Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: xr89tUOxlcy/fd/JVY1vZZfmMH6pUW338uXu/Rcf1VI=
Subject key identifier: 0A:A5:9B:F8:51:BC:1E:BF:CA:0F:B5:4A:4C:8D:AD:6B:8A:D4:C1:79
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01938B51EB9B44D66A3ED40911BFDE9FE80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0A70
Signing time: Tue 03 Dec 2024 07:00:21 +0000
Manifest this update: Tue 03 Dec 2024 07:00:21 +0000
Manifest next update: Wed 04 Dec 2024 07:00:21 +0000
Files and hashes: 1: B7DNfl-Ka64FwxTUWqe5XRT4tUE.roa (hash: r5vBTOQ3BygWWQ4i1Dm8ZyIjnIGpwGDS30tZ0HQURRA=)
2: KwO5YT2MukXZgr0zps6sT9OFDOE.roa (hash: bMsXWd9B0kB/6xYL0jCq0wkP/S9324TmVvZ+VJJ6Dag=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: 3Mf193uuYuMKvZP6u1W9gDx4jnQMuT9rKSuMIpl8l1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:51:eb:9b:44:d6:6a:3e:d4:09:11:bf:de:9f:e8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Dec 3 07:00:21 2024 GMT
Not After : Dec 4 07:00:21 2024 GMT
Subject: CN=0aa59bf851bc1ebfca0fb54a4c8dad6b8ad4c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:33:24:2d:9a:9a:d9:e2:8b:8b:07:ab:2e:
ea:6e:53:ca:17:27:cb:80:c3:21:20:8e:79:8a:33:
ef:07:0e:27:9f:57:64:c7:9e:a3:c8:dc:2b:58:e1:
c5:76:2f:9d:b8:9d:78:07:8d:5b:f6:d3:85:cd:1d:
86:16:59:b9:ec:fc:39:df:28:2b:d6:74:2d:74:56:
d1:a7:b0:9a:12:cf:87:7c:bb:2e:0a:20:dd:e3:dd:
70:2a:12:82:ff:b0:f5:5f:40:d2:93:93:fb:4b:53:
eb:7a:d9:00:72:60:dc:e2:fe:c9:59:11:2c:fb:07:
5c:72:75:8f:43:bb:1f:a0:66:5a:95:63:d4:7c:dd:
9e:8e:63:ab:46:36:c6:5f:9d:13:8e:a1:4d:78:f5:
ae:68:bb:ce:63:70:4e:91:60:f7:9e:f4:9f:b6:0e:
3a:f8:26:92:bb:f6:88:63:07:60:cf:b7:c2:7a:ce:
74:7c:f0:c2:4d:bc:63:73:3a:a4:3a:38:d6:1f:e5:
23:37:fa:23:ee:8f:b9:4f:75:9b:f1:30:b8:9a:fc:
06:62:05:75:14:57:cd:a3:bc:82:a9:83:24:38:d6:
93:9f:f8:94:79:da:fa:6f:1f:96:ff:76:01:6f:e4:
50:c1:fb:68:d8:11:25:a4:6b:b5:06:ac:52:d3:11:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A5:9B:F8:51:BC:1E:BF:CA:0F:B5:4A:4C:8D:AD:6B:8A:D4:C1:79
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:a8:a5:5e:94:1f:79:06:d6:bf:34:7b:87:1d:0d:31:fb:
c8:a1:76:28:2e:60:8f:08:4a:81:03:be:ab:a2:c1:fa:40:b2:
92:bf:96:8c:3d:4e:57:7e:86:54:b2:c0:92:3a:9b:16:6b:ec:
9a:24:c9:f1:b2:d4:57:76:d3:bf:47:fc:92:71:c2:a4:3e:e6:
8b:f0:82:2e:55:5f:d7:fa:35:59:42:1a:33:df:cd:87:64:41:
52:d6:77:83:9f:db:75:40:05:35:6e:cd:be:b2:82:03:04:96:
0d:a0:1c:be:c2:f7:c5:0b:b2:3b:7c:45:14:d9:db:63:65:e4:
1b:21:f7:ff:93:6e:79:09:71:d7:84:6a:33:d5:26:73:1d:99:
0b:1d:cf:11:b7:17:5c:f1:50:ac:c8:81:23:d4:40:4e:48:56:
94:a4:0b:55:51:db:b5:f9:73:05:7f:c2:88:57:13:e7:9c:0c:
a5:de:52:a3:36:e8:fa:18:96:ea:f5:8c:35:5d:11:6d:54:10:
72:ac:c3:67:3a:48:9a:8c:8c:72:a8:18:01:f3:1d:60:18:9f:
28:2d:df:b5:a6:16:58:29:2c:b3:8b:12:7c:d3:40:45:10:61:
8a:b0:52:42:93:8b:2b:de:25:6e:36:b8:4d:b4:e4:29:53:51:
31:92:f6:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLUeubRNZqPtQJEb/en+gMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk
YzZlYmMwHhcNMjQxMjAzMDcwMDIxWhcNMjQxMjA0MDcwMDIxWjAzMTEwLwYDVQQD
EygwYWE1OWJmODUxYmMxZWJmY2EwZmI1NGE0YzhkYWQ2YjhhZDRjMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8a4zJC2amtnii4sHqy7qblPKFyfL
gMMhII55ijPvBw4nn1dkx56jyNwrWOHFdi+duJ14B41b9tOFzR2GFlm57Pw53ygr
1nQtdFbRp7CaEs+HfLsuCiDd491wKhKC/7D1X0DSk5P7S1PretkAcmDc4v7JWREs
+wdccnWPQ7sfoGZalWPUfN2ejmOrRjbGX50TjqFNePWuaLvOY3BOkWD3nvSftg46
+CaSu/aIYwdgz7fCes50fPDCTbxjczqkOjjWH+UjN/oj7o+5T3Wb8TC4mvwGYgV1
FFfNo7yCqYMkONaTn/iUedr6bx+W/3YBb+RQwfto2BElpGu1BqxS0xHsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqlm/hRvB6/yg+1SkyNrWuK1MF5MB8GA1UdIwQY
MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt
ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl
LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVWopV6U
H3kG1r80e4cdDTH7yKF2KC5gjwhKgQO+q6LB+kCykr+WjD1OV36GVLLAkjqbFmvs
miTJ8bLUV3bTv0f8knHCpD7mi/CCLlVf1/o1WUIaM9/Nh2RBUtZ3g5/bdUAFNW7N
vrKCAwSWDaAcvsL3xQuyO3xFFNnbY2XkGyH3/5NueQlx14RqM9Umcx2ZCx3PEbcX
XPFQrMiBI9RATkhWlKQLVVHbtflzBX/CiFcT55wMpd5Sozbo+hiW6vWMNV0RbVQQ
cqzDZzpImoyMcqgYAfMdYBifKC3ftaYWWCkss4sSfNNARRBhirBSQpOLK94lbja4
TbTkKVNRMZL2fA==
-----END CERTIFICATE-----
Generated at Tue Dec 3 18:30:26 2024 by rpki-client on console-fra.rpki-client.org