Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: z1cPt6p06sCeGeo941b/97c7OB+IjrDQ2t/6x5A1lhY=
Subject key identifier: DE:96:B2:F3:E8:7F:E0:81:59:0F:8B:7C:03:4C:51:CF:00:26:EA:60
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0193572DB3DA5E7144D81A32911E5636D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1377
Signing time: Sat 23 Nov 2024 04:00:33 +0000
Manifest this update: Sat 23 Nov 2024 04:00:33 +0000
Manifest next update: Sun 24 Nov 2024 04:00:33 +0000
Files and hashes: 1: NM10MBaBSFAHVemX2KMm2aMJ7VE.roa (hash: g4Cq2JShey8f6eJ/rgeeZ2wmC2GK3fY8FHhXtiFAGno=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: yfj+NmnuyJCTrPyO72adTiHc8+7PP7UlZ0gu2H9Gl7c=)
3: rgPGw7n6BG6yjRTkP7iBSCbEToY.roa (hash: CBInPcDHWxg46g867SY/Jc7YxQbyDRMl928e+gRmb4Q=)
4: s5_3hV9WXcm1CRJYnyIB_VjZZ7Q.roa (hash: UKS5pZiv42UTkra4mHaSbZRRNU5rIYHxEPknazKSpNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:b3:da:5e:71:44:d8:1a:32:91:1e:56:36:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Nov 23 04:00:33 2024 GMT
Not After : Nov 24 04:00:33 2024 GMT
Subject: CN=de96b2f3e87fe081590f8b7c034c51cf0026ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:33:e7:d2:1d:43:4e:1c:f6:5c:1f:94:c3:
35:f1:09:6a:2c:3a:f8:20:75:7f:d0:5f:5c:de:ad:
85:ac:32:be:65:83:81:27:04:b0:80:b5:7b:39:3a:
e2:a3:0e:1a:e8:46:98:dc:89:37:3b:8d:8b:20:1e:
1a:3f:8e:14:1d:45:0a:16:14:cc:7d:f3:5f:7c:74:
0c:d0:19:8a:9d:d7:59:d1:e0:de:66:93:b5:eb:78:
d2:53:1f:d1:d7:e5:df:15:a8:a5:2f:9e:b4:e9:1a:
de:29:78:0c:db:d1:85:da:d4:fd:80:df:30:fc:9d:
4d:5d:b9:3f:ac:35:14:66:b4:b6:a6:e8:6d:bb:c4:
d0:e3:17:b3:e8:30:df:14:62:01:13:86:1c:01:3f:
f9:37:09:a7:3a:24:1f:4a:66:9e:35:2e:95:78:d2:
c0:e9:1f:90:32:4b:f3:1e:82:4e:1a:9b:29:ad:1e:
73:39:e2:f9:9c:9d:84:c8:6a:3e:79:a0:ba:ec:9c:
22:10:a2:8b:fa:1a:eb:cd:54:61:b0:ce:89:37:2e:
02:43:21:21:01:57:31:95:b6:78:96:3d:65:97:8b:
17:43:a6:8b:e4:54:9f:76:14:87:7c:46:7b:de:39:
4d:95:e1:35:23:64:c7:22:64:4f:11:a4:67:61:3f:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:B2:F3:E8:7F:E0:81:59:0F:8B:7C:03:4C:51:CF:00:26:EA:60
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:60:c3:3a:be:e5:52:b0:03:7b:17:07:63:ee:14:26:80:9c:
21:eb:76:69:ea:f9:ef:4e:b4:3c:da:88:89:ae:3c:a7:00:31:
e5:ef:0a:9b:3f:ed:45:d7:06:1c:a4:1e:37:2e:13:aa:89:e5:
d4:56:f5:7d:4b:1d:fd:93:07:4d:8e:b6:93:f7:8b:4c:73:91:
e1:4e:3d:1f:fb:36:d6:6a:31:0a:df:98:cd:bf:b5:2c:7d:bb:
38:53:f0:7d:2e:38:fc:9a:3b:83:83:e6:7f:fb:97:c9:d5:49:
4e:3f:cb:b0:f3:81:34:42:05:09:e8:5d:d4:27:c6:7e:ba:80:
96:77:77:a4:27:01:74:82:ae:2a:17:fb:d4:a3:5f:2d:cf:c0:
f0:57:11:54:37:3c:e5:c9:64:75:6c:47:97:97:9f:05:3c:66:
eb:fd:b5:7c:6a:bb:ea:43:f1:83:60:f9:be:22:16:16:c7:bb:
03:90:a8:d5:90:86:d0:a2:ef:c4:13:15:e4:b5:e7:11:27:18:
a1:f9:1c:04:30:0a:c3:2e:1c:82:94:8c:8d:23:c1:55:37:5d:
96:35:e1:40:24:fb:82:6c:dc:ac:9d:73:24:40:ce:9f:7a:71:
82:46:ec:ff:f9:5c:33:6a:00:21:0d:f0:16:23:fb:49:87:14:
f2:7d:e0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLbPaXnFE2BoykR5WNtcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjQxMTIzMDQwMDMzWhcNMjQxMTI0MDQwMDMzWjAzMTEwLwYDVQQD
EyhkZTk2YjJmM2U4N2ZlMDgxNTkwZjhiN2MwMzRjNTFjZjAwMjZlYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/gz59IdQ04c9lwflMM18QlqLDr4
IHV/0F9c3q2FrDK+ZYOBJwSwgLV7OTriow4a6EaY3Ik3O42LIB4aP44UHUUKFhTM
ffNffHQM0BmKnddZ0eDeZpO163jSUx/R1+XfFailL5606RreKXgM29GF2tT9gN8w
/J1NXbk/rDUUZrS2puhtu8TQ4xez6DDfFGIBE4YcAT/5NwmnOiQfSmaeNS6VeNLA
6R+QMkvzHoJOGpsprR5zOeL5nJ2EyGo+eaC67JwiEKKL+hrrzVRhsM6JNy4CQyEh
AVcxlbZ4lj1ll4sXQ6aL5FSfdhSHfEZ73jlNleE1I2THImRPEaRnYT93nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6WsvPof+CBWQ+LfANMUc8AJupgMB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2DDOr7l
UrADexcHY+4UJoCcIet2aer57060PNqIia48pwAx5e8Kmz/tRdcGHKQeNy4Tqonl
1Fb1fUsd/ZMHTY62k/eLTHOR4U49H/s21moxCt+Yzb+1LH27OFPwfS44/Jo7g4Pm
f/uXydVJTj/LsPOBNEIFCehd1CfGfrqAlnd3pCcBdIKuKhf71KNfLc/A8FcRVDc8
5clkdWxHl5efBTxm6/21fGq76kPxg2D5viIWFse7A5Co1ZCG0KLvxBMV5LXnEScY
ofkcBDAKwy4cgpSMjSPBVTddljXhQCT7gmzcrJ1zJEDOn3pxgkbs//lcM2oAIQ3w
FiP7SYcU8n3gBw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:52 2024 by rpki-client on console-fra.rpki-client.org