Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: RckcUG2ZSJLj7WY4Z6YhuIxX64s9HTf60bMm/BqA7Gc=
Subject key identifier: 3B:EC:04:0D:39:44:59:12:F4:72:05:58:F1:20:1D:C3:25:90:89:98
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 0193549A6F0281026F432F922BD7BDAAA15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1376
Signing time: Fri 22 Nov 2024 16:00:27 +0000
Manifest this update: Fri 22 Nov 2024 16:00:27 +0000
Manifest next update: Sat 23 Nov 2024 16:00:27 +0000
Files and hashes: 1: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: 9mARFpJKZlX1jOk5nCwPAS5bNEFVXUOoQiwoiFWS2KI=)
2: v6JJV5gqlEHjdSShRUsQlJamPJw.roa (hash: fXl9uTehmb1k4pE5taNpKk/nGnlKhEUq+Co960IkHsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:6f:02:81:02:6f:43:2f:92:2b:d7:bd:aa:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Nov 22 16:00:27 2024 GMT
Not After : Nov 23 16:00:27 2024 GMT
Subject: CN=3bec040d39445912f4720558f1201dc325908998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:2f:4e:a9:fe:86:e1:54:c5:43:76:a3:d5:
cb:be:08:82:1b:ef:0c:9f:76:0b:a0:71:cf:be:cc:
9a:72:59:1e:1e:e0:7e:d9:01:cb:3e:e2:56:e1:14:
a1:63:51:86:6a:c8:3e:00:70:15:b9:2a:16:f6:17:
0b:3d:dd:77:cf:fd:9a:82:50:89:ae:9a:23:15:6b:
d9:9e:30:09:91:9f:94:85:68:81:72:c7:b4:0e:eb:
25:ae:fb:e6:8d:6d:f8:bb:de:41:fd:61:7e:0e:bf:
ef:96:32:91:f5:bf:a1:8e:84:b0:9e:4e:df:1b:6f:
d8:69:e2:0b:15:40:90:dc:57:da:5b:da:00:92:04:
7c:af:73:5f:9c:bb:ee:74:68:e5:67:8b:c1:a6:ec:
56:64:9f:dd:1f:27:c0:ab:9d:fe:97:40:0f:1c:f0:
d3:7b:df:43:ee:1f:5a:a8:6e:10:32:db:11:ae:bf:
17:0b:4f:e1:d6:d2:ef:0f:bc:ac:82:53:11:65:c4:
cf:45:26:e5:aa:88:b2:4f:37:7b:37:0c:e6:a7:84:
30:ef:cf:da:97:fd:b9:cf:a6:a3:37:3f:fe:49:cd:
3b:3c:7d:0c:48:96:bb:8b:d0:de:44:0f:9f:f3:c5:
a0:7a:7b:fb:a1:a2:ca:ea:be:fb:95:ac:6d:c7:fc:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:04:0D:39:44:59:12:F4:72:05:58:F1:20:1D:C3:25:90:89:98
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:06:23:a8:da:bc:8b:88:5e:e5:49:eb:b5:f2:a4:38:bb:42:
02:e7:92:41:21:4d:3c:2b:ca:9c:19:92:8e:ab:c3:47:a8:05:
45:4a:4f:4a:86:cb:8d:39:2b:02:6a:3f:d5:82:dd:37:4f:ce:
8a:59:51:ff:df:02:5b:ce:ae:f2:e3:33:da:c7:94:21:f6:c4:
a0:9a:a8:0f:a7:ba:54:e6:3d:15:81:4c:01:36:0a:5f:18:03:
fa:ad:14:28:44:d5:dd:da:ec:aa:a2:d5:01:73:03:78:c7:df:
54:8f:61:59:04:f0:a9:39:0f:c4:76:c3:d7:38:7b:63:ed:cf:
86:e4:84:df:61:42:c5:bc:13:f4:7f:44:9d:c6:3a:43:13:b9:
35:ae:db:65:32:50:12:66:4c:20:84:39:3b:ca:07:b2:1f:15:
c3:0c:75:4b:ef:d9:96:6a:4e:1c:1d:fb:54:97:aa:e1:e1:64:
bc:88:c6:08:da:3c:b9:da:7d:42:b6:a2:71:a9:c8:b5:94:40:
5e:52:77:a7:90:ce:8c:43:bf:bd:0b:28:f8:28:25:46:40:68:
1e:f1:e0:2e:bf:7b:fa:f8:6e:35:d2:ac:f0:aa:0f:65:bf:68:
16:de:3d:41:8e:29:00:1f:55:33:0b:e7:bc:d7:bd:ac:e8:a2:
f3:2d:19:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmm8CgQJvQy+SK9e9qqFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4
Y2YyYjUwHhcNMjQxMTIyMTYwMDI3WhcNMjQxMTIzMTYwMDI3WjAzMTEwLwYDVQQD
EygzYmVjMDQwZDM5NDQ1OTEyZjQ3MjA1NThmMTIwMWRjMzI1OTA4OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspgvTqn+huFUxUN2o9XLvgiCG+8M
n3YLoHHPvsyaclkeHuB+2QHLPuJW4RShY1GGasg+AHAVuSoW9hcLPd13z/2aglCJ
rpojFWvZnjAJkZ+UhWiBcse0DuslrvvmjW34u95B/WF+Dr/vljKR9b+hjoSwnk7f
G2/YaeILFUCQ3FfaW9oAkgR8r3NfnLvudGjlZ4vBpuxWZJ/dHyfAq53+l0APHPDT
e99D7h9aqG4QMtsRrr8XC0/h1tLvD7ysglMRZcTPRSblqoiyTzd7Nwzmp4Qw78/a
l/25z6ajNz/+Sc07PH0MSJa7i9DeRA+f88Wgenv7oaLK6r77laxtx/yfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvsBA05RFkS9HIFWPEgHcMlkImYMB8GA1UdIwQY
MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt
ZGI4ZWZmMWIxMWEwLzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw
LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQYjqNq8
i4he5UnrtfKkOLtCAueSQSFNPCvKnBmSjqvDR6gFRUpPSobLjTkrAmo/1YLdN0/O
illR/98CW86u8uMz2seUIfbEoJqoD6e6VOY9FYFMATYKXxgD+q0UKETV3drsqqLV
AXMDeMffVI9hWQTwqTkPxHbD1zh7Y+3PhuSE32FCxbwT9H9EncY6QxO5Na7bZTJQ
EmZMIIQ5O8oHsh8Vwwx1S+/ZlmpOHB37VJeq4eFkvIjGCNo8udp9QraicanItZRA
XlJ3p5DOjEO/vQso+CglRkBoHvHgLr97+vhuNdKs8KoPZb9oFt49QY4pAB9VMwvn
vNe9rOii8y0Z1g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:31 2024 by rpki-client on console-fra.rpki-client.org