Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: 7ZywQ5znpX7esZB+8sGvUu0v0w0gvEeKSbhxd4WDV+0=
Subject key identifier: 06:41:E9:A5:1F:F5:74:9D:C1:9D:46:7B:A3:C4:81:42:F7:22:DE:AF
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019369DAF18DBA7E18777513AF99DE16F045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:02:56 +0000
Manifest this update: Tue 26 Nov 2024 19:02:56 +0000
Manifest next update: Wed 27 Nov 2024 19:02:56 +0000
Files and hashes: 1: aybWEOdmOB1wGUYKpFWA_5Awmz0.roa (hash: uQthXtrpsje/BZjrn9hmBWJqR1b0yYGNdUX+PhJyksU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: R8BbRLiEspDgZVO/0/fFV68I/7xcy7rC5lauO7nnClI=)
3: kaTgOas6Zj_x-YXPPghLyFGLwwE.roa (hash: iajXAJPbEGVQUpJTtSg37dZggz5FXZLRCs0w7jbydrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:f1:8d:ba:7e:18:77:75:13:af:99:de:16:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Nov 26 19:02:56 2024 GMT
Not After : Nov 27 19:02:56 2024 GMT
Subject: CN=0641e9a51ff5749dc19d467ba3c48142f722deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:64:b3:fa:9c:f8:7f:3d:b1:64:d9:8c:6d:
ed:00:e0:33:b3:b7:ed:e0:ea:72:95:ec:8e:f1:1b:
db:e7:de:56:45:89:2c:33:69:1a:03:82:36:3a:12:
6f:2c:83:a5:df:28:2c:b3:c6:2f:fd:bb:43:2e:16:
ed:15:18:72:b6:8a:61:56:f1:f3:b3:17:ac:59:26:
47:b9:b4:bf:22:1a:f8:fa:eb:0f:57:bc:da:67:19:
27:0e:2d:b3:61:8e:61:e5:e5:06:1d:6e:91:91:0c:
1a:0d:8b:3c:13:4d:ba:b7:e7:66:40:c8:fd:50:4a:
2b:fc:0b:a1:cc:b9:91:0e:7f:ea:80:cf:51:7b:7a:
46:9e:70:12:54:86:b1:ed:76:62:21:b9:0c:ab:ee:
df:a6:67:a7:e8:89:c2:50:4e:f0:1b:6f:46:85:63:
e6:45:5f:69:e9:c1:20:30:f0:1e:dc:27:0a:52:0a:
49:14:e0:93:05:21:69:95:94:70:76:0d:18:60:50:
9e:07:fb:71:ff:e1:c8:28:14:2a:1c:fd:a1:85:ed:
a4:ff:ee:3e:c1:83:4b:48:c0:5b:0c:f5:d0:cd:c2:
73:54:d1:fa:3c:ab:65:de:da:e5:a1:24:52:5f:90:
05:e1:70:bd:99:21:8f:51:f9:c4:2d:78:5c:2c:d8:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:41:E9:A5:1F:F5:74:9D:C1:9D:46:7B:A3:C4:81:42:F7:22:DE:AF
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:16:40:97:2d:2c:a5:ae:2c:a8:90:b7:91:bf:d0:69:be:c3:
89:34:09:fb:40:4f:51:f8:cd:c8:4f:d5:9c:0b:23:b6:66:57:
9e:4d:c9:ea:6d:d2:3a:53:a1:25:db:12:bb:d0:b2:96:55:49:
2e:36:d5:74:7a:79:31:5e:a6:e5:65:9c:58:8b:9f:8b:a2:e1:
5d:ec:b3:65:55:84:6b:4e:c4:a5:39:38:df:90:66:f9:ae:a5:
62:9d:a5:fd:e4:6c:54:11:48:b5:d5:26:b9:6f:6d:03:33:93:
5b:85:c8:a2:c5:b0:81:eb:23:bc:83:59:29:ad:38:5d:4e:a0:
b8:8b:b8:92:58:29:77:c4:0c:78:4f:a0:76:b1:d4:f9:9e:be:
cc:8d:54:60:8a:26:d3:56:14:eb:4d:f2:38:66:b3:9b:07:f4:
97:3f:c9:3f:02:07:db:51:d0:32:02:6e:74:92:81:39:79:d2:
c3:af:c4:6a:0a:27:46:ab:9a:80:13:06:b5:94:2f:9f:21:e4:
34:74:be:45:81:ee:4b:85:81:5f:77:d4:46:ec:ff:2f:58:c3:
5b:28:78:2b:0c:80:f7:af:56:8c:e6:c5:52:1c:c3:f1:b5:8a:
91:89:57:36:04:f6:b9:84:a1:3a:68:67:40:aa:8a:f1:83:e5:
83:47:56:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2vGNun4Yd3UTr5neFvBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjQxMTI2MTkwMjU2WhcNMjQxMTI3MTkwMjU2WjAzMTEwLwYDVQQD
EygwNjQxZTlhNTFmZjU3NDlkYzE5ZDQ2N2JhM2M0ODE0MmY3MjJkZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TVks/qc+H89sWTZjG3tAOAzs7ft
4OpyleyO8Rvb595WRYksM2kaA4I2OhJvLIOl3ygss8Yv/btDLhbtFRhytophVvHz
sxesWSZHubS/Ihr4+usPV7zaZxknDi2zYY5h5eUGHW6RkQwaDYs8E026t+dmQMj9
UEor/AuhzLmRDn/qgM9Re3pGnnASVIax7XZiIbkMq+7fpmen6InCUE7wG29GhWPm
RV9p6cEgMPAe3CcKUgpJFOCTBSFplZRwdg0YYFCeB/tx/+HIKBQqHP2hhe2k/+4+
wYNLSMBbDPXQzcJzVNH6PKtl3trloSRSX5AF4XC9mSGPUfnELXhcLNid3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZB6aUf9XSdwZ1Ge6PEgUL3It6vMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxZAly0s
pa4sqJC3kb/Qab7DiTQJ+0BPUfjNyE/VnAsjtmZXnk3J6m3SOlOhJdsSu9CyllVJ
LjbVdHp5MV6m5WWcWIufi6LhXeyzZVWEa07EpTk435Bm+a6lYp2l/eRsVBFItdUm
uW9tAzOTW4XIosWwgesjvINZKa04XU6guIu4klgpd8QMeE+gdrHU+Z6+zI1UYIom
01YU603yOGazmwf0lz/JPwIH21HQMgJudJKBOXnSw6/EagonRquagBMGtZQvnyHk
NHS+RYHuS4WBX3fURuz/L1jDWyh4KwyA969WjObFUhzD8bWKkYlXNgT2uYShOmhn
QKqK8YPlg0dWDA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:44 2024 by rpki-client on console-fra.rpki-client.org