Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: srIHecXmOwNoZS/PvYi5u5TPi0Lho6IXWzUH/Iodvjg=
Subject key identifier: E2:4D:AD:F9:CF:52:2F:2A:10:CE:AC:4F:25:25:D4:32:B5:EF:14:B3
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 0193572DA15A2121E92CAEC0328BF2F2A53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 0156
Signing time: Sat 23 Nov 2024 04:00:28 +0000
Manifest this update: Sat 23 Nov 2024 04:00:28 +0000
Manifest next update: Sun 24 Nov 2024 04:00:28 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: kl+QhlGgHv2fYqv1ZZ/s7suaznMN6+UHeqKJOZCF0rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a1:5a:21:21:e9:2c:ae:c0:32:8b:f2:f2:a5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Nov 23 04:00:28 2024 GMT
Not After : Nov 24 04:00:28 2024 GMT
Subject: CN=e24dadf9cf522f2a10ceac4f2525d432b5ef14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:ff:aa:7a:bc:40:49:06:5d:51:d4:54:75:
4f:2e:64:85:b8:fd:d5:b2:07:5d:33:d4:e0:eb:6c:
cb:62:f8:66:3c:5e:fc:f4:7d:6e:a6:c6:c5:3f:df:
24:6e:bb:ab:c7:e9:50:0f:f5:2e:6d:43:77:32:f9:
ba:49:d7:20:a7:be:f2:50:b9:7d:20:40:a0:1b:d4:
e1:fb:34:bf:1b:71:ca:de:48:72:9c:c2:6d:fa:21:
5a:e3:d3:b2:86:9b:50:63:29:de:c0:b0:f6:ed:8e:
fc:96:5e:c1:0b:7d:c5:d8:90:3e:f1:36:4a:34:d5:
4b:2e:35:8b:af:92:82:05:62:66:60:6e:16:f5:ef:
86:39:6d:19:2e:a6:41:eb:55:24:f7:83:e4:5a:b9:
22:19:0b:c4:0b:8f:e3:84:33:21:7f:72:1c:86:7c:
6d:fe:02:14:4e:db:43:2d:0e:5d:5e:f7:92:fc:4e:
5a:13:69:ed:fb:86:e2:bd:47:bd:39:fe:66:d7:e6:
21:5f:3a:bd:d1:a8:41:ec:c9:d6:a9:95:ab:0e:3c:
57:0e:04:c8:26:3f:c4:4b:b5:03:92:f1:34:0b:14:
85:8d:9b:91:18:1e:de:81:b1:de:54:94:55:35:5f:
90:50:63:02:b2:d4:a7:69:c6:dc:55:28:aa:df:73:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:AD:F9:CF:52:2F:2A:10:CE:AC:4F:25:25:D4:32:B5:EF:14:B3
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:38:77:8b:77:8f:38:aa:d3:a4:6f:96:4e:6d:17:8a:12:
da:71:0d:af:60:55:ad:6e:f6:17:50:b6:f0:66:2d:d4:c4:fa:
a6:d9:f4:86:b6:3c:33:21:33:e3:96:7a:88:e3:c7:6e:bc:d6:
f1:10:b8:67:9b:5c:45:42:a3:a4:ca:3c:56:ed:96:1e:b9:d1:
ed:75:15:ab:38:f3:d8:25:44:9c:a9:a0:45:07:96:d6:47:5e:
e2:f4:70:7c:de:85:7a:1c:16:22:91:92:0d:db:84:1d:08:8b:
3e:3f:05:a1:e2:c6:08:67:3a:77:ed:d3:30:d4:2d:03:2c:5a:
22:1a:83:a7:58:a7:9d:89:d6:79:e0:e6:7e:fb:67:91:72:6a:
20:37:7e:56:e7:85:c0:10:92:c1:8c:f0:95:b5:ac:7d:5d:ac:
d7:37:74:76:03:f7:78:9a:28:1c:45:ba:92:19:fc:7c:5b:47:
69:db:40:8e:db:d9:95:d9:10:ee:62:14:5d:4f:5d:db:e9:0d:
6b:34:a9:75:f0:2a:fe:f3:b7:ea:82:29:16:aa:81:e0:bf:27:
8f:bd:0c:8b:94:8c:99:0e:d6:cb:32:54:70:a6:7e:13:04:d5:
7f:fb:7c:de:c3:6c:d9:37:79:f4:4b:f4:f7:2b:2f:63:f1:b1:
5c:bd:9e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaFaISHpLK7AMovy8qU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk
NmIzZWEwHhcNMjQxMTIzMDQwMDI4WhcNMjQxMTI0MDQwMDI4WjAzMTEwLwYDVQQD
EyhlMjRkYWRmOWNmNTIyZjJhMTBjZWFjNGYyNTI1ZDQzMmI1ZWYxNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopf/qnq8QEkGXVHUVHVPLmSFuP3V
sgddM9Tg62zLYvhmPF789H1upsbFP98kbrurx+lQD/UubUN3Mvm6Sdcgp77yULl9
IECgG9Th+zS/G3HK3khynMJt+iFa49OyhptQYynewLD27Y78ll7BC33F2JA+8TZK
NNVLLjWLr5KCBWJmYG4W9e+GOW0ZLqZB61Uk94PkWrkiGQvEC4/jhDMhf3Ichnxt
/gIUTttDLQ5dXveS/E5aE2nt+4bivUe9Of5m1+YhXzq90ahB7MnWqZWrDjxXDgTI
Jj/ES7UDkvE0CxSFjZuRGB7egbHeVJRVNV+QUGMCstSnacbcVSiq33OEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJNrfnPUi8qEM6sTyUl1DK17xSzMB8GA1UdIwQY
MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt
MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj
LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6E4d4t3
jziq06Rvlk5tF4oS2nENr2BVrW72F1C28GYt1MT6ptn0hrY8MyEz45Z6iOPHbrzW
8RC4Z5tcRUKjpMo8Vu2WHrnR7XUVqzjz2CVEnKmgRQeW1kde4vRwfN6FehwWIpGS
DduEHQiLPj8FoeLGCGc6d+3TMNQtAyxaIhqDp1innYnWeeDmfvtnkXJqIDd+VueF
wBCSwYzwlbWsfV2s1zd0dgP3eJooHEW6khn8fFtHadtAjtvZldkQ7mIUXU9d2+kN
azSpdfAq/vO36oIpFqqB4L8nj70Mi5SMmQ7WyzJUcKZ+EwTVf/t83sNs2Td59Ev0
9ysvY/GxXL2enA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:22 2024 by rpki-client on console-fra.rpki-client.org