Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: RfTpg7AeUXvgDP5mjP4fvhbuWFShpm96RvjqY5UGEik=
Subject key identifier: AB:DA:28:A5:02:4A:26:F6:76:96:E7:DB:73:0E:A8:F9:EE:AF:69:2B
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 01938C9BA78F811186BB8BD65D7DAD154140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0DBF
Signing time: Tue 03 Dec 2024 13:00:31 +0000
Manifest this update: Tue 03 Dec 2024 13:00:31 +0000
Manifest next update: Wed 04 Dec 2024 13:00:31 +0000
Files and hashes: 1: 62t6z4Ki_rhTujEUFkr2D_LKV2c.roa (hash: zg4sSV3FxJdYKLCUXQ1Drc4RO3cnSsnNyO4H+qjpmsw=)
2: YI01qIFpkk-Yfcpf8lgn6Wb1pOk.roa (hash: aUUH3CFEr0HHVtBErsY4JXnW3lygjxa4giYybu9Fe2s=)
3: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: 5y50xkdpOt9z+oqWlP+d8wH9Xse9X9qPrfichlvr0Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9b:a7:8f:81:11:86:bb:8b:d6:5d:7d:ad:15:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Dec 3 13:00:31 2024 GMT
Not After : Dec 4 13:00:31 2024 GMT
Subject: CN=abda28a5024a26f67696e7db730ea8f9eeaf692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:d8:87:8c:87:06:45:b5:09:12:ab:59:62:
b3:69:71:b8:27:34:d7:7f:2f:83:aa:2d:54:69:02:
f5:2b:71:d9:ab:f5:7a:9e:e9:e0:75:93:5c:4d:58:
8d:9c:4c:04:fd:8d:1e:ee:e8:c1:2a:db:03:6c:a2:
31:bb:04:13:43:2e:d7:fe:8d:92:c9:d6:26:84:1e:
87:23:27:75:2b:9a:03:28:7a:8d:f2:17:cf:3f:22:
fc:68:3c:26:00:5b:76:2e:aa:e2:7b:7e:79:14:e1:
82:19:60:7e:9c:7f:d9:c9:61:c5:46:30:5e:5a:cd:
28:e6:59:fe:e4:be:91:67:03:87:33:fa:79:1d:70:
fe:98:03:24:cc:c9:2b:6a:99:de:fb:21:ff:33:81:
42:97:48:d4:e5:52:39:3c:29:fd:17:d8:c0:f6:e2:
d9:3e:d0:c8:83:82:31:a4:6b:11:aa:ab:1c:6d:98:
35:54:21:cd:d6:15:58:9f:64:f3:df:cf:cc:74:ed:
e6:ac:e6:0f:78:df:f2:26:89:a7:a3:b7:65:2f:2d:
12:fd:cd:c5:4e:b4:59:bd:e4:02:24:9b:7b:78:6d:
bc:67:1d:5a:e7:5f:b4:37:03:8d:17:e5:2a:ea:fe:
66:64:1b:82:82:38:54:69:41:01:32:8b:58:a4:73:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:28:A5:02:4A:26:F6:76:96:E7:DB:73:0E:A8:F9:EE:AF:69:2B
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:2e:44:37:21:2c:19:ad:54:3c:63:f5:0d:59:a3:86:a1:a5:
1a:7e:32:ed:49:91:02:64:8f:63:ed:b4:b5:84:3f:b1:98:35:
19:a7:bf:42:36:8f:e2:a7:bb:56:f5:6f:8c:32:13:35:60:7e:
d5:64:bc:ec:bf:f7:67:7c:c6:f2:1f:f6:aa:d7:05:47:1c:d4:
7d:75:5d:8d:aa:58:d3:51:63:7b:ff:10:f1:63:0e:f6:56:fc:
9e:94:46:a9:43:bd:54:b5:d1:4b:cd:f9:9a:66:d7:c5:bf:4f:
3b:2c:13:0a:b5:d4:9b:fa:99:24:74:d9:61:49:2b:d0:9a:be:
c0:71:ef:54:08:46:7d:86:5b:f3:c6:d9:6d:5e:58:ef:54:15:
50:69:e1:61:5d:77:e4:ee:38:b5:62:26:61:aa:b6:eb:9a:d6:
fa:ea:d3:3a:88:69:a0:6f:46:42:5f:9b:36:81:bb:73:d8:1d:
8d:6c:c1:8a:de:6c:85:32:00:6a:83:ec:c9:b1:d5:5c:1e:21:
bf:28:d1:fc:54:a0:ca:d0:0d:fb:41:63:2f:83:62:7a:92:7f:
2c:a0:c2:23:e9:36:25:cb:67:49:a9:96:f3:f7:85:a0:3b:d2:
5b:19:9e:8f:b0:21:dc:4c:a1:9f:d5:fb:1c:1f:59:35:02:e6:
39:ad:f0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOMm6ePgRGGu4vWXX2tFUFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjQxMjAzMTMwMDMxWhcNMjQxMjA0MTMwMDMxWjAzMTEwLwYDVQQD
EyhhYmRhMjhhNTAyNGEyNmY2NzY5NmU3ZGI3MzBlYThmOWVlYWY2OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHbYh4yHBkW1CRKrWWKzaXG4JzTX
fy+Dqi1UaQL1K3HZq/V6nungdZNcTViNnEwE/Y0e7ujBKtsDbKIxuwQTQy7X/o2S
ydYmhB6HIyd1K5oDKHqN8hfPPyL8aDwmAFt2Lqrie355FOGCGWB+nH/ZyWHFRjBe
Ws0o5ln+5L6RZwOHM/p5HXD+mAMkzMkrapne+yH/M4FCl0jU5VI5PCn9F9jA9uLZ
PtDIg4IxpGsRqqscbZg1VCHN1hVYn2Tz38/MdO3mrOYPeN/yJomno7dlLy0S/c3F
TrRZveQCJJt7eG28Zx1a51+0NwONF+Uq6v5mZBuCgjhUaUEBMotYpHNj6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvaKKUCSib2dpbn23MOqPnur2krMB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6y5ENyEs
Ga1UPGP1DVmjhqGlGn4y7UmRAmSPY+20tYQ/sZg1Gae/QjaP4qe7VvVvjDITNWB+
1WS87L/3Z3zG8h/2qtcFRxzUfXVdjapY01Fje/8Q8WMO9lb8npRGqUO9VLXRS835
mmbXxb9POywTCrXUm/qZJHTZYUkr0Jq+wHHvVAhGfYZb88bZbV5Y71QVUGnhYV13
5O44tWImYaq265rW+urTOohpoG9GQl+bNoG7c9gdjWzBit5shTIAaoPsybHVXB4h
vyjR/FSgytAN+0FjL4NiepJ/LKDCI+k2JctnSamW8/eFoDvSWxmej7Ah3Eyhn9X7
HB9ZNQLmOa3wYw==
-----END CERTIFICATE-----
Generated at Tue Dec 3 15:01:09 2024 by rpki-client on console-fra.rpki-client.org