Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: UzLGV3bAVNejqOgFdhFT7WHYprtAXx/5esHIwgmOsig=
Subject key identifier: B3:CE:DB:49:7B:8D:4E:F6:E7:A3:D5:FF:89:C1:1A:1F:4C:E1:DD:18
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 0193561ACA6A0C7F126D23CDFFCD3987381C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 099A
Signing time: Fri 22 Nov 2024 23:00:16 +0000
Manifest this update: Fri 22 Nov 2024 23:00:16 +0000
Manifest next update: Sat 23 Nov 2024 23:00:16 +0000
Files and hashes: 1: Lk5If3Nw3l4-8UhluWHuz6FWrnY.roa (hash: 97GoFijmLH9/Jp6Q6lUK6o56KD71+R7VzfT5jw6ZckI=)
2: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: EovQ2VA2MEJkhZDUeA4NYhaLHEKOFRy+WM4IbIAddWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:ca:6a:0c:7f:12:6d:23:cd:ff:cd:39:87:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Nov 22 23:00:16 2024 GMT
Not After : Nov 23 23:00:16 2024 GMT
Subject: CN=b3cedb497b8d4ef6e7a3d5ff89c11a1f4ce1dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:aa:ed:d0:2a:30:6e:91:f5:f9:c5:fc:8c:
e5:92:e3:ca:d0:83:d1:95:9d:f6:51:d2:75:38:5c:
4a:c5:a6:83:f8:10:bd:5b:ad:9a:24:df:1d:eb:ef:
19:98:bf:04:49:88:23:8c:5a:7f:04:59:20:47:56:
85:3b:c6:74:26:ca:66:a5:33:55:6a:26:f6:bb:8e:
d4:49:2c:92:8b:9f:2b:06:03:38:e9:d7:21:8d:7f:
64:bc:b0:ac:b7:c8:a9:11:66:5b:a2:f6:31:e5:7e:
9c:c3:01:1c:66:d5:f9:48:d7:50:89:5c:c3:72:17:
ad:e8:fc:4b:ee:57:63:ad:bd:3e:cf:c4:f2:3e:b2:
63:95:01:17:34:d1:64:d4:38:d0:b9:5b:fc:2e:d8:
b5:39:23:6f:42:1d:ca:06:96:56:c2:6c:d1:c0:51:
a0:c1:be:bd:a5:6b:a8:45:d6:7a:b5:e4:5a:52:26:
68:50:de:6b:83:4e:7c:62:39:6f:ab:f9:1d:08:b1:
4e:11:22:15:55:2c:43:92:e2:43:f7:35:06:b3:b7:
c4:c7:5e:d3:05:18:cc:5a:07:c7:36:c0:75:bf:1b:
97:70:e9:e0:95:ac:a3:4c:b6:98:af:26:a2:1a:c6:
ae:bf:d3:f5:12:c6:5e:64:d2:c8:26:26:7b:0e:fb:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:DB:49:7B:8D:4E:F6:E7:A3:D5:FF:89:C1:1A:1F:4C:E1:DD:18
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:4f:cb:36:cb:6f:d7:a8:a5:66:f7:58:f2:4a:99:c1:39:
73:94:b9:3f:c6:f9:af:31:87:fd:55:c8:87:61:2b:96:ab:bb:
65:39:26:30:37:3b:76:c4:fb:7a:b6:e4:73:81:6c:93:c8:59:
aa:1e:5b:97:f0:a7:8b:54:33:b5:9a:13:b9:4f:01:30:87:fb:
b4:15:1f:0c:e8:eb:7f:ea:47:9c:a1:a5:17:69:c7:3b:22:f9:
2f:85:f4:02:da:a6:24:98:d3:05:a6:cb:83:8e:94:c9:37:06:
7a:a5:99:a8:08:0f:95:a9:06:25:27:8b:a9:80:3c:55:99:d3:
60:0f:54:cb:41:b7:37:bb:e5:37:f2:c5:6a:09:3f:89:fa:94:
35:3a:e8:2c:f1:0b:c5:54:4c:f5:31:27:0f:97:a5:7d:f5:f8:
db:da:c5:68:61:be:17:4b:ad:99:cf:84:67:10:a7:ba:a3:c4:
ee:cc:46:d5:3f:5f:8b:cb:10:25:ce:51:5b:34:7e:bf:e4:f5:
a9:c9:6a:95:b2:38:25:05:09:46:08:c8:da:6f:28:a4:b7:be:
36:75:69:24:96:09:2e:04:5d:d6:b5:9c:9f:7f:ec:23:f5:6f:
d1:97:6b:56:4d:20:96:fa:d6:a1:ef:da:e0:56:2a:0c:f9:16:
54:82:87:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGspqDH8SbSPN/805hzgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm
MTgxNTYwHhcNMjQxMTIyMjMwMDE2WhcNMjQxMTIzMjMwMDE2WjAzMTEwLwYDVQQD
EyhiM2NlZGI0OTdiOGQ0ZWY2ZTdhM2Q1ZmY4OWMxMWExZjRjZTFkZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Oq7dAqMG6R9fnF/IzlkuPK0IPR
lZ32UdJ1OFxKxaaD+BC9W62aJN8d6+8ZmL8ESYgjjFp/BFkgR1aFO8Z0JspmpTNV
aib2u47USSySi58rBgM46dchjX9kvLCst8ipEWZbovYx5X6cwwEcZtX5SNdQiVzD
chet6PxL7ldjrb0+z8TyPrJjlQEXNNFk1DjQuVv8Lti1OSNvQh3KBpZWwmzRwFGg
wb69pWuoRdZ6teRaUiZoUN5rg058Yjlvq/kdCLFOESIVVSxDkuJD9zUGs7fEx17T
BRjMWgfHNsB1vxuXcOnglayjTLaYryaiGsauv9P1EsZeZNLIJiZ7DvsUEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPO20l7jU7256PV/4nBGh9M4d0YMB8GA1UdIwQY
MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt
Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj
LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH1PyzbL
b9eopWb3WPJKmcE5c5S5P8b5rzGH/VXIh2Erlqu7ZTkmMDc7dsT7erbkc4Fsk8hZ
qh5bl/Cni1QztZoTuU8BMIf7tBUfDOjrf+pHnKGlF2nHOyL5L4X0AtqmJJjTBabL
g46UyTcGeqWZqAgPlakGJSeLqYA8VZnTYA9Uy0G3N7vlN/LFagk/ifqUNTroLPEL
xVRM9TEnD5elffX429rFaGG+F0utmc+EZxCnuqPE7sxG1T9fi8sQJc5RWzR+v+T1
qclqlbI4JQUJRgjI2m8opLe+NnVpJJYJLgRd1rWcn3/sI/Vv0ZdrVk0glvrWoe/a
4FYqDPkWVIKHTQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:11 2024 by rpki-client on console-fra.rpki-client.org