Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: A9CFoVOA7RWOPy+nA+YYJjiPFzPyzu0WlHzuXzaYwJQ=
Subject key identifier: 5B:CB:A8:52:15:2B:4E:E7:BE:58:21:C4:2B:39:21:9E:46:34:23:5F
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019369DA82343ADAE94047C420D75147E182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 12FE
Signing time: Tue 26 Nov 2024 19:02:28 +0000
Manifest this update: Tue 26 Nov 2024 19:02:28 +0000
Manifest next update: Wed 27 Nov 2024 19:02:28 +0000
Files and hashes: 1: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: KlMuMMjfhOXLYLivxw8BXDwezDrTsMhJqcpXzUKQiiY=)
2: WW1TiU5z_bxDE-8K5X3WcthrweQ.roa (hash: uftZamEqBshzlsVid2A7Hoyn1mAIW2eVtypEVulLcNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:82:34:3a:da:e9:40:47:c4:20:d7:51:47:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Nov 26 19:02:28 2024 GMT
Not After : Nov 27 19:02:28 2024 GMT
Subject: CN=5bcba852152b4ee7be5821c42b39219e4634235f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:92:ab:e9:02:34:23:21:af:5a:73:9a:88:
d8:fb:77:67:64:b1:a2:2c:46:04:50:ad:1d:0c:5f:
6d:81:a5:69:b7:d6:32:c9:69:fc:9a:89:8f:d6:dd:
e3:78:02:c7:4d:4c:a4:f5:85:b1:0d:dd:5e:03:1a:
e5:84:b3:a5:93:3d:b3:f9:92:03:22:63:9f:d2:19:
d9:ab:e5:64:39:3e:64:38:73:b3:f9:5b:44:5e:7c:
40:f5:5e:05:ae:0c:71:37:2a:19:82:70:10:c5:06:
f7:e3:7b:cd:6d:ab:6e:7c:37:7e:89:c8:07:6e:1f:
92:67:0a:ae:ee:f2:c3:9e:43:7d:9e:e8:91:b7:aa:
3a:84:c4:90:7a:14:57:db:8b:77:7c:1c:f3:01:9b:
30:a9:c0:6f:ea:ec:bf:04:32:4e:7d:b7:3a:42:73:
23:ef:36:f7:3a:1b:b7:df:f8:b2:2b:1d:a0:68:55:
56:aa:52:0c:a5:82:78:ce:78:a6:a4:38:93:7f:6e:
03:3c:4d:8b:b7:6b:bc:85:59:c8:34:0a:41:5f:fc:
f5:38:2e:74:de:14:87:bd:c3:83:3c:73:2b:3f:56:
c0:f6:3b:1c:b7:72:85:2c:64:c0:9c:59:3e:82:e8:
91:71:77:3a:6d:11:89:68:91:1b:76:ca:cc:3d:00:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:A8:52:15:2B:4E:E7:BE:58:21:C4:2B:39:21:9E:46:34:23:5F
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:ff:87:75:64:12:6a:f1:6f:12:f6:f9:67:65:d9:27:aa:
ee:a8:a6:08:cc:77:65:f2:cf:04:42:67:f6:a6:38:24:63:5c:
cb:f1:b4:7e:d3:eb:b7:41:f7:b8:2e:4c:5e:05:cc:05:89:3b:
54:20:ee:a7:f5:5d:d2:2b:27:92:e6:b0:f6:28:5d:14:a0:48:
09:dd:85:cc:d0:28:f7:07:8a:d5:3c:c4:7a:4f:c0:94:6a:aa:
e2:52:99:05:0a:1b:04:52:05:98:d0:02:88:c5:a0:00:4d:6c:
26:9a:19:85:f3:33:d7:af:9a:5f:bd:87:a1:ca:43:41:23:46:
f1:a9:31:0a:6c:02:3f:b9:24:e3:b4:a1:a4:23:e4:c8:e3:80:
cb:9d:5a:9f:5b:d8:ad:44:e3:e6:f9:f5:d1:eb:db:ae:a0:f2:
c2:a1:02:e7:7a:4b:57:47:af:da:23:ea:c5:6a:2e:f2:b9:7f:
bc:c1:cb:56:c0:77:e3:a6:32:ca:6f:18:f2:e9:d7:bb:bc:37:
b0:6f:13:4b:fb:3a:e4:d0:4a:23:53:ec:72:8c:de:ad:37:54:
5c:33:14:3c:15:13:e7:a5:c0:da:44:bf:a8:8b:11:de:b2:a8:
6e:6c:a0:0e:d3:a0:b0:80:38:a0:5b:f7:89:bd:d0:72:00:c8:
08:cd:6d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2oI0OtrpQEfEINdRR+GCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0
ODY4YzgwHhcNMjQxMTI2MTkwMjI4WhcNMjQxMTI3MTkwMjI4WjAzMTEwLwYDVQQD
Eyg1YmNiYTg1MjE1MmI0ZWU3YmU1ODIxYzQyYjM5MjE5ZTQ2MzQyMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqSSq+kCNCMhr1pzmojY+3dnZLGi
LEYEUK0dDF9tgaVpt9YyyWn8momP1t3jeALHTUyk9YWxDd1eAxrlhLOlkz2z+ZID
ImOf0hnZq+VkOT5kOHOz+VtEXnxA9V4FrgxxNyoZgnAQxQb343vNbatufDd+icgH
bh+SZwqu7vLDnkN9nuiRt6o6hMSQehRX24t3fBzzAZswqcBv6uy/BDJOfbc6QnMj
7zb3Ohu33/iyKx2gaFVWqlIMpYJ4znimpDiTf24DPE2Lt2u8hVnINApBX/z1OC50
3hSHvcODPHMrP1bA9jsct3KFLGTAnFk+guiRcXc6bRGJaJEbdsrMPQCBQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvLqFIVK07nvlghxCs5IZ5GNCNfMB8GA1UdIwQY
MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt
ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4
LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA3/h3Vk
EmrxbxL2+Wdl2Seq7qimCMx3ZfLPBEJn9qY4JGNcy/G0ftPrt0H3uC5MXgXMBYk7
VCDup/Vd0isnkuaw9ihdFKBICd2FzNAo9weK1TzEek/AlGqq4lKZBQobBFIFmNAC
iMWgAE1sJpoZhfMz16+aX72HocpDQSNG8akxCmwCP7kk47ShpCPkyOOAy51an1vY
rUTj5vn10evbrqDywqEC53pLV0ev2iPqxWou8rl/vMHLVsB346Yyym8Y8unXu7w3
sG8TS/s65NBKI1PscozerTdUXDMUPBUT56XA2kS/qIsR3rKobmygDtOgsIA4oFv3
ib3QcgDICM1ttg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:30 2024 by rpki-client on console-fra.rpki-client.org