Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: 5tKRuHZB/7sO71936SdfFbhOreFWdNyZpgOGc7gxDFg=
Subject key identifier: 7F:FE:E7:26:47:EA:F7:3C:91:F6:38:6C:F7:71:26:CE:90:51:16:88
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01935878040923F465E93AFA2A0CEFC88338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 0ECC
Signing time: Sat 23 Nov 2024 10:01:20 +0000
Manifest this update: Sat 23 Nov 2024 10:01:20 +0000
Manifest next update: Sun 24 Nov 2024 10:01:20 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: sDKR/mFD+MaQYKyOGgRU7SMJhuNbCLMLp7pWUM1R0Gs=)
2: Qjat3qMRFyVwfROAwxdYU8ulVCU.roa (hash: dEICHLzVcs/aY39snVqHpMeYRlFokk6nCh/MKl7UYSU=)
3: qABfhholBWipFsC2UrNWNQ4pljQ.roa (hash: y7zkCPs9WVMWDbCOtR+MWu9hmzcXzjUQxyntMZPj0oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:04:09:23:f4:65:e9:3a:fa:2a:0c:ef:c8:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Nov 23 10:01:20 2024 GMT
Not After : Nov 24 10:01:20 2024 GMT
Subject: CN=7ffee72647eaf73c91f6386cf77126ce90511688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:0b:a5:d0:41:7f:b4:c4:9b:8c:4c:7e:1d:
9b:59:e5:45:2e:83:7d:8c:db:bd:a9:0e:35:f5:48:
cd:7a:02:8c:c7:0b:2e:eb:01:0c:f5:53:ac:89:9f:
f7:20:f9:a1:7e:d1:c0:86:a8:99:de:bf:06:2f:13:
83:d5:35:62:e7:2b:12:5b:e0:a9:5a:d1:dc:68:f0:
ff:a3:9a:36:4f:ce:07:76:1d:6a:1e:da:a7:bd:52:
79:ea:9c:93:dd:4b:be:8f:58:e3:ed:df:50:38:fb:
4b:30:3b:40:bd:ab:11:80:9c:c3:3f:38:80:f7:c8:
41:2d:46:46:da:63:1f:12:d3:9a:fd:b7:80:25:4c:
c6:9b:d3:bf:e9:e4:85:b3:0e:b6:59:50:77:d2:95:
99:d3:5e:d1:a3:8e:58:44:72:58:a8:53:5d:82:28:
49:8b:71:03:3b:db:2c:68:9d:8c:c0:78:cd:dd:8d:
2e:7f:6d:19:e1:f2:1b:0f:36:33:3e:ca:cd:30:dd:
3e:46:1f:6d:94:e2:69:fb:98:e7:6e:68:91:67:bc:
09:bb:09:6e:5a:27:02:e0:72:15:20:ce:4b:96:1e:
9b:5d:16:42:00:5d:1b:23:66:ab:f4:77:0b:03:10:
2d:5a:83:57:1e:27:de:84:bd:0a:61:bf:48:b3:9a:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:E7:26:47:EA:F7:3C:91:F6:38:6C:F7:71:26:CE:90:51:16:88
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4c:03:04:cd:69:b6:80:4b:3a:76:33:dc:25:0d:7f:0a:90:
91:e2:48:e6:f8:6c:f3:0f:2c:b0:54:94:44:b5:93:e9:15:00:
6d:b9:9c:62:91:75:ec:4a:25:cb:51:e3:c9:38:72:c0:91:7a:
84:bf:89:33:60:55:97:3a:0b:2d:01:c1:f3:ef:8a:1f:27:ff:
6c:1a:be:f1:39:48:63:38:6d:d1:4a:0e:b7:d1:90:64:9b:d5:
f4:cd:cd:ea:68:23:66:22:06:1f:1f:8c:1a:53:a4:6a:72:5e:
87:ea:63:4b:d4:78:09:1e:f5:0d:c8:d7:d3:f1:9e:9f:3e:21:
e6:26:0f:46:8c:86:4f:ce:2e:a8:e5:11:7a:c7:05:f4:48:1e:
e0:4f:af:26:ba:0e:71:30:7f:2b:f0:0b:b9:25:28:a9:95:5d:
5b:3b:7c:5a:7f:bb:f7:f7:19:ee:e4:b2:60:f2:ca:da:75:b7:
a7:fd:8d:6d:26:2b:5d:40:29:46:e0:7b:3b:8c:ab:96:47:c6:
f6:89:34:0e:5a:91:4b:d3:0b:5d:32:2f:61:f6:f9:8b:27:26:
5e:da:6d:a3:0c:70:de:57:ae:98:03:cf:59:7f:03:a7:44:a3:
74:ed:29:0e:f7:c7:2d:cb:bf:d7:78:ac:34:b8:6e:d7:b9:e6:
82:13:4d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeAQJI/Rl6Tr6KgzvyIM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjQxMTIzMTAwMTIwWhcNMjQxMTI0MTAwMTIwWjAzMTEwLwYDVQQD
Eyg3ZmZlZTcyNjQ3ZWFmNzNjOTFmNjM4NmNmNzcxMjZjZTkwNTExNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU4LpdBBf7TEm4xMfh2bWeVFLoN9
jNu9qQ419UjNegKMxwsu6wEM9VOsiZ/3IPmhftHAhqiZ3r8GLxOD1TVi5ysSW+Cp
WtHcaPD/o5o2T84Hdh1qHtqnvVJ56pyT3Uu+j1jj7d9QOPtLMDtAvasRgJzDPziA
98hBLUZG2mMfEtOa/beAJUzGm9O/6eSFsw62WVB30pWZ017Ro45YRHJYqFNdgihJ
i3EDO9ssaJ2MwHjN3Y0uf20Z4fIbDzYzPsrNMN0+Rh9tlOJp+5jnbmiRZ7wJuwlu
WicC4HIVIM5Llh6bXRZCAF0bI2ar9HcLAxAtWoNXHifehL0KYb9Is5ovfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/+5yZH6vc8kfY4bPdxJs6QURaIMB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkwDBM1p
toBLOnYz3CUNfwqQkeJI5vhs8w8ssFSURLWT6RUAbbmcYpF17Eoly1HjyThywJF6
hL+JM2BVlzoLLQHB8++KHyf/bBq+8TlIYzht0UoOt9GQZJvV9M3N6mgjZiIGHx+M
GlOkanJeh+pjS9R4CR71DcjX0/Genz4h5iYPRoyGT84uqOURescF9Ege4E+vJroO
cTB/K/ALuSUoqZVdWzt8Wn+79/cZ7uSyYPLK2nW3p/2NbSYrXUApRuB7O4yrlkfG
9ok0DlqRS9MLXTIvYfb5iycmXtptowxw3leumAPPWX8Dp0SjdO0pDvfHLcu/13is
NLhu17nmghNN4w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:17 2024 by rpki-client on console-fra.rpki-client.org