Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: J41BpADfS0g87eS2mzlP0jR5IaS/gz2SkWgSdJlcPN4=
Subject key identifier: 68:FF:78:99:D1:2A:9A:82:9D:C5:4E:D6:BF:57:03:52:27:E5:43:82
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0193549AA2D1B372F2F03F2413641463AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 07EF
Signing time: Fri 22 Nov 2024 16:00:40 +0000
Manifest this update: Fri 22 Nov 2024 16:00:40 +0000
Manifest next update: Sat 23 Nov 2024 16:00:40 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: L08+pKuPI1QURoUmN6/pM4udhYZbOht1qChnFPyKltk=)
2: Vzy-91u750q7yijQJt7IRUrBQOI.roa (hash: jnw7fotgfP1OhoPeDEauhKBkItBTv9uTphEqgI0GPDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:a2:d1:b3:72:f2:f0:3f:24:13:64:14:63:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Nov 22 16:00:40 2024 GMT
Not After : Nov 23 16:00:40 2024 GMT
Subject: CN=68ff7899d12a9a829dc54ed6bf57035227e54382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:42:b1:80:1c:e4:ff:96:7c:a3:aa:24:69:
b1:ed:e0:0d:62:a3:7b:63:65:c2:0a:72:cd:e7:7e:
85:12:86:75:cb:bf:9d:9f:19:20:59:95:60:ac:4b:
7d:4c:55:fe:84:8f:2a:a5:62:53:ea:e3:c8:da:1b:
f6:d7:3e:1e:9e:36:10:f9:0c:dd:60:67:e3:f8:c1:
81:46:8f:14:bf:b6:08:b1:5a:53:eb:cf:5a:4f:dc:
e4:6c:42:06:2c:fe:f6:d4:ac:56:c2:cb:aa:f6:39:
db:dd:28:2b:89:65:e6:5e:4b:98:1c:f9:10:25:e3:
74:1c:dc:53:df:bd:df:c6:0c:80:77:72:a3:22:68:
27:93:2d:46:bb:f8:15:6b:e8:a6:a8:76:a1:55:84:
b1:cd:6d:8f:19:6a:9b:90:d1:fb:bf:c0:e3:12:fe:
80:a5:0c:4b:4d:ea:e6:e6:97:85:11:31:f1:d7:27:
65:83:77:ee:53:fd:f8:ef:7a:e9:fb:90:98:9c:63:
ed:21:61:9e:05:e2:69:ec:cf:4f:72:88:a8:b6:62:
f9:9c:c4:7e:8c:31:18:ae:7a:9b:50:92:ff:be:30:
87:8c:c2:be:8e:60:e9:92:22:6c:ed:4b:1f:ed:3c:
e2:db:38:1d:ea:81:6b:58:7b:77:e8:dc:95:b1:f8:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:78:99:D1:2A:9A:82:9D:C5:4E:D6:BF:57:03:52:27:E5:43:82
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:fd:df:42:9f:66:a8:d0:37:c7:b5:51:56:9b:60:5d:9e:
66:a1:56:51:ae:59:41:57:c2:6c:ee:2c:d7:fc:6e:15:19:19:
4f:3a:e7:aa:e7:0b:34:22:bc:d3:c5:ab:66:3c:63:a4:88:78:
84:49:00:e7:7f:a0:90:7e:70:a9:c5:47:f3:c9:32:97:18:8b:
ba:e9:09:6b:c7:c1:f6:5a:ce:91:bd:50:98:55:0d:e8:81:ed:
86:dc:d4:18:ac:81:c4:66:48:ea:14:8f:1b:ec:f3:44:37:9b:
0a:97:9c:2b:be:fd:a5:18:56:dd:c7:1c:d4:cf:bb:c2:91:50:
98:27:af:a8:58:ce:1e:cb:63:b5:b5:da:a8:39:f2:69:e4:a6:
d3:b2:ad:d3:07:23:c0:5f:63:57:56:21:da:b4:a2:11:94:6d:
6b:0d:af:8b:15:07:bb:4c:38:96:a4:62:97:ab:a3:d7:ed:23:
5f:af:41:15:b4:d7:86:97:44:75:7a:9c:d4:de:5e:ae:a4:15:
5d:61:59:80:08:f0:f1:50:6e:77:1c:12:8b:bc:76:13:36:71:
9b:82:3e:ab:16:eb:2a:a6:54:0f:f5:2a:2b:e6:1c:63:02:6f:
04:d6:ec:25:79:00:8e:41:18:21:4f:c5:6b:03:bb:dd:b5:c3:
0e:fd:04:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmqLRs3Ly8D8kE2QUY6uVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz
MDBkNmIwHhcNMjQxMTIyMTYwMDQwWhcNMjQxMTIzMTYwMDQwWjAzMTEwLwYDVQQD
Eyg2OGZmNzg5OWQxMmE5YTgyOWRjNTRlZDZiZjU3MDM1MjI3ZTU0MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OdCsYAc5P+WfKOqJGmx7eANYqN7
Y2XCCnLN536FEoZ1y7+dnxkgWZVgrEt9TFX+hI8qpWJT6uPI2hv21z4enjYQ+Qzd
YGfj+MGBRo8Uv7YIsVpT689aT9zkbEIGLP721KxWwsuq9jnb3SgriWXmXkuYHPkQ
JeN0HNxT373fxgyAd3KjImgnky1Gu/gVa+imqHahVYSxzW2PGWqbkNH7v8DjEv6A
pQxLTerm5peFETHx1ydlg3fuU/3473rp+5CYnGPtIWGeBeJp7M9PcoiotmL5nMR+
jDEYrnqbUJL/vjCHjMK+jmDpkiJs7Usf7Tzi2zgd6oFrWHt36NyVsfiFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj/eJnRKpqCncVO1r9XA1In5UOCMB8GA1UdIwQY
MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt
ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0
LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCn930Kf
ZqjQN8e1UVabYF2eZqFWUa5ZQVfCbO4s1/xuFRkZTzrnqucLNCK808WrZjxjpIh4
hEkA53+gkH5wqcVH88kylxiLuukJa8fB9lrOkb1QmFUN6IHthtzUGKyBxGZI6hSP
G+zzRDebCpecK779pRhW3ccc1M+7wpFQmCevqFjOHstjtbXaqDnyaeSm07Kt0wcj
wF9jV1Yh2rSiEZRtaw2vixUHu0w4lqRil6uj1+0jX69BFbTXhpdEdXqc1N5erqQV
XWFZgAjw8VBudxwSi7x2EzZxm4I+qxbrKqZUD/UqK+YcYwJvBNbsJXkAjkEYIU/F
awO73bXDDv0E1w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:29 2024 by rpki-client on console-fra.rpki-client.org