Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: ruZ7OIObYVr+wrT3G4QgINet069+fROC+y7agH+WCLE=
Subject key identifier: 22:94:A6:EE:79:E5:40:C5:CE:26:B6:DA:79:E5:CE:1F:F2:14:65:FC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019352AD909AAC3E2AA2D82AA4009683EAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 13B3
Signing time: Fri 22 Nov 2024 07:02:06 +0000
Manifest this update: Fri 22 Nov 2024 07:02:06 +0000
Manifest next update: Sat 23 Nov 2024 07:02:06 +0000
Files and hashes: 1: DJKIX8OArb_EQyp0Nsht2sLfhno.roa (hash: VrbYy5857zVa9impPczmb1/I/rp4CNsgJwZn5HsptrY=)
2: DNHfqH0b9VdF4hoVInKm7hfv6Wg.roa (hash: 8VpVPqU/wWlwo2NPwvbaq4kpa/k25AkPPfIeEkeY+bc=)
3: IzGIYzfzaOk4hfn7FZBCGmfmVf0.roa (hash: BmMJpjYB9wvChjoLjUgi8E++ivutPCkwSmMyKSRd1uU=)
4: UEtW5jde2G6UaOJSSoBA0RpVmCs.roa (hash: 7DrjbBPIkM7KLARwUW7vpkyZqIjFwAn4RbU/8QLN0r8=)
5: e3sEWWfFNSSpCP6bnXFX9HIbC-8.roa (hash: oqR2SX3a1nTyiwwP4LclDFcbWKW5BJU89tFg/OuP0JA=)
6: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: bMVKdUDtReajaX9cK1pFcF6ZB1OzSs2ec+RyWIoEs2M=)
7: g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa (hash: xwrPupJyTSgtXq8WEJv2cqH3UIl7MRXc3Rvae7hOpfU=)
8: xIlcmXA5jrNSALlhazowvUHu0To.roa (hash: s7CGh21ZNWc+fFxlynS3q8GdK4y25LnjnbcUp6gMl5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:90:9a:ac:3e:2a:a2:d8:2a:a4:00:96:83:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Nov 22 07:02:06 2024 GMT
Not After : Nov 23 07:02:06 2024 GMT
Subject: CN=2294a6ee79e540c5ce26b6da79e5ce1ff21465fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:f1:36:29:f5:0e:2a:ea:50:f7:60:53:45:
15:59:77:a6:0b:c9:87:7d:70:16:03:d1:6f:63:26:
85:a0:bd:97:a1:4b:47:8c:2b:4a:d4:63:59:0a:4c:
37:ad:f6:dd:b3:c0:28:2e:a0:06:55:2c:36:5a:d3:
f8:a0:ad:b1:82:6d:fd:d6:0c:4b:bf:ac:ef:7e:48:
13:0d:c5:d4:05:14:f3:dd:e4:d3:c6:1a:de:c8:c4:
d8:c7:43:30:c5:ad:cb:0a:d0:17:6d:e7:e2:c2:3c:
74:f2:d6:32:ca:7e:b3:af:87:be:b6:1e:48:30:03:
7b:3c:66:22:24:64:35:1e:f0:e9:5e:d8:89:71:ac:
50:bd:55:ff:61:d4:76:0c:57:6d:f1:42:33:42:b2:
7d:05:6b:cb:a6:ec:c9:74:58:05:f4:31:2d:15:94:
25:de:f5:b3:8e:71:4d:53:81:66:a0:f7:79:39:c1:
10:af:d9:ea:92:ca:28:05:dd:00:98:49:c8:35:88:
f7:1d:38:64:46:7f:f9:88:98:e9:b3:a7:68:d9:39:
49:4c:98:83:8d:79:44:92:8c:c6:22:21:f0:74:61:
6a:47:a5:6e:55:c5:37:0b:60:17:25:51:4b:55:10:
13:5c:95:fb:60:f5:ad:dd:c7:0c:02:aa:07:8f:6b:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:A6:EE:79:E5:40:C5:CE:26:B6:DA:79:E5:CE:1F:F2:14:65:FC
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:76:fb:ba:67:03:0a:2d:1c:40:91:bd:2f:e2:0c:19:12:
b0:e3:47:1b:6e:80:23:d0:35:55:39:88:fe:0a:89:f8:e2:e7:
f9:15:c7:aa:49:ca:04:68:aa:72:17:ca:0f:fb:71:19:6d:b0:
3c:3b:ae:c3:4d:23:35:6f:aa:f2:14:94:f0:f3:41:8f:12:70:
46:e5:84:29:ad:4e:0e:e6:f8:63:c6:c4:3d:1e:ee:fc:26:91:
47:c2:69:1f:81:b7:99:00:f8:42:22:1b:0a:2e:c1:7a:a8:a9:
fa:f3:93:b2:35:d8:48:ca:9a:cc:09:df:f0:75:c1:f3:fd:01:
02:57:e7:f5:08:c1:71:cb:4b:90:de:55:9c:95:8e:d8:d4:39:
31:df:a9:99:ee:b0:44:e2:19:1f:19:9e:d7:73:11:4a:ba:b7:
86:e1:b0:69:16:a0:9e:a6:dd:a8:26:58:ce:ff:ee:64:cb:10:
44:c3:22:3c:a6:65:e1:6f:a2:de:7c:78:e9:5d:c3:eb:92:a0:
50:92:de:7d:c6:7f:53:f1:4d:1b:98:62:aa:67:f7:d5:34:c6:
67:3c:bf:b5:f4:ed:a7:38:9d:1d:e7:c0:f3:9e:1b:11:59:ba:
b5:2d:25:6b:05:b4:b2:51:1f:66:5e:ee:3b:6f:8c:84:2f:0f:
9e:3c:3b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrZCarD4qotgqpACWg+qlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjQxMTIyMDcwMjA2WhcNMjQxMTIzMDcwMjA2WjAzMTEwLwYDVQQD
EygyMjk0YTZlZTc5ZTU0MGM1Y2UyNmI2ZGE3OWU1Y2UxZmYyMTQ2NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzPxNin1DirqUPdgU0UVWXemC8mH
fXAWA9FvYyaFoL2XoUtHjCtK1GNZCkw3rfbds8AoLqAGVSw2WtP4oK2xgm391gxL
v6zvfkgTDcXUBRTz3eTTxhreyMTYx0Mwxa3LCtAXbefiwjx08tYyyn6zr4e+th5I
MAN7PGYiJGQ1HvDpXtiJcaxQvVX/YdR2DFdt8UIzQrJ9BWvLpuzJdFgF9DEtFZQl
3vWzjnFNU4FmoPd5OcEQr9nqksooBd0AmEnINYj3HThkRn/5iJjps6do2TlJTJiD
jXlEkozGIiHwdGFqR6VuVcU3C2AXJVFLVRATXJX7YPWt3ccMAqoHj2tbXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKUpu555UDFzia22nnlzh/yFGX8MB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBx2+7pn
AwotHECRvS/iDBkSsONHG26AI9A1VTmI/gqJ+OLn+RXHqknKBGiqchfKD/txGW2w
PDuuw00jNW+q8hSU8PNBjxJwRuWEKa1ODub4Y8bEPR7u/CaRR8JpH4G3mQD4QiIb
Ci7Beqip+vOTsjXYSMqazAnf8HXB8/0BAlfn9QjBcctLkN5VnJWO2NQ5Md+pme6w
ROIZHxme13MRSrq3huGwaRagnqbdqCZYzv/uZMsQRMMiPKZl4W+i3nx46V3D65Kg
UJLefcZ/U/FNG5hiqmf31TTGZzy/tfTtpzidHefA854bEVm6tS0lawW0slEfZl7u
O2+MhC8Pnjw7XQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:21 2024 by rpki-client on console-ams.rpki-client.org