Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: E46wf0NufPGRt+pdarfmatA8ftUlbr5sVUUC380V8EA=
Subject key identifier: 4D:01:6D:35:B5:C5:A0:55:D9:94:EA:63:A1:C8:1A:A8:73:A6:69:1F
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 0193610C58C71660D866D6472228D3A77158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 04FA
Signing time: Mon 25 Nov 2024 02:00:19 +0000
Manifest this update: Mon 25 Nov 2024 02:00:19 +0000
Manifest next update: Tue 26 Nov 2024 02:00:19 +0000
Files and hashes: 1: 8714y1cJoUfVDr6-weVdaRbxurg.roa (hash: /7eK/PzTSWX70+x8AUZ2SDONibdYbjDHtS4mzzmHFIw=)
2: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: zgCIrAAswCQx2uCS/lh8Mb7yDZbzZiaJIF502ISX218=)
3: bVelgazzacUJ0HYSO0pwzkUE6Bk.roa (hash: HgU/G/f7A+21gDvSRV8VDNJLH/hG2LEqOVJ++eScOW0=)
4: se2VMrdwJ7lMTDTYchtZ_rqrwWk.roa (hash: 0metrOFI/CLhyYIWonhAodhEqxzBJKBGM9QlUwIyhJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:0c:58:c7:16:60:d8:66:d6:47:22:28:d3:a7:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Nov 25 02:00:19 2024 GMT
Not After : Nov 26 02:00:19 2024 GMT
Subject: CN=4d016d35b5c5a055d994ea63a1c81aa873a6691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:44:94:2e:d0:7b:6b:64:01:47:43:8a:60:
47:79:ce:2b:6b:7d:6c:76:f7:d1:9c:e4:af:bc:b9:
ac:ab:45:53:fc:b5:b6:67:bf:65:b6:6d:b3:d2:ff:
dd:2f:e2:61:18:91:37:58:f0:0f:c1:f5:2e:65:55:
c7:22:f7:30:84:e0:2c:62:4a:3e:8a:7e:14:f4:22:
a5:6c:f2:11:ec:00:35:4c:2a:99:c5:2e:10:12:9d:
25:3b:53:df:82:d4:54:a6:ad:5b:49:ba:7a:c1:44:
b5:dc:08:04:de:26:7a:65:0e:50:82:4c:2e:e5:a0:
d5:7b:34:66:65:5c:b5:25:11:21:00:ca:41:d3:d8:
5c:70:d7:5f:71:82:54:7d:29:02:56:a3:d8:dc:d6:
aa:0a:3d:ea:7a:44:0b:e1:f9:e7:eb:1f:56:50:c1:
24:75:6f:8a:dd:e3:69:11:45:4e:79:66:e2:27:9f:
b0:13:83:3e:a6:ef:1c:15:90:07:1e:d4:53:ad:64:
cd:57:13:7a:99:ba:b2:42:3b:90:07:b8:3e:ba:96:
3d:13:a4:97:3a:c6:b3:35:7e:91:aa:38:f9:2f:e6:
52:d8:a7:00:cd:23:8b:02:13:5e:4d:2a:dc:a5:f1:
7a:b9:24:98:86:90:81:12:24:9e:95:66:f8:f1:78:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:6D:35:B5:C5:A0:55:D9:94:EA:63:A1:C8:1A:A8:73:A6:69:1F
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:2e:92:e5:11:92:af:2f:16:d2:30:96:02:6e:2f:3f:55:
64:af:7a:03:56:d4:34:ff:49:fc:17:a3:27:1f:fd:21:bd:80:
5b:37:f0:01:5b:fd:38:f5:e3:2b:84:68:14:9d:49:3b:79:54:
3a:dd:36:b0:ec:39:97:cf:fd:b6:f4:7f:15:4e:16:8c:4e:7b:
27:fb:f6:ac:2d:4c:69:5b:37:70:27:91:58:51:4e:32:74:a5:
8a:d8:f2:da:04:46:6c:7d:24:2c:9f:97:a1:33:8f:c6:ab:23:
17:bc:a7:1c:92:af:c3:62:fd:41:a2:71:95:35:16:2b:f9:75:
63:3c:96:fe:68:36:9d:6a:85:bd:09:9f:5d:74:68:0f:11:17:
c0:20:35:8d:d6:90:c7:f2:01:f8:54:7e:97:1a:52:72:09:12:
f0:8b:36:c8:c4:2e:7d:42:3d:9a:6a:4d:6e:f3:ee:3a:4d:5f:
44:7a:52:7c:00:4c:ab:e3:9e:b2:4d:3b:9c:be:6c:29:45:98:
ba:60:f6:4e:c3:f2:bb:71:2f:69:5b:ed:c8:12:05:28:52:b1:
f7:7b:24:05:41:31:54:64:c7:91:53:ab:39:d8:be:92:20:1d:
63:8c:a8:78:6a:59:c3:b4:df:5c:b1:cf:04:be:f9:00:04:ac:
9a:67:39:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNhDFjHFmDYZtZHIijTp3FYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjQxMTI1MDIwMDE5WhcNMjQxMTI2MDIwMDE5WjAzMTEwLwYDVQQD
Eyg0ZDAxNmQzNWI1YzVhMDU1ZDk5NGVhNjNhMWM4MWFhODczYTY2OTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLlElC7Qe2tkAUdDimBHec4ra31s
dvfRnOSvvLmsq0VT/LW2Z79ltm2z0v/dL+JhGJE3WPAPwfUuZVXHIvcwhOAsYko+
in4U9CKlbPIR7AA1TCqZxS4QEp0lO1PfgtRUpq1bSbp6wUS13AgE3iZ6ZQ5Qgkwu
5aDVezRmZVy1JREhAMpB09hccNdfcYJUfSkCVqPY3NaqCj3qekQL4fnn6x9WUMEk
dW+K3eNpEUVOeWbiJ5+wE4M+pu8cFZAHHtRTrWTNVxN6mbqyQjuQB7g+upY9E6SX
OsazNX6Rqjj5L+ZS2KcAzSOLAhNeTSrcpfF6uSSYhpCBEiSelWb48XjWmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0BbTW1xaBV2ZTqY6HIGqhzpmkfMB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJsukuUR
kq8vFtIwlgJuLz9VZK96A1bUNP9J/BejJx/9Ib2AWzfwAVv9OPXjK4RoFJ1JO3lU
Ot02sOw5l8/9tvR/FU4WjE57J/v2rC1MaVs3cCeRWFFOMnSlitjy2gRGbH0kLJ+X
oTOPxqsjF7ynHJKvw2L9QaJxlTUWK/l1YzyW/mg2nWqFvQmfXXRoDxEXwCA1jdaQ
x/IB+FR+lxpScgkS8Is2yMQufUI9mmpNbvPuOk1fRHpSfABMq+Oesk07nL5sKUWY
umD2TsPyu3EvaVvtyBIFKFKx93skBUExVGTHkVOrOdi+kiAdY4yoeGpZw7TfXLHP
BL75AASsmmc5Gg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 11:43:53 2024 by rpki-client on console-fra.rpki-client.org