Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: jEY5ZcfbuSW7UxU7mC1ZVAEoFvlrLy+KJDxrWdvXDEY=
Subject key identifier: D2:1F:B7:2C:37:A1:9B:CC:B6:E9:AD:07:DD:7E:FA:AE:A6:2B:15:3D
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 01935764EF6F20215D0F7CBD53429C157403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 12A0
Signing time: Sat 23 Nov 2024 05:00:52 +0000
Manifest this update: Sat 23 Nov 2024 05:00:52 +0000
Manifest next update: Sun 24 Nov 2024 05:00:52 +0000
Files and hashes: 1: 3ecYOcddtIrrHW_9l_uKT55zPqI.roa (hash: IGTMMoG13TlA1Sn3q22fFvkwJzF3rN8DM18C0yNidIk=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: ROgwK+ZSehpy7bdAaQOtlEloBHKKe1TpB0Zs3bYaqUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:ef:6f:20:21:5d:0f:7c:bd:53:42:9c:15:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Nov 23 05:00:52 2024 GMT
Not After : Nov 24 05:00:52 2024 GMT
Subject: CN=d21fb72c37a19bccb6e9ad07dd7efaaea62b153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:b8:db:c1:27:8f:45:44:41:7f:76:3d:ad:
5f:40:f7:4c:a9:e8:b3:d3:06:bc:d0:5e:c1:dc:4b:
45:fb:7f:d6:2b:47:a1:24:3b:c4:f9:55:71:a1:1b:
7b:7e:b3:f7:5f:2c:75:11:73:52:cf:b4:27:ea:d5:
91:e8:7f:04:95:3d:ef:cb:15:4a:c4:ca:69:dc:c5:
00:4f:5f:3b:19:ef:fe:65:50:33:9a:6f:cd:b1:3d:
f8:d0:11:44:dd:e4:57:29:1d:ee:1d:59:2f:d3:d4:
d6:e9:68:71:73:ea:2a:44:b4:38:24:0e:08:a9:51:
fc:bb:98:17:4a:bc:44:bc:39:2b:89:85:e8:86:b9:
4e:14:78:c7:ab:8d:f6:d3:8c:bc:1a:11:9b:ba:a9:
ed:55:4b:c5:d7:f2:76:18:a8:05:0e:4f:be:e0:dd:
48:ac:0b:47:b0:fb:29:5c:ca:1c:b2:1c:c1:86:c8:
9f:b4:4a:df:d6:64:18:c1:6c:e4:81:b0:b9:10:bd:
e0:bd:29:1e:8b:6b:4d:ac:b9:64:bc:a3:34:61:73:
e4:44:be:e3:8f:93:75:eb:f8:cf:97:cc:ab:b8:16:
ed:2a:f8:22:c0:e4:14:1b:0f:79:62:11:85:5d:b9:
1f:85:1f:ee:f2:8a:64:b3:6a:3a:67:28:be:79:c0:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:B7:2C:37:A1:9B:CC:B6:E9:AD:07:DD:7E:FA:AE:A6:2B:15:3D
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:56:cb:3e:1b:e1:cf:67:f4:42:45:26:7b:d8:f0:ce:d4:
47:1d:f4:02:09:2e:27:8b:07:16:0b:d0:0f:83:16:7b:85:57:
3f:20:a7:37:b6:f7:7f:b8:97:be:43:95:e8:94:ce:1a:a7:32:
76:00:22:80:23:b8:2c:d7:d6:9a:39:8e:31:fe:ea:ba:11:eb:
65:ed:a2:a1:2e:bf:4c:45:ac:b6:f7:0d:52:65:e8:b2:93:0e:
65:4d:ab:8c:90:e2:87:23:c9:09:66:76:4a:45:14:43:42:c8:
51:2c:ab:5e:44:57:31:f0:3b:66:1e:64:7e:ed:8b:d5:54:41:
c8:cb:cc:ac:43:19:90:94:c8:80:8f:b4:4e:cb:59:82:31:fb:
ed:f5:a3:c6:c6:00:fd:46:e6:2f:21:07:73:39:4a:10:55:08:
aa:ca:90:b1:d1:5c:c6:c2:dc:15:14:39:6c:9b:6e:bd:0a:a9:
db:e1:e0:92:ec:2e:45:a2:5e:4a:39:6e:52:12:28:7f:d2:4e:
14:2e:32:de:50:6e:39:58:98:47:c2:3f:11:13:7d:69:15:f3:
45:db:57:10:f8:10:7c:53:c8:a8:4c:f5:76:16:2b:f0:40:2d:
31:3b:27:af:bb:d2:ef:21:ec:cf:94:2b:1d:ba:a1:74:62:37:
94:15:7c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZO9vICFdD3y9U0KcFXQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh
YzRlNWQwHhcNMjQxMTIzMDUwMDUyWhcNMjQxMTI0MDUwMDUyWjAzMTEwLwYDVQQD
EyhkMjFmYjcyYzM3YTE5YmNjYjZlOWFkMDdkZDdlZmFhZWE2MmIxNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LS428Enj0VEQX92Pa1fQPdMqeiz
0wa80F7B3EtF+3/WK0ehJDvE+VVxoRt7frP3Xyx1EXNSz7Qn6tWR6H8ElT3vyxVK
xMpp3MUAT187Ge/+ZVAzmm/NsT340BFE3eRXKR3uHVkv09TW6Whxc+oqRLQ4JA4I
qVH8u5gXSrxEvDkriYXohrlOFHjHq43204y8GhGbuqntVUvF1/J2GKgFDk++4N1I
rAtHsPspXMocshzBhsiftErf1mQYwWzkgbC5EL3gvSkei2tNrLlkvKM0YXPkRL7j
j5N16/jPl8yruBbtKvgiwOQUGw95YhGFXbkfhR/u8opks2o6Zyi+ecCdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIftyw3oZvMtumtB91++q6mKxU9MB8GA1UdIwQY
MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt
NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh
LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl75Wyz4b
4c9n9EJFJnvY8M7URx30AgkuJ4sHFgvQD4MWe4VXPyCnN7b3f7iXvkOV6JTOGqcy
dgAigCO4LNfWmjmOMf7quhHrZe2ioS6/TEWstvcNUmXospMOZU2rjJDihyPJCWZ2
SkUUQ0LIUSyrXkRXMfA7Zh5kfu2L1VRByMvMrEMZkJTIgI+0TstZgjH77fWjxsYA
/UbmLyEHczlKEFUIqsqQsdFcxsLcFRQ5bJtuvQqp2+HgkuwuRaJeSjluUhIof9JO
FC4y3lBuOViYR8I/ERN9aRXzRdtXEPgQfFPIqEz1dhYr8EAtMTsnr7vS7yHsz5Qr
HbqhdGI3lBV8hQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:51 2024 by rpki-client on console-ams.rpki-client.org