Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: kh2GDYub86bxj28pAw/U7L/5pX5vTDhop9SpHXDMcw4=
Subject key identifier: 96:C0:C3:60:D2:7C:5B:3B:7A:E5:AC:C1:AD:C7:C1:9A:F0:21:0B:99
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019352ADB808E2221D28727CDB0397CDB5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0986
Signing time: Fri 22 Nov 2024 07:02:16 +0000
Manifest this update: Fri 22 Nov 2024 07:02:16 +0000
Manifest next update: Sat 23 Nov 2024 07:02:16 +0000
Files and hashes: 1: 9i82H_09lshfIbRKVFSkuO45xXk.roa (hash: prSspuYuEm4iwJEqJMSvicG71NZ1K8plyeOHD3bX5dI=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: OB9/CTL7UdLzpKMNxzW6bm81pFYFAalO1BVHG/rHYYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:b8:08:e2:22:1d:28:72:7c:db:03:97:cd:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Nov 22 07:02:16 2024 GMT
Not After : Nov 23 07:02:16 2024 GMT
Subject: CN=96c0c360d27c5b3b7ae5acc1adc7c19af0210b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:1b:a0:79:13:6c:50:1a:33:94:86:e2:0c:
5a:43:c4:62:e5:e7:d0:89:b7:a0:ed:ec:2d:06:4a:
de:e2:65:d0:86:cb:ee:f5:2a:71:de:32:98:18:51:
ba:0c:0c:5f:16:57:b2:fa:5f:9f:24:22:86:d1:d1:
24:d6:62:04:1d:a7:ef:ed:44:5b:e8:1f:3e:2b:7a:
cf:84:ee:9a:81:01:0a:2d:e2:90:10:c2:1f:c6:c9:
04:9c:0c:c4:56:a3:f9:40:40:ec:f4:71:41:34:7a:
a7:e8:7c:36:80:b8:20:03:37:05:03:d5:a5:c7:9d:
7e:a8:af:73:88:e3:fc:4d:4c:5b:c8:c4:92:87:52:
61:6b:b4:3d:6d:fb:b6:87:d6:a1:23:34:11:7c:39:
cc:4c:2f:ce:be:4e:a6:24:d5:59:b9:c4:e6:15:e1:
32:a6:f0:70:18:92:c5:58:8c:bd:55:fd:09:69:a1:
af:05:16:4b:b3:b9:a9:1a:31:84:d4:e9:ed:1a:d9:
7e:9e:b2:c3:8f:95:44:7a:bb:e1:3f:dc:4e:f8:fc:
34:90:a8:56:22:3a:52:a8:a2:9e:95:42:ef:8b:de:
95:d1:cb:b1:95:6a:66:d1:e3:14:c9:6d:ed:f6:73:
4a:e6:29:51:0c:f5:09:a0:f2:11:49:52:4c:2c:62:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:C3:60:D2:7C:5B:3B:7A:E5:AC:C1:AD:C7:C1:9A:F0:21:0B:99
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:53:a2:be:e6:95:6c:37:ef:2a:71:8f:f8:36:d9:58:03:
2a:b3:3c:5b:68:16:09:77:d5:8f:c6:ae:f0:0e:e1:5a:f5:3c:
bc:31:ec:9f:ab:4e:9d:44:a1:4a:0b:54:aa:65:22:c7:b3:ec:
dc:19:9d:e6:fe:2d:6b:2a:77:16:ed:16:87:03:70:fa:63:03:
d4:4e:d3:9d:63:10:c7:90:53:ba:30:1d:5f:4f:ae:02:c1:13:
e2:72:e3:9b:98:af:f7:0e:ae:14:fe:81:5c:b9:ec:c8:ae:de:
5c:82:4e:bd:dc:d7:af:e2:fd:62:c1:30:40:5f:ae:15:6a:69:
a2:d2:5b:13:9a:c3:02:6d:c1:87:a0:53:69:3c:b9:70:bf:33:
75:dc:84:39:c0:81:7d:59:be:1a:c7:0d:ab:14:fd:12:c4:04:
35:b6:98:d5:4a:00:63:62:d5:66:11:c8:1a:a7:96:34:16:87:
4c:14:9b:22:52:8a:be:35:fd:b8:8f:2e:27:8b:e8:34:11:49:
51:c3:a2:cc:f3:bc:3e:4d:3a:96:68:69:c8:6d:7e:6f:54:f1:
ee:e4:9e:3d:33:60:0b:2a:cf:d7:4c:e4:89:26:87:65:53:c2:
e1:30:cf:36:5a:b8:44:f1:08:2b:74:6a:a0:28:28:b3:6c:fa:
e6:ac:4b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrbgI4iIdKHJ82wOXzbXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0
MmI3YmIwHhcNMjQxMTIyMDcwMjE2WhcNMjQxMTIzMDcwMjE2WjAzMTEwLwYDVQQD
Eyg5NmMwYzM2MGQyN2M1YjNiN2FlNWFjYzFhZGM3YzE5YWYwMjEwYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AYboHkTbFAaM5SG4gxaQ8Ri5efQ
ibeg7ewtBkre4mXQhsvu9Spx3jKYGFG6DAxfFley+l+fJCKG0dEk1mIEHafv7URb
6B8+K3rPhO6agQEKLeKQEMIfxskEnAzEVqP5QEDs9HFBNHqn6Hw2gLggAzcFA9Wl
x51+qK9ziOP8TUxbyMSSh1Jha7Q9bfu2h9ahIzQRfDnMTC/Ovk6mJNVZucTmFeEy
pvBwGJLFWIy9Vf0JaaGvBRZLs7mpGjGE1OntGtl+nrLDj5VEervhP9xO+Pw0kKhW
IjpSqKKelULvi96V0cuxlWpm0eMUyW3t9nNK5ilRDPUJoPIRSVJMLGIZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbAw2DSfFs7euWswa3HwZrwIQuZMB8GA1UdIwQY
MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt
YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw
LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUdTor7m
lWw37ypxj/g22VgDKrM8W2gWCXfVj8au8A7hWvU8vDHsn6tOnUShSgtUqmUix7Ps
3Bmd5v4tayp3Fu0WhwNw+mMD1E7TnWMQx5BTujAdX0+uAsET4nLjm5iv9w6uFP6B
XLnsyK7eXIJOvdzXr+L9YsEwQF+uFWppotJbE5rDAm3Bh6BTaTy5cL8zddyEOcCB
fVm+GscNqxT9EsQENbaY1UoAY2LVZhHIGqeWNBaHTBSbIlKKvjX9uI8uJ4voNBFJ
UcOizPO8Pk06lmhpyG1+b1Tx7uSePTNgCyrP10zkiSaHZVPC4TDPNlq4RPEIK3Rq
oCgos2z65qxL2w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:00 2024 by rpki-client on console-fra.rpki-client.org