Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: WZuJrOrUMGQPXJflCPjNCQhBjt0P7On/TRURRvjxs0A=
Subject key identifier: 2C:51:B3:4C:8A:3D:FA:11:66:AA:62:56:0E:E2:30:B7:86:8D:78:41
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019358772C287125DD6EABEA3D697B5275C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:00:25 +0000
Manifest this update: Sat 23 Nov 2024 10:00:25 +0000
Manifest next update: Sun 24 Nov 2024 10:00:25 +0000
Files and hashes: 1: PpMYYOCip6g5oqeZSkOs5zkOCwg.roa (hash: uyWDn5siqW7h8UxlEJ7noiaUBDnj0V9nXXRjkkjKpgQ=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: YTVQanDWCrSRbZkrHvlwwcQ8nNz4/utTWXrj9uFqYtI=)
3: tU7fzsrGeOPK4_CPJgJsDWm-cvc.roa (hash: tCeJWeHsI+K+JtrgqnRJ75OdYTkfVXxt4+VjaF53sNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:2c:28:71:25:dd:6e:ab:ea:3d:69:7b:52:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Nov 23 10:00:25 2024 GMT
Not After : Nov 24 10:00:25 2024 GMT
Subject: CN=2c51b34c8a3dfa1166aa62560ee230b7868d7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:98:31:5c:93:04:c9:5b:1a:3f:11:4d:21:
22:20:b3:15:39:4c:77:e4:0c:27:c8:b4:d2:92:ca:
89:8d:48:a3:38:1d:4a:d9:c2:d4:21:df:af:f0:cc:
bd:77:ef:ce:98:ba:3a:6d:23:ae:76:57:49:8c:7d:
bd:68:55:65:68:ec:8a:e6:3b:25:0d:2c:eb:83:77:
5e:5c:54:e9:5b:08:b1:58:1f:f8:40:d5:38:31:ad:
17:1b:f3:08:12:8e:a4:94:ef:be:17:46:e5:26:a1:
79:5a:ad:40:92:77:aa:2b:2c:b4:0a:48:c5:aa:58:
c8:79:0b:d8:6e:44:24:ae:7a:50:29:40:8b:80:70:
c5:68:e3:9c:b9:5a:81:2c:33:7b:38:f6:24:04:c8:
c9:3b:0b:7b:9a:61:1c:9e:e4:0d:84:5e:41:ac:91:
56:c8:bf:3f:ac:ef:18:83:21:a3:e1:2a:3e:52:f1:
36:76:48:03:2d:b0:7e:4e:83:62:eb:43:ae:a2:41:
07:ec:75:3c:a9:5e:85:4a:50:e6:d2:e1:b9:d5:19:
97:20:26:d9:c6:a6:84:6b:40:7d:a8:8a:9e:df:0e:
23:dd:3f:ac:33:3c:7f:06:1b:19:12:4c:1d:ca:d4:
83:c4:75:3e:23:e1:d2:9f:5b:00:c3:a3:42:0f:4d:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:B3:4C:8A:3D:FA:11:66:AA:62:56:0E:E2:30:B7:86:8D:78:41
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:ef:ea:ec:a7:63:38:01:7d:60:ab:fd:b7:86:d3:7f:f6:
ad:e1:b5:e6:34:99:b9:72:8a:65:bc:c3:15:9d:6a:c8:08:58:
25:5e:b5:7b:4b:3e:0d:78:52:aa:d5:2c:61:9f:b5:44:b4:fe:
36:24:73:54:73:12:b3:19:b3:44:d5:eb:bf:08:9c:d8:ae:8d:
45:3d:39:59:83:1d:42:a3:8e:5d:a8:44:2f:13:30:b9:d9:1b:
1f:e6:b1:bb:24:34:73:62:6c:69:e5:87:2d:bb:8a:6c:b0:43:
fd:53:a6:9f:12:47:58:b7:e4:30:ce:39:b4:0a:a2:e7:69:d7:
bd:1c:27:7d:c5:73:41:fb:e4:30:29:29:df:e0:16:05:04:5c:
9c:60:d8:7b:c8:66:37:d8:bd:b4:a0:35:1d:ce:c5:b5:eb:92:
62:60:6b:00:fc:1b:60:8a:01:8c:05:4f:e9:28:7a:22:17:09:
40:05:8c:32:88:08:1c:ec:15:fc:ae:63:23:b3:14:ac:b4:57:
60:47:dd:79:41:ab:29:06:d0:8c:33:23:f7:94:ca:44:41:3d:
0b:ab:bc:49:05:3b:a8:72:6a:77:58:bf:a3:a6:16:3a:8c:2c:
95:96:e4:a9:5e:29:94:57:a0:aa:c3:7e:e5:e3:3e:98:be:6c:
52:70:ee:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdywocSXdbqvqPWl7UnXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTI5ZGU5ZWJhNmI0NzUxNmYwYTE1NTczNDIwNWFiYmI5
OGI3YzIwHhcNMjQxMTIzMTAwMDI1WhcNMjQxMTI0MTAwMDI1WjAzMTEwLwYDVQQD
EygyYzUxYjM0YzhhM2RmYTExNjZhYTYyNTYwZWUyMzBiNzg2OGQ3ODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaKYMVyTBMlbGj8RTSEiILMVOUx3
5AwnyLTSksqJjUijOB1K2cLUId+v8My9d+/OmLo6bSOudldJjH29aFVlaOyK5jsl
DSzrg3deXFTpWwixWB/4QNU4Ma0XG/MIEo6klO++F0blJqF5Wq1AkneqKyy0CkjF
qljIeQvYbkQkrnpQKUCLgHDFaOOcuVqBLDN7OPYkBMjJOwt7mmEcnuQNhF5BrJFW
yL8/rO8YgyGj4So+UvE2dkgDLbB+ToNi60OuokEH7HU8qV6FSlDm0uG51RmXICbZ
xqaEa0B9qIqe3w4j3T+sMzx/BhsZEkwdytSDxHU+I+HSn1sAw6NCD031dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxRs0yKPfoRZqpiVg7iMLeGjXhBMB8GA1UdIwQY
MBaAFJsSnenrprR1FvChVXNCBau7mLfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgt
Y2YxZDFmMDA3YTM2LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YjM3M2UtZDMxNC00NDU5LWI4NTgtY2YxZDFmMDA3YTM2
LzEvbXhLZDZldW10SFVXOEtGVmMwSUZxN3VZdDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZLv6uyn
YzgBfWCr/beG03/2reG15jSZuXKKZbzDFZ1qyAhYJV61e0s+DXhSqtUsYZ+1RLT+
NiRzVHMSsxmzRNXrvwic2K6NRT05WYMdQqOOXahELxMwudkbH+axuyQ0c2JsaeWH
LbuKbLBD/VOmnxJHWLfkMM45tAqi52nXvRwnfcVzQfvkMCkp3+AWBQRcnGDYe8hm
N9i9tKA1Hc7FteuSYmBrAPwbYIoBjAVP6Sh6IhcJQAWMMogIHOwV/K5jI7MUrLRX
YEfdeUGrKQbQjDMj95TKREE9C6u8SQU7qHJqd1i/o6YWOowslZbkqV4plFegqsN+
5eM+mL5sUnDuqQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:25 2024 by rpki-client on console-fra.rpki-client.org