Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: 3sevlcVNsA9pHLTRcq3TFPhkfHeQt9Ofpq5+uBc13LI=
Subject key identifier: F5:CA:49:DE:2C:43:C5:D6:8B:5B:A5:89:49:E9:66:41:EE:1E:3C:70
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019369D974935D8978E2AA877A8CC4293BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 130C
Signing time: Tue 26 Nov 2024 19:01:19 +0000
Manifest this update: Tue 26 Nov 2024 19:01:19 +0000
Manifest next update: Wed 27 Nov 2024 19:01:19 +0000
Files and hashes: 1: QjRVhp40XKZmYoMAr4vbmcN-LaY.roa (hash: drC1TH0bD4tmum1TOllEzHQy9gz0gsm5207YB4ZmHdo=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: dpBVHBK/fwvDMZ/lyeMh38Sr7RO78ZwWcFiHiKANqI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:74:93:5d:89:78:e2:aa:87:7a:8c:c4:29:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Nov 26 19:01:19 2024 GMT
Not After : Nov 27 19:01:19 2024 GMT
Subject: CN=f5ca49de2c43c5d68b5ba58949e96641ee1e3c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:b0:c7:da:bc:61:9a:31:04:f5:40:53:6e:
8d:1a:a6:b0:b2:07:63:7b:6a:f6:e2:29:b6:b2:56:
57:f8:c6:3a:62:d1:cf:87:bc:61:99:a8:19:10:84:
fa:75:e5:8a:7c:17:66:db:6f:a4:2a:64:84:f7:23:
3f:d9:8a:b4:85:8c:84:8c:c2:2c:9e:12:b8:0b:a3:
ed:4a:cd:c0:ab:d8:36:14:e7:1b:10:85:26:54:7c:
43:d8:c3:6b:87:cb:44:8b:bc:16:0a:c3:84:9b:d9:
90:7b:56:50:96:26:8b:9f:7c:52:a1:cb:ad:68:8b:
ea:a1:9e:95:51:37:fc:95:0a:1e:cc:c8:62:40:3c:
c2:8d:62:ae:04:db:8f:a0:c5:45:fd:e5:db:9d:33:
50:df:fd:88:be:34:d0:cf:1c:a0:fe:a2:d9:ad:3e:
31:1c:95:32:bc:25:ba:fa:0d:04:98:1c:0e:3d:11:
40:75:aa:7d:7c:2a:f4:12:82:ed:bd:2a:81:34:25:
fc:36:e7:e5:8b:d1:de:a8:1b:e2:21:d3:91:05:65:
44:0c:50:df:71:47:34:14:b7:88:b3:8e:4c:0f:7f:
7b:eb:82:41:55:46:13:85:f5:5b:25:91:76:74:4b:
59:d8:a1:27:68:b2:6a:73:3b:ce:2c:5e:43:b5:41:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CA:49:DE:2C:43:C5:D6:8B:5B:A5:89:49:E9:66:41:EE:1E:3C:70
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6b:0f:5c:74:37:d2:c5:99:85:a0:80:ea:d1:e2:d1:ec:0d:
00:72:92:f8:ff:15:60:8e:a8:86:b5:40:d0:bf:b1:8f:3b:95:
1e:ec:4c:23:76:8a:84:22:75:db:de:5c:e3:e2:df:6c:9e:0f:
0c:89:fd:52:66:53:44:ce:48:6a:76:ee:99:a8:f3:cd:55:9e:
8f:fb:94:75:41:41:c7:ea:0a:e7:82:da:dc:1a:0f:a7:ef:51:
f6:32:c9:f9:58:d6:bd:ca:94:0a:57:b6:f4:42:82:9c:8a:99:
8c:96:bb:b5:98:3f:09:59:ad:4d:c3:09:59:b8:6b:96:97:6e:
1f:1b:83:6c:f1:94:c0:46:80:6c:4e:dd:42:31:5b:91:c2:a7:
1a:a5:ed:61:18:19:68:ec:ef:91:ac:18:4b:87:29:5e:30:51:
fa:e9:ad:ec:07:bc:9c:fa:b8:a8:3e:50:92:ce:63:5c:15:a7:
90:97:eb:37:88:f5:c3:89:8e:16:65:d8:bf:b6:67:53:3b:c0:
40:16:8d:a3:1e:f9:f4:a4:4a:6e:2b:99:f3:81:7d:c4:dc:95:
8c:04:1d:5e:0b:33:a3:65:4d:2c:3b:7d:72:77:1f:41:39:7b:
c8:8a:f4:b8:7f:da:21:21:8a:78:88:fb:46:5b:b6:7d:89:4d:
60:a4:b4:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2XSTXYl44qqHeozEKTvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4
NTVmYzQwHhcNMjQxMTI2MTkwMTE5WhcNMjQxMTI3MTkwMTE5WjAzMTEwLwYDVQQD
EyhmNWNhNDlkZTJjNDNjNWQ2OGI1YmE1ODk0OWU5NjY0MWVlMWUzYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b+wx9q8YZoxBPVAU26NGqawsgdj
e2r24im2slZX+MY6YtHPh7xhmagZEIT6deWKfBdm22+kKmSE9yM/2Yq0hYyEjMIs
nhK4C6PtSs3Aq9g2FOcbEIUmVHxD2MNrh8tEi7wWCsOEm9mQe1ZQliaLn3xSocut
aIvqoZ6VUTf8lQoezMhiQDzCjWKuBNuPoMVF/eXbnTNQ3/2IvjTQzxyg/qLZrT4x
HJUyvCW6+g0EmBwOPRFAdap9fCr0EoLtvSqBNCX8Nufli9HeqBviIdORBWVEDFDf
cUc0FLeIs45MD39764JBVUYThfVbJZF2dEtZ2KEnaLJqczvOLF5DtUFS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXKSd4sQ8XWi1uliUnpZkHuHjxwMB8GA1UdIwQY
MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt
YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh
LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2sPXHQ3
0sWZhaCA6tHi0ewNAHKS+P8VYI6ohrVA0L+xjzuVHuxMI3aKhCJ1295c4+LfbJ4P
DIn9UmZTRM5IanbumajzzVWej/uUdUFBx+oK54La3BoPp+9R9jLJ+VjWvcqUCle2
9EKCnIqZjJa7tZg/CVmtTcMJWbhrlpduHxuDbPGUwEaAbE7dQjFbkcKnGqXtYRgZ
aOzvkawYS4cpXjBR+umt7Ae8nPq4qD5Qks5jXBWnkJfrN4j1w4mOFmXYv7ZnUzvA
QBaNox759KRKbiuZ84F9xNyVjAQdXgszo2VNLDt9cncfQTl7yIr0uH/aISGKeIj7
Rlu2fYlNYKS0hQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:07 2024 by rpki-client on console-ams.rpki-client.org