Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: foFhO6WONPgdUunTiL252vFncf5LXXGllQla5DuXZbk=
Subject key identifier: E4:6E:9E:28:22:34:1F:A7:3C:41:7B:FB:88:38:61:5F:5B:B0:A4:50
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01935877D316C84AB2703C1191D98D49DA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1097
Signing time: Sat 23 Nov 2024 10:01:08 +0000
Manifest this update: Sat 23 Nov 2024 10:01:08 +0000
Manifest next update: Sun 24 Nov 2024 10:01:08 +0000
Files and hashes: 1: 1Pmg7wgY_sN2ZHgU6J2CH7j6iEU.roa (hash: JIQYaizKWVuIca9jQ5e8kjuE7Gv6Z8tH6n5fTxVEY9M=)
2: G4JjP0CH5xMD3hqRvcw1WQttWl8.roa (hash: x+R6hSRmIyD8IRK6VaBUvclctd3gTgin8GgdpKDMvdI=)
3: Rf16zVfG6L9cJkUA3ArMl0-GItg.roa (hash: Un13kQ4zN6b8bLiuzXK+8p39r2WWnuSJ2y9pGUe8sMg=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: XCt4J3tAhgViRHe0GpGLR3OPIuFMT2zeobiez7//T0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:d3:16:c8:4a:b2:70:3c:11:91:d9:8d:49:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Nov 23 10:01:08 2024 GMT
Not After : Nov 24 10:01:08 2024 GMT
Subject: CN=e46e9e2822341fa73c417bfb8838615f5bb0a450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:74:f4:8b:fa:1c:9d:6d:dc:24:e4:af:42:
af:9d:c1:4a:5f:87:f0:10:ee:c7:3a:b5:24:db:7b:
d4:77:9b:55:29:a4:11:7f:e6:ec:9c:40:66:b6:85:
37:4e:88:33:71:8e:8f:d4:ed:8a:27:cd:80:fe:c5:
a4:61:fc:89:4f:b6:8c:36:82:8a:ea:67:2f:02:78:
24:23:1b:60:65:38:a7:f6:21:22:f1:ef:10:78:3a:
20:ea:fb:a5:f8:ee:65:23:9c:8e:d0:81:ec:1f:7c:
64:22:95:22:55:dd:f3:89:0f:f0:14:98:57:03:a8:
07:02:44:85:85:4b:84:47:04:b7:48:f4:83:da:7b:
13:56:9b:f7:92:7a:fd:69:d2:81:90:2f:52:70:65:
21:06:06:f4:57:a5:4e:74:95:99:0b:c7:35:5e:eb:
11:d2:19:c9:0f:d1:64:b3:a8:71:90:60:ba:c9:ff:
ff:18:47:f4:02:c4:08:4a:f4:6b:53:13:67:50:fa:
48:14:7b:97:f3:08:7f:a5:fb:62:03:89:3c:3e:2a:
d4:b3:ec:75:f5:ec:cb:f2:9e:33:c9:f4:d0:26:b1:
cd:bf:05:4c:97:32:9f:cc:e4:f7:66:95:b9:92:ba:
26:ee:ff:46:d4:71:43:ca:6e:71:fc:cc:fa:f7:41:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6E:9E:28:22:34:1F:A7:3C:41:7B:FB:88:38:61:5F:5B:B0:A4:50
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6d:ff:5a:c6:6f:8e:92:e9:9f:7b:48:4d:22:c2:ce:9a:
0b:34:e4:ef:d7:05:ad:6f:3c:c4:6e:91:f5:a4:be:8f:03:b6:
87:51:26:d4:43:79:8b:09:ee:5b:3b:d4:18:81:b4:28:dc:3f:
10:d3:97:ab:d7:1d:a1:9f:03:b0:f5:ed:21:c3:88:70:2b:62:
eb:fc:06:ed:bc:e8:19:07:2f:18:38:ba:5b:d3:9f:cf:59:ab:
d8:00:14:c8:e0:01:51:91:0c:d3:90:b6:f2:7f:d2:cf:f9:20:
74:f1:18:ea:03:ba:f6:d5:e5:e8:d8:56:d8:d1:1b:43:e6:d8:
da:5c:4c:0c:2e:d6:f8:7f:92:ad:2e:5c:71:b7:a1:73:eb:bd:
b5:5a:ab:af:1f:13:39:e2:c4:dd:5f:65:ce:5b:60:02:f8:c7:
d2:41:69:ba:18:b1:c6:93:a9:84:68:77:dd:53:f7:58:e6:75:
83:1c:d5:ca:16:a3:1d:3f:42:68:3f:97:d7:f8:17:14:05:8d:
dd:e4:64:7e:58:6d:d1:d6:1d:de:50:59:9f:00:35:29:0f:97:
7d:75:94:05:2d:7f:a2:44:92:87:75:bf:73:06:85:26:a3:8e:
2b:b0:6d:4f:f4:5d:36:5d:ba:08:b5:f8:a8:72:41:76:2f:d6:
af:55:8c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd9MWyEqycDwRkdmNSdqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx
Njk1MDYwHhcNMjQxMTIzMTAwMTA4WhcNMjQxMTI0MTAwMTA4WjAzMTEwLwYDVQQD
EyhlNDZlOWUyODIyMzQxZmE3M2M0MTdiZmI4ODM4NjE1ZjViYjBhNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBV09Iv6HJ1t3CTkr0KvncFKX4fw
EO7HOrUk23vUd5tVKaQRf+bsnEBmtoU3TogzcY6P1O2KJ82A/sWkYfyJT7aMNoKK
6mcvAngkIxtgZTin9iEi8e8QeDog6vul+O5lI5yO0IHsH3xkIpUiVd3ziQ/wFJhX
A6gHAkSFhUuERwS3SPSD2nsTVpv3knr9adKBkC9ScGUhBgb0V6VOdJWZC8c1XusR
0hnJD9Fks6hxkGC6yf//GEf0AsQISvRrUxNnUPpIFHuX8wh/pftiA4k8PirUs+x1
9ezL8p4zyfTQJrHNvwVMlzKfzOT3ZpW5krom7v9G1HFDym5x/Mz690E6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORunigiNB+nPEF7+4g4YV9bsKRQMB8GA1UdIwQY
MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct
ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx
LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj5t/1rG
b46S6Z97SE0iws6aCzTk79cFrW88xG6R9aS+jwO2h1Em1EN5iwnuWzvUGIG0KNw/
ENOXq9cdoZ8DsPXtIcOIcCti6/wG7bzoGQcvGDi6W9Ofz1mr2AAUyOABUZEM05C2
8n/Sz/kgdPEY6gO69tXl6NhW2NEbQ+bY2lxMDC7W+H+SrS5ccbehc+u9tVqrrx8T
OeLE3V9lzltgAvjH0kFpuhixxpOphGh33VP3WOZ1gxzVyhajHT9CaD+X1/gXFAWN
3eRkflht0dYd3lBZnwA1KQ+XfXWUBS1/okSSh3W/cwaFJqOOK7BtT/RdNl26CLX4
qHJBdi/Wr1WMdA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:23 2024 by rpki-client on console-fra.rpki-client.org