Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: r+VHyMKbVftG95W0Tj5yIhr2ZCKwu7QUZ33qzw3PS4Q=
Subject key identifier: 1D:8D:BD:2C:E8:AE:AE:78:E6:58:F0:14:14:08:1D:48:BB:3D:B3:34
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 01935840382DBBD0B83AE3630DE9DF582A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 87
Signing time: Sat 23 Nov 2024 09:00:23 +0000
Manifest this update: Sat 23 Nov 2024 09:00:23 +0000
Manifest next update: Sun 24 Nov 2024 09:00:23 +0000
Files and hashes: 1: c9gsj_28cg189-ePS9_cGD964yk.roa (hash: TPitvFzbSrgA39tKxZOqV7vPFnUEz6lHBME+3NhcK0k=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: p9WBmLa7drgv4SSUTDh8NaMN7fd0NY/GUREUX2ipF04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:38:2d:bb:d0:b8:3a:e3:63:0d:e9:df:58:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Nov 23 09:00:23 2024 GMT
Not After : Nov 24 09:00:23 2024 GMT
Subject: CN=1d8dbd2ce8aeae78e658f01414081d48bb3db334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:a2:c8:f4:01:cf:40:2d:53:b7:e3:99:5e:
1e:2e:58:6b:52:87:0b:be:a6:b5:7f:09:38:51:24:
b4:46:60:27:47:c5:8b:00:09:1d:12:4e:0b:45:af:
a6:c2:04:47:c9:a2:36:1b:d8:c1:e8:8b:4a:28:b9:
27:88:d2:cc:05:a3:bf:ef:92:4f:09:28:64:05:78:
b9:7a:08:87:1b:be:50:b4:17:77:88:db:1e:00:9b:
11:9b:ab:d8:a1:c0:97:8f:b0:02:ac:e9:18:9b:44:
65:5f:3a:15:7b:dd:35:4e:65:f3:9e:05:c8:bf:fe:
0b:9d:fe:cc:7e:6c:b9:07:78:22:dd:09:d2:79:14:
c4:6c:72:1d:c1:9c:3e:e8:97:11:05:91:8f:b5:66:
6e:e6:f2:d9:09:89:07:19:b0:96:ce:34:0d:6d:39:
d9:3f:83:62:61:c8:a3:91:b0:75:82:87:36:bf:57:
4c:d7:9c:6c:41:c3:8d:ab:9e:4e:fb:20:85:95:c8:
31:03:1e:21:d0:9a:23:7d:c7:a9:24:4f:90:e8:c4:
e8:d5:9d:02:ff:5a:e1:f3:b1:fc:cd:98:ea:95:e2:
f1:4a:a5:1e:3f:20:b4:70:f6:be:26:cd:df:ce:87:
b5:44:f7:97:15:26:f1:2a:df:bb:db:50:42:33:da:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:BD:2C:E8:AE:AE:78:E6:58:F0:14:14:08:1D:48:BB:3D:B3:34
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0c:c0:38:ce:11:31:c0:22:7a:80:29:d8:47:84:df:49:9e:
57:55:14:f2:b0:f0:47:82:64:af:1f:44:53:44:16:58:b2:b6:
51:13:7a:79:f4:b6:ae:e3:65:34:d9:79:74:e2:b8:47:20:a5:
7c:ed:0c:39:b8:a4:ec:ea:2e:ba:0b:90:a5:08:4c:e1:e6:17:
4d:4b:58:6c:58:20:22:81:a5:9b:67:78:2b:56:42:f4:c6:38:
12:90:ff:ba:c2:0a:72:e2:cb:00:09:e4:da:68:56:cc:89:90:
c9:30:f8:3d:80:1e:c7:99:c5:ee:77:a9:18:26:1d:2f:96:80:
48:a8:e8:8c:a1:08:16:69:dc:22:f1:a1:ac:7d:16:9f:97:59:
46:af:4e:f9:d9:7a:f6:8e:ea:1a:d5:d1:ec:5e:a7:94:b5:f0:
05:88:09:4b:83:a1:07:83:c5:c8:08:4f:c6:7d:38:b7:25:09:
2f:d0:d5:f0:4b:bb:0d:e3:f6:00:5a:9b:94:8c:69:ef:e5:4a:
b8:40:23:84:6e:37:47:a9:86:8b:fd:09:3a:d0:e9:34:ad:3a:
88:b7:d2:0c:2f:38:d2:1a:b2:e0:b3:f4:0b:5f:93:fa:04:b9:
d0:a5:49:bc:6e:6b:4d:ee:ba:c2:b1:99:e7:f7:bc:f1:78:78:
fa:ad:91:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQDgtu9C4OuNjDenfWCpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTllYWE5ZDcxYjdjNTFjOWI0YmJlYTY4MTliMzdmZjUy
OTFkNTkwHhcNMjQxMTIzMDkwMDIzWhcNMjQxMTI0MDkwMDIzWjAzMTEwLwYDVQQD
EygxZDhkYmQyY2U4YWVhZTc4ZTY1OGYwMTQxNDA4MWQ0OGJiM2RiMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3iiyPQBz0AtU7fjmV4eLlhrUocL
vqa1fwk4USS0RmAnR8WLAAkdEk4LRa+mwgRHyaI2G9jB6ItKKLkniNLMBaO/75JP
CShkBXi5egiHG75QtBd3iNseAJsRm6vYocCXj7ACrOkYm0RlXzoVe901TmXzngXI
v/4Lnf7Mfmy5B3gi3QnSeRTEbHIdwZw+6JcRBZGPtWZu5vLZCYkHGbCWzjQNbTnZ
P4NiYcijkbB1goc2v1dM15xsQcONq55O+yCFlcgxAx4h0JojfcepJE+Q6MTo1Z0C
/1rh87H8zZjqleLxSqUePyC0cPa+Js3fzoe1RPeXFSbxKt+721BCM9oFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2NvSzorq545ljwFBQIHUi7PbM0MB8GA1UdIwQY
MBaAFJSp6qnXG3xRybS76mgZs3/1KR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMt
MzkzYWQyNWViMzQwLzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMtMzkzYWQyNWViMzQw
LzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQzAOM4R
McAieoAp2EeE30meV1UU8rDwR4Jkrx9EU0QWWLK2URN6efS2ruNlNNl5dOK4RyCl
fO0MObik7OouuguQpQhM4eYXTUtYbFggIoGlm2d4K1ZC9MY4EpD/usIKcuLLAAnk
2mhWzImQyTD4PYAex5nF7nepGCYdL5aASKjojKEIFmncIvGhrH0Wn5dZRq9O+dl6
9o7qGtXR7F6nlLXwBYgJS4OhB4PFyAhPxn04tyUJL9DV8Eu7DeP2AFqblIxp7+VK
uEAjhG43R6mGi/0JOtDpNK06iLfSDC840hqy4LP0C1+T+gS50KVJvG5rTe66wrGZ
5/e88Xh4+q2RzQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:22 2024 by rpki-client on console-fra.rpki-client.org