Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: qADCuxoBANzoeHOKcyFs6SHmfhprhOkbhaU97aXMJww=
Subject key identifier: 9B:A6:73:08:45:D1:BC:62:2F:19:7F:1B:DE:FA:4B:8F:96:BA:47:93
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019358797ECDDC69417FA5BB4D569ACCCA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 067A
Signing time: Sat 23 Nov 2024 10:02:57 +0000
Manifest this update: Sat 23 Nov 2024 10:02:57 +0000
Manifest next update: Sun 24 Nov 2024 10:02:57 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: BCXpQKEvm1Te/MRFsXdMPRqFGfwhzBCLoHFtEja8gwc=)
2: uYdBNvpge0TzaiXy2_8mcemu5PU.roa (hash: Kqb2c+nyxNO78nX1uWi+dVPJnMkKBAqqs87VUcEkVaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:7e:cd:dc:69:41:7f:a5:bb:4d:56:9a:cc:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Nov 23 10:02:57 2024 GMT
Not After : Nov 24 10:02:57 2024 GMT
Subject: CN=9ba6730845d1bc622f197f1bdefa4b8f96ba4793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:65:d1:5b:54:b4:00:27:8d:49:60:e4:72:
56:d5:78:71:20:69:c0:47:15:3d:10:0a:0b:9e:3c:
49:1e:23:81:80:c9:0e:36:16:67:ce:f3:5c:7f:f6:
96:3c:28:3b:3c:1e:87:d8:04:04:3a:fa:6d:b1:be:
78:52:fa:8a:e0:30:02:d2:c0:02:4e:5f:64:4c:a5:
51:a4:42:c0:60:f1:31:82:b5:8f:f3:0e:bd:fd:d7:
7a:ec:1d:af:70:ed:ba:36:7a:f1:cf:b3:a1:2a:00:
b8:9f:3d:39:7d:fc:93:8f:e0:0d:39:95:f2:e3:bc:
21:c2:ad:8c:c8:32:9a:eb:88:54:f4:7c:15:73:b6:
09:d1:1c:01:c1:a8:91:b1:8c:0b:be:ef:64:01:47:
5c:99:10:b1:2a:cf:00:39:92:02:9c:f0:36:e7:13:
fb:d3:e9:5f:b8:90:e4:b5:78:39:4a:50:b4:6c:55:
83:fd:9b:63:34:46:f1:62:1a:f9:30:d0:56:e9:41:
96:7f:dc:97:ca:f4:de:08:5d:71:fc:8f:51:f5:8c:
0d:e1:62:b3:8b:e0:16:f7:57:88:4d:46:4d:a0:da:
4a:92:65:e7:91:c9:b9:58:41:5c:3c:09:a5:29:cf:
ae:2f:75:f0:a7:d0:c1:d5:78:d1:97:6d:c8:d9:55:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:73:08:45:D1:BC:62:2F:19:7F:1B:DE:FA:4B:8F:96:BA:47:93
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:6a:0c:b3:f5:92:cd:a2:29:8d:f2:57:f0:9e:77:fa:c1:
29:69:3e:9c:b7:61:b9:e4:58:4f:08:58:57:2b:67:4e:69:1e:
6c:b5:30:c8:9a:77:70:04:49:2d:25:1d:23:e5:f5:de:b6:c9:
db:af:36:50:9a:e6:d2:74:e0:f3:c6:46:46:af:36:db:1a:2c:
ad:d9:f9:3b:cd:e0:d2:a4:6b:65:e6:a6:a4:df:b7:69:f4:22:
54:b9:f7:1d:9d:51:e0:8c:fe:e2:0c:2d:ea:4a:51:9f:89:5b:
f1:29:60:79:68:40:4c:33:96:68:87:08:60:40:2a:d5:0d:22:
56:8f:14:28:01:51:bb:bb:d2:53:22:ec:ff:5e:43:0a:c1:d0:
c6:7d:ea:2e:99:0f:9b:06:cb:12:52:23:dc:71:43:5e:a0:1c:
98:94:7b:2e:cb:14:b9:5a:dc:83:2a:f0:04:db:01:27:74:9f:
dc:9a:19:69:de:0c:06:7e:fa:66:5a:45:92:5c:45:68:c8:cf:
1c:79:cb:74:75:c4:6b:95:4b:18:b4:93:85:7a:ab:16:77:5f:
14:51:a5:0a:7e:fa:f6:0b:6e:a1:ae:32:6c:f7:f8:e8:9a:44:
62:96:c1:bb:34:a5:c1:8e:c1:30:d9:96:47:a1:33:0e:9b:13:
c1:d8:1b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeX7N3GlBf6W7TVaazMpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjQxMTIzMTAwMjU3WhcNMjQxMTI0MTAwMjU3WjAzMTEwLwYDVQQD
Eyg5YmE2NzMwODQ1ZDFiYzYyMmYxOTdmMWJkZWZhNGI4Zjk2YmE0NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN5l0VtUtAAnjUlg5HJW1XhxIGnA
RxU9EAoLnjxJHiOBgMkONhZnzvNcf/aWPCg7PB6H2AQEOvptsb54UvqK4DAC0sAC
Tl9kTKVRpELAYPExgrWP8w69/dd67B2vcO26Nnrxz7OhKgC4nz05ffyTj+ANOZXy
47whwq2MyDKa64hU9HwVc7YJ0RwBwaiRsYwLvu9kAUdcmRCxKs8AOZICnPA25xP7
0+lfuJDktXg5SlC0bFWD/ZtjNEbxYhr5MNBW6UGWf9yXyvTeCF1x/I9R9YwN4WKz
i+AW91eITUZNoNpKkmXnkcm5WEFcPAmlKc+uL3Xwp9DB1XjRl23I2VV4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJumcwhF0bxiLxl/G976S4+WukeTMB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1xqDLP1
ks2iKY3yV/Ced/rBKWk+nLdhueRYTwhYVytnTmkebLUwyJp3cARJLSUdI+X13rbJ
2682UJrm0nTg88ZGRq822xosrdn5O83g0qRrZeampN+3afQiVLn3HZ1R4Iz+4gwt
6kpRn4lb8SlgeWhATDOWaIcIYEAq1Q0iVo8UKAFRu7vSUyLs/15DCsHQxn3qLpkP
mwbLElIj3HFDXqAcmJR7LssUuVrcgyrwBNsBJ3Sf3JoZad4MBn76ZlpFklxFaMjP
HHnLdHXEa5VLGLSThXqrFndfFFGlCn769gtuoa4ybPf46JpEYpbBuzSlwY7BMNmW
R6EzDpsTwdgbVQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:55 2024 by rpki-client on console-fra.rpki-client.org