Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 2PY31iKFnfeoj45fcV3SSZ2DFH90XUCTlYuVE6Hdfh0=
Subject key identifier: 78:EF:64:B1:06:15:43:23:69:22:5A:52:C4:72:CB:C8:BD:61:27:90
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0193591C3843EEB0F54767E3CEBC814EF002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1254
Signing time: Sat 23 Nov 2024 13:00:41 +0000
Manifest this update: Sat 23 Nov 2024 13:00:41 +0000
Manifest next update: Sun 24 Nov 2024 13:00:41 +0000
Files and hashes: 1: BC6Zt5o2PyKK37VtN6xzOxgt7Ys.roa (hash: E5URjVfvNbY/fPLSW6KGfslqMS6PGTqt1tDnz+q9nB8=)
2: _S1if803oEiFp2Dv-KWrUeVNtE8.roa (hash: 5okpoIQ5zOMqZAbiIi8zesIfbwqPB0NcTd3Pf+sVzO4=)
3: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: YTFZ3ZSICyeBQUsBIArNKYH67Rss5dygqspikMIVqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:38:43:ee:b0:f5:47:67:e3:ce:bc:81:4e:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Nov 23 13:00:41 2024 GMT
Not After : Nov 24 13:00:41 2024 GMT
Subject: CN=78ef64b10615432369225a52c472cbc8bd612790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:5b:cd:2b:27:92:5a:fb:44:c0:36:ec:a4:
f4:f8:eb:dc:9a:df:9b:c4:07:31:f7:fe:66:bd:9d:
6b:51:ca:9a:c7:11:8c:74:65:db:38:a9:77:6a:37:
3b:60:12:d6:48:92:a3:89:cf:3e:01:8d:c3:2f:df:
a5:a0:54:20:ec:97:e7:ff:0f:1b:ed:06:ce:ab:9e:
67:8d:ff:d7:fd:a5:08:db:f6:49:68:a0:43:bd:4a:
d0:69:12:05:4a:0a:3f:9d:68:64:0a:28:82:3b:69:
3c:1b:e1:16:fb:a7:25:d6:46:c6:44:a5:a3:3b:df:
bb:1c:31:70:f2:1f:08:ba:2d:03:e6:62:10:ef:54:
f9:a3:8f:f2:b6:64:6e:b7:6a:6d:8b:92:a1:59:6f:
08:37:fc:a4:e3:ee:b7:14:15:eb:62:34:ce:7e:6d:
5f:dc:2f:e7:cd:73:c3:ca:50:5c:99:6f:27:16:54:
5a:59:56:56:83:70:f3:22:aa:a4:6e:db:a1:94:bb:
94:9f:42:77:9f:ba:09:be:a6:f4:89:95:f4:32:b8:
d5:ff:c6:30:3d:c1:fb:6d:1a:44:35:cc:aa:ec:16:
8f:41:8f:27:29:5c:ce:41:8a:9a:c9:75:5a:8d:5b:
68:13:60:a0:f2:cb:49:10:de:5f:71:51:2b:d9:48:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EF:64:B1:06:15:43:23:69:22:5A:52:C4:72:CB:C8:BD:61:27:90
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:44:de:5c:f6:45:05:0c:9c:a7:0c:70:30:8d:f3:e8:fa:ab:
2c:2c:69:39:4d:22:a9:71:30:b2:8a:73:34:b9:b5:5b:b2:43:
dc:c8:67:1a:c8:d1:98:87:45:39:a9:0b:b7:4f:8a:fb:62:81:
3e:a2:01:98:10:05:8a:49:4b:85:71:b5:f5:34:67:fd:d6:0e:
2c:f7:f1:53:f5:df:a3:30:ba:a4:dc:09:3e:5c:9a:14:02:3d:
56:67:fe:9c:97:dd:b8:37:8d:6a:61:55:bd:16:9c:68:81:de:
6d:79:e0:70:8d:be:7e:f0:60:a3:0d:fd:02:0e:91:05:33:0a:
29:be:56:94:05:cd:a7:30:5d:aa:ec:f4:02:76:f3:2f:94:8a:
8d:d6:33:fe:9a:95:da:90:9d:34:1b:3b:42:b5:fb:77:35:1f:
52:6a:5b:71:b9:f1:37:78:a6:6a:86:19:63:66:2f:ea:79:3b:
aa:52:b4:f5:f6:b2:81:0f:5f:5d:fb:7b:0e:9c:58:23:1e:07:
f6:19:38:0a:06:68:b2:d5:5d:b1:36:01:16:62:37:21:4f:e0:
60:f7:fb:28:d4:86:da:69:33:d2:ae:d5:83:85:1e:0c:54:03:
27:3c:67:c9:00:1e:ff:93:78:47:9b:37:4e:08:d7:fa:ea:00:
3c:ef:52:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZHDhD7rD1R2fjzryBTvACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0
ODU3YzYwHhcNMjQxMTIzMTMwMDQxWhcNMjQxMTI0MTMwMDQxWjAzMTEwLwYDVQQD
Eyg3OGVmNjRiMTA2MTU0MzIzNjkyMjVhNTJjNDcyY2JjOGJkNjEyNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuShbzSsnklr7RMA27KT0+Ovcmt+b
xAcx9/5mvZ1rUcqaxxGMdGXbOKl3ajc7YBLWSJKjic8+AY3DL9+loFQg7Jfn/w8b
7QbOq55njf/X/aUI2/ZJaKBDvUrQaRIFSgo/nWhkCiiCO2k8G+EW+6cl1kbGRKWj
O9+7HDFw8h8Iui0D5mIQ71T5o4/ytmRut2pti5KhWW8IN/yk4+63FBXrYjTOfm1f
3C/nzXPDylBcmW8nFlRaWVZWg3DzIqqkbtuhlLuUn0J3n7oJvqb0iZX0MrjV/8Yw
PcH7bRpENcyq7BaPQY8nKVzOQYqayXVajVtoE2Cg8stJEN5fcVEr2UgH3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjvZLEGFUMjaSJaUsRyy8i9YSeQMB8GA1UdIwQY
MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt
NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0
LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUTeXPZF
BQycpwxwMI3z6PqrLCxpOU0iqXEwsopzNLm1W7JD3MhnGsjRmIdFOakLt0+K+2KB
PqIBmBAFiklLhXG19TRn/dYOLPfxU/XfozC6pNwJPlyaFAI9Vmf+nJfduDeNamFV
vRacaIHebXngcI2+fvBgow39Ag6RBTMKKb5WlAXNpzBdquz0AnbzL5SKjdYz/pqV
2pCdNBs7QrX7dzUfUmpbcbnxN3imaoYZY2Yv6nk7qlK09faygQ9fXft7DpxYIx4H
9hk4CgZostVdsTYBFmI3IU/gYPf7KNSG2mkz0q7Vg4UeDFQDJzxnyQAe/5N4R5s3
TgjX+uoAPO9SLQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:01 2024 by rpki-client on console-fra.rpki-client.org