Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
File: v4F9yFUt82EP_EVEGz-BRk5Incg.mft (raw, json)
Hash identifier: QgqrZWTYWJEfA3o+n3B7+DQhQOmYgoSblkJ15oED4d0=
Subject key identifier: A7:D1:91:2D:42:2C:62:39:BB:2C:94:16:DD:B7:5F:16:A3:18:63:98
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial: 01935764AEEA6921273C8B294F89211A6A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
Manifest number: 0541
Signing time: Sat 23 Nov 2024 05:00:36 +0000
Manifest this update: Sat 23 Nov 2024 05:00:36 +0000
Manifest next update: Sun 24 Nov 2024 05:00:36 +0000
Files and hashes: 1: LQijIAcLu2C9waUYtlc5JImMzgg.roa (hash: cRxUg7qRMvMMjYRPq/1O7xwB3MFIG9PV5FazRgJGWR4=)
2: M1TczoOBwHMa55k9y-flczi3qFA.roa (hash: 3dThC3w0w9iFrIR/r17sHODhkhBeO4gKlAjIr/eAnhU=)
3: v4F9yFUt82EP_EVEGz-BRk5Incg.crl (hash: pyBWxKytCUW+6gVkI3vJ1Gg6X0vLSyI8BE8fVpWsrBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:ae:ea:69:21:27:3c:8b:29:4f:89:21:1a:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Validity
Not Before: Nov 23 05:00:36 2024 GMT
Not After : Nov 24 05:00:36 2024 GMT
Subject: CN=a7d1912d422c6239bb2c9416ddb75f16a3186398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:e5:0e:ec:a0:44:ea:f5:87:6e:0d:96:18:
b3:18:05:bd:62:8d:bd:4f:d0:1b:70:fa:e7:63:b3:
b5:ee:db:ea:92:6f:5c:aa:17:54:3b:77:f8:b4:fa:
b1:b6:0f:28:a2:ba:3a:3f:62:7f:5a:d4:61:ae:c4:
6c:39:26:26:d3:d9:8a:33:51:af:99:78:85:e4:68:
60:01:c4:1c:2b:c3:cd:cf:f6:d6:37:a6:05:36:17:
ba:5e:bc:ed:91:92:2b:22:c5:71:84:72:a9:c8:08:
de:5a:e5:7f:b3:af:3c:6e:dc:89:2e:f7:05:74:9b:
0b:b1:dd:09:4a:a4:43:99:79:5e:2d:4d:17:21:3d:
38:c6:a4:07:6f:7d:02:e8:72:7e:2d:26:af:c4:9b:
f8:96:bc:90:4f:41:d3:d9:57:e7:51:a0:22:59:43:
fe:6a:91:17:57:23:92:c4:54:99:4c:75:ad:e3:b3:
f8:2c:32:0a:b8:d7:c3:32:3b:c3:de:33:08:92:0e:
ee:45:64:51:fe:27:a5:f1:97:1b:ac:1b:ad:a2:d2:
f0:2c:73:2e:41:bf:8d:3c:e3:a8:0a:40:0a:00:ea:
98:0e:cb:27:69:15:3e:60:54:03:2e:d7:5d:b0:1a:
ac:b8:a8:82:3e:16:7e:eb:62:a7:2e:cf:80:a3:f4:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:91:2D:42:2C:62:39:BB:2C:94:16:DD:B7:5F:16:A3:18:63:98
X509v3 Authority Key Identifier:
keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b2:f2:ad:00:b7:fc:c4:56:8e:aa:86:b2:e5:a7:86:eb:67:
53:51:ae:d4:a0:f3:04:30:a5:f9:a5:81:93:10:5f:0d:78:c8:
8a:2c:79:e9:b1:8a:b6:6a:67:65:87:f0:62:56:c4:cc:af:33:
7c:23:20:cf:03:47:a7:f0:e4:c9:6c:7f:4a:02:56:24:a9:e3:
df:bd:bb:47:4c:22:1f:0e:60:ef:11:d4:4a:96:df:bb:37:4a:
a6:08:c5:57:00:ef:40:03:de:cd:68:7b:24:d1:16:66:9d:f7:
c0:82:16:a5:f9:33:40:9d:3f:19:cc:45:ee:3c:63:ff:f6:eb:
78:d6:bb:3c:b7:2d:10:e1:aa:18:f1:11:25:f8:69:71:e6:26:
43:e8:a4:89:d2:90:1c:95:b8:b2:34:ad:f4:07:05:f5:8b:b5:
0f:14:ae:73:cb:c9:5a:8a:ed:ca:60:57:8d:31:78:0f:47:2b:
ef:d9:6e:e5:11:e1:63:ea:d0:be:0e:d2:33:e0:dd:0d:56:b9:
c3:97:0b:09:9f:30:c7:bd:3e:05:f8:e0:33:f0:71:5e:52:17:
dc:80:30:88:7a:4d:92:44:0a:f8:b4:ae:ce:05:0d:af:c4:1a:
7b:81:ab:32:07:4b:e1:d0:e8:ba:88:60:ec:a3:4d:c1:ca:fd:
4f:11:d3:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZK7qaSEnPIspT4khGmonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODE3ZGM4NTUyZGYzNjEwZmZjNDU0NDFiM2Y4MTQ2NGU0
ODlkYzgwHhcNMjQxMTIzMDUwMDM2WhcNMjQxMTI0MDUwMDM2WjAzMTEwLwYDVQQD
EyhhN2QxOTEyZDQyMmM2MjM5YmIyYzk0MTZkZGI3NWYxNmEzMTg2Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWblDuygROr1h24NlhizGAW9Yo29
T9AbcPrnY7O17tvqkm9cqhdUO3f4tPqxtg8ooro6P2J/WtRhrsRsOSYm09mKM1Gv
mXiF5GhgAcQcK8PNz/bWN6YFNhe6XrztkZIrIsVxhHKpyAjeWuV/s688btyJLvcF
dJsLsd0JSqRDmXleLU0XIT04xqQHb30C6HJ+LSavxJv4lryQT0HT2VfnUaAiWUP+
apEXVyOSxFSZTHWt47P4LDIKuNfDMjvD3jMIkg7uRWRR/iel8ZcbrButotLwLHMu
Qb+NPOOoCkAKAOqYDssnaRU+YFQDLtddsBqsuKiCPhZ+62KnLs+Ao/RIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfRkS1CLGI5uyyUFt23XxajGGOYMB8GA1UdIwQY
MBaAFL+BfchVLfNhD/xFRBs/gUZOSJ3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTkt
MTk1Mzg5MzMwZWRmLzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jNGU3ZTktZjZiZS00MWEzLWE0NTktMTk1Mzg5MzMwZWRm
LzEvdjRGOXlGVXQ4MkVQX0VWRUd6LUJSazVJbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbLyrQC3
/MRWjqqGsuWnhutnU1Gu1KDzBDCl+aWBkxBfDXjIiix56bGKtmpnZYfwYlbEzK8z
fCMgzwNHp/DkyWx/SgJWJKnj3727R0wiHw5g7xHUSpbfuzdKpgjFVwDvQAPezWh7
JNEWZp33wIIWpfkzQJ0/GcxF7jxj//breNa7PLctEOGqGPERJfhpceYmQ+ikidKQ
HJW4sjSt9AcF9Yu1DxSuc8vJWortymBXjTF4D0cr79lu5RHhY+rQvg7SM+DdDVa5
w5cLCZ8wx70+BfjgM/BxXlIX3IAwiHpNkkQK+LSuzgUNr8Qae4GrMgdL4dDouohg
7KNNwcr9TxHTsg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:01 2024 by rpki-client on console-fra.rpki-client.org