Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: KVWiBIQm2RQ+/RWpIDK0btsbaWFOQC47ADJtdnkxC48=
Subject key identifier: 93:AE:7F:02:13:98:B4:0C:96:3F:DC:81:05:6A:B9:88:D9:87:52:9B
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 01935207379177DE8EC009F39E71C32BCFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 04:00:24 +0000
Manifest this update: Fri 22 Nov 2024 04:00:24 +0000
Manifest next update: Sat 23 Nov 2024 04:00:24 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: tVWLnzQz31ReivGKfpverWuReKZ1KrnEGTD96xRPumA=)
2: UWvkX5bcvTbnLCMaPd17WKECPzk.roa (hash: yQUEq3i9d0XIP6QRsNnRoG6OqENQWGvOOS7clhit4dk=)
3: lxy1nMDqeZzPbZj97iXXujAI0cQ.roa (hash: lI/sI8wwjyLPElcZNtOB27hMw9sYes8FuQBJ8flHlrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:37:91:77:de:8e:c0:09:f3:9e:71:c3:2b:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Nov 22 04:00:24 2024 GMT
Not After : Nov 23 04:00:24 2024 GMT
Subject: CN=93ae7f021398b40c963fdc81056ab988d987529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:71:c7:1f:66:34:eb:e5:99:1f:6d:dc:d0:
e2:da:f5:ec:eb:19:83:b8:d2:65:b6:9c:38:0b:10:
47:05:28:4a:39:94:18:e8:05:a4:64:bc:87:a8:1d:
8a:ed:3b:9c:00:69:ee:00:93:97:ac:61:17:3b:4a:
17:23:7d:f4:7d:cb:08:7d:8c:5e:fc:b8:97:86:92:
d3:e3:84:25:28:4c:db:b0:3f:3a:f5:80:65:b7:7c:
a7:0d:60:be:62:52:cc:eb:85:32:f7:23:c3:5e:a8:
69:e2:4d:93:41:60:5d:99:20:62:1a:74:02:f8:a2:
9e:34:22:58:5c:0f:93:f8:2a:aa:19:aa:b9:2f:48:
1a:75:8b:15:77:0b:ee:6c:92:7b:bc:e4:b3:68:f2:
32:0a:2d:3d:b2:37:80:b7:ee:7b:0f:4f:5b:0e:3e:
f6:f7:e5:9e:4e:07:94:36:96:24:e1:a1:77:28:be:
47:3e:2f:cf:3f:10:3a:7c:83:17:dc:39:3c:67:c7:
a2:e4:e4:b7:45:f5:16:7d:fb:53:32:1f:c0:ae:92:
06:1b:bf:a2:ca:94:55:92:f3:17:da:fd:a7:1a:26:
41:3a:10:9b:78:99:c1:60:db:e3:41:74:9d:1c:c0:
91:bc:03:39:a6:f9:4a:38:a2:9e:48:e7:d7:3c:06:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:7F:02:13:98:B4:0C:96:3F:DC:81:05:6A:B9:88:D9:87:52:9B
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:14:7d:dd:c0:ef:34:bd:9c:b4:bc:cf:09:f3:17:e3:a6:
b5:19:7a:98:33:ee:00:6b:58:d5:07:3e:ff:e6:fe:66:ab:4e:
e4:9d:4e:e5:61:f6:b4:fc:85:75:40:06:0a:e8:27:54:51:76:
91:bd:19:e6:94:59:f3:dc:98:32:95:a8:04:35:ff:78:f9:19:
1d:36:06:76:87:48:5b:df:5d:f5:a3:2d:d3:2b:51:52:90:bc:
3a:42:ee:46:8d:4e:41:d2:63:fc:f5:a5:9c:35:a5:9d:14:a9:
2b:53:e2:0e:57:9c:53:a0:64:5e:f3:ae:5e:c9:77:29:b3:05:
dc:8f:77:4c:0a:d3:b0:9f:a9:1d:ed:0d:ea:73:b5:51:73:00:
15:94:cf:c2:85:00:8c:6a:2f:33:77:d9:92:53:02:c2:f3:ac:
8a:bb:6e:54:06:88:df:ad:0e:2a:ad:97:72:70:45:51:09:9f:
a1:6b:a8:66:86:79:ff:5a:ca:91:2c:b0:38:13:67:63:6b:63:
70:c6:8a:9b:d3:b4:c1:84:bc:70:2d:e0:38:11:d1:39:c5:e6:
72:17:d9:44:56:65:8d:45:ee:09:87:55:17:73:bb:6a:86:a7:
d2:94:aa:70:6b:f6:df:f4:b9:04:3a:89:a4:98:9a:67:d0:2e:
6e:39:45:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSBzeRd96OwAnznnHDK8/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy
NDc4YTUwHhcNMjQxMTIyMDQwMDI0WhcNMjQxMTIzMDQwMDI0WjAzMTEwLwYDVQQD
Eyg5M2FlN2YwMjEzOThiNDBjOTYzZmRjODEwNTZhYjk4OGQ5ODc1MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Nxxx9mNOvlmR9t3NDi2vXs6xmD
uNJltpw4CxBHBShKOZQY6AWkZLyHqB2K7TucAGnuAJOXrGEXO0oXI330fcsIfYxe
/LiXhpLT44QlKEzbsD869YBlt3ynDWC+YlLM64Uy9yPDXqhp4k2TQWBdmSBiGnQC
+KKeNCJYXA+T+CqqGaq5L0gadYsVdwvubJJ7vOSzaPIyCi09sjeAt+57D09bDj72
9+WeTgeUNpYk4aF3KL5HPi/PPxA6fIMX3Dk8Z8ei5OS3RfUWfftTMh/ArpIGG7+i
ypRVkvMX2v2nGiZBOhCbeJnBYNvjQXSdHMCRvAM5pvlKOKKeSOfXPAYMIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOufwITmLQMlj/cgQVquYjZh1KbMB8GA1UdIwQY
MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt
YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj
LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZgUfd3A
7zS9nLS8zwnzF+OmtRl6mDPuAGtY1Qc+/+b+ZqtO5J1O5WH2tPyFdUAGCugnVFF2
kb0Z5pRZ89yYMpWoBDX/ePkZHTYGdodIW99d9aMt0ytRUpC8OkLuRo1OQdJj/PWl
nDWlnRSpK1PiDlecU6BkXvOuXsl3KbMF3I93TArTsJ+pHe0N6nO1UXMAFZTPwoUA
jGovM3fZklMCwvOsirtuVAaI360OKq2XcnBFUQmfoWuoZoZ5/1rKkSywOBNnY2tj
cMaKm9O0wYS8cC3gOBHROcXmchfZRFZljUXuCYdVF3O7aoan0pSqcGv23/S5BDqJ
pJiaZ9AubjlFnA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:11 2024 by rpki-client on console-fra.rpki-client.org