Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: pkFtUikJ9DjwBqh9b4VUpGTi1WcjV2wNoy1BZtBbnD8=
Subject key identifier: 85:D9:1C:E6:C1:08:F2:D1:44:BB:AA:3C:A9:35:ED:98:98:7F:FA:53
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019407218386C7B45E9258118D1BED706C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 13CE
Signing time: Fri 27 Dec 2024 08:00:24 +0000
Manifest this update: Fri 27 Dec 2024 08:00:24 +0000
Manifest next update: Sat 28 Dec 2024 08:00:24 +0000
Files and hashes: 1: 0sckWjhwp_hjGVrUPt27XERmGjI.roa (hash: osnVg78hVWjgzdGE1gZPYukh5r6I4N2Nn6icOIX02/U=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: mTLOwvmAgpzwuOTxY6QzDHZzU8L/WGf1jbXN17nW1bg=)
3: msuImJO_o4oR1O6uUQOxkSVzufw.roa (hash: bSWP60/C7CScbo4rxaKvStncSJiR2QfZOjdD6gVT8tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:83:86:c7:b4:5e:92:58:11:8d:1b:ed:70:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Dec 27 08:00:24 2024 GMT
Not After : Dec 28 08:00:24 2024 GMT
Subject: CN=85d91ce6c108f2d144bbaa3ca935ed98987ffa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:4e:f0:34:00:ae:46:d7:cd:37:40:11:e4:
d7:bb:f9:36:c0:94:ed:86:14:2e:57:f5:3b:de:33:
ed:de:49:96:e9:20:6b:d8:04:da:4d:5f:08:94:0a:
11:49:85:6f:28:62:a8:10:a4:6b:ae:d0:7c:65:00:
06:89:b1:21:51:5f:ce:79:89:1a:1f:ee:55:86:28:
7b:cc:a2:a9:a7:31:31:5f:1c:72:49:05:39:91:84:
ad:40:49:48:61:c8:65:78:a9:69:8a:c0:6b:20:b5:
11:7a:c1:e9:7a:a1:9a:27:c5:19:97:f2:fb:b4:fe:
f4:25:2d:51:0f:c7:df:aa:26:cd:11:93:b9:aa:58:
20:db:59:35:7e:78:68:2e:04:f5:1e:29:0a:db:ff:
11:e2:f5:c2:92:15:6d:d8:2a:6d:d3:6a:53:09:18:
9c:be:4a:b9:78:6d:cd:63:29:e4:e9:6a:de:e1:25:
f9:5c:99:64:68:02:78:39:4a:4c:9e:27:e0:be:c1:
0e:2d:66:ad:e1:3f:56:91:64:e7:2e:58:5c:0f:72:
51:24:ac:17:4d:44:40:1e:97:fa:34:94:ca:e3:df:
24:33:18:f8:79:56:15:2a:64:98:d5:96:bd:a9:e9:
02:67:38:e4:8e:75:d3:f3:54:75:f4:a4:a9:df:7f:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:1C:E6:C1:08:F2:D1:44:BB:AA:3C:A9:35:ED:98:98:7F:FA:53
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6e:70:94:db:06:02:78:00:eb:18:3a:07:2f:8a:d4:72:fe:
60:63:0e:eb:62:39:02:d7:73:00:75:9a:ef:4e:87:0f:98:cd:
54:fe:83:3b:a7:ee:58:25:05:c8:4b:06:2d:b9:7c:87:f6:74:
36:a1:7f:1d:f1:6c:53:a3:e6:49:56:b7:59:db:12:2d:f2:99:
8a:eb:26:b5:2e:57:ba:f3:69:b9:d0:54:79:f2:3d:ba:9c:1c:
99:16:31:20:a5:9f:a2:bd:f5:4e:e5:68:b8:11:09:cf:54:7e:
0a:d7:63:dc:4a:36:0b:9e:86:ec:e0:1a:06:a5:d9:9c:36:f1:
96:d8:f6:b0:ff:d0:c8:f8:0f:db:1a:33:31:17:5c:ed:f0:33:
ef:00:44:b7:be:e2:e0:26:c7:2a:b9:47:d7:c8:d9:a0:32:08:
6f:d4:bd:70:96:6e:ce:84:30:18:92:1b:bc:88:cc:90:5d:14:
71:38:ae:06:fd:da:b5:1d:c0:2d:1b:95:9c:c3:2a:d7:b9:95:
f6:ad:0b:ac:5b:80:5a:0a:b4:3a:73:49:cc:4b:2a:7c:aa:d1:
0e:a4:46:77:59:f1:6c:d3:ce:9d:39:d5:ec:66:d8:d5:3c:36:
95:1d:67:8c:bd:35:b1:5e:6a:fb:74:94:89:8c:d2:cf:5b:b2:
9a:ad:ca:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIYOGx7ReklgRjRvtcGyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3
MDc3NjUwHhcNMjQxMjI3MDgwMDI0WhcNMjQxMjI4MDgwMDI0WjAzMTEwLwYDVQQD
Eyg4NWQ5MWNlNmMxMDhmMmQxNDRiYmFhM2NhOTM1ZWQ5ODk4N2ZmYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWJO8DQArkbXzTdAEeTXu/k2wJTt
hhQuV/U73jPt3kmW6SBr2ATaTV8IlAoRSYVvKGKoEKRrrtB8ZQAGibEhUV/OeYka
H+5Vhih7zKKppzExXxxySQU5kYStQElIYchleKlpisBrILUResHpeqGaJ8UZl/L7
tP70JS1RD8ffqibNEZO5qlgg21k1fnhoLgT1HikK2/8R4vXCkhVt2Cpt02pTCRic
vkq5eG3NYynk6Wre4SX5XJlkaAJ4OUpMnifgvsEOLWat4T9WkWTnLlhcD3JRJKwX
TURAHpf6NJTK498kMxj4eVYVKmSY1Za9qekCZzjkjnXT81R19KSp339rKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXZHObBCPLRRLuqPKk17ZiYf/pTMB8GA1UdIwQY
MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt
ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1
LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj25wlNsG
AngA6xg6By+K1HL+YGMO62I5AtdzAHWa706HD5jNVP6DO6fuWCUFyEsGLbl8h/Z0
NqF/HfFsU6PmSVa3WdsSLfKZiusmtS5XuvNpudBUefI9upwcmRYxIKWfor31TuVo
uBEJz1R+Ctdj3Eo2C56G7OAaBqXZnDbxltj2sP/QyPgP2xozMRdc7fAz7wBEt77i
4CbHKrlH18jZoDIIb9S9cJZuzoQwGJIbvIjMkF0UcTiuBv3atR3ALRuVnMMq17mV
9q0LrFuAWgq0OnNJzEsqfKrRDqRGd1nxbNPOnTnV7GbY1Tw2lR1njL01sV5q+3SU
iYzSz1uymq3KNA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:58:40 2024 by rpki-client on console-fra.rpki-client.org