Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: 5hvAje5Oi1mudtRnEvxoJpltKbGmc/voBrRX1LDvAek=
Subject key identifier: 5C:00:B5:0C:50:60:E1:21:C8:C1:18:83:FF:E2:E1:AB:B3:80:7E:D0
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019358797F5CB6D7E134C06C41ACBF86F086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0A59
Signing time: Sat 23 Nov 2024 10:02:57 +0000
Manifest this update: Sat 23 Nov 2024 10:02:57 +0000
Manifest next update: Sun 24 Nov 2024 10:02:57 +0000
Files and hashes: 1: J3felz2QutEZIqm52BySKt44WhY.roa (hash: OSE9/OKab0TD8jDx2ZccFVYTms50ub+hSqKVrRfb7ko=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: q82wqiVa7070Ovo9I+OMjWejUAIquQWN/pb7oJz5IdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:7f:5c:b6:d7:e1:34:c0:6c:41:ac:bf:86:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Nov 23 10:02:57 2024 GMT
Not After : Nov 24 10:02:57 2024 GMT
Subject: CN=5c00b50c5060e121c8c11883ffe2e1abb3807ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:3e:6f:8c:3e:7a:23:31:98:e1:cc:7a:d6:
4e:fd:d4:1c:ac:a2:38:82:45:08:fc:94:52:ab:14:
9f:70:91:25:63:c9:d1:96:a6:f9:61:81:de:15:9a:
f7:c1:1d:08:47:7c:94:3e:ca:9c:7e:e5:20:72:94:
7c:0e:e8:99:35:97:ff:83:e7:af:ba:e5:01:b5:e4:
dc:8c:37:06:f4:ca:10:c7:10:ed:18:42:28:bc:d6:
01:49:dd:66:c6:78:8c:fe:d5:a8:1f:f8:0a:95:ff:
34:54:4c:cd:b8:fd:1e:b6:73:cb:19:97:3d:87:0b:
e7:49:6d:f8:24:dd:42:44:74:64:8d:9a:52:e3:67:
be:cd:6c:57:db:05:5e:f0:13:30:7f:19:fa:ae:58:
f4:ce:b8:d8:53:15:5b:18:42:9f:b0:3e:c7:94:b3:
65:9e:00:59:f7:37:98:89:d9:a8:17:14:41:64:48:
7a:df:43:89:66:8a:69:cb:44:cc:fa:56:6e:37:d2:
b0:ea:76:8b:7f:51:2b:1f:d2:63:d8:f1:a0:64:3f:
fe:98:6a:f6:85:3f:9c:65:55:ad:44:1b:8d:81:32:
47:5a:a9:da:40:be:aa:ce:52:22:4e:89:40:e1:a2:
cd:96:6a:cb:0d:90:5d:f9:d1:73:52:31:6f:df:d0:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:B5:0C:50:60:E1:21:C8:C1:18:83:FF:E2:E1:AB:B3:80:7E:D0
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:69:9b:a7:ec:c4:be:20:49:41:b2:0e:28:ef:85:ac:ec:96:
d6:8e:e6:b8:41:67:75:b7:e6:9c:9a:6f:a5:b4:2e:dd:53:9f:
a0:5f:0b:80:b7:ef:ed:64:fb:89:08:d5:86:9c:12:f5:e5:8d:
3e:c7:56:e5:62:de:4b:f5:10:8f:97:b1:6c:2c:94:a9:ba:42:
f0:a7:8f:85:b0:b4:d9:35:86:c3:e0:a9:01:e0:0d:ef:f6:ca:
cc:06:de:36:a0:62:46:c2:e6:ac:0b:2c:56:5c:0d:c5:07:61:
46:35:da:3f:ce:99:ff:14:52:f4:09:8f:86:e0:02:a9:5f:76:
69:7f:36:93:f7:36:b2:6d:b1:5f:b5:61:a4:98:25:ba:85:1b:
c9:e2:e0:5e:ba:f6:d2:cc:e3:d4:c9:ba:02:64:5e:60:6b:fd:
7f:43:f7:13:79:d2:29:98:91:a1:4b:30:b1:eb:9e:5f:26:f7:
ca:38:b6:e9:cb:c8:b4:3c:79:44:5a:43:dc:e2:2d:bb:d1:93:
2e:95:cc:d3:db:2b:d9:bf:d7:7e:e7:27:4c:72:59:70:5e:ce:
16:9d:45:30:9b:f5:cc:82:c2:38:30:f7:53:47:e8:0d:7f:66:
33:d8:23:cc:36:1c:84:80:9c:11:e0:80:3d:47:d3:92:4b:38:
71:a0:bf:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeX9cttfhNMBsQay/hvCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj
MzYyZGEwHhcNMjQxMTIzMTAwMjU3WhcNMjQxMTI0MTAwMjU3WjAzMTEwLwYDVQQD
Eyg1YzAwYjUwYzUwNjBlMTIxYzhjMTE4ODNmZmUyZTFhYmIzODA3ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmc+b4w+eiMxmOHMetZO/dQcrKI4
gkUI/JRSqxSfcJElY8nRlqb5YYHeFZr3wR0IR3yUPsqcfuUgcpR8DuiZNZf/g+ev
uuUBteTcjDcG9MoQxxDtGEIovNYBSd1mxniM/tWoH/gKlf80VEzNuP0etnPLGZc9
hwvnSW34JN1CRHRkjZpS42e+zWxX2wVe8BMwfxn6rlj0zrjYUxVbGEKfsD7HlLNl
ngBZ9zeYidmoFxRBZEh630OJZoppy0TM+lZuN9Kw6naLf1ErH9Jj2PGgZD/+mGr2
hT+cZVWtRBuNgTJHWqnaQL6qzlIiTolA4aLNlmrLDZBd+dFzUjFv39AbPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwAtQxQYOEhyMEYg//i4auzgH7QMB8GA1UdIwQY
MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt
Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl
LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGmbp+zE
viBJQbIOKO+FrOyW1o7muEFndbfmnJpvpbQu3VOfoF8LgLfv7WT7iQjVhpwS9eWN
PsdW5WLeS/UQj5exbCyUqbpC8KePhbC02TWGw+CpAeAN7/bKzAbeNqBiRsLmrAss
VlwNxQdhRjXaP86Z/xRS9AmPhuACqV92aX82k/c2sm2xX7VhpJgluoUbyeLgXrr2
0szj1Mm6AmReYGv9f0P3E3nSKZiRoUswseueXyb3yji26cvItDx5RFpD3OItu9GT
LpXM09sr2b/XfucnTHJZcF7OFp1FMJv1zILCODD3U0foDX9mM9gjzDYchICcEeCA
PUfTkks4caC/fQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:29 2024 by rpki-client on console-ams.rpki-client.org