Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: e3kmr1bK2CxQ6ZT00uYGSr5fDCIW4Zgpq3Mei3cP/2w=
Subject key identifier: 09:4F:FB:92:26:27:D1:94:35:09:40:73:BE:10:57:BB:B3:A7:5C:D2
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019357D255C4DB2657AAFD6DB4288CDB280E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:00:22 +0000
Manifest this update: Sat 23 Nov 2024 07:00:22 +0000
Manifest next update: Sun 24 Nov 2024 07:00:22 +0000
Files and hashes: 1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: p4WOc3RQWFyh2/oBSI9ap6KhYp6/OQAR9uYXE4pgn+Y=)
2: oM7NgPxB6Z4EU6UvUuGMqhpflQQ.roa (hash: 6EIrhUrFfG7syRzrvs52yDHcsB6kuoeby7Sl19+meZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:55:c4:db:26:57:aa:fd:6d:b4:28:8c:db:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Nov 23 07:00:22 2024 GMT
Not After : Nov 24 07:00:22 2024 GMT
Subject: CN=094ffb922627d19435094073be1057bbb3a75cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:b2:ca:43:23:9b:3e:89:c6:4a:63:86:85:
9f:3b:20:6d:2f:db:fe:31:86:6c:3e:e3:61:77:2a:
fe:71:91:15:79:20:d7:e9:22:d3:14:06:94:6e:56:
aa:c5:27:7e:53:81:21:f0:01:45:33:4d:7f:6f:0f:
7f:12:b6:19:f7:4d:2d:02:04:ec:d2:e8:99:6f:f5:
0f:ab:74:9e:8c:b6:13:70:15:66:c0:a3:68:f0:16:
9f:51:f9:90:d5:8f:55:4c:49:20:0c:95:b8:ea:30:
88:4a:a5:63:98:5e:19:4f:52:10:f0:aa:15:c4:2a:
fe:9f:f3:95:85:38:fe:61:be:4c:c6:46:ee:01:e3:
b8:48:36:b4:9f:56:e4:ad:57:74:92:08:bf:a7:22:
31:ee:51:2b:3c:8b:82:6d:22:e4:f0:3e:8e:d9:5c:
07:58:2b:1d:8b:60:0d:2a:c2:28:dd:06:75:0e:f8:
00:7c:a2:57:f2:ff:0a:e4:41:82:e7:52:d7:cf:44:
0d:28:16:f6:f5:a6:46:7a:14:f3:29:94:b4:e5:65:
07:f0:59:cc:aa:e9:9c:a0:c5:c1:f9:81:51:c9:46:
a3:a0:18:2e:2a:ee:c3:3b:fa:61:ea:0d:90:a0:84:
7f:9d:56:b7:e8:83:ad:c4:f3:9a:c4:5c:db:6a:3a:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:FB:92:26:27:D1:94:35:09:40:73:BE:10:57:BB:B3:A7:5C:D2
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a3:08:b8:57:58:e6:29:21:22:2f:01:02:27:90:86:a4:a5:
e7:9a:1f:c9:e6:cc:9c:0c:e2:b6:00:33:16:47:06:49:61:03:
c0:99:0d:1c:7a:41:32:16:9f:a0:ee:ba:21:cf:7b:86:08:33:
2b:65:98:6c:02:58:a5:42:30:a6:17:bf:7d:d3:db:e7:0f:65:
37:04:2c:09:0a:de:cf:f5:9b:68:62:a0:ca:7a:8d:44:c6:52:
89:5d:00:7a:a9:44:98:48:b9:c2:9f:35:dc:6b:42:a9:17:a9:
e3:c7:32:99:d1:e3:ef:02:93:81:4f:41:a0:e5:e5:9a:cb:80:
2a:56:ff:b4:64:cd:6a:6e:d9:9a:0b:61:e0:0d:4b:1d:af:3a:
f6:bc:7e:f7:78:a0:4e:b8:c1:10:32:eb:93:ff:d9:fb:c7:2f:
19:f5:d6:f1:cc:15:4b:99:a4:a1:1a:04:2f:4b:0b:d5:6a:2c:
61:86:d4:dc:c5:da:72:30:af:69:6c:97:44:84:33:6f:bb:25:
19:44:e4:37:4d:22:15:8f:88:15:b4:ee:a3:5c:ab:a0:80:ab:
c2:70:61:97:42:19:17:ee:cc:a2:02:8b:5f:62:1e:56:79:5a:
0b:37:53:65:bb:93:ba:33:e3:28:b8:94:5b:8e:75:f9:ef:21:
f3:07:6c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0lXE2yZXqv1ttCiM2ygOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjhjZjc1NjFmY2Q2ZDc2NmI3YWFkMzFkYmY3ODVmMDI5
MTQ5ZjAwHhcNMjQxMTIzMDcwMDIyWhcNMjQxMTI0MDcwMDIyWjAzMTEwLwYDVQQD
EygwOTRmZmI5MjI2MjdkMTk0MzUwOTQwNzNiZTEwNTdiYmIzYTc1Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofqyykMjmz6JxkpjhoWfOyBtL9v+
MYZsPuNhdyr+cZEVeSDX6SLTFAaUblaqxSd+U4Eh8AFFM01/bw9/ErYZ900tAgTs
0uiZb/UPq3SejLYTcBVmwKNo8BafUfmQ1Y9VTEkgDJW46jCISqVjmF4ZT1IQ8KoV
xCr+n/OVhTj+Yb5MxkbuAeO4SDa0n1bkrVd0kgi/pyIx7lErPIuCbSLk8D6O2VwH
WCsdi2ANKsIo3QZ1DvgAfKJX8v8K5EGC51LXz0QNKBb29aZGehTzKZS05WUH8FnM
qumcoMXB+YFRyUajoBguKu7DO/ph6g2QoIR/nVa36IOtxPOaxFzbajoHOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlP+5ImJ9GUNQlAc74QV7uzp1zSMB8GA1UdIwQY
MBaAFC/4z3Vh/NbXZreq0x2/eF8CkUnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQt
ZGU3M2E4MWUzNTdkLzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQtZGU3M2E4MWUzNTdk
LzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaMIuFdY
5ikhIi8BAieQhqSl55ofyebMnAzitgAzFkcGSWEDwJkNHHpBMhafoO66Ic97hggz
K2WYbAJYpUIwphe/fdPb5w9lNwQsCQrez/WbaGKgynqNRMZSiV0AeqlEmEi5wp81
3GtCqRep48cymdHj7wKTgU9BoOXlmsuAKlb/tGTNam7Zmgth4A1LHa869rx+93ig
TrjBEDLrk//Z+8cvGfXW8cwVS5mkoRoEL0sL1WosYYbU3MXacjCvaWyXRIQzb7sl
GUTkN00iFY+IFbTuo1yroICrwnBhl0IZF+7MogKLX2IeVnlaCzdTZbuTujPjKLiU
W451+e8h8wdscg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:25 2024 by rpki-client on console-fra.rpki-client.org