Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier: Vqc/q4BpAj5zvBZktXc0Q7d2gKv8lkgjZQEAG4nW4GY=
Subject key identifier: B9:D7:62:F4:E6:1C:55:A4:A6:5B:6B:52:BF:CB:94:37:E3:25:10:85
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0193568A3530E7D5F8AB7C9CD5ABF3244C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:01:58 +0000
Manifest this update: Sat 23 Nov 2024 01:01:58 +0000
Manifest next update: Sun 24 Nov 2024 01:01:58 +0000
Files and hashes: 1: 87cO3EcuSh6qHZul3cQs9sqFKDM.roa (hash: tRCWmsHFyebTe975Ax980RtDqATwPUzxGt9rQ+VkANo=)
2: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: Y7qMzYLdSBjsu3eVnhQTLxx2lX2rFDGokc8QAPY5jdA=)
3: kkp3rnfpI5tiwhug2G7B4N2KPAw.roa (hash: LTXjMrq/XnoEjFG9BXM0BLUt+mssSOXU/IW/Nz3Guv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:35:30:e7:d5:f8:ab:7c:9c:d5:ab:f3:24:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Nov 23 01:01:58 2024 GMT
Not After : Nov 24 01:01:58 2024 GMT
Subject: CN=b9d762f4e61c55a4a65b6b52bfcb9437e3251085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:55:1f:48:38:c5:a9:6d:2e:75:55:db:c9:
8c:32:f3:b1:ee:f0:49:c0:36:a9:b6:58:1e:00:3e:
61:48:5b:c6:e5:2f:45:ce:10:56:c1:84:5b:3b:f0:
37:87:f7:4c:6e:47:56:f7:53:a2:95:16:e0:52:4f:
c5:a1:26:5a:c0:ea:b0:ed:98:16:f6:40:fe:dc:4b:
d5:58:cd:4e:b1:6c:01:31:fb:11:57:90:5f:ca:8d:
89:70:7c:06:c5:2d:42:44:bc:3e:01:9b:eb:fe:16:
c5:48:80:fe:5b:57:04:20:41:18:30:10:f9:75:87:
f9:31:2c:06:17:5b:de:7b:28:0d:88:c6:7c:17:0f:
5a:60:fa:fc:8f:8f:96:d8:ea:88:0f:b6:90:a4:98:
d7:c3:08:8d:49:bf:7e:db:56:82:79:8c:ee:ec:ab:
be:fd:8a:00:0e:c1:16:23:5f:af:3e:60:c3:12:3e:
31:b5:57:12:91:5e:14:aa:5d:60:8e:32:55:69:3a:
79:21:b7:25:2a:0b:68:5a:17:c9:48:3d:d9:76:96:
32:ed:97:42:02:d1:aa:05:66:e9:55:ee:7b:a4:2e:
81:32:a0:d6:d9:a1:ce:86:37:41:b1:22:26:2e:0d:
8d:6c:2c:61:67:51:9e:e6:6f:b5:f3:fe:f9:b9:c8:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:62:F4:E6:1C:55:A4:A6:5B:6B:52:BF:CB:94:37:E3:25:10:85
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:22:b4:49:63:bb:ed:7d:98:a7:7b:24:46:b1:4e:a1:7a:5d:
53:42:94:b3:be:c9:fd:c0:77:d2:dc:11:83:c7:ae:1c:c8:36:
81:84:6f:f2:07:09:a8:83:79:b3:02:73:31:7d:8d:8b:46:26:
be:10:df:58:f4:33:30:43:ff:57:0f:b7:51:4d:fb:92:96:72:
a0:bd:b6:5d:92:fe:15:6a:85:91:58:b2:d6:dc:af:0b:fd:c4:
25:59:20:bd:0e:52:36:69:cb:bb:80:76:3c:e1:3f:ae:ac:31:
36:b5:b1:51:36:96:ce:15:05:56:cc:7c:52:55:48:48:ae:85:
e3:f0:60:f2:5c:dc:29:36:51:56:f2:66:91:4b:69:58:74:91:
46:d4:a5:82:db:d8:ed:59:46:fd:50:70:43:88:19:e9:84:19:
8b:4d:de:b5:72:69:31:ad:79:84:d2:c2:be:4e:51:77:f9:ed:
a6:87:53:bd:9c:1b:22:08:52:52:f6:98:72:26:88:c6:fc:a4:
85:be:52:00:a8:92:a3:8d:5f:b5:db:7d:bd:88:6d:c4:03:a9:
df:38:ee:e0:22:76:16:dc:78:24:81:4e:9d:53:58:ae:51:8e:
a9:48:0b:4b:50:99:12:97:80:d1:ad:2e:d7:4c:68:4f:89:7f:
18:71:db:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWijUw59X4q3yc1avzJEwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjQxMTIzMDEwMTU4WhcNMjQxMTI0MDEwMTU4WjAzMTEwLwYDVQQD
EyhiOWQ3NjJmNGU2MWM1NWE0YTY1YjZiNTJiZmNiOTQzN2UzMjUxMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6tVH0g4xaltLnVV28mMMvOx7vBJ
wDaptlgeAD5hSFvG5S9FzhBWwYRbO/A3h/dMbkdW91OilRbgUk/FoSZawOqw7ZgW
9kD+3EvVWM1OsWwBMfsRV5Bfyo2JcHwGxS1CRLw+AZvr/hbFSID+W1cEIEEYMBD5
dYf5MSwGF1veeygNiMZ8Fw9aYPr8j4+W2OqID7aQpJjXwwiNSb9+21aCeYzu7Ku+
/YoADsEWI1+vPmDDEj4xtVcSkV4Uql1gjjJVaTp5IbclKgtoWhfJSD3ZdpYy7ZdC
AtGqBWbpVe57pC6BMqDW2aHOhjdBsSImLg2NbCxhZ1Ge5m+18/75uciF0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnXYvTmHFWkpltrUr/LlDfjJRCFMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyK0SWO7
7X2Yp3skRrFOoXpdU0KUs77J/cB30twRg8euHMg2gYRv8gcJqIN5swJzMX2Ni0Ym
vhDfWPQzMEP/Vw+3UU37kpZyoL22XZL+FWqFkViy1tyvC/3EJVkgvQ5SNmnLu4B2
POE/rqwxNrWxUTaWzhUFVsx8UlVISK6F4/Bg8lzcKTZRVvJmkUtpWHSRRtSlgtvY
7VlG/VBwQ4gZ6YQZi03etXJpMa15hNLCvk5Rd/ntpodTvZwbIghSUvaYciaIxvyk
hb5SAKiSo41ftdt9vYhtxAOp3zju4CJ2Ftx4JIFOnVNYrlGOqUgLS1CZEpeA0a0u
10xoT4l/GHHbtg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:02 2024 by rpki-client on console-ams.rpki-client.org