49:5f:c0:4f:a3:05:a7:61:90:a4:b0:b5:57:
c6:17:63:f8:20:da:8a:87:00:ad:27:62:6d:ca:1a:
12:3b:80:51:73:8d:0e:36:be:e3:bd:ee:58:61:04:
ac:39:57:97:88:62:e6:df:48:0a:9a:c0:a8:f4:cf:
17:12:46:69:77:d9:b7:55:73:f6:4b:31:6d:b4:7d:
2f:7d:dd:38:b7:d7:5f:26:83:e4:5d:64:b3:91:c1:
9a:cf:79:e7:dd:3f:f7:c2:d8:b3:fa:57:98:ea:3e:
33:06:14:43:83:49:c6:65:d5:4e:04:c7:12:d1:c6:
6c:30:d1:9a:e3:ff:34:07:16:a9:68:f4:4c:c4:5e:
40:2e:75:4c:66:d0:6a:30:52:ad:b6:29:56:35:8f:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:47:8D:22:FD:B4:69:2A:F7:07:62:CF:92:C0:EB:A7:83:3B:C1
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:81:d2:bc:dd:dd:06:fc:85:14:6a:f9:3e:05:d1:c0:37:
b9:1a:10:74:00:97:af:e1:87:db:5d:0c:a2:48:df:6e:bd:c6:
3b:ab:5b:09:40:4b:91:9e:64:16:ca:21:ee:75:77:3f:8d:09:
19:46:fd:63:2c:80:29:cb:65:9a:77:89:28:68:2e:08:0f:2a:
ce:c8:41:05:52:c9:c2:35:fd:76:02:b9:ca:53:e2:de:95:2e:
4c:59:bd:b7:cb:73:3b:67:d9:cb:3f:da:c5:e1:10:4b:10:d5:
7b:00:a0:67:35:cb:0c:57:86:74:e7:9d:ca:48:0e:6b:40:b0:
bc:00:ed:18:16:ca:1f:73:eb:2e:3d:e6:5e:a9:06:28:99:d4:
0f:5b:d0:0d:a3:cd:ce:60:89:09:d6:83:6c:4c:b3:8f:86:2d:
59:c4:25:fa:49:79:f3:a2:01:64:42:4f:1d:b1:9c:88:f0:4f:
6a:17:60:07:5e:2e:db:20:05:58:70:ca:03:c5:98:97:31:6a:
09:37:06:8b:07:8f:ed:16:a1:3e:47:6b:fb:fd:c9:cc:5d:1a:
74:fc:00:46:34:bd:bc:64:90:b0:99:d1:bd:2c:2b:5f:a8:12:
3f:6e:34:35:5d:ec:2d:85:da:2f:a6:ba:59:f8:96:03:04:12:
01:f0:23:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2LCcBR+6XseAK/rGS8iAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjQxMTI2MTkwMDI4WhcNMjQxMTI3MTkwMDI4WjAzMTEwLwYDVQQD
EygwNWE0NDc4ZDIyZmRiNDY5MmFmNzA3NjJjZjkyYzBlYmE3ODMzYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4rh42mhcxQZEeWPfqAuucDQr3fi
SXPcL/9+M6EEWLyt40VgdcIhLTPF3CrutQfgti+gqQ86+x/StVVi9YEDzS9VZcHJ
Dp3Wctcpvd3gXoB3L/KLdC8oleHCflueAyJsMLOvon6Wi87B20lfwE+jBadhkKSw
tVfGF2P4INqKhwCtJ2JtyhoSO4BRc40ONr7jve5YYQSsOVeXiGLm30gKmsCo9M8X
EkZpd9m3VXP2SzFttH0vfd04t9dfJoPkXWSzkcGaz3nn3T/3wtiz+leY6j4zBhRD
g0nGZdVOBMcS0cZsMNGa4/80BxapaPRMxF5ALnVMZtBqMFKttilWNY81+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWkR40i/bRpKvcHYs+SwOungzvBMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpqB0rzd
3Qb8hRRq+T4F0cA3uRoQdACXr+GH210Mokjfbr3GO6tbCUBLkZ5kFsoh7nV3P40J
GUb9YyyAKctlmneJKGguCA8qzshBBVLJwjX9dgK5ylPi3pUuTFm9t8tzO2fZyz/a
xeEQSxDVewCgZzXLDFeGdOedykgOa0CwvADtGBbKH3PrLj3mXqkGKJnUD1vQDaPN
zmCJCdaDbEyzj4YtWcQl+kl586IBZEJPHbGciPBPahdgB14u2yAFWHDKA8WYlzFq
CTcGiweP7RahPkdr+/3JzF0adPwARjS9vGSQsJnRvSwrX6gSP240NV3sLYXaL6a6
WfiWAwQSAfAjIw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:43 2024 by rpki-client on console-fra.rpki-client.org