Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: gg+U7Y3uJOxJDoRc1ILPumiAs87HG6Y0vCtD46eWCfo=
Subject key identifier: 40:9E:E7:41:32:8A:9B:82:76:5B:2E:F8:8A:DC:09:E7:9C:9B:E9:66
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 01936AB451078132FBBB7804AA9B35DB6E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 23:00:22 +0000
Manifest this update: Tue 26 Nov 2024 23:00:22 +0000
Manifest next update: Wed 27 Nov 2024 23:00:22 +0000
Files and hashes: 1: _gQtSu9myrDwWXsROGbU7zG5kFA.roa (hash: 1axahIgEWgCocRTiQjBjKcie+/DqHaADqocZKU5l85c=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: QFKXQhmKqvRCL4gIc72ZiqvuxdkHBG3OLXjDzF6ctoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:51:07:81:32:fb:bb:78:04:aa:9b:35:db:6e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Nov 26 23:00:22 2024 GMT
Not After : Nov 27 23:00:22 2024 GMT
Subject: CN=409ee741328a9b82765b2ef88adc09e79c9be966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:60:d1:85:b7:5b:0a:ed:85:9c:bf:87:ea:
0e:5e:6f:c3:ae:e5:95:28:32:77:64:32:32:d0:cd:
d0:27:79:cc:ae:b0:a5:63:2c:64:b9:09:ec:15:78:
4c:a8:93:95:58:ac:ed:e5:af:1d:be:94:8c:de:fb:
77:6f:95:63:c1:4b:72:0d:95:cf:a7:5b:ef:97:37:
4d:aa:33:3b:6b:e3:db:78:cb:b1:8a:18:39:b3:bf:
13:e3:c1:a7:ad:55:a2:b5:3a:07:ab:9d:b5:41:55:
67:ad:d2:be:af:ff:e6:45:cc:ad:1e:8d:1d:bd:53:
36:2f:8a:1a:50:ea:40:2d:32:d4:a4:b4:ff:14:53:
46:c5:93:80:80:94:b3:6b:23:cd:94:66:f3:2b:ee:
90:52:03:ce:8d:ed:14:6a:22:78:21:da:1c:2d:36:
28:5b:48:f2:cf:14:5e:f3:33:c8:c8:2c:b4:32:f8:
7a:b6:db:39:15:25:35:be:3b:91:32:9b:55:0e:a1:
13:60:9d:43:a1:f0:7b:d0:28:00:e1:14:f9:1f:88:
b0:91:16:9f:b4:3f:fb:c2:e7:73:e1:1c:fb:63:1b:
09:e3:e3:c3:88:10:01:03:4f:55:9f:76:f8:f0:de:
d3:a6:cf:6e:64:42:58:54:55:5d:ed:97:3a:7a:dc:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:E7:41:32:8A:9B:82:76:5B:2E:F8:8A:DC:09:E7:9C:9B:E9:66
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:41:ef:4f:d2:91:ba:41:a7:9a:76:e6:4f:f9:51:7b:45:
ec:b0:f1:58:88:49:b3:a2:1a:10:43:50:e6:a8:4f:37:9d:39:
81:f7:e1:c1:79:b3:3a:ba:5f:b5:c0:6f:44:72:4a:c0:fc:27:
3f:12:0b:be:2c:91:30:64:82:ec:94:3f:23:2d:35:63:e9:a4:
d2:6e:04:ab:a0:40:14:5c:ad:31:21:16:4b:7c:10:77:62:21:
08:be:09:eb:3e:36:f9:53:78:96:29:79:db:c8:c3:b6:ce:ec:
66:59:f3:81:21:55:1e:5e:34:c0:16:1f:89:18:77:d9:60:d6:
ee:c4:94:49:bc:eb:1b:8b:9c:49:cb:6d:83:68:9b:f1:d0:40:
01:8d:7e:7d:13:5d:2a:1f:8f:62:85:48:fc:23:97:86:f4:96:
53:df:a4:34:48:5e:5e:13:5c:fa:14:1b:dc:53:0d:f5:2d:31:
e7:0b:4e:32:ce:f5:28:fc:cc:4e:53:c3:84:5a:b4:b9:04:48:
bc:9b:65:39:f5:c1:65:eb:11:30:e3:19:88:ca:39:78:e4:1a:
74:77:88:a8:47:68:b1:7c:ed:58:3a:c2:89:9c:91:7a:70:ac:
84:fd:40:0c:bd:5f:a2:27:a6:5a:8b:c8:92:82:e7:5b:fb:80:
08:71:a2:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtFEHgTL7u3gEqps1226TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl
ZTdkZjkwHhcNMjQxMTI2MjMwMDIyWhcNMjQxMTI3MjMwMDIyWjAzMTEwLwYDVQQD
Eyg0MDllZTc0MTMyOGE5YjgyNzY1YjJlZjg4YWRjMDllNzljOWJlOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsxg0YW3WwrthZy/h+oOXm/DruWV
KDJ3ZDIy0M3QJ3nMrrClYyxkuQnsFXhMqJOVWKzt5a8dvpSM3vt3b5VjwUtyDZXP
p1vvlzdNqjM7a+PbeMuxihg5s78T48GnrVWitToHq521QVVnrdK+r//mRcytHo0d
vVM2L4oaUOpALTLUpLT/FFNGxZOAgJSzayPNlGbzK+6QUgPOje0UaiJ4IdocLTYo
W0jyzxRe8zPIyCy0Mvh6tts5FSU1vjuRMptVDqETYJ1DofB70CgA4RT5H4iwkRaf
tD/7wudz4Rz7YxsJ4+PDiBABA09Vn3b48N7Tps9uZEJYVFVd7Zc6etyURQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECe50EyipuCdlsu+IrcCeecm+lmMB8GA1UdIwQY
MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt
MjVhMzhhMjQ2ZmEyLzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy
LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWr1B70/S
kbpBp5p25k/5UXtF7LDxWIhJs6IaEENQ5qhPN505gffhwXmzOrpftcBvRHJKwPwn
PxILviyRMGSC7JQ/Iy01Y+mk0m4Eq6BAFFytMSEWS3wQd2IhCL4J6z42+VN4lil5
28jDts7sZlnzgSFVHl40wBYfiRh32WDW7sSUSbzrG4ucScttg2ib8dBAAY1+fRNd
Kh+PYoVI/COXhvSWU9+kNEheXhNc+hQb3FMN9S0x5wtOMs71KPzMTlPDhFq0uQRI
vJtlOfXBZesRMOMZiMo5eOQadHeIqEdosXztWDrCiZyRenCshP1ADL1foiemWovI
koLnW/uACHGibQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:19 2024 by rpki-client on console-fra.rpki-client.org