Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: ilPsRCnwheDVBVdl1BoBxxIaTeFQ2a85ZKSeR1mIkbk=
Subject key identifier: D6:D6:B6:29:54:FF:EB:56:92:A8:D4:66:9F:C0:C1:42:F6:5C:11:B0
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019351D09153F22DFFACF3101921180FBFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 12AD
Signing time: Fri 22 Nov 2024 03:00:43 +0000
Manifest this update: Fri 22 Nov 2024 03:00:43 +0000
Manifest next update: Sat 23 Nov 2024 03:00:43 +0000
Files and hashes: 1: 9fv7nHkpO-eJ3_aS55An7-PCuXg.roa (hash: /0FT+gAMUBR8R1SpKlqwSrJ35c5fO2CNSsUJPwydYvg=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: 5vCt0VSC+BTScHJ66MBWVZAnevGP/1L4134oTsoKXXU=)
3: WFycaWyv9q66VIya56DZwVf9s-s.roa (hash: BZlyibHfZC63TPMam/q5T9eU90bgDmwiPBMXySkYXOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:91:53:f2:2d:ff:ac:f3:10:19:21:18:0f:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Nov 22 03:00:43 2024 GMT
Not After : Nov 23 03:00:43 2024 GMT
Subject: CN=d6d6b62954ffeb5692a8d4669fc0c142f65c11b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:5e:02:6d:2a:71:65:11:21:e7:78:f3:1b:
79:72:85:1d:9e:47:5f:49:b7:08:dc:11:30:b6:3c:
94:2c:fe:96:8d:80:a6:9a:e1:86:ae:6c:da:9c:f2:
4a:3d:e2:aa:88:57:58:a0:72:8c:74:3d:e2:fd:94:
ab:fe:f0:57:4f:2c:e2:d9:8a:9e:60:7c:5d:05:7f:
b5:8b:ea:5d:5b:bd:05:63:68:c4:3e:48:b0:8d:b9:
d8:75:bd:7a:22:1f:39:39:e2:57:c6:8a:5d:76:38:
a5:d2:4a:6e:21:11:ed:d5:14:37:21:79:e6:bc:6a:
9d:e8:03:5a:e5:c0:4d:55:25:e6:9a:ab:0a:e9:ca:
d5:06:12:24:ec:af:14:df:89:d2:c5:9c:2d:47:42:
78:c8:34:8a:2c:09:05:79:a4:8b:c1:2b:c6:b9:8b:
37:2f:91:c8:d8:23:60:2c:20:47:a4:b7:a4:ac:63:
2b:35:20:8b:0e:67:47:d8:eb:ba:c0:46:6d:40:e0:
5f:20:68:5f:e6:5e:58:ef:44:e4:32:73:8a:5e:eb:
6b:33:d9:2b:36:d6:cb:5c:11:a6:b0:d0:de:07:37:
80:0f:a0:fc:da:50:aa:76:67:b1:52:bb:4e:97:cd:
77:29:26:62:bf:58:e4:a4:1b:82:42:cd:28:94:7c:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:B6:29:54:FF:EB:56:92:A8:D4:66:9F:C0:C1:42:F6:5C:11:B0
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:f7:be:f4:91:f1:19:0a:97:b6:e5:52:2c:db:81:51:a0:
45:cd:eb:35:51:e9:65:cb:f5:ec:27:8d:d7:20:47:43:f7:c2:
e6:11:7f:16:21:6d:53:bc:d5:fc:ff:c7:97:36:7f:8f:1d:1a:
14:f0:fa:bb:90:bb:27:a7:e5:e8:6a:71:95:ce:bd:d1:79:f1:
0c:2c:43:8e:98:24:70:9e:c5:ec:2a:bc:12:48:ae:11:f0:08:
26:ae:b9:41:2b:e9:9a:56:81:37:ae:7c:ad:b8:f7:84:88:4a:
68:a1:27:36:f9:06:09:0c:54:43:e9:76:ba:44:20:4b:9e:ff:
af:29:7c:cd:16:92:02:2a:fa:a6:13:d7:73:41:73:51:9e:1f:
bb:73:43:ef:ed:95:b2:b3:7c:a4:58:ec:55:b0:c3:77:8b:f6:
d2:d0:f4:96:bf:b1:a5:f2:8c:4c:da:68:30:a3:da:f9:67:58:
b4:26:7e:b3:c2:01:34:70:7b:e0:69:ba:05:8d:cb:f4:fd:d9:
3f:a6:88:6d:de:a3:10:bd:ff:46:af:9a:a3:5d:cf:5e:13:83:
2d:b7:c2:80:f3:cf:98:cc:19:43:ee:59:82:04:d4:f8:00:f1:
89:4f:e5:cd:c5:3d:02:cf:53:bb:c1:5b:1b:9d:9f:33:e1:7c:
5e:bd:44:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0JFT8i3/rPMQGSEYD7/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh
MGNkYzkwHhcNMjQxMTIyMDMwMDQzWhcNMjQxMTIzMDMwMDQzWjAzMTEwLwYDVQQD
EyhkNmQ2YjYyOTU0ZmZlYjU2OTJhOGQ0NjY5ZmMwYzE0MmY2NWMxMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjheAm0qcWURIed48xt5coUdnkdf
SbcI3BEwtjyULP6WjYCmmuGGrmzanPJKPeKqiFdYoHKMdD3i/ZSr/vBXTyzi2Yqe
YHxdBX+1i+pdW70FY2jEPkiwjbnYdb16Ih85OeJXxopddjil0kpuIRHt1RQ3IXnm
vGqd6ANa5cBNVSXmmqsK6crVBhIk7K8U34nSxZwtR0J4yDSKLAkFeaSLwSvGuYs3
L5HI2CNgLCBHpLekrGMrNSCLDmdH2Ou6wEZtQOBfIGhf5l5Y70TkMnOKXutrM9kr
NtbLXBGmsNDeBzeAD6D82lCqdmexUrtOl813KSZiv1jkpBuCQs0olHyeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbWtilU/+tWkqjUZp/AwUL2XBGwMB8GA1UdIwQY
MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt
YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh
LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBP3vvSR
8RkKl7blUizbgVGgRc3rNVHpZcv17CeN1yBHQ/fC5hF/FiFtU7zV/P/HlzZ/jx0a
FPD6u5C7J6fl6Gpxlc690XnxDCxDjpgkcJ7F7Cq8EkiuEfAIJq65QSvpmlaBN658
rbj3hIhKaKEnNvkGCQxUQ+l2ukQgS57/ryl8zRaSAir6phPXc0FzUZ4fu3ND7+2V
srN8pFjsVbDDd4v20tD0lr+xpfKMTNpoMKPa+WdYtCZ+s8IBNHB74Gm6BY3L9P3Z
P6aIbd6jEL3/Rq+ao13PXhODLbfCgPPPmMwZQ+5ZggTU+ADxiU/lzcU9As9Tu8Fb
G52fM+F8Xr1Ehw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:47 2024 by rpki-client on console-fra.rpki-client.org