Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: xTFMroldT9Ots2qVHy4LG9CdknEerZXWEPfsebqZxBU=
Subject key identifier: 85:28:29:C5:87:45:59:09:A9:5B:81:17:35:35:82:B4:AF:D9:2F:60
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 0193568A0E58FDEC05711A431A20637AC2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:48 +0000
Manifest this update: Sat 23 Nov 2024 01:01:48 +0000
Manifest next update: Sun 24 Nov 2024 01:01:48 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: r57JqNqIonLVS3IGo4FiXVfJg5zt6uNv5D86S9aqxuA=)
2: 1ZyUIIbeu8Rp0VNjzW7zqwP_wf8.roa (hash: lHIkPmWKRTVREWSBh0qS7R5q9pbx7uFT6d62kFFHJkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:0e:58:fd:ec:05:71:1a:43:1a:20:63:7a:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Nov 23 01:01:48 2024 GMT
Not After : Nov 24 01:01:48 2024 GMT
Subject: CN=852829c587455909a95b8117353582b4afd92f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:30:50:d4:17:24:2b:f6:30:47:fa:4d:0d:
be:67:23:c1:d7:9c:85:7d:c4:b5:20:6d:9f:21:c7:
91:91:d1:60:85:de:b5:0b:76:12:df:28:38:92:c9:
2f:46:7a:85:50:fa:61:10:d1:dc:69:3b:02:a2:eb:
0b:66:95:5c:63:72:b0:30:78:8a:ee:19:07:ab:16:
4f:1b:ec:6c:70:41:e1:5d:52:fe:7f:71:35:23:4f:
51:94:a7:37:2c:e3:89:ff:a9:01:16:0a:e2:31:82:
61:61:56:9d:23:40:1e:d9:80:5c:ec:c9:3a:f4:b5:
ed:8e:e8:49:69:e6:6f:4f:52:d4:f9:80:b8:55:0e:
ab:96:73:17:6f:4e:9f:37:bb:a4:49:79:3b:d3:24:
28:49:4a:16:1b:55:cf:d9:48:72:46:5a:2c:48:00:
c5:b0:3e:47:25:32:08:45:f4:ce:2c:cb:b3:4f:3c:
31:d6:a1:21:25:c5:86:3a:24:ef:61:ac:fc:18:90:
cb:b3:8f:4c:1a:3e:5d:86:a7:3b:06:18:90:26:d1:
50:65:83:fc:0a:0d:8e:e8:3e:b3:50:a6:d5:bc:9f:
2a:58:6f:7d:8f:f7:a9:a8:ec:3b:a5:90:29:82:b8:
fe:db:fb:6b:e2:e8:46:f3:14:c7:51:9f:27:ed:71:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:29:C5:87:45:59:09:A9:5B:81:17:35:35:82:B4:AF:D9:2F:60
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:79:ba:c7:d4:4d:74:75:e4:d1:c6:86:c8:e5:e3:8f:1a:
ea:2d:cd:c8:74:98:3f:37:0b:9d:a0:00:a1:77:f5:f7:60:d5:
38:47:81:35:a0:b9:39:6c:60:10:bb:44:68:f8:86:07:e1:3d:
00:b6:38:5a:2f:c9:b0:b7:5f:7b:39:65:5e:5a:e7:87:9a:33:
e7:b3:f3:f1:64:b6:e6:43:51:b6:e0:f8:f6:f6:03:11:e9:e8:
b2:98:76:9a:1f:69:81:3a:96:45:86:ad:f1:9d:31:60:14:aa:
e4:5c:10:97:61:2e:c7:87:0f:81:2a:82:8d:64:7a:8a:60:19:
cb:05:69:25:cf:61:41:39:c6:35:2e:bf:db:98:2c:27:c1:d8:
0d:6c:79:61:bc:bf:55:f6:15:ec:62:b9:d0:26:e9:e8:a3:cd:
e8:81:d0:11:e2:2a:78:37:4f:77:3b:c8:19:d4:01:79:0b:0c:
72:03:9b:e2:21:6c:dc:11:f8:26:5a:26:3e:27:88:38:2f:d8:
70:dc:d0:37:d6:cf:48:40:86:17:c6:0b:7e:a4:6e:d3:a0:78:
bd:04:e7:a4:8a:a5:b3:46:ec:90:fb:a4:d8:73:47:86:38:3f:
ad:26:45:5c:31:65:e5:db:34:ab:8f:2c:50:37:c5:89:d0:9f:
60:d9:8f:58
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNWig5Y/ewFcRpDGiBjesKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjQxMTIzMDEwMTQ4WhcNMjQxMTI0MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg4NTI4MjljNTg3NDU1OTA5YTk1YjgxMTczNTM1ODJiNGFmZDkyZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17gwUNQXJCv2MEf6TQ2+ZyPB15yF
fcS1IG2fIceRkdFghd61C3YS3yg4kskvRnqFUPphENHcaTsCousLZpVcY3KwMHiK
7hkHqxZPG+xscEHhXVL+f3E1I09RlKc3LOOJ/6kBFgriMYJhYVadI0Ae2YBc7Mk6
9LXtjuhJaeZvT1LU+YC4VQ6rlnMXb06fN7ukSXk70yQoSUoWG1XP2UhyRlosSADF
sD5HJTIIRfTOLMuzTzwx1qEhJcWGOiTvYaz8GJDLs49MGj5dhqc7BhiQJtFQZYP8
Cg2O6D6zUKbVvJ8qWG99j/epqOw7pZApgrj+2/tr4uhG8xTHUZ8n7XE0EwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIUoKcWHRVkJqVuBFzU1grSv2S9gMB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuZ5
usfUTXR15NHGhsjl448a6i3NyHSYPzcLnaAAoXf192DVOEeBNaC5OWxgELtEaPiG
B+E9ALY4Wi/JsLdfezllXlrnh5oz57Pz8WS25kNRtuD49vYDEenosph2mh9pgTqW
RYat8Z0xYBSq5FwQl2Eux4cPgSqCjWR6imAZywVpJc9hQTnGNS6/25gsJ8HYDWx5
Yby/VfYV7GK50Cbp6KPN6IHQEeIqeDdPdzvIGdQBeQsMcgOb4iFs3BH4JlomPieI
OC/YcNzQN9bPSECGF8YLfqRu06B4vQTnpIqls0bskPuk2HNHhjg/rSZFXDFl5ds0
q48sUDfFidCfYNmPWA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:40 2024 by rpki-client on console-ams.rpki-client.org