Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: 0aS29n4tllWgXhebdfWVMBw1+JS9dju/8SAWm1qcu3M=
Subject key identifier: C8:C2:0D:78:E6:39:2C:87:AD:EF:BA:38:5D:D9:D7:8E:06:28:3B:25
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01935764C8A81D38CD3FE0FFC046B2B0468C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 05:00:42 +0000
Manifest this update: Sat 23 Nov 2024 05:00:42 +0000
Manifest next update: Sun 24 Nov 2024 05:00:42 +0000
Files and hashes: 1: NODf68hXgQnteo3RA8dcwIV9XSQ.roa (hash: u6xXuFj6LwYe3gR59u+svVRWbdLwGNmbJ9HlvD0cbmw=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: Yj5Olr6uI55PVvqxFcnGUbcAd+sPJlP+5vVJ1EXO0L0=)
3: q6-GzIlrAuR-YHmnhmMjQsluamU.roa (hash: YrfDrRXgtd2n+bFTDoUNtyq5CxXhOJrowpTna8/gIKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:c8:a8:1d:38:cd:3f:e0:ff:c0:46:b2:b0:46:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Nov 23 05:00:42 2024 GMT
Not After : Nov 24 05:00:42 2024 GMT
Subject: CN=c8c20d78e6392c87adefba385dd9d78e06283b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:06:f7:cc:d7:fe:93:49:5a:11:c4:ee:e2:
fc:ba:c1:78:c1:4a:c6:16:b1:bd:b5:e1:2d:a0:27:
11:1a:d4:9c:c5:f9:ce:40:40:08:08:07:fd:f0:d2:
95:b6:2d:d2:b3:fe:28:9f:1b:2c:fc:24:ef:b4:ff:
48:5f:4e:57:d4:12:40:bc:a2:d2:fe:ce:f5:88:bf:
9f:af:a9:28:8e:6b:e1:60:33:ae:03:c6:05:db:cd:
42:1b:f3:48:a3:e5:a8:37:42:dd:36:dc:c0:ad:d5:
97:1b:ee:9a:34:09:60:1d:45:1d:4b:fc:c3:60:51:
e9:05:86:2b:97:27:3b:e7:78:15:0f:45:ea:6d:ac:
59:8a:80:61:df:35:16:9c:05:1d:59:da:d7:4a:15:
c6:4c:e6:1e:9a:ae:f0:25:26:fc:6b:9d:a4:41:b7:
7a:38:ce:fa:34:77:72:4b:ac:e6:7c:88:9e:86:87:
59:67:66:e1:27:28:10:11:0a:91:b9:e5:11:08:03:
8e:50:0b:9d:85:97:d9:f9:68:22:95:bb:06:c0:cf:
2b:63:60:8d:7d:c9:f0:09:ba:b7:20:99:bf:96:c0:
0f:7e:3e:24:22:09:6e:75:8b:13:63:4f:a9:07:ef:
55:79:75:db:0f:f7:95:1f:e1:19:0c:51:79:a2:4e:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:0D:78:E6:39:2C:87:AD:EF:BA:38:5D:D9:D7:8E:06:28:3B:25
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:99:5b:d1:30:3d:ed:14:6d:b6:7a:fc:d2:2c:50:db:76:
20:98:6e:e8:c2:0d:17:2c:7c:b1:03:ea:cf:c0:c8:3a:49:1c:
67:b4:a5:5f:0e:1e:fa:11:53:04:84:f4:ba:90:d1:8c:10:ec:
a0:dd:6f:f1:14:56:7a:bd:b1:92:0c:97:3f:13:5e:b2:6d:48:
bd:e7:7d:a0:97:77:85:4c:4c:c7:87:24:9a:90:17:08:1b:65:
a7:7e:5a:cd:4f:25:29:76:d9:aa:b6:75:82:f9:5d:d9:8a:6b:
97:e8:d6:44:a9:93:d1:fd:74:43:c6:dc:eb:80:07:05:0b:2b:
fe:6d:68:9d:ab:cf:48:d4:9e:83:ca:89:60:d6:8b:4e:b7:18:
5f:b8:b2:02:8b:6c:16:51:cf:90:13:50:64:79:b3:3e:ea:ce:
f6:dd:0a:47:bd:04:50:01:f7:b7:9b:78:92:b9:dd:0f:82:20:
d9:19:ad:e2:ea:89:8c:9a:61:c1:ec:e2:37:79:3c:19:5b:14:
0c:f1:76:9b:41:91:2f:04:d8:6e:73:80:07:8a:45:76:c1:a0:
d7:0a:9f:5e:f9:54:1f:20:4f:8c:c0:07:98:ac:0d:37:71:db:
05:d8:3e:05:08:66:91:86:cf:e0:cb:7e:cb:92:d6:78:1d:22:
cb:0e:37:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZMioHTjNP+D/wEaysEaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjQxMTIzMDUwMDQyWhcNMjQxMTI0MDUwMDQyWjAzMTEwLwYDVQQD
EyhjOGMyMGQ3OGU2MzkyYzg3YWRlZmJhMzg1ZGQ5ZDc4ZTA2MjgzYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ4G98zX/pNJWhHE7uL8usF4wUrG
FrG9teEtoCcRGtScxfnOQEAICAf98NKVti3Ss/4onxss/CTvtP9IX05X1BJAvKLS
/s71iL+fr6kojmvhYDOuA8YF281CG/NIo+WoN0LdNtzArdWXG+6aNAlgHUUdS/zD
YFHpBYYrlyc753gVD0XqbaxZioBh3zUWnAUdWdrXShXGTOYemq7wJSb8a52kQbd6
OM76NHdyS6zmfIiehodZZ2bhJygQEQqRueURCAOOUAudhZfZ+WgilbsGwM8rY2CN
fcnwCbq3IJm/lsAPfj4kIgludYsTY0+pB+9VeXXbD/eVH+EZDFF5ok5FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjCDXjmOSyHre+6OF3Z144GKDslMB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRaZW9Ew
Pe0UbbZ6/NIsUNt2IJhu6MINFyx8sQPqz8DIOkkcZ7SlXw4e+hFTBIT0upDRjBDs
oN1v8RRWer2xkgyXPxNesm1Ived9oJd3hUxMx4ckmpAXCBtlp35azU8lKXbZqrZ1
gvld2Yprl+jWRKmT0f10Q8bc64AHBQsr/m1onavPSNSeg8qJYNaLTrcYX7iyAots
FlHPkBNQZHmzPurO9t0KR70EUAH3t5t4krndD4Ig2Rmt4uqJjJphweziN3k8GVsU
DPF2m0GRLwTYbnOAB4pFdsGg1wqfXvlUHyBPjMAHmKwNN3HbBdg+BQhmkYbP4Mt+
y5LWeB0iyw43/A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:20 2024 by rpki-client on console-fra.rpki-client.org