Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: PxDjDpI4rQ/jKgn54YMqn/7mxU8CeywpOYkIpOfWIkg=
Subject key identifier: 0B:43:A3:96:2C:D8:29:63:54:AE:8C:BB:FA:CB:4E:0C:10:A7:E2:1B
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0193587737768028C0241E1DFB9F4B94CF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:00:28 +0000
Manifest this update: Sat 23 Nov 2024 10:00:28 +0000
Manifest next update: Sun 24 Nov 2024 10:00:28 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: jz/s3PTjQjl1SXx71dL2q7naMBM2kBfGwZbGxyEr3iY=)
2: vPLaAx0ytLAxerT0rmwbzFdBa3U.roa (hash: XJGtaybc5stei7ra0PHrMoaOzR6KXyu52aVFViLTKvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:37:76:80:28:c0:24:1e:1d:fb:9f:4b:94:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Nov 23 10:00:28 2024 GMT
Not After : Nov 24 10:00:28 2024 GMT
Subject: CN=0b43a3962cd8296354ae8cbbfacb4e0c10a7e21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:f6:c0:e2:bb:55:b4:07:c8:3b:bf:20:27:
ed:f3:74:6c:56:b7:35:db:62:ca:02:1d:02:10:62:
3d:b4:28:b9:a9:fb:95:d9:b2:dd:3e:e0:15:25:9e:
ed:a2:ed:43:80:0b:51:a2:9a:21:1f:21:84:c1:81:
87:89:f8:ff:c5:67:cd:77:a3:00:52:c2:16:82:35:
6a:63:bc:4f:96:dc:3e:da:03:68:fc:c0:52:2c:78:
fe:c7:23:d6:56:ac:33:58:05:d1:35:2f:62:de:83:
60:f7:e2:62:b3:c6:b7:02:06:a4:ad:ef:33:c3:ea:
c3:8c:04:30:27:6d:7d:da:21:02:29:49:19:53:36:
91:f1:89:ff:ea:fa:f1:e3:3c:9e:e6:13:98:19:f0:
59:2f:65:49:53:36:13:f2:f1:69:9e:67:20:4f:1f:
3b:ad:fc:8c:b9:9e:9a:0c:57:af:72:36:0b:0a:84:
fe:8c:e0:12:48:44:54:48:be:61:e2:ee:7e:25:05:
89:54:0b:a3:61:6b:7c:80:85:b7:62:b0:aa:c6:a5:
9e:4d:1b:81:71:84:1b:70:a9:2b:8f:60:71:5e:cc:
09:ae:25:32:8e:bc:ea:12:ef:70:7c:f7:28:82:0d:
25:be:74:b2:7a:cc:b1:6e:04:b5:9c:81:53:72:3c:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:A3:96:2C:D8:29:63:54:AE:8C:BB:FA:CB:4E:0C:10:A7:E2:1B
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:26:ef:d8:25:75:71:cf:28:fd:6e:9c:eb:d0:1f:59:6e:
0d:64:19:00:88:d4:68:7a:28:a1:f9:40:83:95:83:cb:60:bc:
af:6e:a8:a9:76:bb:8f:b0:54:07:c0:2c:e0:19:19:39:c0:97:
61:6e:b6:dd:2a:c4:85:1d:fa:01:4b:bf:b8:3a:a5:54:ce:8e:
25:27:c1:0a:15:b7:d1:2c:ca:c7:34:34:c0:15:9b:9b:66:c3:
dc:cc:e9:f3:cb:5c:e7:87:cd:5c:0a:69:ff:00:a1:4e:0b:db:
de:5b:68:0f:2f:5c:c6:b5:1f:bf:87:59:53:bd:28:51:89:21:
b8:d3:11:78:3e:c6:bf:51:7c:08:80:45:ac:e8:ee:26:22:cb:
89:44:04:a7:e4:02:2b:f7:d7:1b:92:4a:1b:f1:ca:47:50:a6:
c2:5d:5d:e4:b8:9d:f3:ff:7d:7f:41:bd:e4:23:29:04:2b:e7:
59:8b:51:13:5c:f8:d0:1a:81:60:37:b4:e0:a9:84:6d:f3:63:
7b:06:8c:b3:72:41:27:ad:3e:a1:a1:af:d2:85:fe:07:39:17:
06:86:8b:5d:66:5e:0c:ec:e1:35:c6:0d:ec:aa:91:28:87:2e:
3a:da:23:e5:5d:64:61:a2:3c:d3:f6:d2:5f:cd:fc:0e:71:8c:
86:b8:67:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdzd2gCjAJB4d+59LlM8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl
NTllOTkwHhcNMjQxMTIzMTAwMDI4WhcNMjQxMTI0MTAwMDI4WjAzMTEwLwYDVQQD
EygwYjQzYTM5NjJjZDgyOTYzNTRhZThjYmJmYWNiNGUwYzEwYTdlMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs32wOK7VbQHyDu/ICft83RsVrc1
22LKAh0CEGI9tCi5qfuV2bLdPuAVJZ7tou1DgAtRopohHyGEwYGHifj/xWfNd6MA
UsIWgjVqY7xPltw+2gNo/MBSLHj+xyPWVqwzWAXRNS9i3oNg9+Jis8a3Agakre8z
w+rDjAQwJ2192iECKUkZUzaR8Yn/6vrx4zye5hOYGfBZL2VJUzYT8vFpnmcgTx87
rfyMuZ6aDFevcjYLCoT+jOASSERUSL5h4u5+JQWJVAujYWt8gIW3YrCqxqWeTRuB
cYQbcKkrj2BxXswJriUyjrzqEu9wfPcogg0lvnSyesyxbgS1nIFTcjyBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtDo5Ys2CljVK6Mu/rLTgwQp+IbMB8GA1UdIwQY
MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt
ODI2MjUzOWRlNDZmLzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm
LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSQm79gl
dXHPKP1unOvQH1luDWQZAIjUaHoooflAg5WDy2C8r26oqXa7j7BUB8As4BkZOcCX
YW623SrEhR36AUu/uDqlVM6OJSfBChW30SzKxzQ0wBWbm2bD3Mzp88tc54fNXApp
/wChTgvb3ltoDy9cxrUfv4dZU70oUYkhuNMReD7Gv1F8CIBFrOjuJiLLiUQEp+QC
K/fXG5JKG/HKR1Cmwl1d5Lid8/99f0G95CMpBCvnWYtRE1z40BqBYDe04KmEbfNj
ewaMs3JBJ60+oaGv0oX+BzkXBoaLXWZeDOzhNcYN7KqRKIcuOtoj5V1kYaI80/bS
X838DnGMhrhniQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:28 2024 by rpki-client on console-fra.rpki-client.org