Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: p1TGiwtUphAbr8BbE5FYl5yrE7PI0xBPBylc//HkNSA=
Subject key identifier: 6B:68:B1:28:BA:49:A8:CC:53:FB:E5:74:BE:79:39:E5:A1:FD:13:4F
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 0193579BB7CEA293A7A574EC9E6C898854A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 06:00:43 +0000
Manifest this update: Sat 23 Nov 2024 06:00:43 +0000
Manifest next update: Sun 24 Nov 2024 06:00:43 +0000
Files and hashes: 1: mXxC2BUf667tSrLpb6WLurGDCuk.roa (hash: 5XK3QKasqF7V8vOvMwMh7erqj1wIQtFj0VABiaYqv3E=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: 8YQeaxBE3/HAsHUNcP5HoqLu1QfgHTgnPk3GSxA+DwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b7:ce:a2:93:a7:a5:74:ec:9e:6c:89:88:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Nov 23 06:00:43 2024 GMT
Not After : Nov 24 06:00:43 2024 GMT
Subject: CN=6b68b128ba49a8cc53fbe574be7939e5a1fd134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:55:36:b6:81:f7:95:af:b0:62:0d:08:b7:
16:ca:b8:6d:c4:90:97:bc:79:94:4f:85:e3:25:0e:
65:68:50:b8:18:4d:91:0b:f9:ca:2f:c5:f4:c1:9c:
1a:23:c3:ca:6d:e1:ad:eb:b9:76:e4:6e:77:4a:52:
80:dd:38:43:e1:1b:35:d8:15:90:ca:45:48:b8:01:
d4:a3:d4:30:83:0c:93:c7:3d:58:bd:03:65:e6:2a:
c6:f5:ff:ce:6e:e2:c3:f4:1f:07:0b:ea:62:52:3e:
dc:f7:45:84:8e:9e:06:b9:b5:e5:6e:a3:55:60:d1:
47:bc:f0:b1:70:33:e1:fd:69:bc:f3:60:a6:c6:be:
74:ad:12:aa:70:81:4c:0e:69:d9:9f:dd:76:73:e8:
26:f0:43:ca:2b:28:84:da:f1:ad:8b:18:cb:f6:cb:
3e:56:b6:ab:47:11:e8:22:ae:39:18:18:56:5d:ae:
66:bc:da:af:01:a1:b1:98:86:7f:36:8a:bc:dc:6e:
9f:de:b0:26:03:c1:d7:4d:af:a3:aa:8f:54:51:52:
ac:6f:b1:59:b8:c5:6e:32:c1:2d:be:b6:66:c6:4b:
3a:db:c0:66:0a:91:45:7e:cc:ef:2f:b5:79:d3:55:
e9:10:cf:09:98:5b:87:4b:88:58:db:c1:04:6b:64:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:B1:28:BA:49:A8:CC:53:FB:E5:74:BE:79:39:E5:A1:FD:13:4F
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:90:70:52:3d:5c:1b:2a:28:ba:41:cf:cf:af:ab:21:f9:
a1:8d:e1:ff:40:62:4c:ed:a2:bd:24:cc:90:7e:cf:31:03:df:
7d:bb:86:cb:f8:d2:91:c0:ee:38:a1:f4:1b:13:0c:e6:01:e2:
67:7d:11:1e:5b:0d:8c:1d:04:5e:3f:14:6a:a2:25:4e:9b:f0:
93:0c:9b:0b:06:df:54:9a:53:57:53:2b:b9:18:a7:f4:4d:18:
2b:a9:ac:49:3f:df:97:1b:cf:5a:29:cc:4d:b0:52:14:43:65:
e2:06:f5:e5:46:77:18:e7:7a:f4:61:9c:26:87:24:e6:72:47:
ca:98:ae:fa:af:49:0a:37:c7:40:fc:61:57:da:16:53:81:a6:
fd:2c:6a:fb:de:27:ac:21:19:ab:68:fa:25:68:24:df:cb:b8:
8f:52:67:49:9f:e7:4a:08:2c:2c:5d:ee:01:41:2a:64:1d:e9:
03:e2:43:4a:eb:50:4e:55:e0:50:9c:c0:6d:3f:9b:a3:90:bf:
40:2e:3b:58:b2:99:33:dd:0e:40:11:02:69:97:b3:ba:da:8c:
e0:90:47:b5:8b:c6:3b:3d:cc:91:64:38:e5:da:8b:05:4a:02:
4c:52:80:f2:84:2b:a8:14:8c:9d:c5:f4:2f:b6:43:05:ac:07:
ad:05:99:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm7fOopOnpXTsnmyJiFSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGE3NDlhZTI1YzFjYmI2NTg3MWQ0MTZhNzlhYjRhODg0
YWM0NjgwHhcNMjQxMTIzMDYwMDQzWhcNMjQxMTI0MDYwMDQzWjAzMTEwLwYDVQQD
Eyg2YjY4YjEyOGJhNDlhOGNjNTNmYmU1NzRiZTc5MzllNWExZmQxMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz95VNraB95WvsGINCLcWyrhtxJCX
vHmUT4XjJQ5laFC4GE2RC/nKL8X0wZwaI8PKbeGt67l25G53SlKA3ThD4Rs12BWQ
ykVIuAHUo9QwgwyTxz1YvQNl5irG9f/ObuLD9B8HC+piUj7c90WEjp4GubXlbqNV
YNFHvPCxcDPh/Wm882Cmxr50rRKqcIFMDmnZn912c+gm8EPKKyiE2vGtixjL9ss+
VrarRxHoIq45GBhWXa5mvNqvAaGxmIZ/Noq83G6f3rAmA8HXTa+jqo9UUVKsb7FZ
uMVuMsEtvrZmxks628BmCpFFfszvL7V501XpEM8JmFuHS4hY28EEa2RiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtosSi6SajMU/vldL55OeWh/RNPMB8GA1UdIwQY
MBaAFJ0KdJriXBy7ZYcdQWp5q0qISsRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYt
MWE2ZDNjOTlkYzQ4LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYtMWE2ZDNjOTlkYzQ4
LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr46QcFI9
XBsqKLpBz8+vqyH5oY3h/0BiTO2ivSTMkH7PMQPffbuGy/jSkcDuOKH0GxMM5gHi
Z30RHlsNjB0EXj8UaqIlTpvwkwybCwbfVJpTV1MruRin9E0YK6msST/flxvPWinM
TbBSFENl4gb15UZ3GOd69GGcJock5nJHypiu+q9JCjfHQPxhV9oWU4Gm/Sxq+94n
rCEZq2j6JWgk38u4j1JnSZ/nSggsLF3uAUEqZB3pA+JDSutQTlXgUJzAbT+bo5C/
QC47WLKZM90OQBECaZezutqM4JBHtYvGOz3MkWQ45dqLBUoCTFKA8oQrqBSMncX0
L7ZDBawHrQWZsg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:44 2024 by rpki-client on console-ams.rpki-client.org