Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: CKa2aHfioVNcsuimS4DtHeQ1PQErhixnuPQe9l9oxbQ=
Subject key identifier: D1:E3:54:F7:80:38:EA:0C:00:B7:3C:F1:AA:60:EF:2B:8E:1E:04:B6
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019233FFF319ABA37F4547F6773C9572CDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0450
Signing time: Fri 27 Sep 2024 15:01:04 +0000
Manifest this update: Fri 27 Sep 2024 15:01:04 +0000
Manifest next update: Sat 28 Sep 2024 15:01:04 +0000
Files and hashes: 1: TV_ycAdYllzD3A1Qv4V2wrf--YY.roa (hash: x9AwHVaQIkNliOR7FPVM4mQ+0ufhV5Oqdm6dp962WvY=)
2: VB2qx-aa8ftOvbce_CzOA8GPvgg.roa (hash: QEmaJN6G3AA42TcTcAWg4PuNLfgPMZf5jqZ7ClqJiyY=)
3: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: XaT/QjkSUli/A3ilhBdZxEvIyul4tjfHT1li1jJ3eC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:ff:f3:19:ab:a3:7f:45:47:f6:77:3c:95:72:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Sep 27 15:01:04 2024 GMT
Not After : Sep 28 15:01:04 2024 GMT
Subject: CN=d1e354f78038ea0c00b73cf1aa60ef2b8e1e04b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:8f:53:97:4c:4a:9c:bf:fb:ad:62:bf:eb:
4b:4f:b8:9e:45:38:3f:01:08:12:df:db:ea:13:07:
d0:68:68:45:91:59:30:ee:40:25:3a:6f:93:24:cc:
1b:bf:d2:33:b8:0b:40:3d:52:fe:17:da:cd:05:9f:
8c:32:21:38:01:44:6b:29:e2:cf:81:df:26:67:f0:
32:c9:41:66:2d:f9:5a:91:52:de:b7:81:c2:53:8b:
5c:75:6a:e4:66:60:2e:c2:90:0a:86:bb:28:16:06:
3a:14:6b:37:fc:5c:72:2d:93:f7:4a:55:18:d8:5a:
f8:a3:5c:c5:9f:89:b4:d9:f8:88:45:37:d3:f6:ea:
3b:fa:bb:e5:a6:c9:fd:de:91:b6:45:96:db:f2:54:
4f:4a:bb:9a:21:07:83:98:2d:97:2e:6a:3a:11:0a:
d1:41:15:c5:95:34:e6:43:88:5f:19:88:62:f8:08:
40:e8:9e:75:ef:7b:10:32:ca:36:5a:69:7c:bc:bc:
7c:65:71:c6:7a:28:29:e3:83:70:93:80:53:1b:a4:
4d:ae:f9:79:b5:65:06:2e:80:d1:b1:28:37:2b:d7:
57:0c:89:3c:74:1b:ed:19:e1:5e:85:36:b4:35:da:
fc:ac:82:f5:d1:c9:e6:19:75:da:c2:d4:fb:94:19:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:54:F7:80:38:EA:0C:00:B7:3C:F1:AA:60:EF:2B:8E:1E:04:B6
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:11:55:19:b0:14:f4:2f:88:af:7d:d5:81:1c:37:8e:66:2c:
cc:08:57:db:a8:c7:d2:de:22:46:0e:1f:05:79:08:af:76:d8:
99:54:56:f9:11:2b:a9:6d:b5:5b:e2:bf:9d:5c:ec:8d:d2:b0:
32:c5:d1:77:fd:7e:c5:4c:a8:df:21:41:c6:6f:88:29:a6:90:
78:0c:99:04:05:87:9d:be:e3:f9:bc:2d:6f:e0:0c:89:f1:7d:
f1:32:8f:ce:49:69:ea:db:b8:3a:6e:e3:63:1f:0e:d0:00:ca:
17:9d:61:05:97:28:8e:61:ee:4c:4b:b8:a2:98:fd:a2:b3:2a:
00:f0:32:61:a8:d7:b7:67:1c:d1:b9:0a:84:db:59:79:12:45:
fa:51:7f:34:6f:94:a4:a4:dc:63:ce:b8:79:27:e3:33:ff:3e:
b6:3f:4e:9c:b5:ae:2e:5c:d1:49:82:5f:86:ea:29:6e:81:0b:
6f:cd:34:02:7d:e4:f3:ea:c9:04:3f:e0:73:71:7f:d4:2d:b4:
95:eb:d2:29:6c:3d:67:68:5d:c5:8e:a9:16:87:6c:86:ab:50:
3e:cd:e8:3a:9c:63:bb:29:d9:83:07:bc:44:15:d1:2a:15:73:
43:2b:12:f4:6a:8a:d3:27:43:a6:99:d0:86:02:39:8d:12:f0:
6a:5f:64:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIz//MZq6N/RUf2dzyVcs3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjQwOTI3MTUwMTA0WhcNMjQwOTI4MTUwMTA0WjAzMTEwLwYDVQQD
EyhkMWUzNTRmNzgwMzhlYTBjMDBiNzNjZjFhYTYwZWYyYjhlMWUwNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+iPU5dMSpy/+61iv+tLT7ieRTg/
AQgS39vqEwfQaGhFkVkw7kAlOm+TJMwbv9IzuAtAPVL+F9rNBZ+MMiE4AURrKeLP
gd8mZ/AyyUFmLflakVLet4HCU4tcdWrkZmAuwpAKhrsoFgY6FGs3/FxyLZP3SlUY
2Fr4o1zFn4m02fiIRTfT9uo7+rvlpsn93pG2RZbb8lRPSruaIQeDmC2XLmo6EQrR
QRXFlTTmQ4hfGYhi+AhA6J5173sQMso2Wml8vLx8ZXHGeigp44Nwk4BTG6RNrvl5
tWUGLoDRsSg3K9dXDIk8dBvtGeFehTa0Ndr8rIL10cnmGXXawtT7lBnPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHjVPeAOOoMALc88apg7yuOHgS2MB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphFVGbAU
9C+Ir33VgRw3jmYszAhX26jH0t4iRg4fBXkIr3bYmVRW+RErqW21W+K/nVzsjdKw
MsXRd/1+xUyo3yFBxm+IKaaQeAyZBAWHnb7j+bwtb+AMifF98TKPzklp6tu4Om7j
Yx8O0ADKF51hBZcojmHuTEu4opj9orMqAPAyYajXt2cc0bkKhNtZeRJF+lF/NG+U
pKTcY864eSfjM/8+tj9OnLWuLlzRSYJfhuopboELb800An3k8+rJBD/gc3F/1C20
levSKWw9Z2hdxY6pFodshqtQPs3oOpxjuynZgwe8RBXRKhVzQysS9GqK0ydDppnQ
hgI5jRLwal9k5Q==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:03:36 2024 by rpki-client on console-fra.rpki-client.org