Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: o4ctICPzIIRLrC5uLlQ9EsZGMJOKqUnXdTSJYMLHyC0=
Subject key identifier: 1E:7B:C5:A8:F7:17:9A:27:81:A5:1E:88:CA:65:F5:94:31:F5:07:4E
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 01935689A3F3DF9697E283DD57850AF0283A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:20 +0000
Manifest this update: Sat 23 Nov 2024 01:01:20 +0000
Manifest next update: Sun 24 Nov 2024 01:01:20 +0000
Files and hashes: 1: 3NhdegdyD8SzI7rnnhAeFUiujH8.roa (hash: IbFlK02V6L4y+fPCIasKCzSGEOoIUI7k43qRdPj2sCg=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: YR9yCrozcm6DEe5rf0emTOVD/o77XFl+qEoXrvhEG/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:a3:f3:df:96:97:e2:83:dd:57:85:0a:f0:28:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Nov 23 01:01:20 2024 GMT
Not After : Nov 24 01:01:20 2024 GMT
Subject: CN=1e7bc5a8f7179a2781a51e88ca65f59431f5074e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:e6:85:48:15:2b:b1:d5:5e:e8:3f:73:25:
0e:41:91:cc:a5:10:30:4f:83:1b:26:5e:2b:51:4f:
39:57:ec:b8:a8:fb:09:d5:aa:d3:ad:65:e4:4a:40:
72:21:2a:09:6e:2d:89:ba:b4:85:e7:c0:f4:cc:bc:
14:0f:9b:c1:1b:e1:c2:4a:12:00:a4:8a:42:e9:91:
95:53:f2:66:77:0d:bc:63:25:ad:ea:e9:cd:19:d5:
70:34:8d:82:88:66:e5:1e:92:da:1d:1b:49:07:72:
6c:d1:72:24:34:56:f8:3a:fa:0e:34:b9:97:47:c0:
45:5d:4c:12:5d:b3:cb:88:da:7e:f4:2b:a8:69:2b:
7c:9d:04:82:1d:6e:b4:1e:a3:2e:7f:12:44:66:72:
09:3b:70:76:fd:9e:47:ed:f8:bc:ab:d0:17:ff:4d:
8e:f8:8d:ad:35:9e:74:4b:db:0d:76:54:71:a1:9e:
08:61:1e:f5:85:49:1a:e4:9b:f7:12:e3:02:f9:8b:
42:40:6d:3c:87:fa:b7:a6:80:8e:f7:66:f3:3f:11:
5d:14:9e:79:f8:0d:c8:34:90:49:0c:c0:c4:8c:48:
cc:49:b2:27:21:96:0a:35:10:df:f8:ac:32:dd:a6:
02:2d:2c:1e:79:8a:74:ca:25:bf:6a:e3:5a:e9:ef:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:C5:A8:F7:17:9A:27:81:A5:1E:88:CA:65:F5:94:31:F5:07:4E
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4f:ec:13:c9:57:b3:b6:ef:f5:ef:2d:4d:98:30:b1:96:96:
81:28:74:0d:31:2e:52:50:04:a6:d2:67:e1:20:6a:09:af:90:
aa:57:f6:d8:09:f7:7d:d5:f9:05:54:44:0c:07:54:77:f5:7b:
00:17:f0:02:14:f7:16:69:75:89:fd:12:cd:ab:89:82:3f:c6:
9c:91:d6:7b:74:9c:3d:80:b1:44:c5:8d:8d:a0:a7:29:74:3e:
f4:c3:3a:ea:bd:c3:e5:6f:d1:f0:49:00:d9:5c:07:04:02:fb:
33:bf:54:29:57:69:7f:ee:a8:c9:77:61:b4:c7:bc:33:75:6e:
db:b9:ea:e8:cf:be:59:90:f6:a0:aa:3b:40:34:8a:c0:08:3d:
f1:9f:b9:cc:bc:ff:d9:90:cd:f9:05:06:c0:73:45:01:fd:13:
f5:cc:89:a0:05:5d:c3:62:ae:66:b9:75:ab:6e:1e:4b:90:06:
6a:87:2c:56:c4:b4:b3:cc:2f:88:b3:68:f9:ab:ac:5f:d8:36:
21:60:ec:45:32:cd:1d:dc:01:3a:dd:da:1f:6b:9a:79:0c:b9:
41:55:ce:56:59:a2:a1:10:46:89:6b:1b:9c:bf:a8:9d:8a:9c:
05:62:a0:8c:89:c7:06:80:29:b0:49:1e:53:08:90:57:da:f4:
36:d1:f2:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiaPz35aX4oPdV4UK8Cg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw
NzhiOTAwHhcNMjQxMTIzMDEwMTIwWhcNMjQxMTI0MDEwMTIwWjAzMTEwLwYDVQQD
EygxZTdiYzVhOGY3MTc5YTI3ODFhNTFlODhjYTY1ZjU5NDMxZjUwNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VHmhUgVK7HVXug/cyUOQZHMpRAw
T4MbJl4rUU85V+y4qPsJ1arTrWXkSkByISoJbi2JurSF58D0zLwUD5vBG+HCShIA
pIpC6ZGVU/Jmdw28YyWt6unNGdVwNI2CiGblHpLaHRtJB3Js0XIkNFb4OvoONLmX
R8BFXUwSXbPLiNp+9CuoaSt8nQSCHW60HqMufxJEZnIJO3B2/Z5H7fi8q9AX/02O
+I2tNZ50S9sNdlRxoZ4IYR71hUka5Jv3EuMC+YtCQG08h/q3poCO92bzPxFdFJ55
+A3INJBJDMDEjEjMSbInIZYKNRDf+Kwy3aYCLSweeYp0yiW/auNa6e9NvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB57xaj3F5ongaUeiMpl9ZQx9QdOMB8GA1UdIwQY
MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt
Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1
LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuE/sE8lX
s7bv9e8tTZgwsZaWgSh0DTEuUlAEptJn4SBqCa+Qqlf22An3fdX5BVREDAdUd/V7
ABfwAhT3Fml1if0SzauJgj/GnJHWe3ScPYCxRMWNjaCnKXQ+9MM66r3D5W/R8EkA
2VwHBAL7M79UKVdpf+6oyXdhtMe8M3Vu27nq6M++WZD2oKo7QDSKwAg98Z+5zLz/
2ZDN+QUGwHNFAf0T9cyJoAVdw2KuZrl1q24eS5AGaocsVsS0s8wviLNo+ausX9g2
IWDsRTLNHdwBOt3aH2uaeQy5QVXOVlmioRBGiWsbnL+onYqcBWKgjInHBoApsEke
UwiQV9r0NtHy8Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:54 2024 by rpki-client on console-ams.rpki-client.org