Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: mE86Ge7J8PsUcumtWdI1nPxJQUh7XjWNS7em3kdRYFk=
Subject key identifier: F4:76:DF:C5:55:67:D3:CC:0F:92:82:18:9F:78:DB:C4:03:F8:3E:5C
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01938BBFB65FB6B9CACB909FB7797D2CF561
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 047E
Signing time: Tue 03 Dec 2024 09:00:10 +0000
Manifest this update: Tue 03 Dec 2024 09:00:10 +0000
Manifest next update: Wed 04 Dec 2024 09:00:10 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: nIQUnRaGIQzWutcAwjz1lJtWbR1fKWdvBD35pDZ55Yg=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: K9RRo5A+lfEemzw9o8qRUTlQJBZLe/j0FvNJVfGa/84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:bf:b6:5f:b6:b9:ca:cb:90:9f:b7:79:7d:2c:f5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Dec 3 09:00:10 2024 GMT
Not After : Dec 4 09:00:10 2024 GMT
Subject: CN=f476dfc55567d3cc0f9282189f78dbc403f83e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:79:b6:6e:21:8f:4b:5d:8c:bc:ef:b5:2f:
06:06:51:cb:d0:35:a1:bd:26:47:3f:c6:a8:53:46:
a7:cf:60:e8:16:95:e7:37:af:ae:a1:dd:cd:ef:ae:
bc:8b:5c:d6:4d:a5:22:16:4f:c0:29:23:5b:66:76:
d2:c5:c6:d8:2a:b3:39:62:c4:23:d8:9e:55:08:e3:
5e:9d:29:34:3a:8b:94:95:ec:85:06:1f:d8:cf:50:
24:96:8d:8e:93:2c:8e:02:15:9d:6e:4d:28:85:a2:
cf:5b:b6:80:ae:8e:c2:29:6f:0b:64:bc:07:b5:87:
61:3d:a5:ae:a8:72:f0:13:f6:58:8b:e5:e8:c1:f2:
5b:02:42:d5:07:76:d2:49:6f:78:cc:54:67:29:0b:
69:30:e8:eb:aa:3c:06:a5:c6:34:26:60:88:41:98:
cd:09:31:78:1a:89:a2:0f:89:2d:c4:59:02:2d:83:
ef:41:e6:be:ad:cc:13:ba:9e:9e:4b:e4:77:79:f5:
10:fe:58:f2:b3:38:7f:9c:5b:7f:95:43:2e:6a:b9:
34:3e:53:b8:1b:00:00:32:b4:c6:1d:2a:e6:a9:4a:
50:7d:6f:16:60:7b:99:4a:86:42:b8:71:af:2f:f5:
c3:d5:5f:43:6d:4e:e1:f6:00:67:e6:b3:0d:91:22:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:DF:C5:55:67:D3:CC:0F:92:82:18:9F:78:DB:C4:03:F8:3E:5C
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:f7:06:43:98:ef:a9:17:74:12:1c:2b:b4:ca:d0:db:69:
0b:a7:1f:e5:ee:d4:23:5f:39:8f:7d:f1:2a:7d:17:79:c3:37:
42:ca:59:fc:06:fc:f6:b5:66:f9:4a:76:1b:c0:e4:fc:a6:3b:
e3:8a:f4:d6:cf:9a:ce:9b:b1:8f:a2:46:77:61:bb:da:9d:19:
ae:9e:3d:eb:ac:4f:b7:98:4a:94:1b:50:98:ba:a1:f1:75:8a:
1b:de:41:40:bb:62:5d:17:ef:b7:41:dd:3d:7f:de:d1:b7:a7:
b1:e6:71:c6:65:55:92:f2:f5:36:bc:92:9c:3c:bf:b1:fc:fc:
50:9c:67:9e:6b:b1:b6:ac:84:fc:d6:ab:ea:e6:23:ce:ba:9d:
40:ab:d7:46:39:d0:c9:6a:30:73:ed:a6:cc:a0:f6:bc:c1:19:
9f:9c:8d:6a:a9:22:7b:ee:00:28:cd:d0:44:4f:95:e7:c8:70:
d3:13:5b:53:9d:7c:5b:b6:f6:9f:9f:1f:73:78:46:6a:eb:eb:
65:8d:44:b1:c5:c7:df:14:0b:12:cf:ba:aa:ab:69:bd:a9:7e:
33:1f:06:5d:0b:d4:9a:c1:95:17:a4:dc:0b:9c:d1:24:cd:af:
5f:5c:db:bc:ee:34:3d:f7:f0:d1:d5:2d:bf:6e:ac:f0:a3:f4:
80:72:ce:f9
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZOLv7ZftrnKy5Cft3l9LPVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjQxMjAzMDkwMDEwWhcNMjQxMjA0MDkwMDEwWjAzMTEwLwYDVQQD
EyhmNDc2ZGZjNTU1NjdkM2NjMGY5MjgyMTg5Zjc4ZGJjNDAzZjgzZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVJ5tm4hj0tdjLzvtS8GBlHL0DWh
vSZHP8aoU0anz2DoFpXnN6+uod3N7668i1zWTaUiFk/AKSNbZnbSxcbYKrM5YsQj
2J5VCONenSk0OouUleyFBh/Yz1Aklo2OkyyOAhWdbk0ohaLPW7aAro7CKW8LZLwH
tYdhPaWuqHLwE/ZYi+XowfJbAkLVB3bSSW94zFRnKQtpMOjrqjwGpcY0JmCIQZjN
CTF4GomiD4ktxFkCLYPvQea+rcwTup6eS+R3efUQ/ljyszh/nFt/lUMuark0PlO4
GwAAMrTGHSrmqUpQfW8WYHuZSoZCuHGvL/XD1V9DbU7h9gBn5rMNkSID1wIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFPR238VVZ9PMD5KCGJ9428QD+D5cMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAC9C9wZDmO+pF3QSHCu0ytDbaQunH+Xu1CNfOY998Sp9F3nDN0LKWfwG/Pa1
ZvlKdhvA5PymO+OK9NbPms6bsY+iRndhu9qdGa6ePeusT7eYSpQbUJi6ofF1ihve
QUC7Yl0X77dB3T1/3tG3p7HmccZlVZLy9Ta8kpw8v7H8/FCcZ55rsbashPzWq+rm
I866nUCr10Y50MlqMHPtpsyg9rzBGZ+cjWqpInvuACjN0ERPlefIcNMTW1OdfFu2
9p+fH3N4Rmrr62WNRLHFx98UCxLPuqqrab2pfjMfBl0L1JrBlRek3Auc0STNr19c
27zuND338NHVLb9urPCj9IByzvk=
-----END CERTIFICATE-----
Generated at Tue Dec 3 13:12:05 2024 by rpki-client on console-fra.rpki-client.org