Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: lGzgMKe2wD5Cyba0d1IJHS/6dYeRX+bCJwEp+Jqgzss=
Subject key identifier: 4E:FF:84:80:44:FA:13:38:71:D2:AC:F9:94:ED:34:F6:9A:8F:AA:7B
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0193542C9423B30CF9D615E41E08C31D4031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 137D
Signing time: Fri 22 Nov 2024 14:00:27 +0000
Manifest this update: Fri 22 Nov 2024 14:00:27 +0000
Manifest next update: Sat 23 Nov 2024 14:00:27 +0000
Files and hashes: 1: AqtEsioZmFkOBTAqs6tFEjZlCmM.roa (hash: USb3NZwETylxmxVVZOZ/d2rnpIyfMBb3uaii0t8elvo=)
2: L71QgugQMvf85kaVtGQuyJPoJRc.roa (hash: ceoFbPknh7QvCYKH40qZCPs0N9mGu2K2EqLi1eFBSIE=)
3: dFQ7--JiATBTvBBjEAEW9REg5NE.roa (hash: Z61SRMQcar55pH1NUjExfg1dx2+P5rXhcWxBEpi2l2g=)
4: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: 2o/M/8scejXL3IXrGgiDXgrYPBXtBfbZFBeMNI0v7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:2c:94:23:b3:0c:f9:d6:15:e4:1e:08:c3:1d:40:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Nov 22 14:00:27 2024 GMT
Not After : Nov 23 14:00:27 2024 GMT
Subject: CN=4eff848044fa133871d2acf994ed34f69a8faa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:33:05:b8:36:73:a9:cc:a3:b5:7c:65:22:
97:fa:12:2d:41:39:ae:87:c4:83:8a:3c:98:15:5e:
4c:e0:0c:f2:52:13:9a:f4:fa:a7:65:a7:8b:89:13:
71:69:29:cb:a8:a0:da:57:b4:4d:38:29:a8:59:43:
47:cc:f0:43:74:75:cf:c2:35:c9:c5:df:c4:aa:0f:
68:cf:ce:69:ae:a4:da:32:da:04:5d:4d:4a:8c:c2:
85:d1:3a:a0:ab:04:c4:f6:f6:e0:96:c2:1c:5b:82:
c7:54:f4:65:47:b8:ea:5e:36:cf:51:13:ba:25:9d:
57:eb:9a:db:26:f2:18:24:af:6e:69:14:e7:7c:07:
5f:f6:00:63:a1:a4:49:76:fa:71:31:3a:59:2a:a0:
bb:9e:94:bd:45:f6:8e:d2:6a:ba:21:0e:74:11:80:
91:0a:e3:e0:21:00:50:24:fd:cf:1a:aa:fd:f9:02:
c9:a0:f4:43:f3:22:53:8d:3e:3c:88:a7:87:a9:eb:
a9:9d:c4:2d:c0:fa:9c:c6:99:1c:0f:b9:fc:ce:4e:
a1:ae:d1:59:6f:2d:98:5b:83:ee:9c:2f:ac:23:93:
f6:39:10:12:4f:06:03:05:45:69:45:2e:51:26:33:
2f:c7:48:26:b1:d7:ba:3e:a0:45:d4:4f:06:b6:19:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:84:80:44:FA:13:38:71:D2:AC:F9:94:ED:34:F6:9A:8F:AA:7B
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:db:e0:93:c2:86:84:e9:47:94:be:1b:39:28:6f:c9:9e:cc:
3c:17:82:8a:68:37:32:89:69:7c:3f:82:0b:15:3c:c9:ca:4b:
99:a1:be:a7:e7:c4:e4:4a:77:7e:c8:a9:62:91:e0:d6:3c:14:
8d:c0:2c:52:cc:fd:35:cb:ea:70:19:6d:55:28:d5:c2:f2:fb:
02:a6:9e:41:a6:84:05:5c:85:ce:76:d3:c1:04:e9:51:95:87:
0b:0f:5c:82:ba:ba:95:9b:0b:2c:44:3a:78:f1:a2:98:32:1c:
51:1f:5d:b1:f1:67:a0:2e:5a:7f:8d:e4:24:a0:c1:0f:c7:80:
43:4b:90:72:54:be:1f:ed:2b:3b:6c:2a:18:6d:5f:63:e9:8d:
5f:76:7f:0e:99:9a:7a:24:4e:ed:e7:60:e3:f8:39:fd:89:cc:
23:5a:63:e3:c0:a9:12:ad:e9:b1:d0:45:0d:41:fe:17:cf:86:
ad:45:f2:aa:58:a6:54:6e:c5:6e:9d:5f:9a:84:0d:f6:de:72:
18:3f:30:5f:93:29:eb:21:14:3f:2f:4b:29:01:05:24:6b:90:
1a:12:37:98:b3:ce:04:d9:75:45:39:7e:b3:56:41:92:92:f3:
94:c0:60:ee:a2:25:7b:65:27:17:ee:72:57:ac:9a:fc:2f:7a:
e9:01:91:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNULJQjswz51hXkHgjDHUAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl
N2Q3OWYwHhcNMjQxMTIyMTQwMDI3WhcNMjQxMTIzMTQwMDI3WjAzMTEwLwYDVQQD
Eyg0ZWZmODQ4MDQ0ZmExMzM4NzFkMmFjZjk5NGVkMzRmNjlhOGZhYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wkzBbg2c6nMo7V8ZSKX+hItQTmu
h8SDijyYFV5M4AzyUhOa9PqnZaeLiRNxaSnLqKDaV7RNOCmoWUNHzPBDdHXPwjXJ
xd/Eqg9oz85prqTaMtoEXU1KjMKF0TqgqwTE9vbglsIcW4LHVPRlR7jqXjbPURO6
JZ1X65rbJvIYJK9uaRTnfAdf9gBjoaRJdvpxMTpZKqC7npS9RfaO0mq6IQ50EYCR
CuPgIQBQJP3PGqr9+QLJoPRD8yJTjT48iKeHqeupncQtwPqcxpkcD7n8zk6hrtFZ
by2YW4PunC+sI5P2ORASTwYDBUVpRS5RJjMvx0gmsde6PqBF1E8GthmA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7/hIBE+hM4cdKs+ZTtNPaaj6p7MB8GA1UdIwQY
MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt
Nzc2MzVhMjJlYjk2LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2
LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtvgk8KG
hOlHlL4bOShvyZ7MPBeCimg3MolpfD+CCxU8ycpLmaG+p+fE5Ep3fsipYpHg1jwU
jcAsUsz9NcvqcBltVSjVwvL7AqaeQaaEBVyFznbTwQTpUZWHCw9cgrq6lZsLLEQ6
ePGimDIcUR9dsfFnoC5af43kJKDBD8eAQ0uQclS+H+0rO2wqGG1fY+mNX3Z/Dpma
eiRO7edg4/g5/YnMI1pj48CpEq3psdBFDUH+F8+GrUXyqlimVG7Fbp1fmoQN9t5y
GD8wX5Mp6yEUPy9LKQEFJGuQGhI3mLPOBNl1RTl+s1ZBkpLzlMBg7qIle2UnF+5y
V6ya/C966QGRCA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:26 2024 by rpki-client on console-fra.rpki-client.org