Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: 2/rv0nIODkDyV51DkLUX7VzqXLKyeBgBGmNs4V2bgZ0=
Subject key identifier: 7B:3D:C4:40:9E:BB:2B:C8:CA:FF:73:DC:86:E8:ED:81:FF:84:25:B4
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0193640D59843F6C11BB384C9E649191DC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0277
Signing time: Mon 25 Nov 2024 16:00:16 +0000
Manifest this update: Mon 25 Nov 2024 16:00:16 +0000
Manifest next update: Tue 26 Nov 2024 16:00:16 +0000
Files and hashes: 1: NbaHPOC_1PyX90vh7DJmh7mwuLw.roa (hash: Q2uhlTfkSEZtR2dUCjOpGq6rF487nAsSEUSkqzyaueU=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: 1+7ZXdTVlKbdjZVZDNKTEZnC4mjH1vfaCyHFvINDKec=)
3: TsABlrE5h3Tnz0YH31l9kztUy-w.roa (hash: gLviUkL66CvDBzG2Ob+n1ixCLci2P+3SE+6Jz9N3t1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0d:59:84:3f:6c:11:bb:38:4c:9e:64:91:91:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Nov 25 16:00:16 2024 GMT
Not After : Nov 26 16:00:16 2024 GMT
Subject: CN=7b3dc4409ebb2bc8caff73dc86e8ed81ff8425b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:ee:58:ed:e5:36:4e:a7:04:6c:c4:62:a1:
62:13:9a:6a:95:49:98:7a:92:8b:30:84:f4:c1:2c:
94:27:3c:10:51:d3:b6:b5:1b:23:6b:3b:be:92:34:
17:19:e3:30:89:4e:2c:6a:8e:0e:9c:63:8b:c2:22:
26:b3:d1:16:23:71:59:27:c9:5b:84:21:99:86:bc:
c4:ce:e7:c5:8d:8a:58:c9:a6:c6:09:ae:db:3b:2f:
5e:34:d9:c5:1e:79:e5:77:de:bb:34:41:bb:0c:64:
8d:f7:2b:88:16:10:ac:a4:4d:e6:81:22:2f:5f:c8:
cb:0d:1c:65:36:87:ff:84:c3:7c:0c:70:71:6a:cc:
ab:ec:a7:f6:4e:ef:be:82:15:29:c3:44:1c:ad:85:
1b:12:87:b3:01:d8:d0:c4:5f:ab:95:7f:14:62:b8:
92:1d:dc:e9:bf:50:b5:76:b5:d5:ab:ed:7f:d5:30:
1e:87:df:56:22:33:87:30:53:8f:e6:24:97:4f:58:
c3:83:70:4c:b4:c8:5c:ee:97:08:cb:01:3c:28:54:
5e:44:f5:c7:3f:55:d9:74:b5:02:2d:da:6b:26:12:
32:3a:f9:f2:61:ed:42:cf:af:2c:8d:e4:fa:b6:5a:
5d:48:37:c2:80:75:b1:17:dd:be:2f:bb:19:58:5b:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3D:C4:40:9E:BB:2B:C8:CA:FF:73:DC:86:E8:ED:81:FF:84:25:B4
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:e7:fb:f2:41:ef:c0:3e:5a:31:d1:9b:07:cd:5f:2f:02:
7a:af:fb:4b:70:ce:fb:b3:33:a7:dd:e1:c3:60:28:8e:47:84:
08:28:7b:8c:da:3b:ab:79:bf:23:d7:ad:3c:70:2c:dc:8a:d5:
5d:d6:b6:77:d7:0f:68:04:0c:81:74:ca:ff:96:ce:7b:3b:7b:
5c:90:fc:c2:a9:3a:49:7e:0f:35:d0:73:92:71:33:f0:2c:d7:
e6:fd:16:02:75:e3:f2:88:99:d1:16:24:db:be:ae:78:c9:90:
d2:5e:78:ad:ff:e9:4d:32:49:4d:0e:ff:f2:08:64:2f:16:40:
3c:cb:5c:00:d0:53:90:46:13:d3:90:1a:07:a6:aa:fd:9b:61:
87:3b:c7:ce:c8:1f:53:fc:5c:7e:62:84:6f:4a:12:21:1e:75:
48:7b:d7:5f:b6:ae:89:95:23:a7:b7:f9:4d:53:73:7f:9b:5d:
7d:17:e1:f8:27:22:4b:46:d1:f9:58:0b:ed:69:b5:75:a3:81:
66:c5:ab:28:85:d2:97:70:9d:d2:18:71:ec:b2:25:c4:a5:9b:
b7:36:4f:a4:78:4d:4e:06:f3:1b:ac:3e:c2:ca:5a:fc:12:1c:
0d:c0:73:c2:c6:5c:73:c2:e0:cc:12:b0:7b:93:a5:0a:6d:9d:
b0:9b:31:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkDVmEP2wRuzhMnmSRkdw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi
ZDNjNmUwHhcNMjQxMTI1MTYwMDE2WhcNMjQxMTI2MTYwMDE2WjAzMTEwLwYDVQQD
Eyg3YjNkYzQ0MDllYmIyYmM4Y2FmZjczZGM4NmU4ZWQ4MWZmODQyNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrLuWO3lNk6nBGzEYqFiE5pqlUmY
epKLMIT0wSyUJzwQUdO2tRsjazu+kjQXGeMwiU4sao4OnGOLwiIms9EWI3FZJ8lb
hCGZhrzEzufFjYpYyabGCa7bOy9eNNnFHnnld967NEG7DGSN9yuIFhCspE3mgSIv
X8jLDRxlNof/hMN8DHBxasyr7Kf2Tu++ghUpw0QcrYUbEoezAdjQxF+rlX8UYriS
Hdzpv1C1drXVq+1/1TAeh99WIjOHMFOP5iSXT1jDg3BMtMhc7pcIywE8KFReRPXH
P1XZdLUCLdprJhIyOvnyYe1Cz68sjeT6tlpdSDfCgHWxF92+L7sZWFvwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs9xECeuyvIyv9z3Ibo7YH/hCW0MB8GA1UdIwQY
MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt
NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1
LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwnn+/JB
78A+WjHRmwfNXy8Ceq/7S3DO+7Mzp93hw2AojkeECCh7jNo7q3m/I9etPHAs3IrV
Xda2d9cPaAQMgXTK/5bOezt7XJD8wqk6SX4PNdBzknEz8CzX5v0WAnXj8oiZ0RYk
276ueMmQ0l54rf/pTTJJTQ7/8ghkLxZAPMtcANBTkEYT05AaB6aq/ZthhzvHzsgf
U/xcfmKEb0oSIR51SHvXX7auiZUjp7f5TVNzf5tdfRfh+CciS0bR+VgL7Wm1daOB
ZsWrKIXSl3Cd0hhx7LIlxKWbtzZPpHhNTgbzG6w+wspa/BIcDcBzwsZcc8LgzBKw
e5OlCm2dsJsxfw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:53:21 2024 by rpki-client on console-fra.rpki-client.org