Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: gzWITnbm4cRs8EMWKHL2SMRqHK4VEnuccRGUDUmUJy8=
Subject key identifier: 25:24:9D:37:A5:E1:0D:7B:4A:E7:60:82:3A:18:B7:FE:F2:13:83:A1
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019357648FE556A72E1FEBDDF949BC5A8115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 05:00:28 +0000
Manifest this update: Sat 23 Nov 2024 05:00:28 +0000
Manifest next update: Sun 24 Nov 2024 05:00:28 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: jbOAEmf65dLas5eWpoDaTPNOjW/EwMtzbAWDqqs+dxg=)
2: FBevNVdGzc90SmREOehrkifzTQY.roa (hash: q3uETH2B+BYaB5gpQvVxjFLw2k6GuRijGsgPY3vkBII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:8f:e5:56:a7:2e:1f:eb:dd:f9:49:bc:5a:81:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Nov 23 05:00:28 2024 GMT
Not After : Nov 24 05:00:28 2024 GMT
Subject: CN=25249d37a5e10d7b4ae760823a18b7fef21383a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:c7:3d:b7:bd:fb:a9:20:ad:7c:9f:92:da:
3d:c3:28:64:9b:82:06:c0:4b:9d:43:53:ce:c4:36:
1e:1b:3b:02:87:a3:b3:c6:97:96:7c:9e:f0:3c:d5:
b5:37:9a:78:a6:fc:5d:ee:73:ad:38:50:1c:fe:65:
14:97:f4:5c:33:ca:2a:ad:ab:35:29:d8:0c:f7:1b:
8c:4d:59:f5:a9:d2:6a:7b:d8:d7:53:b5:d7:07:c1:
c7:7e:81:47:13:2a:a6:48:ff:21:51:b1:f4:1e:59:
e0:e8:f0:47:60:2e:cd:c2:49:76:03:a1:ac:b5:e0:
b0:0c:59:00:18:61:9a:bb:92:18:e0:ec:ac:7b:a9:
ba:82:da:2b:1b:9a:03:f1:82:46:30:7d:68:c4:24:
56:cd:37:de:6f:64:37:2b:4b:71:4b:d7:51:55:c6:
3b:57:65:8f:c3:85:81:15:c5:41:15:f6:73:15:91:
74:00:91:60:5b:7c:1f:e8:b3:f0:0f:1e:95:76:d1:
62:82:7b:e5:4d:4a:da:e9:ec:77:b2:03:b9:5e:ce:
49:f9:e6:c4:46:b1:c8:6d:88:dd:e3:fc:4c:5c:08:
77:6e:3e:a2:d8:73:20:52:46:f6:cb:13:50:67:4b:
76:ff:83:12:59:f2:7c:f0:b5:55:07:4e:fd:e0:6e:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:24:9D:37:A5:E1:0D:7B:4A:E7:60:82:3A:18:B7:FE:F2:13:83:A1
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:c1:d5:aa:3d:0f:60:ab:bd:48:c7:be:36:85:7c:f8:3e:
e6:be:ad:b3:a2:ef:c2:d2:c2:fe:62:4d:36:3e:d3:a1:bd:b4:
33:e1:bd:4d:66:65:b3:55:48:88:34:4c:00:45:81:89:9b:14:
5e:b1:45:4b:61:c9:96:e4:8a:df:d4:86:f0:cf:0e:42:2e:93:
ba:7d:a0:71:2d:6f:a5:69:f0:14:8c:23:f2:01:a0:2e:aa:af:
0a:2f:81:56:4c:b2:fe:2f:25:47:29:d0:26:a5:c7:54:5e:ef:
81:c8:80:5c:45:b3:54:7f:99:93:dd:9c:04:1c:99:ac:95:ba:
59:f1:4a:cc:3b:73:ad:76:99:60:44:e3:44:62:18:1f:73:35:
cd:70:8f:f4:09:d3:a2:d4:bd:5d:8d:a6:b1:26:02:10:8b:ec:
7b:b2:23:86:44:22:8f:0d:c2:f2:f8:e6:b5:73:24:fb:1f:8e:
41:6b:a3:15:1c:f7:19:bc:bb:4f:40:94:b2:3a:5a:2b:39:94:
0a:dc:48:c2:2d:71:cf:13:6c:00:4f:68:4e:55:45:fe:6f:bf:
c6:ab:7c:d3:b5:84:12:ea:72:a7:fb:8b:01:ac:55:3c:b7:fa:
87:34:d7:3f:cd:2b:c2:7c:67:d5:f2:e9:9d:14:c3:3a:c6:e7:
17:16:2e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZI/lVqcuH+vd+Um8WoEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjQxMTIzMDUwMDI4WhcNMjQxMTI0MDUwMDI4WjAzMTEwLwYDVQQD
EygyNTI0OWQzN2E1ZTEwZDdiNGFlNzYwODIzYTE4YjdmZWYyMTM4M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nDHPbe9+6kgrXyfkto9wyhkm4IG
wEudQ1POxDYeGzsCh6OzxpeWfJ7wPNW1N5p4pvxd7nOtOFAc/mUUl/RcM8oqras1
KdgM9xuMTVn1qdJqe9jXU7XXB8HHfoFHEyqmSP8hUbH0Hlng6PBHYC7Nwkl2A6Gs
teCwDFkAGGGau5IY4Oyse6m6gtorG5oD8YJGMH1oxCRWzTfeb2Q3K0txS9dRVcY7
V2WPw4WBFcVBFfZzFZF0AJFgW3wf6LPwDx6VdtFignvlTUra6ex3sgO5Xs5J+ebE
RrHIbYjd4/xMXAh3bj6i2HMgUkb2yxNQZ0t2/4MSWfJ88LVVB0794G59JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUknTel4Q17SudggjoYt/7yE4OhMB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKODB1ao9
D2CrvUjHvjaFfPg+5r6ts6LvwtLC/mJNNj7Tob20M+G9TWZls1VIiDRMAEWBiZsU
XrFFS2HJluSK39SG8M8OQi6Tun2gcS1vpWnwFIwj8gGgLqqvCi+BVkyy/i8lRynQ
JqXHVF7vgciAXEWzVH+Zk92cBByZrJW6WfFKzDtzrXaZYETjRGIYH3M1zXCP9AnT
otS9XY2msSYCEIvse7IjhkQijw3C8vjmtXMk+x+OQWujFRz3Gby7T0CUsjpaKzmU
CtxIwi1xzxNsAE9oTlVF/m+/xqt807WEEupyp/uLAaxVPLf6hzTXP80rwnxn1fLp
nRTDOsbnFxYuog==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:55 2024 by rpki-client on console-ams.rpki-client.org