Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: bMKJD8s2pDuWir/mS8k8qXyWFTk+U4v93+a7QylK2to=
Subject key identifier: 74:08:D2:19:52:0A:E5:9F:BC:25:5A:8B:16:61:00:B3:D1:86:F8:F6
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 0193561AFAC8FE88E15C0A8D499E31CF15EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 23:00:28 +0000
Manifest this update: Fri 22 Nov 2024 23:00:28 +0000
Manifest next update: Sat 23 Nov 2024 23:00:28 +0000
Files and hashes: 1: GpFw33oZXSjeCAGt-dCsRjvv-xQ.roa (hash: ik7aLi8nEdu8Zg/u8lqSkoeceM/t91nRApubHFjaAQg=)
2: H62-q5Al3BvsrtimTi-OnWuB_pI.roa (hash: RMnIJkRxtssPHVIgWgJQGdXR2bFdfQkHGf8+lF686XM=)
3: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: iLxVjLjkhf32qVJeM/nd60wkRocuMtWvokiGZ1rbBpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:fa:c8:fe:88:e1:5c:0a:8d:49:9e:31:cf:15:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Nov 22 23:00:28 2024 GMT
Not After : Nov 23 23:00:28 2024 GMT
Subject: CN=7408d219520ae59fbc255a8b166100b3d186f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:29:2e:d7:e7:a3:20:16:31:25:e6:8b:6e:
49:38:a9:81:95:a2:2b:65:bd:5e:0a:71:80:a8:0c:
db:38:2e:65:22:c2:31:2b:2f:89:a1:77:d1:f2:8f:
05:c9:16:79:b0:9b:e7:be:0e:a6:fb:0a:87:d8:3c:
f6:fc:c0:b8:bd:d0:62:a3:6d:de:89:de:35:c8:fe:
de:f2:41:38:b7:f4:d1:a0:3b:8d:6d:d2:ef:45:ea:
6f:d7:87:b0:9b:2c:d9:fb:ff:30:84:41:6e:65:39:
68:54:dd:ff:ee:0c:7e:3d:b9:82:b1:90:1f:2e:58:
db:e5:cb:bf:5d:bf:e6:b3:70:51:e9:b0:d1:fa:ec:
93:0a:04:a9:29:2c:aa:0c:8c:f3:c4:b9:42:dd:7f:
76:c6:6d:e1:10:ef:a5:b1:24:47:c8:85:27:78:cf:
c5:dc:cd:b0:30:e8:d9:39:39:80:4d:43:b2:6d:18:
39:34:c5:2c:1c:58:7f:66:22:a1:84:5e:02:4e:b6:
3f:63:70:86:cf:e3:0a:f9:d3:0e:6d:09:f8:b2:bd:
b1:81:23:db:6f:99:08:1f:21:59:b5:c5:bf:25:a3:
00:9f:9a:ce:da:c3:4c:94:34:ef:be:3c:98:6e:80:
92:94:97:ee:f2:bf:57:dd:00:f0:5f:d9:45:59:01:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:D2:19:52:0A:E5:9F:BC:25:5A:8B:16:61:00:B3:D1:86:F8:F6
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:2d:c4:0e:e4:bf:35:72:75:8f:08:6c:f1:c5:e1:b5:08:
a1:30:31:cd:ce:8d:ec:66:0f:55:f4:e6:80:9b:25:92:89:d1:
54:f2:65:d4:ac:44:a5:07:3c:9c:74:be:7a:3e:91:64:b5:80:
0e:bb:76:5b:01:c4:4d:94:ec:0d:68:03:cb:90:88:de:f1:66:
ce:9f:63:d3:6a:68:cb:e8:73:45:59:a9:7a:81:89:b6:6f:4e:
f3:76:f6:15:d4:ea:7d:e2:df:c9:19:00:17:36:d0:f7:8e:52:
b4:6e:ae:b4:17:e2:37:21:a8:27:99:e4:20:3d:cf:49:d8:57:
d2:06:6d:80:9b:1d:b8:c6:22:b9:f5:e0:c5:ec:32:a7:63:10:
8c:d8:52:f0:49:74:8f:ea:82:21:39:90:cb:a8:52:58:5c:3d:
5c:c0:25:7b:1c:6e:14:c6:d6:c7:3c:05:35:d2:4e:78:05:95:
e6:7f:c9:02:31:3c:06:61:26:e0:c8:87:a6:f1:61:7c:be:9d:
91:47:f9:68:48:f8:e4:74:be:37:63:36:a2:91:de:43:45:77:
38:26:34:ee:ea:1a:ba:09:26:cf:a0:da:20:b3:d8:1f:43:4e:
3e:cb:1d:79:4c:01:01:bd:21:c8:13:49:32:47:aa:8b:3a:35:
41:a2:82:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGvrI/ojhXAqNSZ4xzxXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjQxMTIyMjMwMDI4WhcNMjQxMTIzMjMwMDI4WjAzMTEwLwYDVQQD
Eyg3NDA4ZDIxOTUyMGFlNTlmYmMyNTVhOGIxNjYxMDBiM2QxODZmOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujgpLtfnoyAWMSXmi25JOKmBlaIr
Zb1eCnGAqAzbOC5lIsIxKy+JoXfR8o8FyRZ5sJvnvg6m+wqH2Dz2/MC4vdBio23e
id41yP7e8kE4t/TRoDuNbdLvRepv14ewmyzZ+/8whEFuZTloVN3/7gx+PbmCsZAf
Lljb5cu/Xb/ms3BR6bDR+uyTCgSpKSyqDIzzxLlC3X92xm3hEO+lsSRHyIUneM/F
3M2wMOjZOTmATUOybRg5NMUsHFh/ZiKhhF4CTrY/Y3CGz+MK+dMObQn4sr2xgSPb
b5kIHyFZtcW/JaMAn5rO2sNMlDTvvjyYboCSlJfu8r9X3QDwX9lFWQE5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQI0hlSCuWfvCVaixZhALPRhvj2MB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsH4txA7k
vzVydY8IbPHF4bUIoTAxzc6N7GYPVfTmgJslkonRVPJl1KxEpQc8nHS+ej6RZLWA
Drt2WwHETZTsDWgDy5CI3vFmzp9j02poy+hzRVmpeoGJtm9O83b2FdTqfeLfyRkA
FzbQ945StG6utBfiNyGoJ5nkID3PSdhX0gZtgJsduMYiufXgxewyp2MQjNhS8El0
j+qCITmQy6hSWFw9XMAlexxuFMbWxzwFNdJOeAWV5n/JAjE8BmEm4MiHpvFhfL6d
kUf5aEj45HS+N2M2opHeQ0V3OCY07uoaugkmz6DaILPYH0NOPssdeUwBAb0hyBNJ
Mkeqizo1QaKCjQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:26 2024 by rpki-client on console-ams.rpki-client.org