Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: Y5yIkCX3jz18+u9Z1ljSUuYJ9K+8ndCFlgvNqFUrVvc=
Subject key identifier: 04:8E:56:07:AA:D5:29:37:48:C8:E9:83:53:FC:9D:70:48:DD:ED:92
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01935199C51AB0F99310C191AEEF09675772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 02:00:52 +0000
Manifest this update: Fri 22 Nov 2024 02:00:52 +0000
Manifest next update: Sat 23 Nov 2024 02:00:52 +0000
Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: ChwLpS4jaxwTLNVJl6XJEKPvekPnAXx9zNGzryr9dEo=)
2: V-X0FfH1iIc4O9V2gQ2WTvhoPrQ.roa (hash: iaL4zS71GHYM/ZuaGJm60qqy51ge6pHo1XVVFMjWuZA=)
3: pOWFiKd8k-Uvc89LTmPVn_EQGWE.roa (hash: RuHe+M3QcBd0YCaTlqd+grEwASZGXYBLtzCYRkEuNio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:c5:1a:b0:f9:93:10:c1:91:ae:ef:09:67:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Nov 22 02:00:52 2024 GMT
Not After : Nov 23 02:00:52 2024 GMT
Subject: CN=048e5607aad5293748c8e98353fc9d7048dded92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:4c:26:50:4b:03:a6:e8:fb:9b:36:50:d0:
0e:7c:ce:3e:93:02:79:98:2c:8e:ce:02:69:af:9e:
84:d8:e6:13:12:a4:73:a0:7b:97:1c:19:22:6e:6c:
c5:2f:fd:92:ea:1b:0c:62:ce:c7:12:18:5b:1b:2f:
85:db:bf:6d:83:7f:17:86:cb:8e:c6:43:6b:3e:9f:
a3:31:56:06:b6:c2:de:c9:ee:ec:5e:4c:d2:76:3d:
92:7c:37:3f:a9:ac:31:87:54:af:d9:cb:ba:28:96:
71:78:35:ad:87:ea:41:cc:65:31:cc:7c:3f:5a:7c:
96:54:a8:5f:6c:bc:6e:05:92:a0:43:c5:7d:22:83:
60:27:23:d7:c6:a2:2a:e7:fe:7b:54:89:1c:4d:64:
ba:66:c4:a6:10:82:17:76:84:aa:17:90:39:8f:29:
47:db:8f:19:60:31:c5:57:a5:24:b1:4a:7d:e9:70:
ce:2b:28:69:05:d8:ce:f7:39:ac:86:89:4f:2a:25:
ed:52:2b:f5:75:b5:8a:fa:5b:76:db:a8:78:88:84:
f1:fe:98:49:45:65:d5:dc:ab:cd:09:cf:9e:26:5d:
66:ad:8e:17:af:ff:8d:75:a4:59:ad:d5:cd:a4:f3:
6e:3d:89:ea:ad:f1:a9:96:c0:01:5c:ff:88:44:8d:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:56:07:AA:D5:29:37:48:C8:E9:83:53:FC:9D:70:48:DD:ED:92
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:cf:14:6c:f7:5d:7b:14:37:d5:cc:6e:01:a6:2e:bf:35:
c2:eb:8c:d3:0e:5e:66:d2:5d:9a:3e:90:ed:c8:57:95:db:1e:
d5:a1:c8:85:a0:e2:46:62:c9:3a:dd:23:a1:e4:70:67:0e:20:
4b:0d:94:e6:c0:cc:a5:c8:af:fe:a2:2f:a9:70:af:1a:63:55:
c5:2e:4f:c1:62:7d:84:3d:ea:40:f9:08:0d:93:45:c4:08:41:
f2:b5:b9:67:82:7a:e3:dc:88:ef:3c:34:f0:69:3e:e0:71:27:
2f:f8:e7:61:51:99:da:e2:3d:27:e0:76:60:8d:34:2b:55:27:
dc:d2:f4:51:0c:67:eb:0a:bd:a5:12:72:85:46:86:ba:09:25:
43:7e:1e:d7:cc:d1:8a:76:a1:19:d0:f7:c3:6c:8e:f1:35:8c:
fd:ba:5f:fb:e8:19:f9:20:47:4a:ec:d3:c9:ba:a8:f7:55:b6:
d0:28:25:43:40:90:f8:9c:8c:e5:b8:e8:3b:7c:8f:35:ad:b5:
f7:44:23:c6:09:10:ee:ce:e5:13:5d:02:4d:c5:4b:ef:fd:97:
98:21:aa:d3:d1:a4:c4:53:fe:9e:3e:5c:43:7b:ef:6d:e0:65:
c7:0c:4f:9d:d5:cd:66:ec:81:a8:85:ec:6f:a7:d3:68:36:4c:
94:ed:f6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmcUasPmTEMGRru8JZ1dyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk
MTBkZmYwHhcNMjQxMTIyMDIwMDUyWhcNMjQxMTIzMDIwMDUyWjAzMTEwLwYDVQQD
EygwNDhlNTYwN2FhZDUyOTM3NDhjOGU5ODM1M2ZjOWQ3MDQ4ZGRlZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylpMJlBLA6bo+5s2UNAOfM4+kwJ5
mCyOzgJpr56E2OYTEqRzoHuXHBkibmzFL/2S6hsMYs7HEhhbGy+F279tg38XhsuO
xkNrPp+jMVYGtsLeye7sXkzSdj2SfDc/qawxh1Sv2cu6KJZxeDWth+pBzGUxzHw/
WnyWVKhfbLxuBZKgQ8V9IoNgJyPXxqIq5/57VIkcTWS6ZsSmEIIXdoSqF5A5jylH
248ZYDHFV6UksUp96XDOKyhpBdjO9zmsholPKiXtUiv1dbWK+lt226h4iITx/phJ
RWXV3KvNCc+eJl1mrY4Xr/+NdaRZrdXNpPNuPYnqrfGplsABXP+IRI3ASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASOVgeq1Sk3SMjpg1P8nXBI3e2SMB8GA1UdIwQY
MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt
NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz
LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7TPFGz3
XXsUN9XMbgGmLr81wuuM0w5eZtJdmj6Q7chXldse1aHIhaDiRmLJOt0joeRwZw4g
Sw2U5sDMpciv/qIvqXCvGmNVxS5PwWJ9hD3qQPkIDZNFxAhB8rW5Z4J649yI7zw0
8Gk+4HEnL/jnYVGZ2uI9J+B2YI00K1Un3NL0UQxn6wq9pRJyhUaGugklQ34e18zR
inahGdD3w2yO8TWM/bpf++gZ+SBHSuzTybqo91W20CglQ0CQ+JyM5bjoO3yPNa21
90QjxgkQ7s7lE10CTcVL7/2XmCGq09GkxFP+nj5cQ3vvbeBlxwxPndXNZuyBqIXs
b6fTaDZMlO32/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:30 2024 by rpki-client on console-fra.rpki-client.org