Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: OSjrsGcnyu4CUz9LypdDpVykpxqim4FAgQRXvHbqWPY=
Subject key identifier: F2:AE:8A:C2:EA:25:91:72:D8:6C:9A:F0:EA:D0:08:6A:A7:D5:29:95
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019368C60EA704D5E281ED2A315A99DBA498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 034D
Signing time: Tue 26 Nov 2024 14:00:30 +0000
Manifest this update: Tue 26 Nov 2024 14:00:30 +0000
Manifest next update: Wed 27 Nov 2024 14:00:30 +0000
Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: /I+t7ZVXR2t1o3PLIQ8YpBqiAu3NOMe+dgtKdPkpCNw=)
2: lSQYu6Uj-4d6QcMK0Fxe3aWG11o.roa (hash: ZoOC7aKEUN5t06VqNPbkUl18hZATIFagOOBkX0Hq77g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:0e:a7:04:d5:e2:81:ed:2a:31:5a:99:db:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Nov 26 14:00:30 2024 GMT
Not After : Nov 27 14:00:30 2024 GMT
Subject: CN=f2ae8ac2ea259172d86c9af0ead0086aa7d52995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:ad:68:fa:56:b9:28:1d:44:ac:75:f9:17:
9c:aa:cf:72:d6:46:49:03:11:5f:d7:42:f3:5e:b0:
de:58:c3:13:b7:07:92:9b:7c:3e:5e:4a:1b:03:1f:
96:bd:05:89:d9:33:b7:14:69:f2:a0:d4:b0:9a:b9:
54:e2:08:f4:81:f9:81:76:3e:91:b8:f5:3d:67:ab:
95:ae:b1:3e:90:37:29:4d:42:a5:87:dd:9c:66:93:
23:db:2d:af:77:04:68:8f:65:1e:ab:ce:d8:81:22:
01:44:bf:06:d3:c8:d7:8e:0c:0f:b7:51:44:25:6c:
2e:28:6d:87:6c:0b:ee:f8:9b:76:85:fc:31:df:e9:
69:dd:f0:50:01:52:7a:f3:13:6d:e7:f9:1e:98:18:
7d:47:a3:11:1b:f2:50:33:50:fd:39:7a:9a:a5:8b:
45:4e:ed:db:68:0b:54:11:7c:8c:56:6d:81:15:05:
b2:35:50:7e:d0:8f:8c:6b:95:d3:ff:32:4e:df:a5:
0e:fa:3a:8b:92:ae:1a:d1:d2:05:cd:b8:9d:99:53:
2c:9a:83:ef:ed:7b:23:6f:14:50:ec:42:01:e1:85:
df:83:09:8e:69:73:d9:38:29:6e:7a:b0:b3:b1:28:
fb:ba:99:16:85:10:37:13:b8:f2:9f:5c:38:b7:7f:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:8A:C2:EA:25:91:72:D8:6C:9A:F0:EA:D0:08:6A:A7:D5:29:95
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b5:75:67:6d:87:9a:96:a8:30:b0:00:f5:5d:70:f8:09:c1:
7e:bd:41:d2:a0:78:92:68:93:11:4f:a5:9e:ef:92:9b:e2:1d:
cf:8c:ce:12:0b:c8:73:91:1b:bc:e0:05:db:22:e5:05:77:bf:
b2:7d:56:7d:58:d5:41:e1:5c:3f:9f:5f:bb:ba:9e:d0:d8:7b:
bd:bc:fb:a3:e7:8c:80:bd:29:31:86:6b:58:fe:07:a6:04:05:
85:30:09:68:ab:56:aa:c7:6b:35:b9:75:e0:b9:5b:de:83:34:
99:f8:98:da:9e:3a:8b:23:27:25:cd:64:2e:89:c3:e8:02:1e:
4b:6f:df:42:1f:ce:5e:77:93:88:ff:85:e4:29:88:2e:e0:6d:
8c:4a:33:48:f6:b3:be:50:b6:7f:64:90:22:ab:34:bf:60:38:
3d:45:78:55:00:69:40:4c:7c:ac:2d:2f:50:17:23:5a:83:d9:
aa:45:7f:ab:0c:e6:68:58:cd:b6:f7:39:96:6d:0a:ce:4c:98:
31:a2:77:79:84:bc:12:d3:b9:2b:c0:08:04:ab:ee:a1:7d:28:
06:ce:11:6d:ee:24:64:1d:c0:05:10:a0:78:65:f2:4e:aa:91:
0c:64:85:54:53:e0:86:6e:30:4a:6d:01:c4:a3:e1:9d:f3:a2:
83:99:95:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoxg6nBNXige0qMVqZ26SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTZmZDIyNzFkZGUxMDg4NmQ5N2ZmMTQ3MDNlNTgxYTIw
NGI2NWUwHhcNMjQxMTI2MTQwMDMwWhcNMjQxMTI3MTQwMDMwWjAzMTEwLwYDVQQD
EyhmMmFlOGFjMmVhMjU5MTcyZDg2YzlhZjBlYWQwMDg2YWE3ZDUyOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz62taPpWuSgdRKx1+Recqs9y1kZJ
AxFf10LzXrDeWMMTtweSm3w+XkobAx+WvQWJ2TO3FGnyoNSwmrlU4gj0gfmBdj6R
uPU9Z6uVrrE+kDcpTUKlh92cZpMj2y2vdwRoj2Ueq87YgSIBRL8G08jXjgwPt1FE
JWwuKG2HbAvu+Jt2hfwx3+lp3fBQAVJ68xNt5/kemBh9R6MRG/JQM1D9OXqapYtF
Tu3baAtUEXyMVm2BFQWyNVB+0I+Ma5XT/zJO36UO+jqLkq4a0dIFzbidmVMsmoPv
7XsjbxRQ7EIB4YXfgwmOaXPZOCluerCzsSj7upkWhRA3E7jyn1w4t38RiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKuisLqJZFy2Gya8OrQCGqn1SmVMB8GA1UdIwQY
MBaAFHLm/SJx3eEIhtl/8UcD5YGiBLZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgt
NmFmMjE1YmZmMWNlLzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83MDY1OGItMzc3YS00OTE1LWIxZTgtNmFmMjE1YmZmMWNl
LzEvY3ViOUluSGQ0UWlHMlhfeFJ3UGxnYUlFdGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrV1Z22H
mpaoMLAA9V1w+AnBfr1B0qB4kmiTEU+lnu+Sm+Idz4zOEgvIc5EbvOAF2yLlBXe/
sn1WfVjVQeFcP59fu7qe0Nh7vbz7o+eMgL0pMYZrWP4HpgQFhTAJaKtWqsdrNbl1
4Llb3oM0mfiY2p46iyMnJc1kLonD6AIeS2/fQh/OXneTiP+F5CmILuBtjEozSPaz
vlC2f2SQIqs0v2A4PUV4VQBpQEx8rC0vUBcjWoPZqkV/qwzmaFjNtvc5lm0KzkyY
MaJ3eYS8EtO5K8AIBKvuoX0oBs4Rbe4kZB3ABRCgeGXyTqqRDGSFVFPghm4wSm0B
xKPhnfOig5mV1A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:19 2024 by rpki-client on console-fra.rpki-client.org