Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: YZk3O1k3CaY+BfCqETcxvkPRQdasUV2LbMTYoalWZdU=
Subject key identifier: 4C:A2:10:8B:A2:8A:BB:87:3B:57:FE:04:01:8D:D1:F5:E6:BD:3D:D2
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 0193568AFDC8379922CEBADADD211DEEFAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 059A
Signing time: Sat 23 Nov 2024 01:02:49 +0000
Manifest this update: Sat 23 Nov 2024 01:02:49 +0000
Manifest next update: Sun 24 Nov 2024 01:02:49 +0000
Files and hashes: 1: kcjDtJPy5EM5G8_3UsoJZYtrR4o.roa (hash: GX48a21Jh8MgumoipKA2/jUj9OT38O6M3KgqCrBkBJA=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: hoak1jSeJIQCreZ/GAS1Mrw6I4F71yH+YGw96noz8rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:fd:c8:37:99:22:ce:ba:da:dd:21:1d:ee:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Nov 23 01:02:49 2024 GMT
Not After : Nov 24 01:02:49 2024 GMT
Subject: CN=4ca2108ba28abb873b57fe04018dd1f5e6bd3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ed:a8:35:ad:fa:88:55:b8:4f:15:b9:b6:
38:12:1b:60:45:f9:98:cf:06:25:18:6c:01:d3:89:
7e:9d:5a:23:b1:86:73:0c:15:21:87:e3:bf:89:b6:
a5:3c:57:19:ee:03:ec:bb:b5:9a:2e:7f:49:da:d7:
24:53:f2:26:10:df:7b:b6:62:75:78:6e:48:33:b9:
e5:25:c3:c1:71:c6:7b:35:a5:bf:94:96:98:07:b2:
cf:2c:2a:93:fa:c9:77:69:c0:4a:96:2d:12:da:94:
78:1e:b1:26:44:f0:3d:26:11:ad:98:9b:4a:e9:24:
8f:12:82:bf:5a:0c:bb:7d:18:af:52:cd:09:40:35:
b5:67:3e:20:41:ad:66:2a:c8:ef:32:4a:2b:8a:46:
e1:9c:b5:d9:08:1b:2b:09:e7:35:83:82:67:32:9d:
51:5d:78:d8:26:1f:87:66:c9:97:84:49:df:64:b0:
47:08:75:73:75:69:74:58:f3:ed:a9:73:d1:0c:bb:
6e:39:c7:ac:d5:49:f0:84:50:8f:6b:46:16:44:c0:
32:b0:62:ed:47:bf:ba:87:b1:df:7f:44:54:fc:a6:
d6:35:38:68:dc:aa:1d:f3:6e:bf:9c:b9:07:75:ad:
09:44:d4:e3:3e:6c:12:e7:fb:02:55:99:8e:df:70:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:10:8B:A2:8A:BB:87:3B:57:FE:04:01:8D:D1:F5:E6:BD:3D:D2
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1e:e9:6f:80:00:4a:16:83:3b:e5:24:00:01:e3:c7:31:b7:
23:78:28:12:d5:19:30:c1:7c:c1:df:11:f3:6b:03:86:5c:e3:
6b:2c:6d:8e:70:73:b9:38:6b:08:30:6e:d2:e0:70:f2:2e:a9:
c1:0d:97:1f:56:63:4c:b8:48:39:bd:51:a6:39:0c:8d:17:40:
a8:a0:30:76:a1:cf:ed:9c:56:56:c1:eb:6f:48:51:db:4e:82:
e9:e0:94:5d:45:29:5c:ee:b2:ee:d7:3d:00:b4:9d:6b:bd:eb:
81:cc:55:e7:b4:aa:90:a9:16:14:f6:6c:02:6b:13:11:3a:4d:
ce:45:c9:b0:81:86:2a:83:09:0b:3e:48:c4:42:e4:ca:cd:90:
12:a0:31:b8:c0:ba:8b:04:31:4c:87:b3:18:99:fa:90:ff:de:
5d:7c:cc:4d:f5:0b:e8:80:a2:fc:a7:4e:27:c9:51:9b:4d:dd:
69:28:39:b1:4c:c9:3d:d2:7a:d0:be:1e:79:b9:86:d7:fb:a3:
bb:49:4a:20:9e:d3:3f:c5:8a:3e:c1:1b:d2:fe:ed:e3:09:5d:
3c:91:bd:d9:38:19:b4:c0:2b:25:58:89:cc:d8:a6:27:fa:10:
54:17:1a:18:a7:e8:5b:f0:b6:bd:fc:20:58:60:09:92:fc:97:
5a:af:43:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiv3IN5kizrra3SEd7vrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDQ4ZTg0MGQyNzJhM2UzMTU5MTkyZDFkZjExZjEwMGU1
MDZmNmEwHhcNMjQxMTIzMDEwMjQ5WhcNMjQxMTI0MDEwMjQ5WjAzMTEwLwYDVQQD
Eyg0Y2EyMTA4YmEyOGFiYjg3M2I1N2ZlMDQwMThkZDFmNWU2YmQzZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5rtqDWt+ohVuE8VubY4EhtgRfmY
zwYlGGwB04l+nVojsYZzDBUhh+O/ibalPFcZ7gPsu7WaLn9J2tckU/ImEN97tmJ1
eG5IM7nlJcPBccZ7NaW/lJaYB7LPLCqT+sl3acBKli0S2pR4HrEmRPA9JhGtmJtK
6SSPEoK/Wgy7fRivUs0JQDW1Zz4gQa1mKsjvMkorikbhnLXZCBsrCec1g4JnMp1R
XXjYJh+HZsmXhEnfZLBHCHVzdWl0WPPtqXPRDLtuOces1UnwhFCPa0YWRMAysGLt
R7+6h7Hff0RU/KbWNTho3Kod826/nLkHda0JRNTjPmwS5/sCVZmO33AIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyiEIuiiruHO1f+BAGN0fXmvT3SMB8GA1UdIwQY
MBaAFJZEjoQNJyo+MVkZLR3xHxAOUG9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYt
MTZhZmJhOTg3YjA2LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYtMTZhZmJhOTg3YjA2
LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB7pb4AA
ShaDO+UkAAHjxzG3I3goEtUZMMF8wd8R82sDhlzjayxtjnBzuThrCDBu0uBw8i6p
wQ2XH1ZjTLhIOb1RpjkMjRdAqKAwdqHP7ZxWVsHrb0hR206C6eCUXUUpXO6y7tc9
ALSda73rgcxV57SqkKkWFPZsAmsTETpNzkXJsIGGKoMJCz5IxELkys2QEqAxuMC6
iwQxTIezGJn6kP/eXXzMTfUL6ICi/KdOJ8lRm03daSg5sUzJPdJ60L4eebmG1/uj
u0lKIJ7TP8WKPsEb0v7t4wldPJG92TgZtMArJViJzNimJ/oQVBcaGKfoW/C2vfwg
WGAJkvyXWq9Dtg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:54 2024 by rpki-client on console-fra.rpki-client.org