Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: 9NgvrE7w+tAsuX5/dZqvrlKWHDIjS0Z7H5+49Mi4WDo=
Subject key identifier: D9:B6:81:9C:C2:AB:11:99:46:75:0F:39:E9:CD:DE:E3:FC:F2:5C:4B
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019357D28688E0776EB63AE71B9381813ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 07:00:34 +0000
Manifest this update: Sat 23 Nov 2024 07:00:34 +0000
Manifest next update: Sun 24 Nov 2024 07:00:34 +0000
Files and hashes: 1: 8tzCNc1DPgPup5NWGeG9d0bxMQo.roa (hash: g5qpLwnqywDmZ7JiVEIp2RX1doRHZwOR9V6IfiqGrXE=)
2: Ew_Jby283-0Y3MAswW4FNvp9YVs.roa (hash: LyWgg5ScPnRFXlS/rxVzk54VnLJ/LDjizBFL0CMlLd8=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: hhMIKn184y7Qca6RzaaY0nYPqYVIW3/TvuPw7+5/K6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:86:88:e0:77:6e:b6:3a:e7:1b:93:81:81:3a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Nov 23 07:00:34 2024 GMT
Not After : Nov 24 07:00:34 2024 GMT
Subject: CN=d9b6819cc2ab119946750f39e9cddee3fcf25c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:f2:df:46:b1:26:d0:90:b2:4b:a9:08:80:
e1:4b:6c:31:c2:89:a6:2c:05:f9:ff:82:b1:a2:ba:
a9:7d:24:e7:fa:06:c0:66:53:89:2a:6b:25:1f:76:
63:92:73:df:fc:17:86:88:01:27:ad:4c:0e:d4:83:
34:98:ad:07:25:24:64:f1:0f:89:42:90:d4:3f:b5:
10:9f:78:3b:ff:d3:84:4a:ef:cd:19:1f:e3:3a:9e:
79:8e:a3:ba:db:0d:ed:67:89:42:d4:6b:35:62:29:
e2:04:a6:fa:4b:4e:a7:0b:aa:e4:1b:f0:5a:36:f1:
44:8b:6a:e6:ed:9b:48:83:0e:0b:51:6b:02:28:b9:
38:4a:d1:b8:a8:6c:1e:9a:6d:39:59:0d:e9:a9:18:
e3:e3:21:d2:de:2b:cc:43:3c:13:49:b9:70:e5:46:
a0:16:b8:d6:3f:79:d0:f7:78:34:66:3f:08:ce:5e:
b5:0e:4d:3e:83:ae:7b:4b:ea:02:d7:0f:38:69:0b:
01:69:23:c9:c1:c0:48:14:7f:5b:58:34:7d:22:f7:
00:d5:06:44:d3:c1:65:e4:6c:79:3f:6b:24:6d:c2:
92:fd:6f:3b:2d:bb:1d:56:94:24:89:0d:99:91:d9:
36:45:5c:49:1c:2d:5f:79:86:39:ca:4a:75:8c:d4:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:81:9C:C2:AB:11:99:46:75:0F:39:E9:CD:DE:E3:FC:F2:5C:4B
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:af:e0:8f:a5:41:a1:08:0f:04:40:a7:dd:e4:6d:33:ab:
96:76:70:0c:7f:bc:47:bb:66:2e:56:82:c7:3a:52:63:f2:22:
a4:24:a3:09:b3:1c:32:36:df:c0:94:42:e2:e2:4f:e4:28:98:
ca:b9:48:f1:5e:9e:66:df:47:83:c7:c3:17:9f:57:64:9b:00:
cf:69:05:7a:25:6e:8c:9e:6d:6d:80:52:28:2f:2e:2b:02:35:
bb:a4:77:44:0d:78:06:ae:4a:fb:db:d4:36:37:f8:0f:03:89:
87:4b:29:21:5a:27:72:28:46:4c:22:1d:f3:78:77:a9:e2:07:
10:f4:20:03:d4:14:40:a7:81:73:30:5e:8f:c6:92:05:a1:1b:
c1:66:af:12:27:c2:88:70:f0:61:81:9b:3a:53:87:e6:4c:d1:
33:17:b4:45:f9:88:26:0f:97:59:9e:0c:bc:53:9f:84:ce:1c:
a9:35:e9:f6:0c:ed:e9:fa:95:79:e6:3d:88:bd:5e:38:a9:53:
67:ee:65:9e:ac:3a:43:45:7c:d5:a9:44:e7:53:ec:46:c4:1c:
6e:ce:c3:72:04:f2:1c:1b:74:3f:98:0a:3d:39:92:ea:4f:98:
f6:a7:1c:72:75:03:e7:8d:18:a1:bc:2d:2b:6e:96:1e:a9:f8:
f7:15:1a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0oaI4HdutjrnG5OBgTq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjQxMTIzMDcwMDM0WhcNMjQxMTI0MDcwMDM0WjAzMTEwLwYDVQQD
EyhkOWI2ODE5Y2MyYWIxMTk5NDY3NTBmMzllOWNkZGVlM2ZjZjI1YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxHy30axJtCQskupCIDhS2wxwomm
LAX5/4KxorqpfSTn+gbAZlOJKmslH3ZjknPf/BeGiAEnrUwO1IM0mK0HJSRk8Q+J
QpDUP7UQn3g7/9OESu/NGR/jOp55jqO62w3tZ4lC1Gs1YiniBKb6S06nC6rkG/Ba
NvFEi2rm7ZtIgw4LUWsCKLk4StG4qGwemm05WQ3pqRjj4yHS3ivMQzwTSblw5Uag
FrjWP3nQ93g0Zj8Izl61Dk0+g657S+oC1w84aQsBaSPJwcBIFH9bWDR9IvcA1QZE
08Fl5Gx5P2skbcKS/W87LbsdVpQkiQ2Zkdk2RVxJHC1feYY5ykp1jNQQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm2gZzCqxGZRnUPOenN3uP88lxLMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV62v4I+l
QaEIDwRAp93kbTOrlnZwDH+8R7tmLlaCxzpSY/IipCSjCbMcMjbfwJRC4uJP5CiY
yrlI8V6eZt9Hg8fDF59XZJsAz2kFeiVujJ5tbYBSKC8uKwI1u6R3RA14Bq5K+9vU
Njf4DwOJh0spIVoncihGTCId83h3qeIHEPQgA9QUQKeBczBej8aSBaEbwWavEifC
iHDwYYGbOlOH5kzRMxe0RfmIJg+XWZ4MvFOfhM4cqTXp9gzt6fqVeeY9iL1eOKlT
Z+5lnqw6Q0V81alE51PsRsQcbs7DcgTyHBt0P5gKPTmS6k+Y9qcccnUD540Yobwt
K26WHqn49xUakw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:25 2024 by rpki-client on console-ams.rpki-client.org