Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
File: adcx-k3SksDAUy7qaWfOwHkHRao.mft (raw, json)
Hash identifier: 5YhzrMUGT2sGTWCrhtp11btCOlCycYCMhedsn16kex8=
Subject key identifier: 1C:F6:37:2C:19:D1:5E:EA:0D:0A:0A:DE:4B:2A:CF:A6:EF:9D:DF:1D
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 01935508D01FA96CC12C9AF8189B4446EEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
Manifest number: 0372
Signing time: Fri 22 Nov 2024 18:01:01 +0000
Manifest this update: Fri 22 Nov 2024 18:01:01 +0000
Manifest next update: Sat 23 Nov 2024 18:01:01 +0000
Files and hashes: 1: 7qdYD4lN9EwSOakdR5dgcN2pqE0.roa (hash: wfRJ/6jIE4ufk9ZLk2OXNLcYwCI7HikdXXSBDHB3T7I=)
2: IA9GwldjOw9-FDcL1Z5NvDRoV8o.roa (hash: JGnnbwxvv3umQt0hUMu33+qEaGb7aQqm27F1r7RRSvg=)
3: adcx-k3SksDAUy7qaWfOwHkHRao.crl (hash: GdMvY2ULZMuKRoRJvV5y2OpkeNJiT/+wgurZFxEVtH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:d0:1f:a9:6c:c1:2c:9a:f8:18:9b:44:46:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Nov 22 18:01:01 2024 GMT
Not After : Nov 23 18:01:01 2024 GMT
Subject: CN=1cf6372c19d15eea0d0a0ade4b2acfa6ef9ddf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:3f:38:4c:b2:8e:f6:a3:f4:45:07:db:a8:
bd:e9:10:0b:fc:90:de:92:db:a4:2c:03:ef:b9:24:
c7:3c:34:aa:1f:ae:6d:5a:26:b2:db:9f:57:2a:ff:
0d:f9:63:43:31:5a:98:23:99:8b:10:48:c8:17:9b:
80:e5:3b:64:69:eb:04:c3:99:47:65:23:98:a7:75:
09:be:25:c1:6d:fe:2b:db:5f:ca:6e:5a:26:ec:be:
a1:a9:d2:a3:69:e2:7c:2a:c1:86:90:81:d0:59:39:
8d:43:24:80:48:90:26:80:47:a5:59:f3:4f:57:64:
ea:06:de:4b:ff:4a:07:79:e2:a3:1d:7e:12:8b:b4:
27:c9:78:0e:4e:7d:a5:6f:c4:ea:15:d2:b8:44:63:
c4:b7:18:3c:f9:7a:96:b5:f0:96:ce:4c:65:26:15:
71:d2:70:81:eb:c7:45:bb:b4:3c:b5:cf:ec:7a:bb:
c5:93:d3:22:92:f5:63:c0:85:5e:06:bc:1d:6f:c2:
37:2d:d2:6f:f0:3c:0b:82:59:53:75:0d:fe:d2:3b:
5b:e5:09:74:fb:a2:fc:6e:19:b0:b8:f5:5d:fc:cf:
d8:c0:af:68:95:bd:f0:76:9e:52:0d:c1:79:69:33:
bc:fe:d0:ca:4a:af:26:ec:b4:a5:ce:23:c5:1a:c3:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:37:2C:19:D1:5E:EA:0D:0A:0A:DE:4B:2A:CF:A6:EF:9D:DF:1D
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:65:5a:6e:d4:c8:3d:f8:62:61:ac:42:83:96:39:d0:8d:
f5:7e:4f:fa:54:db:03:e3:2d:23:b3:8b:19:93:44:56:6e:f4:
4a:3f:1f:7d:df:f4:4d:ad:1e:7e:a3:64:6d:c8:8d:23:74:c2:
f0:bb:51:d4:7f:55:79:ce:be:8d:0f:d0:3f:bc:10:6d:a0:b2:
18:3e:e6:10:b4:2a:5c:8e:95:84:f6:fd:97:93:79:c5:a0:b8:
ab:98:2c:f7:dd:4d:8e:6c:9b:ef:40:b1:1a:7b:40:91:8e:78:
d6:12:0f:b6:73:0e:4e:73:1a:5b:9c:ec:e8:32:c6:da:c8:02:
90:a5:7c:c7:ef:60:79:85:a0:ec:b4:bd:de:c9:d9:b0:b7:31:
65:86:f1:77:a3:1f:34:cd:8a:3e:37:35:e0:a3:63:bb:09:7a:
bb:1f:c0:04:0f:d7:b9:dc:8c:fc:f4:5e:32:db:3c:6d:95:12:
aa:5f:54:e3:66:2f:73:5d:1b:8d:b1:15:de:c8:4d:05:16:59:
02:65:3d:3a:34:0f:c3:29:86:71:f0:26:b8:59:81:b0:d2:39:
1c:4c:4e:aa:54:7f:22:36:f2:08:3a:22:46:71:02:5c:cd:87:
9c:f8:20:97:5a:9e:c2:b8:ca:de:1f:a8:68:e8:38:43:6d:54:
db:97:77:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCNAfqWzBLJr4GJtERu7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjQxMTIyMTgwMTAxWhcNMjQxMTIzMTgwMTAxWjAzMTEwLwYDVQQD
EygxY2Y2MzcyYzE5ZDE1ZWVhMGQwYTBhZGU0YjJhY2ZhNmVmOWRkZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyY/OEyyjvaj9EUH26i96RAL/JDe
ktukLAPvuSTHPDSqH65tWiay259XKv8N+WNDMVqYI5mLEEjIF5uA5TtkaesEw5lH
ZSOYp3UJviXBbf4r21/Kblom7L6hqdKjaeJ8KsGGkIHQWTmNQySASJAmgEelWfNP
V2TqBt5L/0oHeeKjHX4Si7QnyXgOTn2lb8TqFdK4RGPEtxg8+XqWtfCWzkxlJhVx
0nCB68dFu7Q8tc/servFk9MikvVjwIVeBrwdb8I3LdJv8DwLgllTdQ3+0jtb5Ql0
+6L8bhmwuPVd/M/YwK9olb3wdp5SDcF5aTO8/tDKSq8m7LSlziPFGsMXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz2NywZ0V7qDQoK3ksqz6bvnd8dMB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdThlWm7U
yD34YmGsQoOWOdCN9X5P+lTbA+MtI7OLGZNEVm70Sj8ffd/0Ta0efqNkbciNI3TC
8LtR1H9Vec6+jQ/QP7wQbaCyGD7mELQqXI6VhPb9l5N5xaC4q5gs991Njmyb70Cx
GntAkY541hIPtnMOTnMaW5zs6DLG2sgCkKV8x+9geYWg7LS93snZsLcxZYbxd6Mf
NM2KPjc14KNjuwl6ux/ABA/XudyM/PReMts8bZUSql9U42Yvc10bjbEV3shNBRZZ
AmU9OjQPwymGcfAmuFmBsNI5HExOqlR/IjbyCDoiRnECXM2HnPggl1qewrjK3h+o
aOg4Q21U25d3JA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:50 2024 by rpki-client on console-fra.rpki-client.org