Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: WVHIFgvSOFkkBOqk36tBtDuCUYHJJ2RrQ5MLxkao3gI=
Subject key identifier: 7E:A5:88:E1:BB:B7:33:C0:A5:E5:E3:68:6C:FF:5C:F5:31:C1:6E:21
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019352ADD461706C04C742AB9C2FAEA9159F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0876
Signing time: Fri 22 Nov 2024 07:02:23 +0000
Manifest this update: Fri 22 Nov 2024 07:02:23 +0000
Manifest next update: Sat 23 Nov 2024 07:02:23 +0000
Files and hashes: 1: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: HCV3bJlLe/lO4PcY0iOPGEHJXMDwoG1n3bPKva+LCgI=)
2: Yco_Ak8eibcXT96Lpa7zlI5Onek.roa (hash: kF5VjalBFGgnqYneTbLKUHhRmtytARDwPg+xMXCn6fc=)
3: xVzftmqGU_zp0OkZmXduubjuN-k.roa (hash: N/Xdj/Z61idSvFi1nHuCN6vbQhllKeOxG9GUxDvqidA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:d4:61:70:6c:04:c7:42:ab:9c:2f:ae:a9:15:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Nov 22 07:02:23 2024 GMT
Not After : Nov 23 07:02:23 2024 GMT
Subject: CN=7ea588e1bbb733c0a5e5e3686cff5cf531c16e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:45:e4:d1:d5:ce:01:69:ad:fa:10:81:38:
31:4d:d5:71:01:5e:45:cc:e4:70:43:2f:79:f0:db:
bc:7a:d2:4c:81:8e:49:57:7f:4f:5b:f7:b6:dd:21:
86:78:d9:3b:22:36:26:ca:20:8d:2b:1d:10:eb:90:
7d:6f:d4:d3:65:b7:62:86:dd:17:13:bc:b6:26:40:
d5:bd:a2:9f:96:e6:9c:84:91:e0:16:1e:b8:c8:62:
30:dc:20:8f:8b:b5:f9:df:d1:d1:95:c1:ea:93:a4:
6e:df:a5:66:1d:32:b5:e5:50:5c:40:8e:7f:33:7d:
3b:bc:a9:81:7c:5c:f1:17:22:00:14:f4:65:ca:c4:
39:46:a4:0a:80:d9:97:b9:f7:5e:af:0a:bb:96:33:
8e:7f:f5:95:08:44:f9:a4:86:c5:c2:07:44:03:8a:
fa:29:fb:64:3b:6c:e0:ab:10:8a:a7:f7:64:e5:73:
12:3c:77:bb:50:ec:8b:84:4e:ce:d3:a5:c2:23:ff:
20:2a:cf:94:64:22:98:80:4a:58:e4:50:e8:0c:98:
e8:80:ba:3b:58:bc:71:c6:13:64:d8:aa:28:d3:16:
24:2a:fb:9d:a1:0a:89:3c:c8:c5:01:36:e6:ca:25:
07:ae:3c:b5:52:59:3c:2c:94:a1:c6:7e:30:40:9b:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:88:E1:BB:B7:33:C0:A5:E5:E3:68:6C:FF:5C:F5:31:C1:6E:21
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8d:1c:e5:62:b2:d2:d7:54:8e:40:4d:db:ef:47:b8:85:ff:
2e:9a:b2:48:c9:d3:44:12:fe:ba:ac:8b:99:b2:87:93:ba:64:
08:71:52:da:ff:4a:7d:75:92:8c:1c:60:64:81:f7:3d:8e:46:
5c:70:85:bc:ab:b2:c7:f3:42:20:9b:4a:9b:b8:92:6f:31:51:
b4:f0:cb:b1:be:f0:fe:1c:c9:57:84:b1:40:ba:a7:02:ab:83:
5c:d1:ae:d3:f9:dc:69:8d:d7:71:75:d5:a4:2e:75:d3:5e:59:
d5:c6:69:57:b8:35:88:f1:1b:02:e0:1c:67:14:fd:27:3a:ba:
a1:a5:4b:1e:d6:4c:77:17:35:a7:09:43:10:f9:05:fd:70:8d:
14:ec:16:a5:e3:b3:f6:82:bc:49:e8:d9:4a:37:62:69:7d:6c:
71:0d:d9:af:25:ae:59:ef:ea:34:57:9a:91:f9:00:a0:8a:84:
a1:99:0f:66:93:2e:9a:57:51:68:59:86:cb:45:62:b6:23:0b:
a2:8b:98:34:cd:ea:a0:eb:71:6f:cb:d6:74:8c:f9:1e:56:48:
e5:94:84:96:c9:2d:6e:1f:eb:dd:ee:09:53:0b:89:9b:f9:c8:
16:e7:d3:5e:da:46:16:de:f5:c2:69:c8:9b:c4:fd:14:14:ab:
21:86:5d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrdRhcGwEx0KrnC+uqRWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGUzY2YwZDEyMjU3NGM3ZTdiM2JmMDM0ZDBkM2QwMTNl
ZWJjMTUwHhcNMjQxMTIyMDcwMjIzWhcNMjQxMTIzMDcwMjIzWjAzMTEwLwYDVQQD
Eyg3ZWE1ODhlMWJiYjczM2MwYTVlNWUzNjg2Y2ZmNWNmNTMxYzE2ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJF5NHVzgFprfoQgTgxTdVxAV5F
zORwQy958Nu8etJMgY5JV39PW/e23SGGeNk7IjYmyiCNKx0Q65B9b9TTZbdiht0X
E7y2JkDVvaKfluachJHgFh64yGIw3CCPi7X539HRlcHqk6Ru36VmHTK15VBcQI5/
M307vKmBfFzxFyIAFPRlysQ5RqQKgNmXufderwq7ljOOf/WVCET5pIbFwgdEA4r6
KftkO2zgqxCKp/dk5XMSPHe7UOyLhE7O06XCI/8gKs+UZCKYgEpY5FDoDJjogLo7
WLxxxhNk2Koo0xYkKvudoQqJPMjFATbmyiUHrjy1Ulk8LJShxn4wQJsziQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6liOG7tzPApeXjaGz/XPUxwW4hMB8GA1UdIwQY
MBaAFEgOPPDRIldMfns78DTQ09AT7rwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUt
MjJmMjNmZTI5Mjg3LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUtMjJmMjNmZTI5Mjg3
LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI0c5WKy
0tdUjkBN2+9HuIX/LpqySMnTRBL+uqyLmbKHk7pkCHFS2v9KfXWSjBxgZIH3PY5G
XHCFvKuyx/NCIJtKm7iSbzFRtPDLsb7w/hzJV4SxQLqnAquDXNGu0/ncaY3XcXXV
pC51015Z1cZpV7g1iPEbAuAcZxT9Jzq6oaVLHtZMdxc1pwlDEPkF/XCNFOwWpeOz
9oK8SejZSjdiaX1scQ3ZryWuWe/qNFeakfkAoIqEoZkPZpMumldRaFmGy0VitiML
oouYNM3qoOtxb8vWdIz5HlZI5ZSElsktbh/r3e4JUwuJm/nIFufTXtpGFt71wmnI
m8T9FBSrIYZdLg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:26 2024 by rpki-client on console-fra.rpki-client.org