Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: 4RhvuwgjOyLl/u5FOQq02L7IKZJg0zQ8FLr9d1HiiDc=
Subject key identifier: EE:08:88:E2:DB:FB:9B:FC:E0:66:04:7F:25:2D:47:5E:F4:D3:AF:99
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 01936A46D633BD5A12BD7B74FCC73E650C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0168
Signing time: Tue 26 Nov 2024 21:00:47 +0000
Manifest this update: Tue 26 Nov 2024 21:00:47 +0000
Manifest next update: Wed 27 Nov 2024 21:00:47 +0000
Files and hashes: 1: knSoepLGJSp-AcCQZkV1qY93TX0.roa (hash: UNoumTmvOXs23mYqEtBhu7K/0fDFevHJ7fthEimTcaU=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: lpZ8nV1p3Kg6F3DzJS0WQHAd4llrRD2ZbDAiAVi3VWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:d6:33:bd:5a:12:bd:7b:74:fc:c7:3e:65:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Nov 26 21:00:47 2024 GMT
Not After : Nov 27 21:00:47 2024 GMT
Subject: CN=ee0888e2dbfb9bfce066047f252d475ef4d3af99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:c0:14:1c:53:c8:06:3b:74:ca:2a:f4:4b:
6f:f0:f6:13:7b:e5:9a:af:d6:cf:1b:5e:5b:16:c6:
eb:24:24:3f:08:21:4b:65:bd:30:8f:65:76:c1:25:
df:b6:46:78:fb:29:7d:41:1e:df:33:71:87:0b:c4:
33:1b:3e:2f:03:29:fb:9b:37:62:4c:5f:d6:f5:e1:
21:39:48:5c:e4:79:81:7a:91:51:42:b1:92:75:26:
6a:88:72:27:41:91:6f:d7:8c:d2:f6:f0:a4:18:8f:
25:0d:d9:0f:23:cd:9e:4c:5f:04:38:a7:91:6d:c3:
e5:e8:82:b6:51:6c:e1:c4:25:50:9f:62:e6:f8:98:
54:5a:f4:4a:15:29:a7:45:0e:b4:24:dc:1a:dc:59:
b3:64:b2:7b:d5:99:ea:d9:fc:32:e8:b5:1b:21:3d:
0d:f3:73:53:c8:04:70:47:9e:f2:38:db:5a:35:71:
1a:42:f5:84:6e:8d:2d:c0:85:7b:b7:84:8a:77:e4:
19:e9:2f:5b:ee:ba:82:df:20:f8:a7:05:29:9a:6d:
62:27:2f:da:2b:ca:6b:cc:91:fd:a0:06:89:0a:36:
52:25:a0:2b:b4:78:9a:60:9a:9c:29:5f:83:bd:e0:
81:1a:fe:b3:87:e3:81:55:d6:da:f2:ea:9a:4d:f2:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:08:88:E2:DB:FB:9B:FC:E0:66:04:7F:25:2D:47:5E:F4:D3:AF:99
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:df:85:2b:94:f9:48:55:ee:43:a4:88:41:44:95:5f:57:
b7:89:ef:40:e5:63:dc:d4:29:0e:22:bf:bf:39:b1:5a:4b:6a:
b3:8f:68:84:d2:49:a3:02:c0:45:c5:cd:bb:4d:6f:50:ac:c8:
66:5b:26:32:65:29:c8:be:6a:f6:00:05:7d:11:f7:7a:f7:9b:
66:fb:3a:53:c9:81:e7:f2:27:d1:62:17:4b:f7:74:e0:9c:2a:
32:cb:3d:cb:a3:48:f0:fe:51:64:d6:8b:5e:9a:cf:d2:bf:a8:
a6:05:af:3d:9c:ee:e0:09:79:2b:a5:5f:3a:46:3b:c7:55:0d:
85:8e:a2:b7:43:33:8b:26:c9:48:ab:3f:d8:13:67:43:41:d6:
f5:59:31:09:d6:ff:26:e3:85:ad:9f:f4:cf:ae:57:19:09:1e:
22:9c:ea:e6:85:b2:2f:b0:fd:81:de:7b:6c:20:79:f0:10:a8:
7f:75:e2:93:38:0e:a3:a4:cb:87:60:2f:96:cb:ce:d2:d4:97:
e2:81:a3:2b:5d:87:47:a8:bf:7c:66:fd:c5:18:6a:2a:7c:65:
5d:c4:97:99:75:67:97:72:9d:be:83:ec:a1:95:b3:80:51:53:
da:93:c0:fb:c8:a6:79:7b:95:ac:4d:7f:ac:77:75:5c:83:19:
c5:d2:83:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRtYzvVoSvXt0/Mc+ZQyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjQxMTI2MjEwMDQ3WhcNMjQxMTI3MjEwMDQ3WjAzMTEwLwYDVQQD
EyhlZTA4ODhlMmRiZmI5YmZjZTA2NjA0N2YyNTJkNDc1ZWY0ZDNhZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPAFBxTyAY7dMoq9Etv8PYTe+Wa
r9bPG15bFsbrJCQ/CCFLZb0wj2V2wSXftkZ4+yl9QR7fM3GHC8QzGz4vAyn7mzdi
TF/W9eEhOUhc5HmBepFRQrGSdSZqiHInQZFv14zS9vCkGI8lDdkPI82eTF8EOKeR
bcPl6IK2UWzhxCVQn2Lm+JhUWvRKFSmnRQ60JNwa3FmzZLJ71Znq2fwy6LUbIT0N
83NTyARwR57yONtaNXEaQvWEbo0twIV7t4SKd+QZ6S9b7rqC3yD4pwUpmm1iJy/a
K8przJH9oAaJCjZSJaArtHiaYJqcKV+DveCBGv6zh+OBVdba8uqaTfIUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4IiOLb+5v84GYEfyUtR17006+ZMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkePfhSuU
+UhV7kOkiEFElV9Xt4nvQOVj3NQpDiK/vzmxWktqs49ohNJJowLARcXNu01vUKzI
ZlsmMmUpyL5q9gAFfRH3evebZvs6U8mB5/In0WIXS/d04JwqMss9y6NI8P5RZNaL
XprP0r+opgWvPZzu4Al5K6VfOkY7x1UNhY6it0MziybJSKs/2BNnQ0HW9VkxCdb/
JuOFrZ/0z65XGQkeIpzq5oWyL7D9gd57bCB58BCof3XikzgOo6TLh2AvlsvO0tSX
4oGjK12HR6i/fGb9xRhqKnxlXcSXmXVnl3KdvoPsoZWzgFFT2pPA+8imeXuVrE1/
rHd1XIMZxdKDqA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:01 2024 by rpki-client on console-fra.rpki-client.org