Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: DGu1KhVIJj16CMyjZTCx/EL+B8RcY5A0dz6hWdSfvpg=
Subject key identifier: 78:69:10:B4:45:0B:DF:EB:EB:67:DE:14:09:D8:82:7E:86:3B:7A:2D
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019358E4FD2F58F5DB3C89B55231D5ABB035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 12:00:21 +0000
Manifest this update: Sat 23 Nov 2024 12:00:21 +0000
Manifest next update: Sun 24 Nov 2024 12:00:21 +0000
Files and hashes: 1: 0lnGtrsFQqblrnk3MEBF9CMLPQs.roa (hash: 8BxzrST0hzac3F+ePuU9kY2EGpJTWqKRsaViYLUIDl8=)
2: IatOJxBR4BqLsCYGXgV7Wp3U3Eo.roa (hash: ELFAGqgrLggXf/fXPVJT+5NgAV8VqcfigsF5axIP6IA=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: a0aOlYk4h6R4NM8Y95iuj0yYPZg4FnlldJj//4E0oBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e4:fd:2f:58:f5:db:3c:89:b5:52:31:d5:ab:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Nov 23 12:00:21 2024 GMT
Not After : Nov 24 12:00:21 2024 GMT
Subject: CN=786910b4450bdfebeb67de1409d8827e863b7a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:d5:eb:d1:11:a7:21:c0:74:46:57:42:60:
2e:9a:23:d7:e9:86:dc:68:7d:37:b8:36:fc:ab:ac:
ff:e3:0a:d0:e8:b9:7f:f4:d9:ba:bf:e3:e0:9f:48:
00:cf:dd:bf:52:79:69:1f:b1:5e:3f:10:e5:d7:95:
61:25:fb:eb:f2:af:6a:45:18:aa:fd:94:5a:ce:2c:
86:29:87:15:53:9b:1e:57:50:cc:82:6a:89:4a:61:
df:06:76:11:95:56:60:a6:0c:81:75:49:85:df:cd:
ad:41:b0:62:14:d8:b0:ce:45:f1:c3:43:db:05:ee:
0c:e7:47:c0:1c:32:93:c9:5f:1b:1f:2b:bd:26:ba:
1c:fa:b5:ba:4c:45:d2:df:b4:5f:8e:67:7e:e3:67:
82:45:78:51:30:20:2b:be:53:9e:80:23:48:de:d8:
cf:10:f8:3f:95:39:ea:2d:c5:56:35:51:da:80:13:
64:24:8e:18:a7:8a:65:77:8d:7b:db:38:a0:01:4b:
18:43:c3:0b:a8:7f:08:02:cc:af:d6:46:64:07:af:
45:fb:a9:b4:58:2d:49:39:d0:53:62:e6:c6:50:33:
bd:16:dd:6f:4c:89:c5:21:fa:87:fa:27:aa:57:fa:
3d:57:25:fe:b8:ac:e2:23:ed:17:a8:19:32:14:aa:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:10:B4:45:0B:DF:EB:EB:67:DE:14:09:D8:82:7E:86:3B:7A:2D
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:97:c0:96:b1:ef:b3:c3:6f:1f:a4:bf:45:2d:ac:9e:50:86:
a5:c6:ae:cc:c6:45:b3:3b:f9:b6:2b:cd:59:2b:d7:85:1b:19:
76:14:fd:9c:f9:f5:82:81:00:ba:1a:75:df:1a:b6:aa:3d:07:
23:93:d1:8d:97:aa:f9:45:3e:d9:d6:63:47:c4:ee:e5:87:01:
92:48:fe:44:78:22:68:50:1a:26:80:58:2d:df:b6:8b:2a:35:
f5:61:0a:c4:89:df:b9:be:fc:94:c6:41:d2:ae:ef:44:6f:65:
50:5e:b7:83:a5:f8:f1:fb:9f:31:1a:1f:07:92:e7:29:f8:ee:
ae:05:91:91:db:af:8a:8a:9f:8f:fb:37:5a:0a:68:05:1a:c0:
1e:6a:07:bd:fe:70:aa:e0:43:49:63:af:ee:c9:bf:e3:da:41:
76:10:14:78:fa:2c:e9:48:c3:9e:4f:df:5e:ab:98:c8:7e:cf:
58:0b:55:2c:5c:0f:36:02:89:2b:6d:d1:ac:32:28:31:e1:1a:
c7:e4:1e:d5:37:3e:74:e6:25:b6:7d:9e:bf:c4:81:1c:95:66:
2d:72:4f:d1:b5:83:6d:8c:69:12:af:6e:fb:40:20:8f:09:dc:
11:c5:5e:a2:13:f9:4f:84:ec:cf:56:6d:31:40:db:c9:d4:d3:
41:1f:24:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5P0vWPXbPIm1UjHVq7A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy
YjZhM2MwHhcNMjQxMTIzMTIwMDIxWhcNMjQxMTI0MTIwMDIxWjAzMTEwLwYDVQQD
Eyg3ODY5MTBiNDQ1MGJkZmViZWI2N2RlMTQwOWQ4ODI3ZTg2M2I3YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtvV69ERpyHAdEZXQmAumiPX6Ybc
aH03uDb8q6z/4wrQ6Ll/9Nm6v+Pgn0gAz92/UnlpH7FePxDl15VhJfvr8q9qRRiq
/ZRaziyGKYcVU5seV1DMgmqJSmHfBnYRlVZgpgyBdUmF382tQbBiFNiwzkXxw0Pb
Be4M50fAHDKTyV8bHyu9Jroc+rW6TEXS37Rfjmd+42eCRXhRMCArvlOegCNI3tjP
EPg/lTnqLcVWNVHagBNkJI4Yp4pld4172zigAUsYQ8MLqH8IAsyv1kZkB69F+6m0
WC1JOdBTYubGUDO9Ft1vTInFIfqH+ieqV/o9VyX+uKziI+0XqBkyFKo62wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhpELRFC9/r62feFAnYgn6GO3otMB8GA1UdIwQY
MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt
NDI1NmE0NmFmZWVjLzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj
LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopfAlrHv
s8NvH6S/RS2snlCGpcauzMZFszv5tivNWSvXhRsZdhT9nPn1goEAuhp13xq2qj0H
I5PRjZeq+UU+2dZjR8Tu5YcBkkj+RHgiaFAaJoBYLd+2iyo19WEKxInfub78lMZB
0q7vRG9lUF63g6X48fufMRofB5LnKfjurgWRkduvioqfj/s3WgpoBRrAHmoHvf5w
quBDSWOv7sm/49pBdhAUePos6UjDnk/fXquYyH7PWAtVLFwPNgKJK23RrDIoMeEa
x+Qe1Tc+dOYltn2ev8SBHJVmLXJP0bWDbYxpEq9u+0AgjwncEcVeohP5T4Tsz1Zt
MUDbydTTQR8kmg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:05 2024 by rpki-client on console-fra.rpki-client.org