Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: Vtp/ccYlyj+PDd477RJ30VQ7pTOiQbnnSxlaEIkLCbo=
Subject key identifier: 3D:F5:DB:A2:89:61:B7:26:BE:93:C8:A8:81:C6:D7:89:5B:44:C5:71
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 0193572DF01BC3E441E2190E27F98ADFFBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0D6C
Signing time: Sat 23 Nov 2024 04:00:48 +0000
Manifest this update: Sat 23 Nov 2024 04:00:48 +0000
Manifest next update: Sun 24 Nov 2024 04:00:48 +0000
Files and hashes: 1: J54GOGSbqHTQqEjRaG3LmGV5hec.roa (hash: cetie7S1G42aCZP/HLecE4899uy/3GzNs2hb8TSdgMY=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: WXU7pENM+73XjPuKO1V+fNuvvHFANBPHBNDM1jTR0xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:f0:1b:c3:e4:41:e2:19:0e:27:f9:8a:df:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Nov 23 04:00:48 2024 GMT
Not After : Nov 24 04:00:48 2024 GMT
Subject: CN=3df5dba28961b726be93c8a881c6d7895b44c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:54:20:15:38:62:66:e1:6a:03:f4:7d:d6:
13:2b:a8:02:4c:bf:ee:f2:e5:7b:09:52:08:29:fb:
66:db:29:c5:f1:fc:8a:d1:33:86:7c:d6:41:e9:c6:
68:09:0e:aa:26:95:c6:e0:b4:dd:c0:0e:d3:16:82:
4d:20:65:2e:57:60:12:86:94:06:05:21:20:35:93:
b0:2c:95:0a:3a:1f:68:f2:2f:02:e1:c4:2a:d3:7d:
a7:56:d8:a2:8d:01:60:d6:6a:7d:3c:8c:a4:9c:a5:
cc:87:d3:e2:cb:7a:37:7f:67:a0:bb:99:b7:24:b9:
ca:be:9a:8a:77:7f:7f:33:f5:04:68:a6:f2:9f:e5:
0b:b4:d3:75:8f:55:1f:9e:73:72:a7:f9:97:48:6f:
07:40:36:1c:90:63:51:ff:ac:7a:5c:84:8d:3d:57:
a8:57:82:47:9f:93:b8:70:ba:50:2d:44:82:61:8f:
c4:28:c9:d8:17:3e:e6:9e:d4:81:a8:62:9a:a8:4c:
c0:00:8a:5c:00:b0:c7:7e:4f:9f:e0:6e:9e:93:1e:
9c:05:2c:6c:df:db:cc:d7:b8:63:39:c9:fc:29:02:
32:15:3a:49:8e:70:05:d2:76:ec:44:08:57:be:6b:
94:d5:04:d8:ef:27:41:23:08:fa:5e:ff:cd:8b:a9:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:DB:A2:89:61:B7:26:BE:93:C8:A8:81:C6:D7:89:5B:44:C5:71
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bb:76:64:6a:5c:4c:1b:33:36:3e:05:42:09:49:8a:aa:16:
03:81:06:f8:01:db:a6:d7:ba:6d:87:3e:12:00:e6:cf:b1:f1:
fd:cc:96:1e:ee:54:20:c6:5c:0a:fc:0f:8f:a1:4d:3b:07:6c:
6d:98:8d:fd:6b:5f:51:d0:c6:cd:ad:33:4d:20:ec:e4:7c:03:
d1:91:81:e1:14:0b:db:da:07:72:b9:d2:4d:2b:b3:4a:8e:81:
46:b2:d2:85:f0:aa:61:d4:47:98:2f:23:d5:88:84:f1:83:56:
e7:9d:7d:30:4c:a3:8d:02:49:bf:df:72:c1:37:6e:27:37:c8:
d4:90:c8:db:f8:37:7b:2f:39:87:65:21:3d:5b:09:4b:4a:c3:
1d:96:c3:9b:31:2a:e2:c1:03:bf:19:d6:6a:70:e0:63:b4:73:
53:11:77:b0:b6:41:00:dd:02:72:bd:4e:d2:3a:0d:07:40:f7:
ce:aa:3a:79:16:e2:ac:b5:53:b8:53:4c:b9:bd:14:74:f8:7a:
13:41:d4:b8:29:4e:bc:3d:5c:56:83:cf:8f:85:9c:42:a4:4b:
05:50:ce:32:5d:3d:b8:de:9c:9f:e8:23:64:1c:a8:f2:99:8f:
2e:ca:75:2f:e5:f3:9b:71:01:68:b9:ee:7f:bc:14:ac:3c:fe:
d4:a2:3c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLfAbw+RB4hkOJ/mK3/vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz
NGZkZDkwHhcNMjQxMTIzMDQwMDQ4WhcNMjQxMTI0MDQwMDQ4WjAzMTEwLwYDVQQD
EygzZGY1ZGJhMjg5NjFiNzI2YmU5M2M4YTg4MWM2ZDc4OTViNDRjNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlUIBU4YmbhagP0fdYTK6gCTL/u
8uV7CVIIKftm2ynF8fyK0TOGfNZB6cZoCQ6qJpXG4LTdwA7TFoJNIGUuV2AShpQG
BSEgNZOwLJUKOh9o8i8C4cQq032nVtiijQFg1mp9PIyknKXMh9Piy3o3f2egu5m3
JLnKvpqKd39/M/UEaKbyn+ULtNN1j1UfnnNyp/mXSG8HQDYckGNR/6x6XISNPVeo
V4JHn5O4cLpQLUSCYY/EKMnYFz7mntSBqGKaqEzAAIpcALDHfk+f4G6ekx6cBSxs
39vM17hjOcn8KQIyFTpJjnAF0nbsRAhXvmuU1QTY7ydBIwj6Xv/Ni6mHEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3126KJYbcmvpPIqIHG14lbRMVxMB8GA1UdIwQY
MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt
OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl
LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrt2ZGpc
TBszNj4FQglJiqoWA4EG+AHbpte6bYc+EgDmz7Hx/cyWHu5UIMZcCvwPj6FNOwds
bZiN/WtfUdDGza0zTSDs5HwD0ZGB4RQL29oHcrnSTSuzSo6BRrLShfCqYdRHmC8j
1YiE8YNW5519MEyjjQJJv99ywTduJzfI1JDI2/g3ey85h2UhPVsJS0rDHZbDmzEq
4sEDvxnWanDgY7RzUxF3sLZBAN0Ccr1O0joNB0D3zqo6eRbirLVTuFNMub0UdPh6
E0HUuClOvD1cVoPPj4WcQqRLBVDOMl09uN6cn+gjZByo8pmPLsp1L+Xzm3EBaLnu
f7wUrDz+1KI8ww==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:48 2024 by rpki-client on console-fra.rpki-client.org