Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: /hdFir2CL31x3h9v/zbxYtuqw2/KZ2Y2r+nQD5a34+4=
Subject key identifier: F6:71:2B:7F:23:29:0E:0E:4D:B7:D4:7B:F1:22:5A:5E:0D:5F:89:21
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 01935764CBED8036E9EB5C640985138A2557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0979
Signing time: Sat 23 Nov 2024 05:00:43 +0000
Manifest this update: Sat 23 Nov 2024 05:00:43 +0000
Manifest next update: Sun 24 Nov 2024 05:00:43 +0000
Files and hashes: 1: XJqfq6K2uImNrjb01RXEWdEzY6M.roa (hash: tLoXx1mR5J/wVIejesG05ZSmpwCcbskWxtWX7P+5AL8=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: eHCAGlPM8axwZfbFdl5eBIxuK+cwiYJF6eP9+7JLjkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:cb:ed:80:36:e9:eb:5c:64:09:85:13:8a:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Nov 23 05:00:43 2024 GMT
Not After : Nov 24 05:00:43 2024 GMT
Subject: CN=f6712b7f23290e0e4db7d47bf1225a5e0d5f8921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:21:5f:66:fd:84:7f:d3:30:37:79:15:5a:
e0:9c:43:23:41:19:24:7f:6f:22:9f:df:da:01:26:
b8:ab:21:9e:6b:be:cb:36:bf:5b:bb:e4:ec:74:67:
99:a7:83:39:c9:dc:f2:44:ae:5e:14:b1:94:17:2c:
37:d3:52:cd:bb:ad:d3:37:56:b7:15:72:c9:f8:02:
23:d9:20:1c:7c:1d:ab:52:fd:c8:c0:4f:57:53:7e:
66:66:b6:3e:57:46:b3:29:64:1f:f6:df:e6:c2:10:
bb:eb:82:7a:a5:83:82:76:c0:cb:cb:60:7c:10:1b:
fc:b7:79:9a:a7:58:09:78:d6:5d:58:73:d5:a8:76:
9d:76:82:3d:de:62:cc:31:6a:62:e2:cd:7a:90:55:
b9:c5:ed:f3:51:17:14:5e:3f:15:c7:e4:79:04:4a:
77:a7:f2:eb:a1:e0:f0:b2:bd:df:0f:d5:f4:f7:1e:
19:4e:1d:2b:21:d3:83:29:55:7d:ae:fc:7a:43:8a:
6d:c9:62:94:57:b0:62:56:0a:28:e2:df:d9:3f:f5:
d8:1e:da:ee:e2:36:e7:66:a1:18:c7:fc:86:29:07:
3a:b9:80:a4:9c:bf:ad:04:77:0b:8a:d8:8b:42:01:
39:81:58:04:a6:23:96:72:05:c5:b8:d7:e7:91:a1:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:2B:7F:23:29:0E:0E:4D:B7:D4:7B:F1:22:5A:5E:0D:5F:89:21
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:34:6f:ea:71:d7:dd:3c:b1:00:80:3f:9d:cd:4c:09:a0:bf:
91:5a:c9:14:8c:37:51:e0:65:32:6d:cf:d5:c3:06:f2:a8:9a:
be:16:bf:a9:11:b1:d0:c6:88:83:ed:51:70:05:58:3c:c3:59:
08:9f:5e:6b:52:00:77:5d:e1:bd:26:5e:f1:3e:59:c5:0e:02:
7b:0a:a3:39:db:e6:18:58:6e:27:20:d7:bb:52:0b:a6:f0:7a:
6d:e3:00:d2:5d:cf:17:e4:15:2f:fd:4a:dc:24:c3:f6:75:6c:
99:93:39:4a:f0:47:bf:ff:9a:d2:ab:5f:72:f2:b2:d5:f3:02:
d6:bb:e1:1e:56:be:1e:ec:c2:2f:79:06:62:ff:c1:cc:83:44:
68:e9:08:01:c6:73:62:26:08:76:72:08:7a:79:00:a3:ff:29:
9c:56:61:a1:96:36:76:84:73:45:1b:16:99:6d:1b:9e:54:2d:
83:de:72:d9:98:70:d0:cc:12:4e:df:01:0f:db:9e:b8:86:fa:
93:20:f8:72:a0:05:3d:27:2b:fd:35:fc:f3:f0:91:f7:b1:4d:
73:c3:4e:b4:93:d0:75:04:7c:40:c5:3b:4f:6c:b6:c0:84:10:
d7:39:dc:42:8c:85:af:d2:7f:58:c3:8a:6f:50:2e:11:b0:14:
82:ca:54:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZMvtgDbp61xkCYUTiiVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz
MDE0NjAwHhcNMjQxMTIzMDUwMDQzWhcNMjQxMTI0MDUwMDQzWjAzMTEwLwYDVQQD
EyhmNjcxMmI3ZjIzMjkwZTBlNGRiN2Q0N2JmMTIyNWE1ZTBkNWY4OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8QhX2b9hH/TMDd5FVrgnEMjQRkk
f28in9/aASa4qyGea77LNr9bu+TsdGeZp4M5ydzyRK5eFLGUFyw301LNu63TN1a3
FXLJ+AIj2SAcfB2rUv3IwE9XU35mZrY+V0azKWQf9t/mwhC764J6pYOCdsDLy2B8
EBv8t3map1gJeNZdWHPVqHaddoI93mLMMWpi4s16kFW5xe3zURcUXj8Vx+R5BEp3
p/LroeDwsr3fD9X09x4ZTh0rIdODKVV9rvx6Q4ptyWKUV7BiVgoo4t/ZP/XYHtru
4jbnZqEYx/yGKQc6uYCknL+tBHcLitiLQgE5gVgEpiOWcgXFuNfnkaHVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZxK38jKQ4OTbfUe/EiWl4NX4khMB8GA1UdIwQY
MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt
MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj
LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzRv6nHX
3TyxAIA/nc1MCaC/kVrJFIw3UeBlMm3P1cMG8qiavha/qRGx0MaIg+1RcAVYPMNZ
CJ9ea1IAd13hvSZe8T5ZxQ4CewqjOdvmGFhuJyDXu1ILpvB6beMA0l3PF+QVL/1K
3CTD9nVsmZM5SvBHv/+a0qtfcvKy1fMC1rvhHla+HuzCL3kGYv/BzINEaOkIAcZz
YiYIdnIIenkAo/8pnFZhoZY2doRzRRsWmW0bnlQtg95y2Zhw0MwSTt8BD9ueuIb6
kyD4cqAFPScr/TX88/CR97FNc8NOtJPQdQR8QMU7T2y2wIQQ1zncQoyFr9J/WMOK
b1AuEbAUgspUaA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:13 2024 by rpki-client on console-fra.rpki-client.org