Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: voUeML/NEonT/Bw6sUNbIVnWdZMf18s+lFFWz/g2gAc=
Subject key identifier: 98:60:C3:07:21:B7:EF:D2:44:6E:9B:4C:C6:2F:03:55:09:B1:52:65
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0193549BAA49F257FDE68B17BDE400DA0291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 0FE3
Signing time: Fri 22 Nov 2024 16:01:48 +0000
Manifest this update: Fri 22 Nov 2024 16:01:48 +0000
Manifest next update: Sat 23 Nov 2024 16:01:48 +0000
Files and hashes: 1: 0DOBYWfrnTp9aoH6PPZ6oSIu2Zw.roa (hash: R1WNGZclLbvVy8+tzA6RupLniLa9FgZr42sN8SAf/4Y=)
2: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: bDg5P8NkhdI5aLDu/HR4d1TtpMJtIKxvWV4ngz47XMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:aa:49:f2:57:fd:e6:8b:17:bd:e4:00:da:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Nov 22 16:01:48 2024 GMT
Not After : Nov 23 16:01:48 2024 GMT
Subject: CN=9860c30721b7efd2446e9b4cc62f035509b15265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:6d:97:a7:30:ed:13:92:79:7c:e4:c9:b9:
e0:8d:30:58:3c:1f:90:16:60:e6:3c:40:07:24:eb:
e9:1e:35:f9:62:37:f7:4c:b6:73:1c:58:28:e1:69:
4b:ab:ab:04:77:5a:69:65:61:39:fd:ab:ff:43:28:
82:32:e4:85:0c:f1:24:2e:4f:11:b5:0d:92:96:80:
94:7d:85:23:d2:d4:69:ad:90:c4:68:3f:5e:84:ee:
25:ab:bc:1f:69:a1:3b:7c:05:fb:9b:92:d1:e5:22:
71:0b:e6:4f:a8:64:dc:aa:86:a4:f2:68:62:ae:c0:
67:cb:24:61:a0:e8:61:5d:56:dc:3e:70:2b:b8:9b:
75:51:ff:ba:ae:a5:8f:9f:65:0c:82:ca:33:43:58:
9f:79:88:b9:ca:03:57:cd:65:c3:52:d2:19:b5:b1:
44:38:e8:fe:28:69:b8:c7:61:5f:04:b8:0a:79:97:
7b:c9:fb:31:fb:ca:d4:f1:5a:16:a8:64:a6:2d:6c:
11:fb:81:20:7c:bd:5f:b8:3a:6e:43:e7:5e:65:6f:
a5:61:9b:94:54:f0:fb:5c:7c:0a:55:8b:5b:24:e2:
44:66:24:79:88:76:da:8f:03:69:e6:0a:d2:94:d3:
a4:c5:3d:1f:16:68:f7:09:02:4f:a4:46:0d:89:9c:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:C3:07:21:B7:EF:D2:44:6E:9B:4C:C6:2F:03:55:09:B1:52:65
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:87:6b:33:88:1d:9e:39:cf:ea:c4:eb:14:04:d1:6b:54:af:
95:bd:4e:93:21:6d:22:85:3d:d1:26:9e:34:49:b8:3b:0e:c4:
b4:2e:5b:03:c6:ef:4b:3e:23:53:40:4d:a6:4e:b0:6d:b0:ab:
8b:9e:d3:56:03:5f:eb:b9:02:d4:b6:94:63:76:79:b6:60:cf:
8b:13:cf:4e:98:5f:f5:cd:9b:19:aa:0d:b8:4a:e0:7d:c9:82:
18:2a:ff:0c:34:46:9d:77:10:fb:53:63:31:cf:64:7b:36:29:
f3:50:f3:bf:49:3a:14:85:82:bd:7f:e3:4f:5e:2f:dc:d1:f4:
bd:23:5a:80:dd:47:a0:67:a8:59:b9:32:f6:34:1e:0f:6d:19:
b4:f4:d5:ae:0f:ea:86:3d:80:4a:9f:a6:06:89:1d:5f:be:89:
be:cc:32:3d:33:a7:a2:06:b3:03:86:31:4a:35:75:cd:e4:58:
39:0d:19:37:db:75:75:c9:ee:54:c9:78:17:cc:8e:01:75:a3:
0e:4b:27:e7:55:02:e7:b6:0f:ca:1c:30:c6:27:75:12:74:39:
63:5f:95:2c:e4:49:ae:c6:02:d7:b8:ec:98:06:40:e5:e6:f6:
85:aa:ad:6a:fc:41:80:2d:8c:b0:f8:7b:d6:90:3f:c0:61:bf:
df:92:72:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm6pJ8lf95osXveQA2gKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjQxMTIyMTYwMTQ4WhcNMjQxMTIzMTYwMTQ4WjAzMTEwLwYDVQQD
Eyg5ODYwYzMwNzIxYjdlZmQyNDQ2ZTliNGNjNjJmMDM1NTA5YjE1MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Vtl6cw7ROSeXzkybngjTBYPB+Q
FmDmPEAHJOvpHjX5Yjf3TLZzHFgo4WlLq6sEd1ppZWE5/av/QyiCMuSFDPEkLk8R
tQ2SloCUfYUj0tRprZDEaD9ehO4lq7wfaaE7fAX7m5LR5SJxC+ZPqGTcqoak8mhi
rsBnyyRhoOhhXVbcPnAruJt1Uf+6rqWPn2UMgsozQ1ifeYi5ygNXzWXDUtIZtbFE
OOj+KGm4x2FfBLgKeZd7yfsx+8rU8VoWqGSmLWwR+4EgfL1fuDpuQ+deZW+lYZuU
VPD7XHwKVYtbJOJEZiR5iHbajwNp5grSlNOkxT0fFmj3CQJPpEYNiZxhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhgwwcht+/SRG6bTMYvA1UJsVJlMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYdrM4gd
njnP6sTrFATRa1Svlb1OkyFtIoU90SaeNEm4Ow7EtC5bA8bvSz4jU0BNpk6wbbCr
i57TVgNf67kC1LaUY3Z5tmDPixPPTphf9c2bGaoNuErgfcmCGCr/DDRGnXcQ+1Nj
Mc9kezYp81Dzv0k6FIWCvX/jT14v3NH0vSNagN1HoGeoWbky9jQeD20ZtPTVrg/q
hj2ASp+mBokdX76JvswyPTOnogazA4YxSjV1zeRYOQ0ZN9t1dcnuVMl4F8yOAXWj
Dksn51UC57YPyhwwxid1EnQ5Y1+VLORJrsYC17jsmAZA5eb2haqtavxBgC2MsPh7
1pA/wGG/35JyJQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:28 2024 by rpki-client on console-fra.rpki-client.org