Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: BBddCwi2mRKhoSdBFQvVnl8IJ/h5OTaGAllUMYVWOy8=
Subject key identifier: 2F:83:38:AB:6C:3E:72:AE:A0:33:EC:25:33:B0:12:85:0D:0F:72:01
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 01935809395C2259D3ED609D6BA57B6A08DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 8F
Signing time: Sat 23 Nov 2024 08:00:19 +0000
Manifest this update: Sat 23 Nov 2024 08:00:19 +0000
Manifest next update: Sun 24 Nov 2024 08:00:19 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: MBR+G+WRKnkotDm+8QASigovEc/ex372OwVA34HTMlY=)
2: Ye8xbyXEduWp7MCs2qpNjnGrJ9s.roa (hash: YtDec18J+h/wwtS0ocE2s/AiwigDoyEfgq1IT0+kDHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:39:5c:22:59:d3:ed:60:9d:6b:a5:7b:6a:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Nov 23 08:00:19 2024 GMT
Not After : Nov 24 08:00:19 2024 GMT
Subject: CN=2f8338ab6c3e72aea033ec2533b012850d0f7201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:07:05:dd:3b:e8:c5:65:d6:53:b9:ed:12:
ee:a2:78:b6:07:da:6a:ed:f0:02:c8:83:42:92:a5:
16:71:6d:90:ec:93:1e:95:b0:38:8f:cd:5e:c9:e0:
87:49:59:80:67:4a:c3:9e:24:15:4b:2f:d2:11:bf:
c3:44:b2:ae:0a:94:40:50:49:a7:af:67:68:d8:e4:
ef:72:4c:1c:62:a9:51:b6:69:b6:4c:76:47:fe:87:
2e:9a:bf:ab:6a:4d:71:92:a4:44:60:b1:f5:95:96:
c9:57:25:34:16:3f:6d:48:7a:f3:36:71:cd:9d:2e:
f2:1b:b5:0f:a8:d9:1c:0d:e3:55:8a:ae:af:01:70:
14:2b:7f:0b:af:ef:e0:0d:a7:09:8b:2b:9a:80:c3:
ff:56:6a:cd:28:13:c7:ed:75:48:91:f5:45:eb:e7:
cd:5d:b2:fd:88:97:49:17:b0:0a:49:96:72:50:44:
46:d0:7a:2d:00:bd:f2:c6:23:ba:39:51:f3:e1:1a:
6a:fc:b3:e9:d8:a6:ac:4f:d7:89:b6:43:2d:95:4f:
02:c9:74:dc:49:1b:ad:39:29:e2:19:27:90:e9:13:
e7:44:91:23:71:4e:d0:fd:5c:d4:78:26:9d:8f:f8:
eb:dd:3e:55:0d:0f:9c:e8:34:bc:8f:2b:33:9a:f9:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:83:38:AB:6C:3E:72:AE:A0:33:EC:25:33:B0:12:85:0D:0F:72:01
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:69:7e:93:e7:03:85:28:c8:54:95:8d:23:54:05:21:ad:65:
f8:aa:62:af:95:ea:be:c4:56:35:7d:b6:d4:b8:16:e9:bc:bd:
a3:a8:a4:a8:ab:43:38:9f:f6:d1:2b:04:d5:df:fe:2c:72:e8:
f2:29:7f:7b:c8:f9:58:3e:56:cf:f3:2c:11:3a:bf:07:3a:5e:
a7:50:cb:1a:7a:c6:94:92:f8:74:99:77:6a:aa:eb:f8:46:48:
cb:de:fe:c0:31:74:9a:b8:db:63:c5:6c:90:3d:cb:98:41:37:
ca:14:0d:27:e7:7d:95:9d:cc:3c:76:3b:4c:e6:55:ad:8b:dc:
29:57:c8:6b:82:c7:70:08:82:3e:6d:ac:5f:47:05:77:41:a7:
6c:31:18:a1:5f:b3:68:5c:48:37:15:43:ce:2e:ca:ff:2a:e4:
2d:45:8e:88:c2:95:b7:ad:2a:e3:83:41:3b:49:7a:92:0f:fe:
d3:a5:84:40:3a:15:8c:f9:14:0c:f0:f4:29:8e:fe:5a:cd:26:
b6:ab:41:91:60:ce:24:6c:10:95:84:5a:96:27:99:69:47:22:
30:5a:b0:cb:7c:3d:85:d8:41:aa:09:a6:e3:0b:90:ba:8a:56:
c2:ec:89:e8:b9:7e:cc:b5:e1:92:e8:58:c4:43:d1:f9:c5:da:
70:03:c2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYCTlcIlnT7WCda6V7agjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw
N2EwZTIwHhcNMjQxMTIzMDgwMDE5WhcNMjQxMTI0MDgwMDE5WjAzMTEwLwYDVQQD
EygyZjgzMzhhYjZjM2U3MmFlYTAzM2VjMjUzM2IwMTI4NTBkMGY3MjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUgHBd076MVl1lO57RLuoni2B9pq
7fACyINCkqUWcW2Q7JMelbA4j81eyeCHSVmAZ0rDniQVSy/SEb/DRLKuCpRAUEmn
r2do2OTvckwcYqlRtmm2THZH/ocumr+rak1xkqREYLH1lZbJVyU0Fj9tSHrzNnHN
nS7yG7UPqNkcDeNViq6vAXAUK38Lr+/gDacJiyuagMP/VmrNKBPH7XVIkfVF6+fN
XbL9iJdJF7AKSZZyUERG0HotAL3yxiO6OVHz4Rpq/LPp2KasT9eJtkMtlU8CyXTc
SRutOSniGSeQ6RPnRJEjcU7Q/VzUeCadj/jr3T5VDQ+c6DS8jyszmvlFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+DOKtsPnKuoDPsJTOwEoUND3IBMB8GA1UdIwQY
MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt
MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy
LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2l+k+cD
hSjIVJWNI1QFIa1l+Kpir5XqvsRWNX221LgW6by9o6ikqKtDOJ/20SsE1d/+LHLo
8il/e8j5WD5Wz/MsETq/Bzpep1DLGnrGlJL4dJl3aqrr+EZIy97+wDF0mrjbY8Vs
kD3LmEE3yhQNJ+d9lZ3MPHY7TOZVrYvcKVfIa4LHcAiCPm2sX0cFd0GnbDEYoV+z
aFxINxVDzi7K/yrkLUWOiMKVt60q44NBO0l6kg/+06WEQDoVjPkUDPD0KY7+Ws0m
tqtBkWDOJGwQlYRalieZaUciMFqwy3w9hdhBqgmm4wuQuopWwuyJ6Ll+zLXhkuhY
xEPR+cXacAPC/A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:52 2024 by rpki-client on console-ams.rpki-client.org