Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: UC+jJ6anm0ruLnYKs3a4n3TfAxwwzyKqt7uJi0TZopg=
Subject key identifier: EC:0A:ED:11:83:40:7B:50:53:15:64:00:FC:B3:7A:50:5B:ED:C6:30
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019405D814F9740F8C78C56BAADA30E71188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: D6
Signing time: Fri 27 Dec 2024 02:00:34 +0000
Manifest this update: Fri 27 Dec 2024 02:00:34 +0000
Manifest next update: Sat 28 Dec 2024 02:00:34 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: aG91s6iXN2yh+AAQ70gmeO/DPj9WeCXMm1pqy6lggPQ=)
2: qcTIDW8AZfh3-cQdQPG8w7eSM0Y.roa (hash: FUjxFOLjgIxBhxWdIxI3k5m+8tslRzLv+iYHIjN7/bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d8:14:f9:74:0f:8c:78:c5:6b:aa:da:30:e7:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Dec 27 02:00:34 2024 GMT
Not After : Dec 28 02:00:34 2024 GMT
Subject: CN=ec0aed1183407b5053156400fcb37a505bedc630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:66:3c:95:24:bc:60:61:a4:de:67:1e:34:
59:b5:dd:f2:0c:c5:d4:97:ea:30:b5:2f:1d:8b:c8:
15:73:e7:1d:98:fb:84:5e:70:3e:b3:89:73:47:08:
c4:a7:34:2e:52:14:48:91:8d:de:e4:e0:cc:1a:3b:
3c:1c:47:90:63:b1:e1:29:bc:ce:74:f3:ec:18:f0:
f7:3a:d7:57:3c:9d:13:70:32:b8:16:62:b4:4c:fa:
d6:39:95:94:63:4b:15:68:82:ac:7d:3b:84:c1:a5:
bf:e2:6c:9b:b9:ea:9d:71:fe:94:b0:80:33:f5:ed:
cb:ac:85:ca:f7:ef:c2:ae:ef:ed:11:92:6a:a9:14:
c3:14:a4:6b:dc:79:8a:bb:3c:69:c2:54:fc:1f:a3:
02:97:62:1d:da:e3:47:4b:22:bb:4f:1a:0a:ea:c0:
22:01:34:95:bc:be:85:0b:d8:03:b1:49:5a:ee:52:
5b:30:32:e4:9b:ed:33:0c:81:93:d4:c3:fe:11:e8:
e9:2b:4b:88:77:4d:75:97:40:d8:97:07:16:ed:a4:
c0:f2:f0:96:8a:67:a3:61:ec:5a:d2:37:81:85:5c:
12:c6:ff:0d:92:08:cc:4c:df:b7:c3:11:aa:4a:9e:
e4:c9:43:f9:82:9c:b5:ef:88:ba:e6:bf:5f:76:fc:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:ED:11:83:40:7B:50:53:15:64:00:FC:B3:7A:50:5B:ED:C6:30
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:31:82:30:c6:0d:de:a1:57:12:df:f4:11:8b:c3:b8:b9:79:
7d:ff:d1:c5:85:70:98:1c:93:6a:67:6a:bf:0c:3b:1e:85:35:
97:ab:ad:be:a9:9c:8b:e1:b9:7c:e5:00:07:f0:3b:28:7a:bc:
69:9b:6b:12:00:51:3d:48:67:52:c2:2b:74:01:af:24:48:00:
86:f1:29:d9:d3:8b:cd:ec:6e:f2:d1:65:64:ab:91:5c:80:3f:
58:89:a6:cc:31:fc:fb:53:40:8d:99:a6:b9:cc:9b:30:7c:c3:
a9:b3:e8:41:4c:40:8c:a1:2e:3c:09:d8:e4:40:87:ef:12:9c:
df:99:f3:d4:20:cc:88:fa:2b:af:99:05:ce:cc:76:2c:a3:86:
29:46:f4:47:06:5f:b6:d2:a2:28:20:36:a2:b1:dd:af:85:85:
1f:a5:4b:c1:72:db:99:75:a9:46:26:91:ba:1e:c7:a1:76:c0:
05:7f:9b:f7:c2:6b:0c:75:13:a6:2c:61:a8:dd:3b:17:7a:3d:
4a:62:27:5c:14:a5:86:40:7a:bd:fa:65:72:be:8e:f2:69:95:
ef:f5:a5:7a:02:05:f7:cd:53:da:fb:52:58:25:ed:87:ef:ed:
f4:6d:34:ed:94:ce:ba:c0:1f:87:22:db:f7:3a:88:6a:03:df:
90:9c:b5:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQF2BT5dA+MeMVrqtow5xGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0
MDYyZWQwHhcNMjQxMjI3MDIwMDM0WhcNMjQxMjI4MDIwMDM0WjAzMTEwLwYDVQQD
EyhlYzBhZWQxMTgzNDA3YjUwNTMxNTY0MDBmY2IzN2E1MDViZWRjNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkBmPJUkvGBhpN5nHjRZtd3yDMXU
l+owtS8di8gVc+cdmPuEXnA+s4lzRwjEpzQuUhRIkY3e5ODMGjs8HEeQY7HhKbzO
dPPsGPD3OtdXPJ0TcDK4FmK0TPrWOZWUY0sVaIKsfTuEwaW/4mybueqdcf6UsIAz
9e3LrIXK9+/Cru/tEZJqqRTDFKRr3HmKuzxpwlT8H6MCl2Id2uNHSyK7TxoK6sAi
ATSVvL6FC9gDsUla7lJbMDLkm+0zDIGT1MP+EejpK0uId011l0DYlwcW7aTA8vCW
imejYexa0jeBhVwSxv8NkgjMTN+3wxGqSp7kyUP5gpy174i65r9fdvzkuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwK7RGDQHtQUxVkAPyzelBb7cYwMB8GA1UdIwQY
MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt
NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3
LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7DGCMMYN
3qFXEt/0EYvDuLl5ff/RxYVwmByTamdqvww7HoU1l6utvqmci+G5fOUAB/A7KHq8
aZtrEgBRPUhnUsIrdAGvJEgAhvEp2dOLzexu8tFlZKuRXIA/WImmzDH8+1NAjZmm
ucybMHzDqbPoQUxAjKEuPAnY5ECH7xKc35nz1CDMiPorr5kFzsx2LKOGKUb0RwZf
ttKiKCA2orHdr4WFH6VLwXLbmXWpRiaRuh7HoXbABX+b98JrDHUTpixhqN07F3o9
SmInXBSlhkB6vfplcr6O8mmV7/WlegIF981T2vtSWCXth+/t9G007ZTOusAfhyLb
9zqIagPfkJy1pQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:53 2024 by rpki-client on console-fra.rpki-client.org