Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: bpmeQp0lXw9HhrFM87cvPvK/ssdGOIx+Ob4YzZgU+WA=
Subject key identifier: B7:E6:74:C6:F5:35:E0:72:A1:BA:09:2D:3E:1C:76:FF:F8:B6:EB:3A
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019356F69902B1A135A7BBDDDE03A7B48DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0CFB
Signing time: Sat 23 Nov 2024 03:00:21 +0000
Manifest this update: Sat 23 Nov 2024 03:00:21 +0000
Manifest next update: Sun 24 Nov 2024 03:00:21 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: GFMXg0ycZaZiHnalzocylmHJzzOCXojf2PsQsiAcEEc=)
2: u0647rlA-z5ZkyJbI0-Kiu-mKeE.roa (hash: 70EmcBHPnh7PT9+VsDD3JFOItw166IFVDkUhSB3mfMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:99:02:b1:a1:35:a7:bb:dd:de:03:a7:b4:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Nov 23 03:00:21 2024 GMT
Not After : Nov 24 03:00:21 2024 GMT
Subject: CN=b7e674c6f535e072a1ba092d3e1c76fff8b6eb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:ef:a1:29:ad:2a:54:f0:44:a4:49:f6:57:
17:59:1e:06:cc:4c:86:04:88:ca:b8:49:ae:5a:5a:
6e:7a:cf:77:b3:5a:f8:d6:4c:7c:c2:57:ba:50:bd:
f8:b1:46:e4:51:5b:db:d6:53:dd:a0:17:06:69:b9:
c8:df:f8:3f:f2:8c:47:5e:af:c2:d4:41:61:a8:b8:
0e:b3:19:cb:01:32:ce:1f:fc:c4:15:95:bf:67:4b:
f4:17:a5:e8:0b:68:83:c6:bf:4d:42:af:eb:a0:2f:
ec:4e:97:90:51:c3:b1:f2:93:12:62:a8:de:62:e3:
91:7e:2f:fd:44:fe:c4:5a:f4:45:36:4a:21:d5:6c:
96:d0:27:51:63:21:63:81:ea:27:35:ac:87:5f:47:
6d:07:7c:e5:a1:ae:99:dd:df:7b:a5:ac:d8:44:1f:
f1:51:19:a8:6c:e4:8d:83:d7:c0:ae:66:7d:0b:68:
7d:8f:52:e2:c8:97:32:e0:95:15:57:ed:c5:2e:8f:
95:71:93:b1:8f:2d:f8:cc:1a:74:36:39:6c:ba:20:
95:6a:56:93:cb:ea:f4:ee:ca:bd:52:10:17:ef:3d:
0e:16:e7:81:9e:c3:ef:8e:c8:32:7d:7c:a1:da:a8:
99:57:ea:59:c0:04:cd:b0:96:99:57:8b:5a:f2:6e:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:74:C6:F5:35:E0:72:A1:BA:09:2D:3E:1C:76:FF:F8:B6:EB:3A
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:14:61:8a:eb:27:9d:6f:0e:04:68:b1:f7:bc:a5:99:04:94:
9f:bf:7a:2a:d3:6e:21:3a:dd:6c:22:d3:00:a9:94:1d:f5:67:
72:38:c5:9a:74:9d:68:49:f9:3d:3a:09:35:ac:c6:18:48:3e:
ae:33:92:f0:3a:93:de:9e:93:b3:39:e9:e2:6e:67:35:b5:12:
3e:e0:68:aa:9a:24:6f:2b:a7:b2:7d:2d:39:58:bf:41:44:aa:
2b:a0:10:81:a7:0d:26:32:a8:36:a1:bc:61:57:a4:aa:55:3f:
22:e0:9e:e9:a3:3b:f9:98:ff:b1:7f:71:cd:8b:77:02:08:02:
8a:55:c5:a9:c9:4d:27:38:e1:79:72:09:58:9e:8f:e9:78:1d:
be:21:5e:fb:cf:7e:65:7e:3a:06:50:e5:49:4c:43:6c:75:0c:
d0:15:f4:03:c4:08:9d:27:e5:20:af:0c:65:ed:a5:9a:7e:a2:
69:83:c9:38:73:07:74:a6:f7:4d:75:bb:bf:9c:d9:91:9b:6b:
1c:86:d7:e3:9a:d1:e1:b5:a0:2b:ec:04:84:9f:01:bf:8e:60:
b5:b3:b8:fa:6c:75:84:6b:8a:5b:f4:8b:bc:a9:5a:7d:3e:04:
44:69:2d:5c:7a:3f:33:4f:62:a5:12:8b:f3:78:b4:15:d2:38:
ec:15:3a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9pkCsaE1p7vd3gOntI2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjQxMTIzMDMwMDIxWhcNMjQxMTI0MDMwMDIxWjAzMTEwLwYDVQQD
EyhiN2U2NzRjNmY1MzVlMDcyYTFiYTA5MmQzZTFjNzZmZmY4YjZlYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsobvoSmtKlTwRKRJ9lcXWR4GzEyG
BIjKuEmuWlpues93s1r41kx8wle6UL34sUbkUVvb1lPdoBcGabnI3/g/8oxHXq/C
1EFhqLgOsxnLATLOH/zEFZW/Z0v0F6XoC2iDxr9NQq/roC/sTpeQUcOx8pMSYqje
YuORfi/9RP7EWvRFNkoh1WyW0CdRYyFjgeonNayHX0dtB3zloa6Z3d97pazYRB/x
URmobOSNg9fArmZ9C2h9j1LiyJcy4JUVV+3FLo+VcZOxjy34zBp0NjlsuiCValaT
y+r07sq9UhAX7z0OFueBnsPvjsgyfXyh2qiZV+pZwATNsJaZV4ta8m7W8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfmdMb1NeByoboJLT4cdv/4tus6MB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxRhiusn
nW8OBGix97ylmQSUn796KtNuITrdbCLTAKmUHfVncjjFmnSdaEn5PToJNazGGEg+
rjOS8DqT3p6Tsznp4m5nNbUSPuBoqpokbyunsn0tOVi/QUSqK6AQgacNJjKoNqG8
YVekqlU/IuCe6aM7+Zj/sX9xzYt3AggCilXFqclNJzjheXIJWJ6P6XgdviFe+89+
ZX46BlDlSUxDbHUM0BX0A8QInSflIK8MZe2lmn6iaYPJOHMHdKb3TXW7v5zZkZtr
HIbX45rR4bWgK+wEhJ8Bv45gtbO4+mx1hGuKW/SLvKlafT4ERGktXHo/M09ipRKL
83i0FdI47BU6NQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:28 2024 by rpki-client on console-ams.rpki-client.org