Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: vuaaKkDGG2Gkg3eFdVXgTO/J9Rfxqz+6/fSqmdfsjbA=
Subject key identifier: 97:5E:CB:14:D5:42:9D:9E:9E:38:22:76:53:1E:F2:D8:B2:10:96:3E
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0193572DDC93BB8528C53909D77BE3CD43A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 0DE8
Signing time: Sat 23 Nov 2024 04:00:43 +0000
Manifest this update: Sat 23 Nov 2024 04:00:43 +0000
Manifest next update: Sun 24 Nov 2024 04:00:43 +0000
Files and hashes: 1: au8TxxZE6AX5QD8tHwgldL1Xg0A.roa (hash: +GPhhQbsZFsa9Gp/T77sVruMUW0Ns2CuFIvF4qV1DkM=)
2: xWEwdOIJiHkO0kjek2ThCqf7wmw.roa (hash: 7f7oUywGcN9qnSiUt7BQI5MsSKlBv1AJR8nU2YbAzlk=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: jy2jT6FVw8Lyo9IFBXDE4HVqF/IsdTkaNdgFmXwihoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:dc:93:bb:85:28:c5:39:09:d7:7b:e3:cd:43:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Nov 23 04:00:43 2024 GMT
Not After : Nov 24 04:00:43 2024 GMT
Subject: CN=975ecb14d5429d9e9e382276531ef2d8b210963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:e0:10:64:7c:01:5c:97:51:2f:b7:c5:9e:
4a:bf:b4:8a:4e:25:c9:de:f1:1b:97:cd:00:ce:34:
5f:7a:9d:13:fe:bb:f3:45:2b:b2:a6:55:28:e1:5a:
f3:26:50:39:d9:1d:95:74:db:2c:34:92:c0:2d:89:
cc:b9:58:0a:58:44:7e:60:40:64:af:42:d8:c0:10:
df:88:fc:46:aa:7f:b7:ea:e2:52:6d:3a:8f:07:3b:
03:70:13:79:67:9a:4c:a2:21:3a:a9:42:48:63:f2:
a5:42:83:3a:9f:2f:19:cf:96:d4:97:87:ea:56:33:
6c:c3:f7:77:5c:a4:f5:bc:d4:d4:ff:46:8e:86:a3:
6f:bc:48:d7:e0:4e:1d:1a:93:3e:78:d0:a0:bf:c3:
ae:cc:20:3a:fa:82:45:ae:c9:7f:33:22:50:64:31:
50:e5:47:44:fb:aa:e7:c5:19:5d:e1:6b:c5:c7:e7:
cf:6d:38:69:b6:d4:a2:df:13:c3:e0:df:07:44:9f:
61:1b:24:2f:b4:f3:aa:35:e1:e3:89:c7:c7:f2:0c:
97:7d:c0:16:2f:5f:33:4c:c1:42:39:5f:7d:4b:07:
3a:d6:0a:a5:4b:1e:da:a1:7f:26:a4:a8:75:a4:1a:
b7:50:00:87:43:22:0d:36:e3:99:1f:96:29:f6:ce:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:CB:14:D5:42:9D:9E:9E:38:22:76:53:1E:F2:D8:B2:10:96:3E
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:24:a9:b2:22:8d:70:1f:0b:92:29:31:4d:54:43:24:b1:
28:98:90:8a:b4:03:71:1e:bb:5f:85:60:02:15:4e:9c:48:b3:
2f:a3:83:eb:6d:bc:13:fd:28:20:89:84:33:74:25:48:37:52:
d3:b7:21:5f:23:d0:30:82:eb:12:2e:2f:de:51:31:9e:cd:d7:
ec:e7:62:f4:21:3d:87:f3:93:d2:8f:83:8d:e2:f9:3f:89:bd:
cc:7c:88:d5:90:c9:cc:13:b9:c4:da:97:0c:32:77:7a:e0:84:
1e:26:00:7b:87:b2:c9:b6:9b:16:6f:45:5c:47:90:a2:a0:32:
e6:43:1a:74:e3:a7:f7:3d:7f:bd:2c:2c:ba:7d:5a:9c:eb:ea:
40:ee:7e:fc:38:0c:3e:3b:9b:3b:32:23:92:c6:ea:dd:b8:05:
85:3a:89:9b:2e:49:68:e9:57:27:d7:21:5f:6a:d6:dd:4a:bf:
09:c6:f8:f6:5f:ed:85:c5:d8:bc:7e:93:f0:11:d4:a2:cf:80:
50:2b:eb:4a:2e:0c:6e:56:42:4e:af:4b:ef:b4:da:95:32:04:
83:7d:d9:9f:e4:d8:40:81:4f:9f:59:11:8e:5a:6c:ea:ff:0b:
01:bd:dc:c5:43:5b:58:40:4d:ca:3e:ee:da:f9:b1:e6:a9:8c:
c2:e6:23:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLdyTu4UoxTkJ13vjzUOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjQxMTIzMDQwMDQzWhcNMjQxMTI0MDQwMDQzWjAzMTEwLwYDVQQD
Eyg5NzVlY2IxNGQ1NDI5ZDllOWUzODIyNzY1MzFlZjJkOGIyMTA5NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LDgEGR8AVyXUS+3xZ5Kv7SKTiXJ
3vEbl80AzjRfep0T/rvzRSuyplUo4VrzJlA52R2VdNssNJLALYnMuVgKWER+YEBk
r0LYwBDfiPxGqn+36uJSbTqPBzsDcBN5Z5pMoiE6qUJIY/KlQoM6ny8Zz5bUl4fq
VjNsw/d3XKT1vNTU/0aOhqNvvEjX4E4dGpM+eNCgv8OuzCA6+oJFrsl/MyJQZDFQ
5UdE+6rnxRld4WvFx+fPbThpttSi3xPD4N8HRJ9hGyQvtPOqNeHjicfH8gyXfcAW
L18zTMFCOV99Swc61gqlSx7aoX8mpKh1pBq3UACHQyINNuOZH5Yp9s6Q+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdeyxTVQp2enjgidlMe8tiyEJY+MB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt0kqbIi
jXAfC5IpMU1UQySxKJiQirQDcR67X4VgAhVOnEizL6OD6228E/0oIImEM3QlSDdS
07chXyPQMILrEi4v3lExns3X7Odi9CE9h/OT0o+DjeL5P4m9zHyI1ZDJzBO5xNqX
DDJ3euCEHiYAe4eyybabFm9FXEeQoqAy5kMadOOn9z1/vSwsun1anOvqQO5+/DgM
PjubOzIjksbq3bgFhTqJmy5JaOlXJ9chX2rW3Uq/Ccb49l/thcXYvH6T8BHUos+A
UCvrSi4MblZCTq9L77TalTIEg33Zn+TYQIFPn1kRjlps6v8LAb3cxUNbWEBNyj7u
2vmx5qmMwuYj7A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:55 2024 by rpki-client on console-fra.rpki-client.org