Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: +nN6NFCJc0eszbQDu2uM3oygOyMQscABC0igvMWAuVQ=
Subject key identifier: B0:ED:CF:7C:B7:0A:8D:E9:F9:A3:65:0D:CD:D4:8D:A3:03:FF:4E:E0
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019350BF342B744BB8DB115ED9C5F1F12D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0C9F
Signing time: Thu 21 Nov 2024 22:02:08 +0000
Manifest this update: Thu 21 Nov 2024 22:02:08 +0000
Manifest next update: Fri 22 Nov 2024 22:02:08 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 8kHODAH0u5fZSSwNnylNS7MD4m406xMuO7dBPkM0A7c=)
2: BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa (hash: w7FsLrAo9ndyR3kArk1dsPj5Z4GEO8PCCfO7adiBkH4=)
3: Wevpv1P6gEfQRXzo6vY3FJ4462A.roa (hash: NmiW6UjFVi+7gN4KNO0Hc9HTnBZ90w0v0xQjygDDLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:34:2b:74:4b:b8:db:11:5e:d9:c5:f1:f1:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Nov 21 22:02:08 2024 GMT
Not After : Nov 22 22:02:08 2024 GMT
Subject: CN=b0edcf7cb70a8de9f9a3650dcdd48da303ff4ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:d2:c3:01:0c:b4:c0:e7:72:e0:04:9d:3c:
c5:4a:ba:f6:e0:9b:78:04:05:64:d5:36:b9:03:55:
80:7a:85:50:59:f0:30:cf:f6:57:54:5c:8b:09:05:
9b:a5:cc:45:46:bc:38:7e:91:28:9c:46:18:01:bb:
91:e6:2c:8b:2a:9e:79:f1:8e:32:0d:8c:c8:c4:87:
eb:ea:e2:6b:d8:1b:e3:3e:de:39:e5:d2:a4:9b:44:
f8:40:51:00:45:d6:9c:a0:9a:1b:4d:a1:b4:13:96:
a9:e8:d4:7d:34:85:94:9b:22:84:be:3c:d7:f0:be:
bd:4a:5e:e4:00:25:fd:e0:dc:c5:e8:4d:4e:ca:c3:
c0:4f:06:85:44:3f:ff:0f:96:5c:99:ae:09:98:9e:
62:9c:c8:e8:05:69:39:13:c9:ee:57:ef:b8:51:b9:
e5:95:d5:93:11:e5:41:d0:bb:60:ad:ed:01:7f:7a:
26:46:96:33:c8:40:70:23:98:70:ca:f7:e4:bc:26:
1d:16:4f:19:c4:63:bd:5d:62:c1:9c:51:f0:06:85:
bb:c7:a2:ac:3b:1d:57:2d:0f:90:31:bf:92:2b:9d:
44:3a:01:91:c2:17:30:a4:ee:ce:45:56:67:fb:63:
6b:00:47:3b:c2:97:67:90:7e:09:16:b9:fc:b6:c2:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:CF:7C:B7:0A:8D:E9:F9:A3:65:0D:CD:D4:8D:A3:03:FF:4E:E0
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8f:4c:33:bb:ec:a8:7b:28:3f:f2:c1:d4:27:e3:ae:ca:7c:
1f:3e:fa:09:39:2d:d6:82:22:71:6a:36:d5:60:c0:91:44:40:
db:62:c5:47:3d:48:50:34:f2:d7:1b:74:0d:2c:e0:ed:49:2c:
ea:b3:f4:e9:7c:ab:98:4f:c8:2e:d6:eb:d1:22:54:d0:0c:45:
52:32:96:24:9c:c8:5e:32:02:57:64:c5:6c:34:85:e3:ac:a7:
0d:c8:2a:b5:4c:5a:14:84:2e:27:9f:17:9d:4b:b1:6f:24:78:
8f:f8:9c:44:f6:05:9a:2f:3c:fe:f8:95:9d:ed:fd:47:42:6f:
95:6f:36:8c:26:0a:26:d5:e0:f8:ca:be:ae:54:6e:c3:a9:9e:
b4:f6:09:66:24:be:2a:ed:57:ea:b7:f8:41:b3:4c:79:ac:46:
bc:1a:cd:cb:67:ea:0b:29:bb:d3:59:7f:10:17:79:30:64:21:
c5:93:5f:ee:6e:af:02:55:62:fd:7b:c6:1a:3a:3b:fc:fe:de:
35:6d:26:67:81:38:26:1d:88:a6:55:0a:c7:14:46:b8:a0:39:
59:ce:d9:29:7e:de:d8:e9:71:62:54:95:9a:ef:f4:8b:60:04:
db:a3:53:40:53:50:ee:37:1d:a1:4e:8d:82:55:c3:15:18:85:
c0:f3:c3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQvzQrdEu42xFe2cXx8S1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2
MjlmYzIwHhcNMjQxMTIxMjIwMjA4WhcNMjQxMTIyMjIwMjA4WjAzMTEwLwYDVQQD
EyhiMGVkY2Y3Y2I3MGE4ZGU5ZjlhMzY1MGRjZGQ0OGRhMzAzZmY0ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WjSwwEMtMDncuAEnTzFSrr24Jt4
BAVk1Ta5A1WAeoVQWfAwz/ZXVFyLCQWbpcxFRrw4fpEonEYYAbuR5iyLKp558Y4y
DYzIxIfr6uJr2BvjPt455dKkm0T4QFEARdacoJobTaG0E5ap6NR9NIWUmyKEvjzX
8L69Sl7kACX94NzF6E1OysPATwaFRD//D5Zcma4JmJ5inMjoBWk5E8nuV++4Ubnl
ldWTEeVB0Ltgre0Bf3omRpYzyEBwI5hwyvfkvCYdFk8ZxGO9XWLBnFHwBoW7x6Ks
Ox1XLQ+QMb+SK51EOgGRwhcwpO7ORVZn+2NrAEc7wpdnkH4JFrn8tsLcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDtz3y3Co3p+aNlDc3UjaMD/07gMB8GA1UdIwQY
MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt
ODNiYzc5NzI3OGUyLzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy
LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo9MM7vs
qHsoP/LB1Cfjrsp8Hz76CTkt1oIicWo21WDAkURA22LFRz1IUDTy1xt0DSzg7Uks
6rP06XyrmE/ILtbr0SJU0AxFUjKWJJzIXjICV2TFbDSF46ynDcgqtUxaFIQuJ58X
nUuxbyR4j/icRPYFmi88/viVne39R0JvlW82jCYKJtXg+Mq+rlRuw6metPYJZiS+
Ku1X6rf4QbNMeaxGvBrNy2fqCym701l/EBd5MGQhxZNf7m6vAlVi/XvGGjo7/P7e
NW0mZ4E4Jh2IplUKxxRGuKA5Wc7ZKX7e2OlxYlSVmu/0i2AE26NTQFNQ7jcdoU6N
glXDFRiFwPPDDA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:47 2024 by rpki-client on console-fra.rpki-client.org