Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 1xEP0lIJxjAP3Stize6OiVvt7JRAPQewgNp8yztFTlI=
Subject key identifier: D9:F8:0F:FA:8D:8D:F5:C3:F0:CC:EF:E8:00:71:9F:79:0A:F4:1F:A4
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0193579BE2CB977329A8861BA805DF1D8DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:54 +0000
Manifest this update: Sat 23 Nov 2024 06:00:54 +0000
Manifest next update: Sun 24 Nov 2024 06:00:54 +0000
Files and hashes: 1: X09m5veglZVTaGBhiz8yhFMk29g.roa (hash: 0IDbpR/yWp9Tn2zlquMIJEcqNoFGnW94gI3tb5h8hGM=)
2: XsUJz6q2mgu5GYYvhy46s3JTAYc.roa (hash: fEco5yjs3CTshdCds24mI3Ob6CKrcbl+s71pYpVAbPA=)
3: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: crt3WEFfpsWUODDebro27KMpLrJBwBGypT7rs3bzAI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:e2:cb:97:73:29:a8:86:1b:a8:05:df:1d:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Nov 23 06:00:54 2024 GMT
Not After : Nov 24 06:00:54 2024 GMT
Subject: CN=d9f80ffa8d8df5c3f0ccefe800719f790af41fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:e1:50:7c:fa:82:e9:5b:4c:29:3a:e1:84:
37:d5:e2:d6:00:c1:e5:69:65:4d:d4:1a:6e:40:b8:
29:7a:c7:49:86:f8:21:f2:89:a9:e0:d7:98:1e:76:
8c:a1:76:0f:73:25:d6:83:5b:43:b0:b8:ba:7d:1b:
8a:0b:72:c5:4f:5c:1e:3a:17:4a:b3:82:d4:c2:14:
04:dd:00:f0:4f:d9:5a:f5:6d:42:ae:2f:51:73:dd:
d4:de:3d:19:ff:db:21:99:06:a5:84:e7:43:17:f2:
67:e7:61:03:46:32:34:22:7a:dc:5a:4f:a0:46:d3:
83:02:ba:93:e6:ba:3a:fc:6d:0a:16:7c:c2:a8:e9:
cd:98:96:52:35:b8:29:b3:07:3c:39:d6:50:32:2b:
33:01:0d:a4:1c:45:42:9b:d9:39:97:dd:93:ad:03:
10:a9:6b:84:49:36:9b:a6:3a:2f:65:02:05:39:3c:
e5:99:20:d6:79:72:86:23:0e:be:ea:5b:91:e3:81:
73:7d:93:97:be:d5:4a:3f:af:80:3e:85:44:c1:d7:
78:0e:4d:a7:95:39:4b:97:98:fb:dd:2d:46:a5:57:
18:15:4a:28:a8:a0:62:54:18:dc:b1:72:96:39:33:
fa:81:6d:5a:e4:e2:a8:a8:8e:28:68:47:67:38:03:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:0F:FA:8D:8D:F5:C3:F0:CC:EF:E8:00:71:9F:79:0A:F4:1F:A4
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0a:18:7e:5d:f6:b9:69:5b:d3:6e:f7:f1:09:a9:cd:87:5d:
89:75:28:10:f8:b1:6c:00:12:7b:ee:1f:2a:4a:bf:43:4e:87:
8c:d9:f2:17:bb:38:d9:4d:28:6b:21:35:55:7d:a8:f3:39:d1:
bc:22:3b:54:d6:17:db:79:fb:97:01:9a:54:d6:e2:37:72:8f:
5e:4a:df:9c:fa:90:67:ff:37:47:53:54:cb:41:27:87:92:cf:
95:07:1d:66:c7:44:b5:25:35:6c:ef:b1:52:cc:12:f8:e8:ef:
7b:f4:0c:5d:2b:4d:7c:98:1c:1c:14:88:a7:0c:5f:86:1d:cb:
d3:23:13:29:d7:fa:9f:96:85:d6:9f:c8:59:79:92:75:3f:42:
9c:71:c3:4f:55:d1:da:dc:1d:b7:3f:b4:ad:4d:17:75:80:51:
59:8d:ed:2b:f1:d1:cb:0f:3d:f0:4e:05:65:b3:4b:5f:c7:78:
80:0a:aa:89:0b:d7:fd:23:66:3d:5d:bc:d0:62:1f:48:ab:20:
ab:3b:e9:d0:8f:e8:18:43:74:19:d9:2d:ee:53:49:a5:07:05:
6b:92:af:e5:14:d3:b5:07:a4:25:bb:64:3c:23:2f:e9:4c:23:
ce:4c:2c:9a:60:f6:f9:db:92:4a:fa:b5:ae:38:93:2c:2b:1a:
ab:58:94:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm+LLl3MpqIYbqAXfHY25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx
NTAzYjAwHhcNMjQxMTIzMDYwMDU0WhcNMjQxMTI0MDYwMDU0WjAzMTEwLwYDVQQD
EyhkOWY4MGZmYThkOGRmNWMzZjBjY2VmZTgwMDcxOWY3OTBhZjQxZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIHhUHz6gulbTCk64YQ31eLWAMHl
aWVN1BpuQLgpesdJhvgh8omp4NeYHnaMoXYPcyXWg1tDsLi6fRuKC3LFT1weOhdK
s4LUwhQE3QDwT9la9W1Cri9Rc93U3j0Z/9shmQalhOdDF/Jn52EDRjI0InrcWk+g
RtODArqT5ro6/G0KFnzCqOnNmJZSNbgpswc8OdZQMiszAQ2kHEVCm9k5l92TrQMQ
qWuESTabpjovZQIFOTzlmSDWeXKGIw6+6luR44FzfZOXvtVKP6+APoVEwdd4Dk2n
lTlLl5j73S1GpVcYFUooqKBiVBjcsXKWOTP6gW1a5OKoqI4oaEdnOAMTAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn4D/qNjfXD8Mzv6ABxn3kK9B+kMB8GA1UdIwQY
MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt
YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj
LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawoYfl32
uWlb02738QmpzYddiXUoEPixbAASe+4fKkq/Q06HjNnyF7s42U0oayE1VX2o8znR
vCI7VNYX23n7lwGaVNbiN3KPXkrfnPqQZ/83R1NUy0Enh5LPlQcdZsdEtSU1bO+x
UswS+Ojve/QMXStNfJgcHBSIpwxfhh3L0yMTKdf6n5aF1p/IWXmSdT9CnHHDT1XR
2twdtz+0rU0XdYBRWY3tK/HRyw898E4FZbNLX8d4gAqqiQvX/SNmPV280GIfSKsg
qzvp0I/oGEN0Gdkt7lNJpQcFa5Kv5RTTtQekJbtkPCMv6UwjzkwsmmD2+duSSvq1
rjiTLCsaq1iUaA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:24 2024 by rpki-client on console-fra.rpki-client.org