Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: 3QzLNky2waBU6AXKO/EDybsrRvD47h0m24KpwS2aSKA=
Subject key identifier: 2F:76:8F:87:9C:03:DB:5C:E2:03:B4:06:A4:CF:0B:B1:65:86:FD:2B
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019350F48BF1B9C4E51FB3C70A77F950F533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 13B0
Signing time: Thu 21 Nov 2024 23:00:24 +0000
Manifest this update: Thu 21 Nov 2024 23:00:24 +0000
Manifest next update: Fri 22 Nov 2024 23:00:24 +0000
Files and hashes: 1: 058NlUDIWNUWjx1N7Z3K20D2rSM.roa (hash: f+pi3yNQvxDPr9FTG86AGByEvUL7ula3prhtUug7/98=)
2: 2Rw57iC399HLJY7A-cqdBFUvbvE.roa (hash: ZUhwZeadTuaNP3AfTqrBDBG75mivVCOlwYDLPuhm7a0=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: EtS8roUpHJi7iyHyGxxrO2H2PVSFoZFEw51YvswVgG0=)
4: LT1I7WjN-5b-bonArPNYycZfYnM.roa (hash: bIRILgg5MIF+0c4CqF/j8fZ5WP8L8tDIBMNnyS1pe2A=)
5: RcVMZSBy7bXBIQqiconic9k38Dw.roa (hash: oSFVcR8yFH6HtY15qbxHmKiSEah4wjKIT8UmV82eQnw=)
6: fHeYJ2Smg9vEbBojb_F6yV56OkA.roa (hash: supk2X9b5yd+D1QtCPTWu/ccFxgWeb/2UO5SKLZwNRc=)
7: kuez1iA_11dfaTRwPKgQ9y1-0_Y.roa (hash: +SbYqXIGvd5BJas6VkVuLWLgLkbZxVyhTd/xY7hUwwo=)
8: sCw9SpNl50PgkY00gehoXHS4tXs.roa (hash: KL676s77pRP5v8Z/2Bn3ScO1U46zXBuvpZijZ+KullI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:8b:f1:b9:c4:e5:1f:b3:c7:0a:77:f9:50:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Nov 21 23:00:24 2024 GMT
Not After : Nov 22 23:00:24 2024 GMT
Subject: CN=2f768f879c03db5ce203b406a4cf0bb16586fd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:60:30:5e:10:a2:58:30:40:21:e2:7c:82:
f0:5c:c6:44:ae:23:e5:e1:a3:8a:a3:6b:e0:2f:4a:
54:b6:d0:06:4a:b0:dc:c6:0e:e0:98:70:59:8d:8b:
c4:97:73:12:34:f9:c8:c8:79:39:73:11:01:91:13:
c2:f5:5c:c1:9a:ce:8c:b3:f8:4d:31:31:38:eb:66:
c7:ea:84:0f:1a:fd:2f:a4:98:21:e1:d8:e0:10:71:
a0:aa:92:3e:02:46:ea:db:d7:0d:ff:c9:70:23:0a:
35:64:e0:6b:0e:a8:71:0c:ab:98:cd:39:1f:55:38:
34:54:c2:3b:a6:8e:d4:44:01:13:ca:85:d5:e2:b6:
0c:ba:48:e7:06:17:4e:e6:88:9e:8c:01:88:71:33:
27:9a:3c:b3:71:26:2c:1f:11:aa:c3:d3:d5:c0:98:
96:ad:2a:a8:b3:a4:9d:b3:5b:11:0b:f4:28:46:a9:
ab:9e:2f:67:14:fb:fa:8d:46:ae:01:50:65:6e:a8:
65:c9:ee:7a:b5:51:cd:bf:c7:8c:ed:13:84:47:3d:
a3:17:cf:5f:34:bc:7e:cd:1b:bc:5e:0f:82:e4:e8:
05:93:86:ee:2f:8d:81:b2:ba:28:0a:a5:b5:68:57:
89:db:ad:b5:e9:3f:65:77:3b:be:3b:04:fc:d5:86:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:8F:87:9C:03:DB:5C:E2:03:B4:06:A4:CF:0B:B1:65:86:FD:2B
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bf:9c:31:2a:dc:3a:d0:80:01:60:1f:f8:8f:17:68:9b:1b:
2c:e3:11:da:68:df:d8:cf:9c:2e:00:ac:94:1c:6d:e6:d2:a2:
d9:64:6d:4c:24:ba:bc:6e:17:cf:17:17:bd:02:01:97:ad:12:
77:b8:cf:13:a5:cb:81:f8:ea:8a:dc:46:ee:e6:89:bd:77:23:
36:c3:c5:4c:c3:ab:dd:31:db:36:09:43:9f:67:81:51:64:35:
87:7e:b1:3b:02:88:24:54:7c:da:74:0a:0c:11:4c:8f:6a:b7:
0a:75:45:5a:af:4e:95:c7:0b:de:19:98:34:62:dc:60:2c:7a:
5e:99:4f:02:d3:9f:81:6f:ad:5d:13:95:b7:0e:f5:78:01:d4:
75:a5:44:a9:65:80:e6:bb:95:1d:aa:47:68:ee:78:32:a9:33:
ad:a4:a8:56:c2:19:7e:06:55:fd:33:54:a7:58:0e:27:09:23:
b7:1b:67:6b:e1:e7:d3:d8:72:5b:f6:9c:68:57:8f:ce:9a:56:
a6:b2:c0:e3:7e:f5:8c:c1:3d:85:c7:55:01:d2:bb:93:98:f9:
42:5e:18:c0:e5:0d:b2:0a:f7:14:26:97:ff:a0:08:82:56:80:
88:a9:d3:5a:65:4e:ad:42:2f:99:82:23:b0:fe:33:8b:74:7f:
d8:c9:1f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQ9IvxucTlH7PHCnf5UPUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjQxMTIxMjMwMDI0WhcNMjQxMTIyMjMwMDI0WjAzMTEwLwYDVQQD
EygyZjc2OGY4NzljMDNkYjVjZTIwM2I0MDZhNGNmMGJiMTY1ODZmZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmRgMF4QolgwQCHifILwXMZEriPl
4aOKo2vgL0pUttAGSrDcxg7gmHBZjYvEl3MSNPnIyHk5cxEBkRPC9VzBms6Ms/hN
MTE462bH6oQPGv0vpJgh4djgEHGgqpI+Akbq29cN/8lwIwo1ZOBrDqhxDKuYzTkf
VTg0VMI7po7URAETyoXV4rYMukjnBhdO5oiejAGIcTMnmjyzcSYsHxGqw9PVwJiW
rSqos6Sds1sRC/QoRqmrni9nFPv6jUauAVBlbqhlye56tVHNv8eM7ROERz2jF89f
NLx+zRu8Xg+C5OgFk4buL42BsrooCqW1aFeJ26216T9ldzu+OwT81YaO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC92j4ecA9tc4gO0BqTPC7Flhv0rMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7+cMSrc
OtCAAWAf+I8XaJsbLOMR2mjf2M+cLgCslBxt5tKi2WRtTCS6vG4XzxcXvQIBl60S
d7jPE6XLgfjqitxG7uaJvXcjNsPFTMOr3THbNglDn2eBUWQ1h36xOwKIJFR82nQK
DBFMj2q3CnVFWq9OlccL3hmYNGLcYCx6XplPAtOfgW+tXROVtw71eAHUdaVEqWWA
5ruVHapHaO54MqkzraSoVsIZfgZV/TNUp1gOJwkjtxtna+Hn09hyW/acaFePzppW
prLA4371jME9hcdVAdK7k5j5Ql4YwOUNsgr3FCaX/6AIglaAiKnTWmVOrUIvmYIj
sP4zi3R/2MkfrQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:17 2024 by rpki-client on console-ams.rpki-client.org