Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: M0Q4jbHL+rxi75j9qIS43gWqvoVf+u3glnoNpMYCHec=
Subject key identifier: F0:BA:E6:90:4C:6D:E9:A6:81:EE:C1:77:53:9F:9F:80:E1:C0:A3:53
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 0193579BDCF055D9C09A385CBC4755F6179F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 06:00:52 +0000
Manifest this update: Sat 23 Nov 2024 06:00:52 +0000
Manifest next update: Sun 24 Nov 2024 06:00:52 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: 1wcNJIkB/bbkSlQGstxd7YpRJOXOlmBVBwhUDXGKcPM=)
2: fzSUNgxMmiJxsae3BEa4N-LTcSs.roa (hash: un2qU9wtaHgHUb7qTNVo9D2d4E1Dlam4+cJziY3PWAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:dc:f0:55:d9:c0:9a:38:5c:bc:47:55:f6:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Nov 23 06:00:52 2024 GMT
Not After : Nov 24 06:00:52 2024 GMT
Subject: CN=f0bae6904c6de9a681eec177539f9f80e1c0a353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:6a:59:4b:b6:38:64:c9:c9:28:65:52:e6:
97:79:bb:ff:98:7f:09:0b:30:7b:bc:90:06:70:fa:
14:07:0a:0b:cd:43:69:50:03:aa:06:01:5a:ca:d4:
63:4a:00:ac:4e:05:5a:d4:eb:bc:09:85:8d:54:1f:
cc:d4:e6:d0:ed:52:43:0a:ad:ed:4e:50:a6:8f:65:
81:03:5b:23:4c:e2:8a:99:f3:d5:c7:70:5f:ef:99:
31:22:42:59:39:91:32:b3:58:da:03:c0:7d:fe:51:
52:1e:fc:64:ae:6a:81:bf:ef:3b:d1:31:68:f4:d3:
a9:8b:ab:da:5a:62:eb:5f:42:0a:a0:b9:15:e5:95:
4f:82:ef:c4:b1:a4:cd:38:68:f6:f2:56:f7:82:59:
6c:f7:b6:b9:0a:1d:b1:87:96:ab:c3:8f:59:40:86:
e9:6c:dc:c8:15:35:d9:07:46:3c:a4:f0:ae:b5:11:
c3:16:c5:fa:e2:91:48:76:1a:44:8f:3c:82:68:38:
01:42:20:73:32:8e:03:16:47:b9:d6:01:f3:b2:5e:
13:55:59:76:70:4b:c0:1c:cc:79:38:7b:22:be:79:
c7:ee:bc:20:e2:1c:93:ca:5b:43:a6:ab:ef:f3:7c:
f6:c3:cf:ae:0f:ea:72:f0:59:4d:40:b8:fd:14:a8:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:E6:90:4C:6D:E9:A6:81:EE:C1:77:53:9F:9F:80:E1:C0:A3:53
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:63:20:ab:c7:3a:87:f3:c3:98:90:49:ed:79:d4:66:a1:
1e:c1:93:66:51:ab:79:5e:ca:d9:07:88:49:fa:95:a6:60:47:
24:75:6e:17:26:16:f3:63:d0:69:9c:41:4b:5e:df:10:43:78:
4e:4b:3a:ce:69:79:fc:e4:69:58:59:8a:95:a8:8a:19:d1:0e:
59:87:54:7e:85:4c:62:ad:a4:f5:c1:e8:c0:8b:03:8b:2b:d8:
af:1a:50:4a:a3:1e:97:6a:f9:5c:bb:91:a2:59:62:7d:53:3e:
48:76:57:98:9b:81:d3:26:31:c2:96:99:99:8c:a9:f8:4b:fc:
7d:ad:ff:52:e7:8e:14:24:27:99:d1:4e:8e:b6:18:20:bb:46:
3c:77:df:c4:d6:04:0e:bc:b9:b8:6a:fe:64:1e:da:80:68:79:
6c:39:dd:76:21:24:b8:45:96:5c:00:59:49:1a:5f:86:ca:3e:
52:ac:5d:d8:47:f0:e7:1f:e5:b3:b3:ae:c7:66:29:0c:50:0c:
05:d1:57:68:7a:b2:47:78:4f:2d:45:14:c3:b9:54:37:97:d9:
44:4f:d6:b0:cc:76:2c:f7:1b:bb:cc:46:2e:11:38:c3:47:65:
30:37:d9:7a:21:6e:36:52:19:13:02:68:9f:72:31:63:d3:7a:
70:7f:f6:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm9zwVdnAmjhcvEdV9hefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjQxMTIzMDYwMDUyWhcNMjQxMTI0MDYwMDUyWjAzMTEwLwYDVQQD
EyhmMGJhZTY5MDRjNmRlOWE2ODFlZWMxNzc1MzlmOWY4MGUxYzBhMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMtqWUu2OGTJyShlUuaXebv/mH8J
CzB7vJAGcPoUBwoLzUNpUAOqBgFaytRjSgCsTgVa1Ou8CYWNVB/M1ObQ7VJDCq3t
TlCmj2WBA1sjTOKKmfPVx3Bf75kxIkJZOZEys1jaA8B9/lFSHvxkrmqBv+870TFo
9NOpi6vaWmLrX0IKoLkV5ZVPgu/EsaTNOGj28lb3glls97a5Ch2xh5arw49ZQIbp
bNzIFTXZB0Y8pPCutRHDFsX64pFIdhpEjzyCaDgBQiBzMo4DFke51gHzsl4TVVl2
cEvAHMx5OHsivnnH7rwg4hyTyltDpqvv83z2w8+uD+py8FlNQLj9FKh45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC65pBMbemmge7Bd1Ofn4DhwKNTMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd1jIKvH
Oofzw5iQSe151GahHsGTZlGreV7K2QeISfqVpmBHJHVuFyYW82PQaZxBS17fEEN4
Tks6zml5/ORpWFmKlaiKGdEOWYdUfoVMYq2k9cHowIsDiyvYrxpQSqMel2r5XLuR
ollifVM+SHZXmJuB0yYxwpaZmYyp+Ev8fa3/UueOFCQnmdFOjrYYILtGPHffxNYE
Dry5uGr+ZB7agGh5bDnddiEkuEWWXABZSRpfhso+Uqxd2Efw5x/ls7Oux2YpDFAM
BdFXaHqyR3hPLUUUw7lUN5fZRE/WsMx2LPcbu8xGLhE4w0dlMDfZeiFuNlIZEwJo
n3IxY9N6cH/2vQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:32 2024 by rpki-client on console-fra.rpki-client.org