Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: rkRhk5RsOaG44rZWYRD57/KDXKBclwQl1erDNTfZt4s=
Subject key identifier: 0D:5F:1E:AF:1B:EC:2F:CF:93:E9:56:5C:E8:0D:90:3E:A0:5C:6A:83
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019357D2A9A3E3B8E27BA69461D44B5E1AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:43 +0000
Manifest this update: Sat 23 Nov 2024 07:00:43 +0000
Manifest next update: Sun 24 Nov 2024 07:00:43 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: Pk2V0ZPaeLxw56g2Nn+BxSqWpZhvkfc/sYFAHLRxvyU=)
2: uJ6qlYeaI0HEgCERT3id2BEuALs.roa (hash: FJONdAC9H9fI0pXZTUjXRmsEV4xr8OsNwkNqJooyfoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a9:a3:e3:b8:e2:7b:a6:94:61:d4:4b:5e:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Nov 23 07:00:43 2024 GMT
Not After : Nov 24 07:00:43 2024 GMT
Subject: CN=0d5f1eaf1bec2fcf93e9565ce80d903ea05c6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:fd:81:da:b2:b3:04:c3:56:63:41:7a:98:
54:19:ef:4b:62:c0:f9:cd:a9:fd:e4:fc:cf:e7:b8:
a3:35:1a:4c:fc:56:3a:1e:f8:b9:74:8e:3f:0a:f3:
1f:fb:5f:2e:ca:06:0a:29:99:39:9e:b5:7e:98:9f:
53:b5:15:bc:d4:ea:e5:d1:12:ad:c0:8b:d1:5f:ac:
ff:44:c8:f4:16:64:d4:1c:3d:aa:43:49:76:ab:15:
2b:5c:aa:3c:3c:04:2c:ea:17:47:8a:60:d0:24:5c:
57:d0:eb:23:45:b4:21:70:af:43:e6:81:8d:28:ce:
28:62:32:27:10:5e:13:b5:d4:10:ce:2c:08:61:7e:
fc:fd:a6:9e:1b:18:e4:6e:97:d0:f1:55:d0:71:dd:
8a:04:a9:9c:d4:a7:e0:87:9a:b1:e8:8e:41:f4:9b:
25:13:65:c3:5d:54:38:b5:9b:e8:86:e1:ee:5e:8d:
26:d9:56:c3:63:6f:ef:d9:c3:af:f7:13:bc:b7:59:
eb:0c:f4:dc:f1:89:e9:b7:1c:d9:88:47:96:82:29:
a7:cf:dd:7b:cd:56:49:59:d1:82:a4:fd:69:53:33:
b9:0c:87:c6:bf:0b:9a:b5:43:96:c6:d5:9a:79:ed:
21:8f:d2:09:50:d8:54:8f:d5:23:62:90:1c:c9:e6:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:1E:AF:1B:EC:2F:CF:93:E9:56:5C:E8:0D:90:3E:A0:5C:6A:83
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:8b:0a:a9:08:e8:21:77:ad:59:31:0f:fa:0a:09:18:2f:
74:37:82:24:0e:f1:20:04:8a:45:0c:42:d2:89:c5:28:d6:1e:
29:f5:ed:41:2f:c4:db:f7:7b:c9:4f:b9:c1:fa:bc:0a:96:17:
6c:06:90:00:c3:2a:a5:f6:6b:0f:bf:3f:90:fd:7c:16:7d:1f:
db:83:f7:8c:ad:d0:52:bc:a2:04:6d:af:98:96:d2:e5:79:70:
ad:18:b0:17:bf:0e:f6:6f:ff:e1:74:89:b4:21:0a:ca:6b:b1:
49:66:9a:8b:37:32:74:27:d2:14:d6:3d:7d:cc:f8:fa:76:27:
a5:6d:cc:5a:58:26:06:9b:66:97:48:cb:d6:39:bd:6f:c2:b0:
f4:86:f5:a2:5c:7a:d7:ef:32:72:e1:59:29:cc:f8:ff:fc:83:
bf:b9:7b:13:87:1a:00:5b:b4:31:3f:49:63:74:0a:81:f7:52:
03:fe:94:20:da:c2:90:04:fe:fe:e2:70:df:71:5c:e9:33:78:
72:03:7e:14:42:cf:ba:c8:77:66:23:de:54:32:53:2d:b5:e7:
c8:80:00:76:1a:9c:7a:74:2f:b8:d0:9a:5b:de:17:d3:38:56:
26:51:f9:63:a0:ee:c6:5e:1a:fa:d9:01:00:e1:30:34:c2:c4:
f3:74:43:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0qmj47jie6aUYdRLXhr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw
NzM4ZjYwHhcNMjQxMTIzMDcwMDQzWhcNMjQxMTI0MDcwMDQzWjAzMTEwLwYDVQQD
EygwZDVmMWVhZjFiZWMyZmNmOTNlOTU2NWNlODBkOTAzZWEwNWM2YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPn9gdqyswTDVmNBephUGe9LYsD5
zan95PzP57ijNRpM/FY6Hvi5dI4/CvMf+18uygYKKZk5nrV+mJ9TtRW81Orl0RKt
wIvRX6z/RMj0FmTUHD2qQ0l2qxUrXKo8PAQs6hdHimDQJFxX0OsjRbQhcK9D5oGN
KM4oYjInEF4TtdQQziwIYX78/aaeGxjkbpfQ8VXQcd2KBKmc1Kfgh5qx6I5B9Jsl
E2XDXVQ4tZvohuHuXo0m2VbDY2/v2cOv9xO8t1nrDPTc8YnptxzZiEeWgimnz917
zVZJWdGCpP1pUzO5DIfGvwuatUOWxtWaee0hj9IJUNhUj9UjYpAcyeZG6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1fHq8b7C/Pk+lWXOgNkD6gXGqDMB8GA1UdIwQY
MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt
Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm
LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErGLCqkI
6CF3rVkxD/oKCRgvdDeCJA7xIASKRQxC0onFKNYeKfXtQS/E2/d7yU+5wfq8CpYX
bAaQAMMqpfZrD78/kP18Fn0f24P3jK3QUryiBG2vmJbS5XlwrRiwF78O9m//4XSJ
tCEKymuxSWaaizcydCfSFNY9fcz4+nYnpW3MWlgmBptml0jL1jm9b8Kw9Ib1olx6
1+8ycuFZKcz4//yDv7l7E4caAFu0MT9JY3QKgfdSA/6UINrCkAT+/uJw33Fc6TN4
cgN+FELPush3ZiPeVDJTLbXnyIAAdhqcenQvuNCaW94X0zhWJlH5Y6Duxl4a+tkB
AOEwNMLE83RDzQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:46 2024 by rpki-client on console-fra.rpki-client.org