Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 0gdJuB1Z1Vc26XdAYt2uwED0MvltoLf9vMBo8ox0CzY=
Subject key identifier: 21:0C:3C:3D:2B:74:8C:8B:F5:58:A0:48:A7:F6:56:A0:25:96:75:66
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 01935274F845CD211F3B8A2176D2CE754601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 06:00:17 +0000
Manifest this update: Fri 22 Nov 2024 06:00:17 +0000
Manifest next update: Sat 23 Nov 2024 06:00:17 +0000
Files and hashes: 1: ApPxvO5Qeb9h92SwdrDkoZx32WI.roa (hash: bxnFxO0UWG64hP9cf0gdbkb/klZOvZ88lrm+zo05YTQ=)
2: LdJ8wKKmtvL1qC-h2v30xsXgJOs.roa (hash: QXnzTYBNHwORKPypW23M6fujU+X4u6u0+NwYWXYvGmk=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: fdja8N1lOPXfZHrV18pLXcQQuNILWn61qI3A8R5RW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:f8:45:cd:21:1f:3b:8a:21:76:d2:ce:75:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Nov 22 06:00:17 2024 GMT
Not After : Nov 23 06:00:17 2024 GMT
Subject: CN=210c3c3d2b748c8bf558a048a7f656a025967566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:aa:90:cd:71:b2:6b:76:b6:01:2e:5a:b6:
7a:b8:56:22:df:08:18:64:00:cf:38:23:a4:e0:25:
b0:fd:b9:73:2b:83:75:34:0e:cb:c2:c4:98:54:22:
5b:44:51:a2:35:ab:ca:2c:5d:c4:39:6b:27:47:4c:
65:6f:23:d0:b2:ce:b9:56:1c:86:ef:de:9f:ae:8b:
ca:63:4d:bd:d8:51:c5:5f:fe:f9:32:62:83:e0:03:
e0:20:15:64:51:29:e7:7f:14:21:b0:7b:81:0e:09:
99:3b:cc:a4:41:51:d7:4f:75:98:64:aa:62:ad:12:
58:ca:13:f4:fe:89:01:e4:ee:f5:1e:f0:e7:bf:57:
fd:00:38:2b:d4:5f:d2:8c:08:fc:0f:18:e2:47:63:
40:e6:d9:d7:b7:94:1f:20:2d:56:8f:4d:e7:b4:53:
96:fe:37:7b:b3:bb:65:d7:17:76:15:78:e2:27:4d:
e3:1f:34:e4:65:a1:19:70:63:50:af:82:32:fe:e2:
1e:1a:0c:ed:73:27:b4:4f:cc:09:9f:cd:2a:19:03:
f5:ec:38:ab:83:e4:3d:ae:10:f7:a3:55:50:5c:fb:
33:0f:9e:61:d7:4f:44:78:40:5c:da:95:2b:3b:08:
21:12:45:92:45:ec:37:75:2a:5b:58:ae:ff:df:9c:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:3C:3D:2B:74:8C:8B:F5:58:A0:48:A7:F6:56:A0:25:96:75:66
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:91:58:25:d1:ac:df:5c:24:3e:74:92:8f:63:e5:12:ab:99:
1b:f7:d5:93:ba:2b:91:b1:7a:5f:aa:99:58:62:dc:b7:9b:f2:
fe:64:b6:ee:51:9f:5a:9e:a7:ae:18:50:3d:74:97:6e:56:3b:
a1:23:9a:6a:65:96:03:2f:42:4b:94:b8:50:f5:11:ac:1d:af:
fd:02:0a:5f:9a:32:2c:38:9a:32:44:e4:7c:28:d1:79:7a:f3:
d5:fb:dc:3c:23:ad:e0:02:99:39:80:d4:81:5c:49:90:bd:75:
41:a0:14:c9:6a:3d:e3:6e:5e:ba:83:b0:b8:d1:e4:63:5c:47:
87:ac:3e:35:fc:6d:7a:51:7f:06:40:e9:84:af:5f:95:67:d8:
19:d2:3c:f5:a4:a0:51:6d:16:e3:71:8c:62:7c:76:8d:6e:aa:
ee:43:46:4b:22:44:15:3e:35:9f:2a:a5:97:12:ad:a6:32:a9:
ad:46:fd:c6:7a:09:33:2e:4f:4e:83:7d:69:32:6d:64:e8:43:
42:21:12:84:59:ab:1b:4d:71:65:3c:9f:dc:a0:de:30:fe:53:
5a:c5:cf:cd:2d:6a:f6:4b:e6:de:04:ca:9a:e4:59:15:07:87:
3e:32:85:8a:0a:0f:89:5e:90:a7:c0:48:a8:f7:29:1b:c8:6b:
57:83:a6:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSdPhFzSEfO4ohdtLOdUYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4
YTlmZGMwHhcNMjQxMTIyMDYwMDE3WhcNMjQxMTIzMDYwMDE3WjAzMTEwLwYDVQQD
EygyMTBjM2MzZDJiNzQ4YzhiZjU1OGEwNDhhN2Y2NTZhMDI1OTY3NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+qkM1xsmt2tgEuWrZ6uFYi3wgY
ZADPOCOk4CWw/blzK4N1NA7LwsSYVCJbRFGiNavKLF3EOWsnR0xlbyPQss65VhyG
796frovKY0292FHFX/75MmKD4APgIBVkUSnnfxQhsHuBDgmZO8ykQVHXT3WYZKpi
rRJYyhP0/okB5O71HvDnv1f9ADgr1F/SjAj8DxjiR2NA5tnXt5QfIC1Wj03ntFOW
/jd7s7tl1xd2FXjiJ03jHzTkZaEZcGNQr4Iy/uIeGgztcye0T8wJn80qGQP17Dir
g+Q9rhD3o1VQXPszD55h109EeEBc2pUrOwghEkWSRew3dSpbWK7/35y7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEMPD0rdIyL9VigSKf2VqAllnVmMB8GA1UdIwQY
MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt
N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm
LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJFYJdGs
31wkPnSSj2PlEquZG/fVk7orkbF6X6qZWGLct5vy/mS27lGfWp6nrhhQPXSXblY7
oSOaamWWAy9CS5S4UPURrB2v/QIKX5oyLDiaMkTkfCjReXrz1fvcPCOt4AKZOYDU
gVxJkL11QaAUyWo9425euoOwuNHkY1xHh6w+NfxtelF/BkDphK9flWfYGdI89aSg
UW0W43GMYnx2jW6q7kNGSyJEFT41nyqllxKtpjKprUb9xnoJMy5PToN9aTJtZOhD
QiEShFmrG01xZTyf3KDeMP5TWsXPzS1q9kvm3gTKmuRZFQeHPjKFigoPiV6Qp8BI
qPcpG8hrV4Omww==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:15 2024 by rpki-client on console-fra.rpki-client.org