Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: k5TVMZaDddyWW8yhIOacEnS6ptcEzFteztmoc7nzbBQ=
Subject key identifier: 95:6B:4C:34:A3:56:5E:28:0F:06:58:BA:5E:F1:B3:BA:3F:09:CF:21
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 0194056A7F836CF6E06B3732175134350448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 00:00:53 +0000
Manifest this update: Fri 27 Dec 2024 00:00:53 +0000
Manifest next update: Sat 28 Dec 2024 00:00:53 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: YNinfcdes0W0+Atft9RX15UJaTCUo7aveFFSWVYMbRs=)
2: IT2bk4dv9wOkuJfpHqAjH87DIvc.roa (hash: e0C6AzkhODudLWvRQAiKhtrl+62mStCU6ARDxkP5Jsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:6a:7f:83:6c:f6:e0:6b:37:32:17:51:34:35:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Dec 27 00:00:53 2024 GMT
Not After : Dec 28 00:00:53 2024 GMT
Subject: CN=956b4c34a3565e280f0658ba5ef1b3ba3f09cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:49:64:39:39:f5:21:26:f5:c7:a4:2f:e4:
8d:e6:7d:8b:ee:3c:92:1d:2b:fc:17:f4:b3:75:1a:
ac:f8:8c:09:c7:11:6c:3d:8b:82:10:12:19:65:4d:
da:b8:9b:14:9b:32:ab:49:61:d2:20:80:11:08:31:
94:d2:0f:a8:62:af:21:93:57:0c:ed:3a:ff:7c:c8:
5b:88:ab:61:a3:9f:98:9c:e8:f7:5a:2d:4b:9e:93:
ca:3b:02:e5:d2:73:15:41:39:91:cc:0c:98:e6:3a:
f1:b8:4d:54:85:62:15:64:24:ce:b6:91:c1:6d:52:
d0:c3:69:a7:15:91:46:6e:be:ec:aa:d9:6f:64:74:
38:b6:58:57:93:89:27:0f:f2:d4:d8:92:ec:f4:01:
6a:7e:ef:9f:dc:4a:8c:75:6a:2b:70:5c:ee:3d:a6:
3d:cc:4b:2a:e1:b3:f5:f3:99:e3:e0:9d:b0:e4:25:
0f:5e:4e:05:1b:8b:0c:36:66:1d:e6:69:1b:e7:de:
44:c1:f8:0c:53:74:52:53:43:ec:09:b2:31:0b:88:
3f:5a:ba:de:de:5c:49:a9:09:0b:91:0d:99:d8:6f:
c2:98:8d:07:6b:64:75:dc:20:6d:5a:64:59:2b:64:
a1:ab:fd:6a:8e:7c:8f:f2:4a:cd:d4:7e:66:f6:79:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:4C:34:A3:56:5E:28:0F:06:58:BA:5E:F1:B3:BA:3F:09:CF:21
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:17:5c:9e:1a:51:44:78:c3:76:93:c3:26:59:33:bc:40:
2c:a0:b9:99:d3:db:b7:10:dd:b5:f9:ae:23:ad:84:07:e5:80:
9b:74:64:22:d2:f9:23:0c:c1:bd:fc:24:ff:cb:0c:7b:ff:6d:
c5:3b:df:bb:ad:a9:5f:22:d6:99:c8:8b:a3:92:05:12:79:2d:
e4:6f:86:2b:fe:1d:b1:6a:91:65:4b:71:02:cc:bf:24:32:9d:
52:25:f6:d8:70:8b:37:b1:06:56:e7:00:32:21:c3:6a:c6:65:
c9:bf:cb:92:c1:74:4a:c6:b0:40:db:48:35:39:ea:82:a9:7e:
04:ea:39:0d:72:02:7a:ee:f0:a9:80:8a:34:21:ae:c9:46:3c:
12:80:68:71:3f:e1:5e:ed:68:4e:9d:e0:a8:e2:11:b3:2d:78:
e5:ee:dc:68:ba:f5:f1:1a:aa:b7:e3:c0:17:2d:bc:27:5a:c1:
36:13:0b:22:72:40:42:34:f2:28:9d:dd:55:4b:29:d6:b6:a3:
d7:77:dd:ce:fb:36:61:f1:98:6b:60:64:f4:c3:4f:f3:50:d3:
68:14:da:8e:87:1a:9c:1d:b4:7d:83:ed:30:86:1c:9a:9a:e3:
bc:23:9f:d3:c1:c6:6d:8b:e7:e4:71:34:44:44:8c:94:9e:9b:
45:00:51:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQFan+DbPbgazcyF1E0NQRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk
MjNlNWQwHhcNMjQxMjI3MDAwMDUzWhcNMjQxMjI4MDAwMDUzWjAzMTEwLwYDVQQD
Eyg5NTZiNGMzNGEzNTY1ZTI4MGYwNjU4YmE1ZWYxYjNiYTNmMDljZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSRJZDk59SEm9cekL+SN5n2L7jyS
HSv8F/SzdRqs+IwJxxFsPYuCEBIZZU3auJsUmzKrSWHSIIARCDGU0g+oYq8hk1cM
7Tr/fMhbiKtho5+YnOj3Wi1LnpPKOwLl0nMVQTmRzAyY5jrxuE1UhWIVZCTOtpHB
bVLQw2mnFZFGbr7sqtlvZHQ4tlhXk4knD/LU2JLs9AFqfu+f3EqMdWorcFzuPaY9
zEsq4bP185nj4J2w5CUPXk4FG4sMNmYd5mkb595EwfgMU3RSU0PsCbIxC4g/Wrre
3lxJqQkLkQ2Z2G/CmI0Ha2R13CBtWmRZK2Shq/1qjnyP8krN1H5m9nkuJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVrTDSjVl4oDwZYul7xs7o/Cc8hMB8GA1UdIwQY
MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt
NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4
LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8UXXJ4a
UUR4w3aTwyZZM7xALKC5mdPbtxDdtfmuI62EB+WAm3RkItL5IwzBvfwk/8sMe/9t
xTvfu62pXyLWmciLo5IFEnkt5G+GK/4dsWqRZUtxAsy/JDKdUiX22HCLN7EGVucA
MiHDasZlyb/LksF0SsawQNtINTnqgql+BOo5DXICeu7wqYCKNCGuyUY8EoBocT/h
Xu1oTp3gqOIRsy145e7caLr18Rqqt+PAFy28J1rBNhMLInJAQjTyKJ3dVUsp1raj
13fdzvs2YfGYa2Bk9MNP81DTaBTajocanB20fYPtMIYcmprjvCOf08HGbYvn5HE0
RESMlJ6bRQBRUQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:44 2024 by rpki-client on console-ams.rpki-client.org