Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: m60gNSFw/7eK65SGjh7NCl1C2Pu7Kj4uC66QY4jW1h0=
Subject key identifier: 5A:3C:0D:57:46:62:0B:E0:8F:59:1F:2C:AF:68:0A:ED:85:DE:D8:03
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 0193579B809429C6CA4C05C74C301CE801F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 05BF
Signing time: Sat 23 Nov 2024 06:00:28 +0000
Manifest this update: Sat 23 Nov 2024 06:00:28 +0000
Manifest next update: Sun 24 Nov 2024 06:00:28 +0000
Files and hashes: 1: E4SWu64tus818gEG4WEa0ykuvX8.roa (hash: x5X43n6nxKK98an5uLLnKBP3NJReP32cy8t7wpACMKg=)
2: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: YScRqwuF4R7nlG4igUpBEqfQPe6ALkj/CGHtVvKd9P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:80:94:29:c6:ca:4c:05:c7:4c:30:1c:e8:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Nov 23 06:00:28 2024 GMT
Not After : Nov 24 06:00:28 2024 GMT
Subject: CN=5a3c0d5746620be08f591f2caf680aed85ded803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:54:bd:3b:04:ce:26:72:4c:56:57:03:df:
77:c5:86:ba:52:1a:85:13:ec:c2:59:04:29:b1:3d:
4e:60:28:88:ac:b9:81:db:75:a5:48:8f:c9:6c:1a:
9a:45:aa:dc:00:e5:32:d1:47:40:97:21:8c:c4:cb:
ec:2d:b7:8f:e9:0d:45:f6:35:b9:f2:74:25:98:31:
f2:79:79:b3:b7:59:97:9e:d0:4f:e1:a9:bf:b9:ea:
ea:6c:34:f3:4f:9e:a2:2c:44:6a:3f:7a:78:ba:24:
03:4d:e3:a2:70:82:4d:e4:ea:c9:1f:c4:b4:1f:0d:
6f:3b:02:58:d7:d2:d0:95:55:37:13:fb:ca:f9:72:
6b:a8:f3:50:9b:2a:c7:e8:66:85:11:dc:34:6d:fb:
3f:69:c4:fa:28:5f:2f:e5:c5:32:71:fc:5a:c9:7a:
f5:82:f6:e5:e4:65:ae:23:b6:a4:68:28:d3:5f:78:
29:65:85:64:84:d6:24:16:58:15:95:74:4d:58:1a:
c8:ea:e2:c9:2c:57:a1:b3:b0:9b:25:87:23:72:9a:
bf:b8:d9:82:4c:df:9f:8b:5b:de:65:1e:34:46:9c:
14:78:3b:b2:d4:67:10:e0:d8:56:28:65:4b:45:bc:
31:ba:f0:3e:59:50:b8:5a:e0:e9:13:67:98:79:d8:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:0D:57:46:62:0B:E0:8F:59:1F:2C:AF:68:0A:ED:85:DE:D8:03
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:66:ab:83:33:26:fa:75:be:49:11:0a:a5:37:fd:95:55:68:
68:42:2c:15:2d:1b:c9:63:7c:ea:e2:4e:6d:5a:6c:d1:f8:1b:
bd:98:26:a6:d7:23:89:50:9a:4d:3a:65:88:66:ac:dc:ec:db:
0b:08:78:44:ae:ab:9e:ed:7e:54:09:7c:5d:7b:ad:e6:7f:28:
e4:0f:46:7c:c0:ba:ae:0e:6c:87:34:46:82:29:06:60:1d:18:
30:5c:34:ee:23:57:4b:99:09:76:c3:6e:15:50:1b:2a:9f:73:
ca:0e:9b:78:bf:39:e3:e9:81:2b:7c:d8:f7:72:d9:30:19:9e:
60:d2:f3:82:4c:d4:36:6d:7f:8c:ca:ab:b6:f3:f4:a2:97:f1:
69:24:65:bf:f8:5c:61:6b:00:c3:a5:17:b1:bb:e0:08:9c:a5:
1f:e4:f4:0d:9d:0d:d3:f1:95:68:3c:26:36:44:f2:8c:eb:49:
35:7b:d7:5e:39:88:30:0c:a5:61:bd:12:1a:94:0e:d6:ba:f2:
65:2d:3c:4d:55:ff:5e:c5:5d:26:52:7a:aa:b5:08:ec:3a:dc:
f7:c3:09:8e:c0:b6:9d:14:23:21:68:4b:11:f5:95:ff:28:ac:
1e:e5:22:33:2e:bd:b7:a1:4c:04:b9:9c:96:be:d5:76:aa:50:
8a:b3:4e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm4CUKcbKTAXHTDAc6AHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1
NjJmZDIwHhcNMjQxMTIzMDYwMDI4WhcNMjQxMTI0MDYwMDI4WjAzMTEwLwYDVQQD
Eyg1YTNjMGQ1NzQ2NjIwYmUwOGY1OTFmMmNhZjY4MGFlZDg1ZGVkODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdUvTsEziZyTFZXA993xYa6UhqF
E+zCWQQpsT1OYCiIrLmB23WlSI/JbBqaRarcAOUy0UdAlyGMxMvsLbeP6Q1F9jW5
8nQlmDHyeXmzt1mXntBP4am/uerqbDTzT56iLERqP3p4uiQDTeOicIJN5OrJH8S0
Hw1vOwJY19LQlVU3E/vK+XJrqPNQmyrH6GaFEdw0bfs/acT6KF8v5cUycfxayXr1
gvbl5GWuI7akaCjTX3gpZYVkhNYkFlgVlXRNWBrI6uLJLFehs7CbJYcjcpq/uNmC
TN+fi1veZR40RpwUeDuy1GcQ4NhWKGVLRbwxuvA+WVC4WuDpE2eYedjJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo8DVdGYgvgj1kfLK9oCu2F3tgDMB8GA1UdIwQY
MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt
NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy
LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmargzMm
+nW+SREKpTf9lVVoaEIsFS0byWN86uJObVps0fgbvZgmptcjiVCaTTpliGas3Ozb
Cwh4RK6rnu1+VAl8XXut5n8o5A9GfMC6rg5shzRGgikGYB0YMFw07iNXS5kJdsNu
FVAbKp9zyg6beL854+mBK3zY93LZMBmeYNLzgkzUNm1/jMqrtvP0opfxaSRlv/hc
YWsAw6UXsbvgCJylH+T0DZ0N0/GVaDwmNkTyjOtJNXvXXjmIMAylYb0SGpQO1rry
ZS08TVX/XsVdJlJ6qrUI7Drc98MJjsC2nRQjIWhLEfWV/yisHuUiMy69t6FMBLmc
lr7VdqpQirNOeA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:18 2024 by rpki-client on console-fra.rpki-client.org