Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
File: Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft (raw, json)
Hash identifier: RBa8oaJ8uNRTnLlqrK/bhlPSJdrWuLImO1X9/x6eEGA=
Subject key identifier: 5A:5D:02:DD:04:C7:42:CB:11:22:23:C8:50:96:B8:2B:BD:5F:21:C2
Authority key identifier: 1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
Certificate issuer: /CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Certificate serial: 019357D295F0EE7D9837C17A71E6E61ED151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
Manifest number: 0733
Signing time: Sat 23 Nov 2024 07:00:38 +0000
Manifest this update: Sat 23 Nov 2024 07:00:38 +0000
Manifest next update: Sun 24 Nov 2024 07:00:38 +0000
Files and hashes: 1: 2A1M9twGPD1-4PIkttPdprW7aBM.roa (hash: pfzZjAP4oOXZVW16atseLgUkhdLMr4uAWy0Rj7f1Rr0=)
2: Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl (hash: LW6jTXHPrxn5haryl9cM+mzecYHlM2sq82ulYdWe38M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:95:f0:ee:7d:98:37:c1:7a:71:e6:e6:1e:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Validity
Not Before: Nov 23 07:00:38 2024 GMT
Not After : Nov 24 07:00:38 2024 GMT
Subject: CN=5a5d02dd04c742cb112223c85096b82bbd5f21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:15:94:f0:7d:6a:85:af:0b:69:a7:78:90:
2f:91:f0:5f:cf:c8:7d:d0:a8:01:04:36:d3:cc:58:
62:4d:60:33:04:fb:49:b8:b7:3c:fc:12:f2:ea:27:
f4:26:38:ba:73:8b:61:b9:32:ad:04:a6:0d:e4:93:
60:44:7c:9f:49:15:5c:de:c7:e1:08:23:9a:00:a6:
2f:6a:e2:12:c5:bf:95:f0:81:d5:24:c6:a0:21:be:
62:40:2f:1b:c9:98:e3:ca:22:59:03:1e:17:fd:a4:
bd:20:e3:b8:41:d4:47:1f:53:86:1f:b3:91:c7:54:
56:86:d3:7a:cd:5a:4a:5e:f3:fd:7e:3c:23:ca:93:
b7:61:08:71:70:bb:c9:9e:21:a2:69:1e:94:93:9c:
58:b0:91:ab:77:37:8a:f2:5d:57:06:73:9b:95:e9:
0e:bc:eb:ed:74:ae:94:44:db:9d:6d:ca:07:7c:40:
aa:ed:24:47:00:5c:47:21:4c:7a:93:81:4b:66:a0:
df:26:49:46:db:b4:a2:94:e8:0a:ae:48:d2:8a:16:
38:d7:5e:23:9a:76:ad:92:57:36:db:84:59:41:68:
2e:b7:e1:37:1e:b6:7c:17:02:9f:c8:3e:9f:ea:52:
f1:f5:99:20:e6:9d:9f:3e:5a:ac:e0:46:88:79:f3:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:02:DD:04:C7:42:CB:11:22:23:C8:50:96:B8:2B:BD:5F:21:C2
X509v3 Authority Key Identifier:
keyid:1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:02:bb:f2:41:b4:76:89:3d:b8:53:6d:4a:20:c8:5d:17:
fb:7a:38:70:72:96:5d:3d:d6:b9:04:01:72:46:94:f3:07:3b:
0a:2e:eb:4e:5e:6c:9e:fb:47:b8:42:23:5d:65:23:36:67:56:
6a:ac:aa:b9:0c:cb:4b:52:5e:a8:9f:82:04:88:6d:e0:91:d0:
ec:62:3f:c2:07:9d:17:90:5e:f5:7a:b7:30:3b:4e:b2:d8:64:
e6:29:33:e9:42:20:02:2a:f4:d4:b1:99:32:66:a7:4d:83:45:
65:12:90:97:31:2c:0c:7c:bb:f6:b0:c7:6b:df:d9:e3:96:bf:
51:f0:eb:25:88:82:dc:f1:a8:12:80:7d:2e:84:8e:47:88:6a:
42:15:11:6a:e1:c8:d2:70:91:68:78:73:87:69:fd:a3:2b:32:
a4:09:38:35:c2:f9:d9:27:0e:f9:c4:e5:bd:3d:5b:e9:d3:9f:
70:39:62:60:02:99:98:bb:e5:03:a3:c1:c1:19:26:c7:0c:98:
9c:92:c5:55:6a:a0:bc:44:2c:58:57:dc:9f:25:7d:39:1f:61:
f7:0c:72:8d:a2:65:53:5d:1b:e1:88:b4:3f:cb:da:f2:0d:3d:
30:91:f5:aa:2b:ef:27:1b:44:81:8d:d5:ce:52:77:7c:3e:61:
d7:1a:be:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pXw7n2YN8F6cebmHtFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYmQ4OTgxZDcwZDFjNGUxYzRmMDUzOGJkMDRmNzAxMWZh
ZGMzYjkwHhcNMjQxMTIzMDcwMDM4WhcNMjQxMTI0MDcwMDM4WjAzMTEwLwYDVQQD
Eyg1YTVkMDJkZDA0Yzc0MmNiMTEyMjIzYzg1MDk2YjgyYmJkNWYyMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+oVlPB9aoWvC2mneJAvkfBfz8h9
0KgBBDbTzFhiTWAzBPtJuLc8/BLy6if0Jji6c4thuTKtBKYN5JNgRHyfSRVc3sfh
CCOaAKYvauISxb+V8IHVJMagIb5iQC8byZjjyiJZAx4X/aS9IOO4QdRHH1OGH7OR
x1RWhtN6zVpKXvP9fjwjypO3YQhxcLvJniGiaR6Uk5xYsJGrdzeK8l1XBnOblekO
vOvtdK6URNudbcoHfECq7SRHAFxHIUx6k4FLZqDfJklG27SilOgKrkjSihY4114j
mnatklc224RZQWgut+E3HrZ8FwKfyD6f6lLx9Zkg5p2fPlqs4EaIefOt6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpdAt0Ex0LLESIjyFCWuCu9XyHCMB8GA1UdIwQY
MBaAFB29iYHXDRxOHE8FOL0E9wEfrcO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGIySmdkY05IRTRjVHdVNHZRVDNBUi10dzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZjI1ZTUtZmM5MC00MjdiLWE4NDkt
M2ExNThkMTcyMmRjLzEvSGIySmdkY05IRTRjVHdVNHZRVDNBUi10dzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZjI1ZTUtZmM5MC00MjdiLWE4NDktM2ExNThkMTcyMmRj
LzEvSGIySmdkY05IRTRjVHdVNHZRVDNBUi10dzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgUCu/JB
tHaJPbhTbUogyF0X+3o4cHKWXT3WuQQBckaU8wc7Ci7rTl5snvtHuEIjXWUjNmdW
aqyquQzLS1JeqJ+CBIht4JHQ7GI/wgedF5Be9Xq3MDtOsthk5ikz6UIgAir01LGZ
MmanTYNFZRKQlzEsDHy79rDHa9/Z45a/UfDrJYiC3PGoEoB9LoSOR4hqQhURauHI
0nCRaHhzh2n9oysypAk4NcL52ScO+cTlvT1b6dOfcDliYAKZmLvlA6PBwRkmxwyY
nJLFVWqgvEQsWFfcnyV9OR9h9wxyjaJlU10b4Yi0P8va8g09MJH1qivvJxtEgY3V
zlJ3fD5h1xq+Hg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:07 2024 by rpki-client on console-fra.rpki-client.org