Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: uDp+hnwUNgu7EQLAabl4amkEVD/NqY8rzCsgF0+0zuc=
Subject key identifier: CC:65:42:6A:F5:45:96:3D:F7:6B:89:37:AB:0F:0A:AE:FE:05:DD:40
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019352ABCBA22F3F2B8584772472359BFF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 02D1
Signing time: Fri 22 Nov 2024 07:00:10 +0000
Manifest this update: Fri 22 Nov 2024 07:00:10 +0000
Manifest next update: Sat 23 Nov 2024 07:00:10 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: NS/kIRDwgVhB/ieZVwBc/5oUMp6J7ypy52chxwgPSIc=)
2: aQ6AAMUYyuo8fxRTfSaTfwI-Us8.roa (hash: sJAZY3r2T56mEc21Uu2dyrsmzYU4P51oZoAkGHVrDkk=)
3: s_AS8GMbLo8HP4Ixz9C_1dr50pU.roa (hash: t419i0r0P0RuTby3lMQOMk1qP1otdeanF4uk7K6aiiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:cb:a2:2f:3f:2b:85:84:77:24:72:35:9b:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Nov 22 07:00:10 2024 GMT
Not After : Nov 23 07:00:10 2024 GMT
Subject: CN=cc65426af545963df76b8937ab0f0aaefe05dd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:dc:37:5d:e8:47:6d:b0:38:aa:c8:f6:5e:
d5:f4:55:df:c0:8a:00:20:79:84:af:02:39:0a:5f:
2e:ac:f0:2a:01:b0:53:9d:be:f5:fa:da:6f:c4:4b:
6b:5b:98:6d:bd:8c:1d:28:e9:20:ba:65:96:29:95:
d0:3d:0f:1f:41:19:04:0f:56:69:76:7f:cd:29:ce:
b4:2c:39:53:f6:01:ca:9c:a4:fe:fa:1c:c2:b5:05:
dd:66:0a:fb:fb:b5:14:ed:f6:2d:10:61:42:08:91:
f3:6a:53:b8:62:0a:88:73:f8:42:f6:72:dd:1c:c0:
e6:9d:63:3f:76:41:f2:26:73:b6:94:3e:40:1e:b8:
51:8a:e3:20:01:47:d5:51:ab:d4:5b:03:46:30:e4:
bb:d7:cb:ca:ae:c3:c6:eb:b8:dc:69:a7:61:b9:f3:
c4:1e:8c:8d:a5:0d:a6:a5:54:04:7a:a9:19:ac:24:
d8:05:67:da:43:fc:22:6f:70:62:0a:6a:c3:cb:89:
b5:a5:4e:0b:4d:83:42:e0:74:0f:bb:a4:3b:0b:07:
0e:66:4d:8a:5b:13:3b:9f:b8:ed:9b:22:d9:dc:e5:
b7:19:af:03:6c:8c:4c:c1:a1:ac:5a:f4:1b:e9:88:
38:a9:6c:fe:74:a2:eb:f0:49:2c:35:04:4b:44:c1:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:42:6A:F5:45:96:3D:F7:6B:89:37:AB:0F:0A:AE:FE:05:DD:40
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:12:1d:66:d8:9c:9e:d5:37:43:29:30:5d:e8:99:7e:fa:af:
d0:84:e8:62:1f:fc:34:a8:94:0e:76:13:f1:13:b6:91:35:9b:
3d:dc:b4:de:11:ad:9d:87:df:a1:00:c8:5d:94:a3:7b:12:37:
26:17:ef:4a:de:04:ef:85:ea:bd:fc:73:1b:67:69:d0:9b:58:
08:3c:62:78:21:45:91:38:39:20:68:d4:6d:d9:e2:b7:9e:c9:
01:a2:49:3b:3f:92:2d:bd:fb:b7:f7:75:49:4f:b2:36:6b:5c:
5a:67:da:6c:aa:85:a7:5f:4c:4e:8e:77:e6:95:78:12:9c:9c:
e3:ad:9c:34:c4:48:ba:d3:f3:41:b4:90:cc:30:c3:44:ab:86:
c9:5c:64:38:b4:c8:61:88:6d:5d:cc:12:10:59:6c:63:20:a4:
aa:6e:91:c6:e6:8d:cc:eb:be:ca:26:d9:59:48:98:73:75:f0:
5f:fe:74:f7:5e:21:3f:3b:c9:96:14:5f:c2:89:5a:e9:21:5d:
64:c5:3c:fd:9d:4a:87:16:b1:85:77:c8:07:60:d0:11:3d:19:
76:8f:70:05:fb:ca:9f:4a:7a:b3:00:9a:3e:a9:ec:8c:f8:f6:
ae:94:0e:99:89:56:87:a5:f0:3f:39:8d:e7:01:c4:ab:8c:76:
57:dc:86:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSq8uiLz8rhYR3JHI1m/9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4
MjNhMDIwHhcNMjQxMTIyMDcwMDEwWhcNMjQxMTIzMDcwMDEwWjAzMTEwLwYDVQQD
EyhjYzY1NDI2YWY1NDU5NjNkZjc2Yjg5MzdhYjBmMGFhZWZlMDVkZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOHcN13oR22wOKrI9l7V9FXfwIoA
IHmErwI5Cl8urPAqAbBTnb71+tpvxEtrW5htvYwdKOkgumWWKZXQPQ8fQRkED1Zp
dn/NKc60LDlT9gHKnKT++hzCtQXdZgr7+7UU7fYtEGFCCJHzalO4YgqIc/hC9nLd
HMDmnWM/dkHyJnO2lD5AHrhRiuMgAUfVUavUWwNGMOS718vKrsPG67jcaadhufPE
HoyNpQ2mpVQEeqkZrCTYBWfaQ/wib3BiCmrDy4m1pU4LTYNC4HQPu6Q7CwcOZk2K
WxM7n7jtmyLZ3OW3Ga8DbIxMwaGsWvQb6Yg4qWz+dKLr8EksNQRLRMGXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxlQmr1RZY992uJN6sPCq7+Bd1AMB8GA1UdIwQY
MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt
NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw
LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhIdZtic
ntU3QykwXeiZfvqv0IToYh/8NKiUDnYT8RO2kTWbPdy03hGtnYffoQDIXZSjexI3
JhfvSt4E74XqvfxzG2dp0JtYCDxieCFFkTg5IGjUbdnit57JAaJJOz+SLb37t/d1
SU+yNmtcWmfabKqFp19MTo535pV4Epyc462cNMRIutPzQbSQzDDDRKuGyVxkOLTI
YYhtXcwSEFlsYyCkqm6RxuaNzOu+yibZWUiYc3XwX/50914hPzvJlhRfwola6SFd
ZMU8/Z1KhxaxhXfIB2DQET0Zdo9wBfvKn0p6swCaPqnsjPj2rpQOmYlWh6XwPzmN
5wHEq4x2V9yGPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:31 2024 by rpki-client on console-ams.rpki-client.org