Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: mlVKoLxpE0QpYJoaYDZq1G17aCXDSbiYcRv8UA3e3v0=
Subject key identifier: F8:12:A4:31:E8:E0:52:25:FF:10:1A:87:49:81:07:A7:98:4B:7C:9D
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019355AD3BA4EB7644717F6D4861544D0346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 060E
Signing time: Fri 22 Nov 2024 21:00:36 +0000
Manifest this update: Fri 22 Nov 2024 21:00:36 +0000
Manifest next update: Sat 23 Nov 2024 21:00:36 +0000
Files and hashes: 1: Sx6zXuvKBcBwPwy49aPX9FSJ3_M.roa (hash: JpaHWQ3HZec7MBhI/gk4wGUrgIZKzcDw7hRYIG8GcRE=)
2: f114cWYKe42ZAAlbaz5x8NhLHCo.roa (hash: 5lCUt2yc4MTwxYGnHwLliYXoypodtGv5tAuHgxqQu7E=)
3: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: H7gIHeCaogmtfqb0DxMMW8m3+TIzRQDfiClbmYsxjJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:3b:a4:eb:76:44:71:7f:6d:48:61:54:4d:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Nov 22 21:00:36 2024 GMT
Not After : Nov 23 21:00:36 2024 GMT
Subject: CN=f812a431e8e05225ff101a87498107a7984b7c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:b3:61:c8:12:f7:3c:87:29:8b:b9:2f:7f:
e8:ce:b4:1f:fa:55:4f:a1:ec:6d:3c:f1:90:bf:29:
f0:22:a2:fe:31:e5:d8:26:59:d0:47:4f:69:3e:6c:
6e:12:4c:b3:7a:da:c8:89:be:a3:9b:d0:5c:b3:61:
20:88:10:8a:2a:13:33:d9:96:6a:db:4e:02:8c:a9:
c1:e1:9b:94:2f:31:41:04:3a:84:4d:90:22:0f:0d:
5f:93:0a:fc:e0:28:41:2b:88:fc:d3:c6:e6:7a:ac:
38:cd:9a:5f:09:1a:49:dc:a2:a4:35:26:80:41:3d:
b9:fa:9c:99:f0:12:cf:63:5b:4a:98:98:4c:e2:ad:
ea:7a:2b:c9:69:01:cd:a2:a8:70:f6:62:da:a2:70:
82:48:9a:bd:e8:28:db:9b:4f:54:9a:c3:d3:d6:12:
fd:8a:d2:6e:61:39:32:0a:c3:a6:ce:15:8d:fd:8f:
4c:ca:65:48:c6:b4:19:de:23:65:1d:24:92:df:13:
e5:98:18:5b:6d:cb:7c:1e:90:96:57:6f:48:c6:21:
fd:64:6e:5e:1c:47:33:08:cf:d2:56:65:dd:34:d1:
29:24:04:42:26:fc:b3:6f:68:49:13:c3:d5:0d:27:
f8:db:c9:95:f0:60:b1:3c:d6:9f:68:33:b0:2e:9f:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:A4:31:E8:E0:52:25:FF:10:1A:87:49:81:07:A7:98:4B:7C:9D
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:9a:26:60:f9:b4:9f:2c:92:dd:52:8b:10:06:e9:bd:e2:
73:e1:3e:66:04:24:bf:fc:eb:a1:72:dc:4d:ae:df:5f:a8:39:
32:9a:63:9f:8b:a2:3d:15:77:4a:17:c8:6c:03:ca:14:5b:e8:
9b:ec:f1:47:70:b1:3e:c5:e1:0f:cb:29:15:be:91:80:2a:e4:
af:34:19:a7:a4:8f:37:6e:00:a9:ad:f2:4b:f0:88:24:b7:7b:
ff:5d:3a:7a:3b:a3:fc:4a:f2:01:b6:f1:73:ec:23:ef:ca:fe:
d1:cc:63:0e:57:ad:5c:8f:8b:3b:e9:01:db:2b:71:ee:06:bc:
c9:23:8b:77:86:a5:4e:5a:87:72:5f:10:fe:9f:68:db:55:5e:
a2:3d:29:ce:78:c8:4a:bd:95:f1:52:0b:b9:e0:20:72:6e:c9:
26:ec:78:5a:4b:7a:86:02:a9:7e:1a:5e:0f:ff:e3:4e:dc:06:
87:d7:18:4d:53:ce:58:eb:47:04:fa:d3:1d:f7:38:e3:71:9d:
35:52:ec:de:61:ce:f5:36:f3:1e:a0:b3:73:4b:29:97:7f:19:
08:fb:6f:fa:03:93:37:c1:86:08:30:5c:34:0e:e6:bc:94:a6:
72:7f:d8:d6:1d:11:66:a5:04:78:c8:89:bc:a7:1d:dd:e2:9e:
4c:c3:4d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrTuk63ZEcX9tSGFUTQNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjQxMTIyMjEwMDM2WhcNMjQxMTIzMjEwMDM2WjAzMTEwLwYDVQQD
EyhmODEyYTQzMWU4ZTA1MjI1ZmYxMDFhODc0OTgxMDdhNzk4NGI3YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfWzYcgS9zyHKYu5L3/ozrQf+lVP
oextPPGQvynwIqL+MeXYJlnQR09pPmxuEkyzetrIib6jm9Bcs2EgiBCKKhMz2ZZq
204CjKnB4ZuULzFBBDqETZAiDw1fkwr84ChBK4j808bmeqw4zZpfCRpJ3KKkNSaA
QT25+pyZ8BLPY1tKmJhM4q3qeivJaQHNoqhw9mLaonCCSJq96Cjbm09UmsPT1hL9
itJuYTkyCsOmzhWN/Y9MymVIxrQZ3iNlHSSS3xPlmBhbbct8HpCWV29IxiH9ZG5e
HEczCM/SVmXdNNEpJARCJvyzb2hJE8PVDSf428mV8GCxPNafaDOwLp9ATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgSpDHo4FIl/xAah0mBB6eYS3ydMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxqaJmD5
tJ8skt1SixAG6b3ic+E+ZgQkv/zroXLcTa7fX6g5Mppjn4uiPRV3ShfIbAPKFFvo
m+zxR3CxPsXhD8spFb6RgCrkrzQZp6SPN24Aqa3yS/CIJLd7/106ejuj/EryAbbx
c+wj78r+0cxjDletXI+LO+kB2ytx7ga8ySOLd4alTlqHcl8Q/p9o21Veoj0pznjI
Sr2V8VILueAgcm7JJux4Wkt6hgKpfhpeD//jTtwGh9cYTVPOWOtHBPrTHfc443Gd
NVLs3mHO9TbzHqCzc0spl38ZCPtv+gOTN8GGCDBcNA7mvJSmcn/Y1h0RZqUEeMiJ
vKcd3eKeTMNN+Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:43 2024 by rpki-client on console-fra.rpki-client.org