Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
File: PQZltmdodaz2DgFSK5NDwECl_-E.mft (raw, json)
Hash identifier: CUZNLInJFMX/WqePpS3ahfrEXu4E719vgVzrH0v5gyw=
Subject key identifier: 5E:5F:35:BD:44:AC:F3:6C:9C:89:C8:8C:F4:80:54:54:9A:AE:54:94
Authority key identifier: 3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
Certificate issuer: /CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Certificate serial: 01936AB47CB4D63F626F6A1D945E9D8A77FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
Manifest number: 0BC7
Signing time: Tue 26 Nov 2024 23:00:33 +0000
Manifest this update: Tue 26 Nov 2024 23:00:33 +0000
Manifest next update: Wed 27 Nov 2024 23:00:33 +0000
Files and hashes: 1: PQZltmdodaz2DgFSK5NDwECl_-E.crl (hash: 3rpyuTULMu63MfUZBqnsGxBOcHJ1p+si2soYVC5sTqY=)
2: bTX62tRbx1Gf91_afHejNDmclKo.roa (hash: Va+985nWQRGZqHpBs1nlUPddfPJ3MCFDNSeVnonBTrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:7c:b4:d6:3f:62:6f:6a:1d:94:5e:9d:8a:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Validity
Not Before: Nov 26 23:00:33 2024 GMT
Not After : Nov 27 23:00:33 2024 GMT
Subject: CN=5e5f35bd44acf36c9c89c88cf48054549aae5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:bf:92:9b:53:c2:5f:06:f9:63:aa:d1:6f:
28:76:c7:4b:08:52:f9:1c:10:a3:ce:89:7f:90:b1:
64:c0:5a:3c:29:eb:3c:9e:00:e4:55:fc:c5:f7:c9:
03:01:d0:14:bc:48:68:49:85:9d:e5:2c:63:fb:21:
90:24:2d:a5:29:f2:02:90:9b:f0:b3:c8:1a:d4:20:
6c:53:c6:63:0b:5a:ec:ee:7f:c2:bc:f6:de:39:f1:
7f:01:e8:90:74:e1:f7:da:c3:e6:bd:a9:0a:8f:68:
da:6c:58:e0:68:8e:b3:96:f6:28:80:d8:34:0f:4b:
b4:2a:ba:ad:36:53:8c:c5:5d:31:96:11:36:7a:94:
70:d5:cf:d8:3c:ab:b7:94:33:56:d1:ba:1b:ad:e8:
a4:8e:18:d2:ac:08:1a:85:ea:11:01:fb:2a:81:79:
ce:72:8e:61:09:7a:ce:9c:9e:ed:a6:85:49:f8:4d:
57:33:9a:29:c9:da:27:2a:71:f8:df:f5:49:6c:24:
d8:f5:85:5d:22:69:94:b4:1c:83:57:81:2d:a3:8c:
f7:a2:cc:48:b2:20:da:1f:06:eb:e6:43:ab:b0:5f:
ed:4a:fb:62:6c:fb:bd:c3:78:46:95:80:0c:95:1c:
9a:21:e3:d5:1e:e7:98:a8:12:0a:bf:66:2c:d8:fc:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:35:BD:44:AC:F3:6C:9C:89:C8:8C:F4:80:54:54:9A:AE:54:94
X509v3 Authority Key Identifier:
keyid:3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:7a:16:43:0c:1d:32:ab:4b:43:74:a7:7e:cb:78:d5:f0:
02:86:08:e7:c5:a0:c1:f1:dc:c6:0b:1c:19:c3:79:15:14:a2:
1c:4e:fb:71:ec:20:e6:ee:02:28:21:08:2d:ff:7e:eb:f1:9b:
69:3a:d8:4e:54:f3:1d:a2:df:b7:66:65:b3:26:3a:ee:a4:2a:
e6:8e:1b:bd:0c:c1:e0:a2:c3:94:91:a8:b2:bf:fb:42:7b:65:
e0:a4:24:09:cc:28:fe:db:56:74:20:92:e1:17:bf:e6:13:63:
09:ef:9a:9f:db:e5:31:83:97:e9:cb:4c:d2:8b:09:85:f3:6e:
ed:d0:a4:5a:97:bc:ca:13:f0:e2:9e:c4:e3:4e:11:66:53:d0:
bc:18:3c:b0:7e:eb:41:2a:9f:dd:e9:3d:ee:3d:e0:7d:e2:f3:
e5:cc:e2:ad:7c:5e:bc:0a:ef:60:74:04:20:63:c6:63:d2:13:
84:7b:c1:24:15:f7:98:7e:fe:78:bf:6c:6e:3e:1d:5d:b1:27:
84:45:a4:6f:1b:92:76:ea:01:1f:75:67:e0:8b:dc:de:4d:6d:
74:31:9f:3e:a4:16:65:87:ef:92:20:05:44:cb:22:9a:58:84:
2d:f7:9c:0d:b7:1f:37:c1:f7:2a:a3:c1:8c:86:47:6e:68:ef:
f7:c6:00:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtHy01j9ib2odlF6dinf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDY2NWI2Njc2ODc1YWNmNjBlMDE1MjJiOTM0M2MwNDBh
NWZmZTEwHhcNMjQxMTI2MjMwMDMzWhcNMjQxMTI3MjMwMDMzWjAzMTEwLwYDVQQD
Eyg1ZTVmMzViZDQ0YWNmMzZjOWM4OWM4OGNmNDgwNTQ1NDlhYWU1NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1C/kptTwl8G+WOq0W8odsdLCFL5
HBCjzol/kLFkwFo8Kes8ngDkVfzF98kDAdAUvEhoSYWd5Sxj+yGQJC2lKfICkJvw
s8ga1CBsU8ZjC1rs7n/CvPbeOfF/AeiQdOH32sPmvakKj2jabFjgaI6zlvYogNg0
D0u0KrqtNlOMxV0xlhE2epRw1c/YPKu3lDNW0bobreikjhjSrAgaheoRAfsqgXnO
co5hCXrOnJ7tpoVJ+E1XM5opydonKnH43/VJbCTY9YVdImmUtByDV4Eto4z3osxI
siDaHwbr5kOrsF/tSvtibPu9w3hGlYAMlRyaIePVHueYqBIKv2Ys2Pw8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5fNb1ErPNsnInIjPSAVFSarlSUMB8GA1UdIwQY
MBaAFD0GZbZnaHWs9g4BUiuTQ8BApf/hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2Qt
OWFlMGZlYWY5OTM5LzEvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2QtOWFlMGZlYWY5OTM5
LzEvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6p6FkMM
HTKrS0N0p37LeNXwAoYI58WgwfHcxgscGcN5FRSiHE77cewg5u4CKCEILf9+6/Gb
aTrYTlTzHaLft2ZlsyY67qQq5o4bvQzB4KLDlJGosr/7Qntl4KQkCcwo/ttWdCCS
4Re/5hNjCe+an9vlMYOX6ctM0osJhfNu7dCkWpe8yhPw4p7E404RZlPQvBg8sH7r
QSqf3ek97j3gfeLz5czirXxevArvYHQEIGPGY9IThHvBJBX3mH7+eL9sbj4dXbEn
hEWkbxuSduoBH3Vn4Ivc3k1tdDGfPqQWZYfvkiAFRMsimliELfecDbcfN8H3KqPB
jIZHbmjv98YArQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:41 2024 by rpki-client on console-ams.rpki-client.org