Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: CbD+3IfFEaEeijQoYGFU/C0kAUiztP8x85GpwoQWkeI=
Subject key identifier: 74:58:FD:50:51:C8:A6:77:3A:E1:AC:EA:A4:39:01:F4:91:75:EE:7A
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019358095295542274190278B8AC3D3A8ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 03A1
Signing time: Sat 23 Nov 2024 08:00:26 +0000
Manifest this update: Sat 23 Nov 2024 08:00:26 +0000
Manifest next update: Sun 24 Nov 2024 08:00:26 +0000
Files and hashes: 1: 7njUTwoSyXJyEhxQsw7-PJsFbfc.roa (hash: e9Yz3qtxZvziD2qgKIQInTG+qh78EeELmoa2kN5lXFY=)
2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: lVHadyu0W7hhgihr0jn988hJf71et24/pWSoHKvsmGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:52:95:54:22:74:19:02:78:b8:ac:3d:3a:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Nov 23 08:00:26 2024 GMT
Not After : Nov 24 08:00:26 2024 GMT
Subject: CN=7458fd5051c8a6773ae1aceaa43901f49175ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:b1:d2:d5:08:10:e8:65:8b:d6:5a:b6:0f:
b8:0d:b0:5e:68:98:b0:b4:c1:d8:6a:aa:e7:c7:31:
4c:6f:b9:74:94:a2:10:28:46:fa:c9:23:ab:2c:af:
2a:5c:ac:09:94:76:2d:4a:a0:3e:f2:fd:7e:64:ef:
da:4a:05:6d:0f:09:47:fd:5c:69:87:36:26:94:06:
9f:80:25:a2:81:bc:c0:ba:b6:26:45:16:5f:85:69:
50:a7:1f:67:af:0e:f9:92:33:af:07:65:2c:94:48:
31:ff:3e:c7:36:0f:3b:4a:65:40:54:ff:55:be:0b:
c7:87:38:04:22:79:9c:5e:7f:64:eb:eb:de:67:94:
8b:c6:a1:92:a8:4a:af:dc:a5:08:55:ae:c8:5e:2a:
6c:1b:47:e9:96:b4:2f:d4:2d:73:79:05:16:c1:66:
0a:bd:bf:92:7b:f1:f8:87:f3:bc:71:8a:be:84:ef:
d2:79:c2:cc:60:d0:1b:d8:f5:ff:7c:7f:85:07:dd:
0a:a4:33:0f:d7:b8:fe:7d:38:aa:06:d4:e1:09:a1:
22:ea:6d:f0:75:5a:e2:e4:d3:46:c4:ef:22:8c:db:
41:f4:e8:d4:09:17:5b:0c:e5:1e:90:d1:fd:2f:a8:
04:1c:24:e2:76:1a:cc:f0:08:59:7a:84:c0:42:d2:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:FD:50:51:C8:A6:77:3A:E1:AC:EA:A4:39:01:F4:91:75:EE:7A
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:3a:02:e7:d6:d9:94:c0:44:ff:cd:f2:96:d4:81:42:ef:
bf:6d:e2:34:97:ba:44:c9:7a:36:07:53:78:6d:81:ed:21:21:
ad:af:27:31:f9:34:3b:70:c9:b0:a8:f2:23:18:2b:6b:36:36:
b4:55:f2:fa:c2:7a:40:29:ba:05:14:82:73:c6:ee:57:4e:fd:
05:97:74:07:b5:ba:c7:2f:fc:7c:9e:a9:9c:e4:90:c4:79:bc:
3d:1e:7a:64:6f:0d:d1:51:e8:cf:5d:44:7c:a2:12:bd:26:32:
ea:5d:2e:29:b7:58:00:60:a8:80:ee:b0:f1:64:5c:aa:b9:82:
e1:f4:66:3d:1f:07:eb:39:40:79:52:b6:96:31:34:8a:bb:f4:
ca:df:61:0d:a0:b5:fa:86:db:68:d0:8e:61:f9:f8:2f:1a:55:
8c:d4:0a:d9:d4:99:ca:ae:65:a4:f9:55:3a:60:27:68:9c:90:
b2:90:75:93:15:bb:0c:03:0f:61:ad:16:a0:08:51:bf:6c:74:
75:56:26:82:65:ce:a8:04:fd:73:56:9a:b5:a5:8b:7b:5b:92:
25:f0:43:a9:fc:f3:81:57:1a:8e:92:70:09:87:e0:b0:db:64:
29:a8:c5:05:17:d1:7f:ba:c0:6d:19:22:1d:9f:c3:6c:8e:76:
45:f0:dd:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYCVKVVCJ0GQJ4uKw9Oo7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTA1NzMzZWZiOGIzNzY0Y2E5M2VlMzQwOTg4ODY5ZDk2
NjAzYWEwHhcNMjQxMTIzMDgwMDI2WhcNMjQxMTI0MDgwMDI2WjAzMTEwLwYDVQQD
Eyg3NDU4ZmQ1MDUxYzhhNjc3M2FlMWFjZWFhNDM5MDFmNDkxNzVlZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13qx0tUIEOhli9Zatg+4DbBeaJiw
tMHYaqrnxzFMb7l0lKIQKEb6ySOrLK8qXKwJlHYtSqA+8v1+ZO/aSgVtDwlH/Vxp
hzYmlAafgCWigbzAurYmRRZfhWlQpx9nrw75kjOvB2UslEgx/z7HNg87SmVAVP9V
vgvHhzgEInmcXn9k6+veZ5SLxqGSqEqv3KUIVa7IXipsG0fplrQv1C1zeQUWwWYK
vb+Se/H4h/O8cYq+hO/SecLMYNAb2PX/fH+FB90KpDMP17j+fTiqBtThCaEi6m3w
dVri5NNGxO8ijNtB9OjUCRdbDOUekNH9L6gEHCTidhrM8AhZeoTAQtIZBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRY/VBRyKZ3OuGs6qQ5AfSRde56MB8GA1UdIwQY
MBaAFJ3gVzPvuLN2TKk+40CYiGnZZgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYt
MzE2YjAzZDUwMmNjLzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYtMzE2YjAzZDUwMmNj
LzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfk6AufW
2ZTARP/N8pbUgULvv23iNJe6RMl6NgdTeG2B7SEhra8nMfk0O3DJsKjyIxgrazY2
tFXy+sJ6QCm6BRSCc8buV079BZd0B7W6xy/8fJ6pnOSQxHm8PR56ZG8N0VHoz11E
fKISvSYy6l0uKbdYAGCogO6w8WRcqrmC4fRmPR8H6zlAeVK2ljE0irv0yt9hDaC1
+obbaNCOYfn4LxpVjNQK2dSZyq5lpPlVOmAnaJyQspB1kxW7DAMPYa0WoAhRv2x0
dVYmgmXOqAT9c1aataWLe1uSJfBDqfzzgVcajpJwCYfgsNtkKajFBRfRf7rAbRki
HZ/DbI52RfDdYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:58 2024 by rpki-client on console-ams.rpki-client.org