Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: NPAENrpCaMfQooSbkAB6WvxJwCfJ/7XWcheUDIMlmZY=
Subject key identifier: 04:E9:3F:9A:F4:EC:6B:40:A3:A0:47:B0:D4:78:03:0E:64:F0:5E:10
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 019359C0C521C4CD129DD19229DFE6AE8FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0899
Signing time: Sat 23 Nov 2024 16:00:25 +0000
Manifest this update: Sat 23 Nov 2024 16:00:25 +0000
Manifest next update: Sun 24 Nov 2024 16:00:25 +0000
Files and hashes: 1: Jj3AC1X5UkdFLgtZHCeS-hArUZQ.roa (hash: hKKLWNkn3MNPm/EeBUCnpzo+sFIDPGsnzAaUhtqyt64=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: XSTKWc7jKC80eiaWMDsVJPJE4/9t/SmXdC7dTKcjfHA=)
3: xxO8lkNm6B8CuWcR179Z1-d9GAo.roa (hash: G5oodD6kpcxVx9uoUt9i8/T3b3LZryMIkELA2zjijSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:c5:21:c4:cd:12:9d:d1:92:29:df:e6:ae:8f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Nov 23 16:00:25 2024 GMT
Not After : Nov 24 16:00:25 2024 GMT
Subject: CN=04e93f9af4ec6b40a3a047b0d478030e64f05e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:a8:f1:e8:25:6d:72:c1:f8:21:1a:d5:f8:
e4:e9:88:ad:c0:fb:0d:86:41:21:06:96:62:b7:7e:
68:31:44:98:45:be:c8:fb:e3:a6:d0:86:43:06:43:
6c:f7:d0:6b:73:46:ba:39:67:41:53:de:57:69:09:
dc:3b:ff:34:a5:38:8f:2e:4d:e5:41:1f:21:83:8e:
3e:8a:25:c2:16:59:95:af:56:01:5e:c7:a4:1c:81:
ad:e7:10:e0:61:db:c4:93:57:02:e6:39:85:4d:c6:
bb:57:00:4a:f5:0d:bb:7d:6b:61:91:37:9e:11:69:
33:48:ce:d9:af:cd:b0:ae:75:fc:72:fc:2a:44:02:
87:59:a5:37:22:e1:78:16:a1:a7:42:eb:33:a3:1e:
fd:e5:22:7c:d0:c7:91:79:22:95:0d:fa:24:33:0c:
81:be:d9:28:ca:2c:28:bf:b8:fc:b0:99:09:3e:d5:
9b:85:fb:d8:e1:fc:b6:97:c3:2f:e3:1b:ce:49:e1:
fa:21:5d:b6:6b:93:d3:6f:15:c0:d8:2d:64:4d:74:
a7:7d:e4:36:ef:6c:b3:91:02:40:c4:69:ed:11:9f:
28:c2:3d:fb:4a:c4:c3:bf:a7:59:b3:68:a0:e7:a5:
cd:0c:56:b8:13:c7:7a:ef:7b:c3:85:72:05:bc:35:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E9:3F:9A:F4:EC:6B:40:A3:A0:47:B0:D4:78:03:0E:64:F0:5E:10
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3b:2b:55:45:2d:5a:f6:65:5f:b1:19:5e:39:5b:8a:e6:18:
d5:aa:ea:29:38:9e:02:c7:b5:f7:a5:11:72:6a:65:07:93:a2:
bc:2c:50:42:47:53:c1:aa:98:68:1e:3c:ff:a4:9d:53:a1:b9:
91:dd:43:77:9c:88:6a:6e:ab:8b:e1:97:68:c1:31:5d:7f:c5:
6d:84:58:74:84:4c:5f:36:71:89:16:93:b3:06:f1:a5:f0:65:
e4:5c:6a:86:b6:af:d5:e9:ce:b7:9e:dd:58:b3:d0:08:ff:9b:
74:af:35:e1:8d:c1:8a:24:4d:20:c5:18:34:cd:88:1f:e8:5a:
0f:d4:5a:d1:7f:dc:92:35:0b:66:c3:c8:6c:17:fa:ed:78:63:
98:12:5b:79:d7:b4:e2:94:ec:56:15:8a:86:98:4a:ad:6c:ed:
06:9a:df:d9:53:4f:c7:e3:70:d9:b5:87:0e:ce:cc:36:88:b6:
e5:dc:b6:5d:41:3b:e9:77:76:87:02:06:8e:21:64:de:58:08:
7a:c9:96:09:10:20:69:2e:57:1e:48:0c:57:c4:26:8e:85:7e:
98:e8:73:65:de:f0:d8:e4:6c:d1:0f:e8:42:84:80:b5:d2:4c:
1b:a7:ee:01:87:e7:4d:02:a1:14:03:af:1d:94:52:3c:03:b9:
d4:ec:e5:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZwMUhxM0SndGSKd/mro/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz
ZjEzOTcwHhcNMjQxMTIzMTYwMDI1WhcNMjQxMTI0MTYwMDI1WjAzMTEwLwYDVQQD
EygwNGU5M2Y5YWY0ZWM2YjQwYTNhMDQ3YjBkNDc4MDMwZTY0ZjA1ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXao8eglbXLB+CEa1fjk6YitwPsN
hkEhBpZit35oMUSYRb7I++Om0IZDBkNs99Brc0a6OWdBU95XaQncO/80pTiPLk3l
QR8hg44+iiXCFlmVr1YBXsekHIGt5xDgYdvEk1cC5jmFTca7VwBK9Q27fWthkTee
EWkzSM7Zr82wrnX8cvwqRAKHWaU3IuF4FqGnQuszox795SJ80MeReSKVDfokMwyB
vtkoyiwov7j8sJkJPtWbhfvY4fy2l8Mv4xvOSeH6IV22a5PTbxXA2C1kTXSnfeQ2
72yzkQJAxGntEZ8owj37SsTDv6dZs2ig56XNDFa4E8d673vDhXIFvDWeIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATpP5r07GtAo6BHsNR4Aw5k8F4QMB8GA1UdIwQY
MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt
M2QwZGI4ZWI0ZTEzLzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz
LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjsrVUUt
WvZlX7EZXjlbiuYY1arqKTieAse196URcmplB5OivCxQQkdTwaqYaB48/6SdU6G5
kd1Dd5yIam6ri+GXaMExXX/FbYRYdIRMXzZxiRaTswbxpfBl5Fxqhrav1enOt57d
WLPQCP+bdK814Y3BiiRNIMUYNM2IH+haD9Ra0X/ckjULZsPIbBf67XhjmBJbede0
4pTsVhWKhphKrWztBprf2VNPx+Nw2bWHDs7MNoi25dy2XUE76Xd2hwIGjiFk3lgI
esmWCRAgaS5XHkgMV8QmjoV+mOhzZd7w2ORs0Q/oQoSAtdJMG6fuAYfnTQKhFAOv
HZRSPAO51OzlXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:46:47 2024 by rpki-client on console-ams.rpki-client.org