Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: AZId4vvZPvyqV5RrrRRDdm10iH/ua0E2a+oeZgZ/GoI=
Subject key identifier: 42:D4:71:2E:78:B2:AB:EA:31:6B:96:5A:B4:5E:33:83:0C:9F:DF:FB
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01923AA80F52C41790147A25DBC0A164BB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0276
Signing time: Sat 28 Sep 2024 22:02:25 +0000
Manifest this update: Sat 28 Sep 2024 22:02:25 +0000
Manifest next update: Sun 29 Sep 2024 22:02:25 +0000
Files and hashes: 1: 7pNcq3TXWzbiE40eI1Wknl946II.roa (hash: Ie8QBX4Vs5YGncvCczK8DcSItzkYkI0YdOq0L5To3jU=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: D6LOwxAOrQLuVBmkdaSlgQLvKJ2dkkfjn//iUW/GtzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a8:0f:52:c4:17:90:14:7a:25:db:c0:a1:64:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Sep 28 22:02:25 2024 GMT
Not After : Sep 29 22:02:25 2024 GMT
Subject: CN=42d4712e78b2abea316b965ab45e33830c9fdffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:db:24:db:d2:1e:93:73:84:e8:4b:b3:18:
4b:27:c1:49:51:9b:d7:60:f4:31:0a:08:72:e9:bf:
df:c0:73:33:a4:9e:d9:ec:62:bf:2f:e7:08:13:36:
2a:e3:1f:ea:92:34:8a:60:b9:bc:3d:78:ec:82:83:
5a:77:17:20:18:83:e8:f5:37:fe:c5:12:63:d8:c7:
e4:5e:2a:af:ad:39:20:fd:b7:8e:d7:5e:a0:95:7d:
9a:12:44:d5:31:32:c7:f6:25:ce:7d:14:b6:be:8a:
d6:51:2f:6d:3a:6b:b8:d7:cc:c9:7c:a6:db:9e:26:
a1:15:d9:a9:60:7a:de:eb:4d:32:46:67:34:f7:f4:
f8:b7:ab:f5:77:d5:59:34:e5:37:09:1f:4b:7e:ee:
9f:05:e0:56:62:19:b3:36:e1:e7:76:40:00:62:75:
ab:a0:91:e9:a9:dd:25:a6:04:20:07:bb:df:dc:40:
9f:d3:e0:f6:42:9c:67:f9:bc:29:22:e3:b5:13:7f:
74:1b:40:19:73:35:cd:9d:3a:e4:96:7c:e7:c4:1b:
f2:95:95:65:9a:63:87:b0:c2:49:96:70:9c:b2:77:
c5:1c:b2:e7:47:f2:d7:1f:51:13:b3:43:15:d0:a0:
c1:de:f9:6d:25:b8:d3:f7:9c:9c:1e:72:09:82:5e:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:71:2E:78:B2:AB:EA:31:6B:96:5A:B4:5E:33:83:0C:9F:DF:FB
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:02:9c:a4:72:f0:a5:34:a0:1c:e4:64:25:2f:c3:c5:6c:
85:c0:b0:9b:b7:ab:53:ca:c0:33:f5:2f:b4:58:96:54:03:98:
43:4f:48:2f:9a:3b:ff:a6:24:00:7c:b7:cb:75:19:a6:44:1f:
d4:8f:9e:5b:7a:fd:a0:0a:25:cf:d9:bd:ef:e5:e3:bf:04:c0:
e6:c9:4d:e2:88:9e:ca:9c:ae:4e:78:a8:5a:fe:8e:6c:d6:f5:
d2:b3:0d:d6:2f:19:48:f1:9a:f7:ef:e6:de:59:c4:05:13:f5:
1e:c5:50:c8:ba:2f:17:3a:cf:86:b3:1d:78:ec:22:09:ea:4b:
e6:d9:c6:24:0f:8f:fb:bd:a1:41:eb:76:fa:70:4b:7a:06:31:
73:04:5c:b7:3c:bb:ce:b2:74:dd:0e:69:97:84:4f:8b:61:a7:
c5:76:c2:bb:ac:24:ac:0d:35:1a:dd:e9:a3:70:52:fa:35:80:
37:19:97:5f:fd:92:f0:eb:44:ca:3f:6c:3f:92:30:bb:f3:80:
31:e3:de:c3:1f:83:6c:a8:72:12:b7:f5:26:cf:31:ab:5c:96:
11:2a:73:8b:8a:4d:6e:a7:0c:84:6c:ab:39:29:1d:4e:a7:0e:
20:50:2c:50:a9:58:87:da:38:ac:96:1c:a9:1e:08:34:fb:0a:
7f:69:3b:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6qA9SxBeQFHol28ChZLtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjQwOTI4MjIwMjI1WhcNMjQwOTI5MjIwMjI1WjAzMTEwLwYDVQQD
Eyg0MmQ0NzEyZTc4YjJhYmVhMzE2Yjk2NWFiNDVlMzM4MzBjOWZkZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CDbJNvSHpNzhOhLsxhLJ8FJUZvX
YPQxCghy6b/fwHMzpJ7Z7GK/L+cIEzYq4x/qkjSKYLm8PXjsgoNadxcgGIPo9Tf+
xRJj2MfkXiqvrTkg/beO116glX2aEkTVMTLH9iXOfRS2vorWUS9tOmu418zJfKbb
niahFdmpYHre600yRmc09/T4t6v1d9VZNOU3CR9Lfu6fBeBWYhmzNuHndkAAYnWr
oJHpqd0lpgQgB7vf3ECf0+D2Qpxn+bwpIuO1E390G0AZczXNnTrklnznxBvylZVl
mmOHsMJJlnCcsnfFHLLnR/LXH1ETs0MV0KDB3vltJbjT95ycHnIJgl60KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELUcS54sqvqMWuWWrReM4MMn9/7MB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLACnKRy
8KU0oBzkZCUvw8VshcCwm7erU8rAM/UvtFiWVAOYQ09IL5o7/6YkAHy3y3UZpkQf
1I+eW3r9oAolz9m97+XjvwTA5slN4oieypyuTnioWv6ObNb10rMN1i8ZSPGa9+/m
3lnEBRP1HsVQyLovFzrPhrMdeOwiCepL5tnGJA+P+72hQet2+nBLegYxcwRctzy7
zrJ03Q5pl4RPi2GnxXbCu6wkrA01Gt3po3BS+jWANxmXX/2S8OtEyj9sP5Iwu/OA
MePewx+DbKhyErf1Js8xq1yWESpzi4pNbqcMhGyrOSkdTqcOIFAsUKlYh9o4rJYc
qR4INPsKf2k7dg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:36:52 2024 by rpki-client on console-ams.rpki-client.org