Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: dNpPjWoyi1HY5X+ZN3X65WYABQ4Z8OhM1SaCYtCp3Vc=
Subject key identifier: C9:49:BD:51:18:57:8A:33:2C:F3:C4:0F:0E:B9:33:0E:84:21:65:61
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01935688ABAF3B4DD21EA6133AD76D7D6A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:00:17 +0000
Manifest this update: Sat 23 Nov 2024 01:00:17 +0000
Manifest next update: Sun 24 Nov 2024 01:00:17 +0000
Files and hashes: 1: W6J95Ol1lJbAnqs4X7yWNje2KhY.roa (hash: LZwGPXWMi6s2TEKP9XIUIS3IZpwD20QCDPJES7+kri4=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: MwXHVju53SRkgiOr5ovYHt6+seIHg4plg4iZ2sbsifQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:ab:af:3b:4d:d2:1e:a6:13:3a:d7:6d:7d:6a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Nov 23 01:00:17 2024 GMT
Not After : Nov 24 01:00:17 2024 GMT
Subject: CN=c949bd5118578a332cf3c40f0eb9330e84216561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:96:4a:36:9c:12:9c:01:de:58:61:41:7f:
f9:60:54:39:83:c2:29:f0:0a:8f:e0:10:2b:0b:82:
12:71:40:3b:cd:40:63:bf:6e:6a:11:e4:77:39:4d:
07:73:02:cb:2d:95:81:b5:df:15:96:e7:a1:f0:b4:
7f:fa:fc:f4:d0:34:d0:d1:2f:51:b7:1b:f6:84:7f:
6b:ae:f0:c9:33:45:97:06:73:c5:9f:39:45:b3:0b:
6e:61:af:78:41:9f:69:38:42:6a:65:fd:d1:13:81:
2a:4d:10:2f:67:c8:48:0f:6c:5a:56:5c:f6:e3:c5:
21:ce:35:25:2e:9a:a7:8a:a1:7a:af:fd:b1:66:e1:
07:e2:a2:d3:78:64:cc:05:c0:3f:9d:e9:8a:a5:63:
8c:6c:52:91:a2:37:ac:a2:4c:8e:69:ca:ca:8b:65:
14:d9:6e:83:18:fc:98:72:ee:ba:43:fa:37:63:d7:
fe:17:d5:66:26:5a:bb:de:d2:2a:89:c5:ed:11:c0:
b5:bf:1c:c5:f4:53:5e:f1:70:da:c9:2f:70:72:15:
58:c9:0b:a1:cc:15:14:34:4e:c4:cc:a9:ec:67:a5:
57:eb:af:5f:d5:15:d1:d5:9a:e2:da:e4:67:3f:93:
9e:6e:07:99:72:57:b8:db:73:74:b6:c5:3a:e1:af:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:BD:51:18:57:8A:33:2C:F3:C4:0F:0E:B9:33:0E:84:21:65:61
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3e:fa:6a:fb:04:b8:31:f7:e9:43:13:8a:02:d2:b0:56:c3:
53:e5:0c:c6:f4:87:21:2f:60:48:d6:51:af:a7:7c:22:62:b9:
52:cf:71:06:73:3a:f3:ed:82:0e:9a:70:68:cd:a8:cb:b1:a6:
e7:fa:2a:f2:2d:d2:7c:1e:98:f0:c0:c7:32:1f:25:fd:8d:c5:
e6:1c:3b:fe:67:a1:53:9c:23:42:10:af:7b:57:01:6b:c7:0e:
dd:25:81:c0:06:53:c0:6b:3a:56:97:6d:a2:60:b3:b9:26:61:
bb:ea:6d:e6:44:df:6e:74:33:25:41:3d:fb:9d:f7:f3:61:5f:
a5:42:6d:f2:2f:72:0a:16:78:79:e0:6a:d2:10:98:ea:af:19:
62:1c:3c:ad:ba:c4:b1:c5:58:ea:0b:be:03:37:ff:d2:90:21:
d9:c5:94:e2:fa:a1:c3:7e:e6:cf:3a:57:34:de:02:2d:a9:87:
34:32:a7:bd:ad:d0:85:fd:e0:2e:9a:15:ca:a2:23:ee:df:79:
25:6e:c2:6e:45:e9:3d:b7:96:a7:15:e0:6e:47:3c:e3:33:df:
49:9c:63:41:0f:4d:22:a7:a3:3f:00:ac:d0:69:7c:fb:7a:01:
5f:c3:60:7c:41:86:8b:f7:dc:a1:27:e4:b2:e4:29:e4:71:96:
2f:9e:60:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiKuvO03SHqYTOtdtfWoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODAxNmRiNTVlNjY0YmE3MjFlMTlhZTlhYjQzMTZjMTBk
OTY3MDgwHhcNMjQxMTIzMDEwMDE3WhcNMjQxMTI0MDEwMDE3WjAzMTEwLwYDVQQD
EyhjOTQ5YmQ1MTE4NTc4YTMzMmNmM2M0MGYwZWI5MzMwZTg0MjE2NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV2WSjacEpwB3lhhQX/5YFQ5g8Ip
8AqP4BArC4IScUA7zUBjv25qEeR3OU0HcwLLLZWBtd8Vlueh8LR/+vz00DTQ0S9R
txv2hH9rrvDJM0WXBnPFnzlFswtuYa94QZ9pOEJqZf3RE4EqTRAvZ8hID2xaVlz2
48UhzjUlLpqniqF6r/2xZuEH4qLTeGTMBcA/nemKpWOMbFKRojesokyOacrKi2UU
2W6DGPyYcu66Q/o3Y9f+F9VmJlq73tIqicXtEcC1vxzF9FNe8XDayS9wchVYyQuh
zBUUNE7EzKnsZ6VX669f1RXR1Zri2uRnP5OebgeZcle423N0tsU64a/ZPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlJvVEYV4ozLPPEDw65Mw6EIWVhMB8GA1UdIwQY
MBaAFJKAFttV5mS6ch4Zrpq0MWwQ2WcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2It
ZTg5Y2RhYjgyZTFjLzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MjFhMWMtY2YzOS00NDQ4LTg4M2ItZTg5Y2RhYjgyZTFj
LzEva29BVzIxWG1aTHB5SGhtdW1yUXhiQkRaWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADT76avsE
uDH36UMTigLSsFbDU+UMxvSHIS9gSNZRr6d8ImK5Us9xBnM68+2CDppwaM2oy7Gm
5/oq8i3SfB6Y8MDHMh8l/Y3F5hw7/mehU5wjQhCve1cBa8cO3SWBwAZTwGs6Vpdt
omCzuSZhu+pt5kTfbnQzJUE9+53382FfpUJt8i9yChZ4eeBq0hCY6q8ZYhw8rbrE
scVY6gu+Azf/0pAh2cWU4vqhw37mzzpXNN4CLamHNDKnva3Qhf3gLpoVyqIj7t95
JW7CbkXpPbeWpxXgbkc84zPfSZxjQQ9NIqejPwCs0Gl8+3oBX8NgfEGGi/fcoSfk
suQp5HGWL55g2Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:34 2024 by rpki-client on console-fra.rpki-client.org