Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: kKFaqWe8aE+00ffDhZXVKYK95A2IR32Quksmq39uRNQ=
Subject key identifier: 13:FF:8A:30:19:39:0F:E6:4E:3B:E7:A3:23:6B:FA:2D:37:85:B3:A6
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01940646628481EB2BDDA10366CC27A93987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0B3D
Signing time: Fri 27 Dec 2024 04:01:03 +0000
Manifest this update: Fri 27 Dec 2024 04:01:03 +0000
Manifest next update: Sat 28 Dec 2024 04:01:03 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: Lw6Ts4A/tEGr2QeL97QKYm9vm5iUG07DcuhZgZSCzZo=)
2: 5qOipuwyxGss5xBRdHV9bVRKsWY.roa (hash: ALkbJ4sXf6hgsvM6OHHMpQAbyCOVSIsYGD2NpOc4+q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:62:84:81:eb:2b:dd:a1:03:66:cc:27:a9:39:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Dec 27 04:01:03 2024 GMT
Not After : Dec 28 04:01:03 2024 GMT
Subject: CN=13ff8a3019390fe64e3be7a3236bfa2d3785b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:9e:11:6a:6d:eb:94:d9:0f:6f:69:08:4e:
68:95:27:08:6d:20:ec:ea:0c:15:b5:5e:f2:6c:26:
97:69:49:91:cc:7c:3a:31:05:69:ce:2d:81:ea:e5:
2a:67:a1:fa:77:a6:47:e0:37:7d:f3:f0:dc:9e:13:
fd:34:14:af:36:02:2a:84:2d:2b:df:09:dc:ca:45:
3f:25:80:18:86:2a:a3:e8:b1:b1:6e:77:70:d7:cd:
c5:76:99:9b:12:61:59:c1:0b:96:62:ff:55:6d:98:
1c:ba:d6:c5:7d:40:03:85:68:bc:5b:4d:87:f5:35:
30:a7:ff:56:9e:68:9f:47:45:ab:6c:34:5a:5e:d5:
98:c7:76:ae:25:3b:01:42:32:90:4e:25:6f:10:6d:
bb:22:ce:25:af:cc:da:0d:b9:4b:b0:da:dd:1e:5b:
f7:5a:db:dd:7a:3a:f9:1a:1a:54:ca:c4:b4:6a:2a:
33:a1:7b:d2:41:27:f0:68:5f:94:8b:a9:8d:e5:ee:
10:d0:14:20:ff:1c:d0:e7:d8:56:fb:26:97:94:8e:
e3:78:34:10:72:c6:08:a0:d1:59:f5:4e:86:81:45:
0e:3d:ad:27:8a:76:85:d1:77:6d:fa:e9:99:63:ca:
4d:2c:b0:10:9d:29:75:66:9a:8a:6b:50:d4:5b:5b:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:8A:30:19:39:0F:E6:4E:3B:E7:A3:23:6B:FA:2D:37:85:B3:A6
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:aa:e9:d1:6a:ee:e3:0c:27:54:02:37:d2:99:a0:a8:fd:c8:
22:4a:46:87:bd:70:7c:c5:f5:a8:37:29:37:69:d8:5f:58:f7:
22:cb:04:95:3f:ce:8e:fb:28:ac:02:7f:ec:8c:4c:4f:88:64:
63:c2:fd:36:87:f8:79:d9:87:03:8b:9d:b7:53:cc:14:4c:d8:
17:6b:34:c4:f9:d7:12:95:69:4a:33:81:bf:4b:36:7b:3c:a8:
2c:75:3d:57:49:24:9d:c5:35:f4:94:3b:76:b9:c7:78:d2:b5:
fe:77:43:06:da:16:8d:60:03:e4:a2:62:97:3f:5c:a0:28:e2:
4a:44:76:ba:b3:5e:7e:e9:83:e0:c1:80:bb:1c:45:76:91:b9:
27:a1:79:a7:71:4f:2a:bc:3f:1f:6f:e1:44:bf:89:64:02:38:
9e:3e:74:20:40:63:98:cc:b3:0b:55:a9:93:33:6e:fb:e9:1a:
65:3e:21:ca:e7:62:09:4d:5a:69:c5:42:a7:67:4a:4d:52:4b:
cb:bf:c0:4c:48:91:00:95:bd:a8:97:f0:eb:05:6a:89:13:a8:
84:b5:8e:19:47:a7:b2:b8:09:dc:cf:81:70:84:05:e0:20:15:
b6:eb:74:54:90:c7:cd:58:a4:1d:07:6e:32:f0:b5:52:a7:a6:
9a:4a:6d:de
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQGRmKEgesr3aEDZswnqTmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWRlMzdiYmM2YzA2NDIwZGE2MjZjMGJiNGQ3MjMyMzFl
OTNlODQwHhcNMjQxMjI3MDQwMTAzWhcNMjQxMjI4MDQwMTAzWjAzMTEwLwYDVQQD
EygxM2ZmOGEzMDE5MzkwZmU2NGUzYmU3YTMyMzZiZmEyZDM3ODViM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr2eEWpt65TZD29pCE5olScIbSDs
6gwVtV7ybCaXaUmRzHw6MQVpzi2B6uUqZ6H6d6ZH4Dd98/DcnhP9NBSvNgIqhC0r
3wncykU/JYAYhiqj6LGxbndw183FdpmbEmFZwQuWYv9VbZgcutbFfUADhWi8W02H
9TUwp/9WnmifR0WrbDRaXtWYx3auJTsBQjKQTiVvEG27Is4lr8zaDblLsNrdHlv3
Wtvdejr5GhpUysS0aiozoXvSQSfwaF+Ui6mN5e4Q0BQg/xzQ59hW+yaXlI7jeDQQ
csYIoNFZ9U6GgUUOPa0ninaF0Xdt+umZY8pNLLAQnSl1ZpqKa1DUW1uV5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBP/ijAZOQ/mTjvnoyNr+i03hbOmMB8GA1UdIwQY
MBaAFPod43u8bAZCDaYmwLtNcjIx6T6EMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oM2plN3hzQmtJTnBpYkF1MDF5TWpIcFBvUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZkLThjZDEtNDk5ZS1hNTE4
LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJBdTAxeU1qSHBQb1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzYwOGY2ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2
ODAvMS8xLWgzamU3eHNCa0lOcGliQXUwMXlNakhwUG9RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6rp
0Wru4wwnVAI30pmgqP3IIkpGh71wfMX1qDcpN2nYX1j3IssElT/OjvsorAJ/7IxM
T4hkY8L9Nof4edmHA4udt1PMFEzYF2s0xPnXEpVpSjOBv0s2ezyoLHU9V0kkncU1
9JQ7drnHeNK1/ndDBtoWjWAD5KJilz9coCjiSkR2urNefumD4MGAuxxFdpG5J6F5
p3FPKrw/H2/hRL+JZAI4nj50IEBjmMyzC1WpkzNu++kaZT4hyudiCU1aacVCp2dK
TVJLy7/ATEiRAJW9qJfw6wVqiROohLWOGUensrgJ3M+BcIQF4CAVtut0VJDHzVik
HQduMvC1Uqemmkpt3g==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:12 2024 by rpki-client on console-fra.rpki-client.org