Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier: /o89ztjc6jF7EZONX6OgvKlbu9fKJaqc22Djvz9u18U=
Subject key identifier: 9B:A9:20:19:D3:C2:BD:8B:71:D4:FE:E2:23:3C:52:31:EA:F4:05:F8
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial: 019406EAB59C90E5B21AC8015A13101E740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number: 0D2C
Signing time: Fri 27 Dec 2024 07:00:32 +0000
Manifest this update: Fri 27 Dec 2024 07:00:32 +0000
Manifest next update: Sat 28 Dec 2024 07:00:32 +0000
Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: zPHnmrzGQHHYpuV1lzvYuey5kys47DDkiZg+rD5LNLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:b5:9c:90:e5:b2:1a:c8:01:5a:13:10:1e:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
Validity
Not Before: Dec 27 07:00:32 2024 GMT
Not After : Dec 28 07:00:32 2024 GMT
Subject: CN=9ba92019d3c2bd8b71d4fee2233c5231eaf405f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:ff:8e:f6:6e:78:22:88:2c:ec:48:3e:2e:
0e:1e:f6:0e:22:76:42:a3:8a:db:28:e1:45:a5:a6:
57:ed:fc:d9:90:2a:23:52:bf:bb:65:e7:70:4f:e8:
eb:d6:90:e1:07:82:f4:d8:c1:04:37:7a:d5:4f:74:
00:4f:d9:db:ff:4d:d2:ce:19:fc:8a:e2:76:cd:9b:
22:3c:61:3c:79:17:0d:8a:4a:b7:b4:cb:18:9c:93:
9f:c0:62:40:af:28:f5:35:07:63:4b:21:55:98:3a:
b5:c4:10:59:d5:fc:88:da:59:ee:c5:71:48:95:70:
c2:db:76:aa:68:0b:a4:3b:94:2e:5a:d0:61:f0:8e:
2d:e8:94:ab:53:d1:36:52:73:ff:4b:ce:cd:07:39:
a9:00:20:ff:df:71:13:02:55:fa:5e:1c:82:c0:84:
f4:cc:6a:57:c9:02:4a:df:4a:a4:b0:ce:4d:9f:31:
54:b7:a8:99:fb:88:31:a1:04:a3:c0:b1:0d:0d:87:
0e:8a:c4:a2:fe:61:21:13:28:5f:e3:f8:c1:8f:4a:
48:d0:86:53:1b:82:8e:c0:de:6b:7a:28:09:7d:5b:
1c:38:b1:00:78:cb:ec:4e:3e:b7:52:f0:ec:49:c2:
d2:de:52:e3:01:0a:dd:21:e5:1b:c8:f4:ac:fd:67:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:20:19:D3:C2:BD:8B:71:D4:FE:E2:23:3C:52:31:EA:F4:05:F8
X509v3 Authority Key Identifier:
keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:53:be:3b:ee:4d:8d:c5:98:78:63:84:3c:cd:d7:c2:78:
3d:07:78:fe:e9:65:3c:98:51:0d:eb:00:5d:bd:90:c6:eb:59:
74:d5:6a:6d:b5:0a:3a:25:3a:18:13:d4:a5:c0:94:64:ce:a1:
c5:11:dd:d1:de:dd:b0:de:1c:21:32:2c:4a:88:34:c1:a2:35:
3f:73:05:9e:22:91:90:be:5f:cd:ed:1a:c5:13:2b:24:a3:28:
94:7d:ab:52:93:f3:65:22:93:d0:5c:4f:62:f5:ce:b8:68:c0:
8c:62:a0:44:5c:f1:2c:22:5a:c1:19:e3:85:da:b7:eb:b1:3a:
09:a4:7e:dd:a3:e7:48:d3:c8:d7:c0:cf:e2:47:b5:d3:f2:78:
74:49:53:9a:55:cc:8c:be:b6:6d:6a:15:07:26:32:48:bb:c8:
27:b5:f8:7c:0f:85:ef:39:91:f0:98:77:bf:12:1c:14:a4:6d:
ac:7e:27:80:21:0d:98:c8:9a:55:d8:42:34:41:e3:7b:b1:74:
5d:ed:e6:dc:2e:e4:99:cf:e6:5c:7f:e2:77:8b:84:4a:1d:dd:
5c:1c:52:d3:70:e6:4e:24:5e:d3:1b:7c:6e:e3:c6:37:bd:e6:
cf:da:e9:78:ef:d8:4e:53:22:0f:4b:ce:ce:33:90:a6:ff:c8:
0f:7f:31:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQG6rWckOWyGsgBWhMQHnQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MjhmYzg3MTdlOTE5YWUwNzI2MWFhZTI4ZDhjODQ1NjRj
OGE3MTIwHhcNMjQxMjI3MDcwMDMyWhcNMjQxMjI4MDcwMDMyWjAzMTEwLwYDVQQD
Eyg5YmE5MjAxOWQzYzJiZDhiNzFkNGZlZTIyMzNjNTIzMWVhZjQwNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA243/jvZueCKILOxIPi4OHvYOInZC
o4rbKOFFpaZX7fzZkCojUr+7ZedwT+jr1pDhB4L02MEEN3rVT3QAT9nb/03Szhn8
iuJ2zZsiPGE8eRcNikq3tMsYnJOfwGJAryj1NQdjSyFVmDq1xBBZ1fyI2lnuxXFI
lXDC23aqaAukO5QuWtBh8I4t6JSrU9E2UnP/S87NBzmpACD/33ETAlX6XhyCwIT0
zGpXyQJK30qksM5NnzFUt6iZ+4gxoQSjwLENDYcOisSi/mEhEyhf4/jBj0pI0IZT
G4KOwN5reigJfVscOLEAeMvsTj63UvDsScLS3lLjAQrdIeUbyPSs/WdOKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJupIBnTwr2LcdT+4iM8UjHq9AX4MB8GA1UdIwQY
MBaAFBUo/IcX6RmuByYarijYyEVkyKcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTkt
NjcxMDcyZjkxYTEzLzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTktNjcxMDcyZjkxYTEz
LzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVdTvjvu
TY3FmHhjhDzN18J4PQd4/ullPJhRDesAXb2QxutZdNVqbbUKOiU6GBPUpcCUZM6h
xRHd0d7dsN4cITIsSog0waI1P3MFniKRkL5fze0axRMrJKMolH2rUpPzZSKT0FxP
YvXOuGjAjGKgRFzxLCJawRnjhdq367E6CaR+3aPnSNPI18DP4ke10/J4dElTmlXM
jL62bWoVByYySLvIJ7X4fA+F7zmR8Jh3vxIcFKRtrH4ngCENmMiaVdhCNEHje7F0
Xe3m3C7kmc/mXH/id4uESh3dXBxS03DmTiRe0xt8buPGN73mz9rpeO/YTlMiD0vO
zjOQpv/ID38xag==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:12 2024 by rpki-client on console-fra.rpki-client.org