Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: GFToYKuInF6NHIuc/glURmSwrSZ6PLLqfuuw6Ccgum4=
Subject key identifier: 86:13:E0:72:CF:70:D2:A3:C8:F3:04:45:52:A0:0F:BD:52:B7:B2:2F
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019369D89AB2805714FDD71123033076DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 12CC
Signing time: Tue 26 Nov 2024 19:00:23 +0000
Manifest this update: Tue 26 Nov 2024 19:00:23 +0000
Manifest next update: Wed 27 Nov 2024 19:00:23 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: fg9+QY62Scw9xnYYYF1Y3vOpmnY92AF31xOyzgJr8Mg=)
2: fBjNw050bpO0WIM_D9WRFR2Aj0I.roa (hash: 0B8GeuuTaJPWhOmcsMjmro93+RDrBLxkdoEFqd5Y2b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:9a:b2:80:57:14:fd:d7:11:23:03:30:76:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Nov 26 19:00:23 2024 GMT
Not After : Nov 27 19:00:23 2024 GMT
Subject: CN=8613e072cf70d2a3c8f3044552a00fbd52b7b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:ce:e0:b1:d3:8c:77:cc:c8:34:e8:e6:30:
6a:24:0b:72:f6:dc:e9:c3:bf:c1:73:b9:a9:67:c7:
e0:99:ef:de:a9:50:18:d5:2f:f9:ec:9b:98:2d:34:
83:8e:96:e6:f5:db:3b:0f:be:06:51:7b:f3:1e:ab:
30:c9:d3:ff:e1:03:76:9d:2d:44:99:4a:4d:e6:3f:
b9:57:e8:ce:59:c8:15:7b:85:1b:eb:e7:69:72:2c:
e1:8b:b0:df:b6:bd:a1:bb:b6:16:54:38:f6:a2:5f:
4e:0c:c3:b6:cb:f1:8f:6c:85:32:0f:ee:b5:38:1c:
9b:92:c9:52:b2:3f:13:8f:ec:02:96:e8:ba:80:35:
d8:b8:bb:13:26:33:6a:13:9a:c7:9a:c1:fa:5e:10:
3d:cd:04:eb:66:43:18:8c:90:3b:6c:de:ad:66:0a:
ea:ba:fb:2e:64:25:3f:3b:66:16:d0:99:93:eb:1f:
dd:b3:59:68:6f:75:97:15:84:e7:21:35:20:9f:19:
fb:f6:ec:43:38:45:5e:48:6f:6f:eb:60:b4:c0:6f:
a1:52:ab:ee:10:92:22:b6:88:41:b8:05:d2:d2:5b:
94:36:8b:85:7e:97:64:e6:82:d5:4c:f2:28:c7:32:
47:d6:93:10:c4:1f:b9:92:b2:8b:64:59:f7:20:e9:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:E0:72:CF:70:D2:A3:C8:F3:04:45:52:A0:0F:BD:52:B7:B2:2F
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:17:3b:e1:0f:9a:ac:16:5f:82:bb:c6:43:3f:16:f1:3a:
96:8b:2f:f1:32:bd:03:2d:51:d5:57:38:08:d8:5c:9e:e2:2a:
85:61:47:01:8e:a8:ff:6b:de:6c:8b:a5:bf:48:5f:ee:13:48:
23:c4:92:02:e9:a2:41:fd:18:18:2a:f3:47:1e:6f:8d:ca:08:
f3:32:66:f6:62:95:52:54:23:d0:ab:be:f4:2b:ca:b4:28:cb:
18:02:ab:94:b4:d4:52:00:e4:6a:b4:3e:b8:3f:ce:be:54:e9:
cf:89:cc:fa:39:31:51:8b:39:9b:ae:64:14:1d:a2:02:c8:ae:
e7:83:ec:74:19:2f:29:e1:05:3c:93:0d:54:c9:6f:c3:55:2a:
d8:7a:65:1e:25:ec:27:04:ba:66:08:8c:c5:1f:5d:2c:87:3f:
3f:42:e0:bd:a7:2a:f6:ff:69:82:5d:38:64:28:2b:75:37:12:
a7:f8:8e:2c:c1:00:52:3e:3d:99:22:91:30:f9:87:4e:56:be:
c1:bd:72:dc:fa:77:73:0f:a4:0a:69:49:2b:02:5b:80:cb:04:
ed:d2:f1:ed:eb:85:9f:3f:ee:d2:33:a5:9e:d6:1b:7e:c6:4c:
83:16:d5:0f:d3:fe:ac:90:f9:73:21:c2:bf:bf:0e:f5:35:f3:
a8:b8:98:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2JqygFcU/dcRIwMwdt7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjQxMTI2MTkwMDIzWhcNMjQxMTI3MTkwMDIzWjAzMTEwLwYDVQQD
Eyg4NjEzZTA3MmNmNzBkMmEzYzhmMzA0NDU1MmEwMGZiZDUyYjdiMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqnO4LHTjHfMyDTo5jBqJAty9tzp
w7/Bc7mpZ8fgme/eqVAY1S/57JuYLTSDjpbm9ds7D74GUXvzHqswydP/4QN2nS1E
mUpN5j+5V+jOWcgVe4Ub6+dpcizhi7Dftr2hu7YWVDj2ol9ODMO2y/GPbIUyD+61
OBybkslSsj8Tj+wClui6gDXYuLsTJjNqE5rHmsH6XhA9zQTrZkMYjJA7bN6tZgrq
uvsuZCU/O2YW0JmT6x/ds1lob3WXFYTnITUgnxn79uxDOEVeSG9v62C0wG+hUqvu
EJIitohBuAXS0luUNouFfpdk5oLVTPIoxzJH1pMQxB+5krKLZFn3IOk4ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYT4HLPcNKjyPMERVKgD71St7IvMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4MXO+EP
mqwWX4K7xkM/FvE6losv8TK9Ay1R1Vc4CNhcnuIqhWFHAY6o/2vebIulv0hf7hNI
I8SSAumiQf0YGCrzRx5vjcoI8zJm9mKVUlQj0Ku+9CvKtCjLGAKrlLTUUgDkarQ+
uD/OvlTpz4nM+jkxUYs5m65kFB2iAsiu54PsdBkvKeEFPJMNVMlvw1Uq2HplHiXs
JwS6ZgiMxR9dLIc/P0Lgvacq9v9pgl04ZCgrdTcSp/iOLMEAUj49mSKRMPmHTla+
wb1y3Pp3cw+kCmlJKwJbgMsE7dLx7euFnz/u0jOlntYbfsZMgxbVD9P+rJD5cyHC
v78O9TXzqLiYbw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:23 2024 by rpki-client on console-ams.rpki-client.org