Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: +nqhyVcEOZGa0ctyJYkBBPT7NDRTL1ZTBfz8a5MC+68=
Subject key identifier: EB:20:78:50:A7:CD:59:3F:9A:C1:81:61:5F:8F:2B:29:D8:35:ED:09
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019373826F4A4000EEB7765ED50D975C8A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1381
Signing time: Thu 28 Nov 2024 16:02:28 +0000
Manifest this update: Thu 28 Nov 2024 16:02:28 +0000
Manifest next update: Fri 29 Nov 2024 16:02:28 +0000
Files and hashes: 1: M6m4mzr7mt-7zZhpWwgzFwkcciw.roa (hash: zA20CPBynHIs6aIQLdBsx0EMxs35D3OBLAuUTFtNgXI=)
2: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: JSaIaaE+JGWAkQXM4l9MwAdUIqnc9B1NJepStskUNms=)
3: prXeJS5mi-ks0_dAqGR4Fqv5fPA.roa (hash: QQzjOBOCqXBhMJkUkPsxNvJuqoRGlZKrQrKKc2UDaY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Nov 2024 16:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:82:6f:4a:40:00:ee:b7:76:5e:d5:0d:97:5c:8a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Nov 28 16:02:28 2024 GMT
Not After : Nov 29 16:02:28 2024 GMT
Subject: CN=eb207850a7cd593f9ac181615f8f2b29d835ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:da:aa:b3:c1:c8:e1:a5:57:94:c7:80:07:
a0:ad:be:c8:18:97:88:45:c3:c3:fc:57:d8:f2:0a:
8a:53:c3:12:fb:6d:e4:11:29:51:17:5f:ae:67:0a:
a6:35:2c:f9:f9:98:72:c5:60:ea:0f:93:7c:2e:51:
0d:ab:d8:12:7e:29:15:b9:63:aa:44:da:87:d8:d9:
8c:fe:3c:59:80:15:19:64:3a:1e:cf:8d:b8:96:38:
0f:aa:0a:f1:07:9e:9a:53:ad:c8:f6:27:6f:bd:ad:
47:f6:7c:85:b5:4b:ae:14:6a:5b:09:78:ce:f1:de:
78:93:b5:15:d3:c2:a8:1d:c3:15:c9:77:05:99:69:
3e:79:5a:7e:0c:5d:21:06:aa:b9:95:90:ff:c9:b1:
7b:03:82:7c:93:5f:99:07:db:a2:71:f4:d1:6d:56:
c6:38:36:94:d3:bb:bf:96:2d:54:52:58:3c:e5:2b:
7e:22:e4:a4:55:63:6d:9c:48:47:5b:27:a4:58:87:
32:62:12:f8:de:f1:7e:03:e1:0b:38:52:2d:81:ec:
2c:d4:22:b9:09:03:ba:18:b7:73:56:f9:22:d8:73:
a5:bf:92:9b:45:9a:a9:9f:55:4f:d7:e8:ef:53:64:
f1:ec:cf:77:11:08:db:a0:d5:12:11:9c:fe:a0:0c:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:78:50:A7:CD:59:3F:9A:C1:81:61:5F:8F:2B:29:D8:35:ED:09
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cf:7c:f2:07:b0:55:7f:8e:45:61:90:b1:c9:6f:a4:12:62:
50:98:24:2f:55:94:a8:4d:fb:70:23:47:ff:72:8d:d6:3b:74:
9e:88:03:a9:08:09:6e:dc:7b:a8:9f:ed:4f:de:90:7a:a1:29:
14:e6:d4:b1:77:e5:8c:70:c4:72:a9:39:13:40:fd:39:31:fc:
c5:88:15:79:9c:48:75:62:3f:70:de:1d:f1:43:b1:1e:90:76:
2b:07:9c:72:43:69:5b:af:97:05:b5:81:f7:49:48:0e:d1:cf:
e8:a7:98:77:1d:08:38:87:92:b4:b2:e2:30:53:aa:01:ff:99:
e5:fe:44:88:38:fa:eb:30:93:42:98:f6:8c:40:ef:e5:3d:fe:
7e:5f:45:e0:d6:df:62:84:ca:74:92:4a:93:9b:f6:fe:fa:42:
19:d7:60:12:8b:78:a4:09:90:01:9a:2f:b5:ce:92:17:26:74:
74:04:c0:00:85:43:56:e1:83:97:bc:3c:ee:77:df:9d:c1:74:
43:f9:94:94:81:4f:a6:e0:5b:fa:df:d2:29:84:1b:4d:42:18:
29:e8:6a:56:4b:ea:b2:99:6d:71:9c:7b:b6:d8:ab:e5:06:04:
d2:8c:af:fa:39:55:08:f6:9b:5c:a9:60:83:43:e5:a1:84:bc:
ee:2f:27:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNzgm9KQADut3Ze1Q2XXIqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy
OTljODcwHhcNMjQxMTI4MTYwMjI4WhcNMjQxMTI5MTYwMjI4WjAzMTEwLwYDVQQD
EyhlYjIwNzg1MGE3Y2Q1OTNmOWFjMTgxNjE1ZjhmMmIyOWQ4MzVlZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA173aqrPByOGlV5THgAegrb7IGJeI
RcPD/FfY8gqKU8MS+23kESlRF1+uZwqmNSz5+ZhyxWDqD5N8LlENq9gSfikVuWOq
RNqH2NmM/jxZgBUZZDoez424ljgPqgrxB56aU63I9idvva1H9nyFtUuuFGpbCXjO
8d54k7UV08KoHcMVyXcFmWk+eVp+DF0hBqq5lZD/ybF7A4J8k1+ZB9uicfTRbVbG
ODaU07u/li1UUlg85St+IuSkVWNtnEhHWyekWIcyYhL43vF+A+ELOFItgews1CK5
CQO6GLdzVvki2HOlv5KbRZqpn1VP1+jvU2Tx7M93EQjboNUSEZz+oAyYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsgeFCnzVk/msGBYV+PKynYNe0JMB8GA1UdIwQY
MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt
MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3
LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs988gew
VX+ORWGQsclvpBJiUJgkL1WUqE37cCNH/3KN1jt0nogDqQgJbtx7qJ/tT96QeqEp
FObUsXfljHDEcqk5E0D9OTH8xYgVeZxIdWI/cN4d8UOxHpB2KwecckNpW6+XBbWB
90lIDtHP6KeYdx0IOIeStLLiMFOqAf+Z5f5EiDj66zCTQpj2jEDv5T3+fl9F4Nbf
YoTKdJJKk5v2/vpCGddgEot4pAmQAZovtc6SFyZ0dATAAIVDVuGDl7w87nffncF0
Q/mUlIFPpuBb+t/SKYQbTUIYKehqVkvqspltcZx7ttir5QYE0oyv+jlVCPabXKlg
g0PloYS87i8nLg==
-----END CERTIFICATE-----
Generated at Thu Nov 28 20:51:09 2024 by rpki-client on console-fra.rpki-client.org