Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
File: suECSE9zlyeGzMLfHEfCaCuLhco.mft (raw, json)
Hash identifier: 4/R5uA+SWuV09y0MbBxjqxP2qnkI+j4um7I8iigM6tI=
Subject key identifier: 46:14:FF:38:32:08:7B:4A:81:8E:09:D2:5B:B9:1E:F1:01:87:BC:53
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 0193670EA077E53301A2556F7379EEFA7328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
Manifest number: 066B
Signing time: Tue 26 Nov 2024 06:00:32 +0000
Manifest this update: Tue 26 Nov 2024 06:00:32 +0000
Manifest next update: Wed 27 Nov 2024 06:00:32 +0000
Files and hashes: 1: Ria73zQGELBNwwHOA9OJEt0o8EY.roa (hash: HtxAf41dbXBX0JzL39EZFMNEbag9XlRGkEzoEsFD+mI=)
2: n-2qfWTVo3fyrJcc3wQPzW9LnP0.roa (hash: Ce9JWsEMlGTQMDeTRIplZn1VUl/3NewfVsthf2wykDE=)
3: suECSE9zlyeGzMLfHEfCaCuLhco.crl (hash: pIXCM4l/ziTKj0J0NQMT8Zvs213gbr5CNHfoJsD80tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:0e:a0:77:e5:33:01:a2:55:6f:73:79:ee:fa:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: Nov 26 06:00:32 2024 GMT
Not After : Nov 27 06:00:32 2024 GMT
Subject: CN=4614ff3832087b4a818e09d25bb91ef10187bc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:22:08:6a:e7:08:57:a4:8d:bc:e9:20:e9:
b7:c7:01:e2:4a:13:4e:32:3f:65:be:d7:c7:6f:7c:
65:d3:ab:fa:1e:d0:2c:a4:d5:a1:fa:6d:d0:d6:a5:
e7:73:8a:34:82:f7:17:5a:ab:a2:ef:e3:91:22:d8:
f9:0f:d2:39:26:48:6c:e9:46:01:2a:75:9e:24:5e:
ee:70:72:a4:6e:51:80:2e:ac:2c:90:53:c7:d1:11:
c0:b4:a5:f3:84:c1:da:3f:fd:69:f3:c1:8e:4f:9f:
10:d9:0c:e6:ae:07:5c:d6:5e:fa:68:14:16:48:3b:
15:98:83:c0:8f:16:51:05:6e:45:2f:3f:4b:13:2b:
92:92:c9:19:d6:5d:aa:3f:30:1e:3f:04:a0:16:63:
93:47:1b:6f:3d:a8:ff:c3:f8:e2:9a:5b:4d:ad:ed:
e1:05:85:93:b2:6f:ec:a3:61:b3:38:a1:1d:0b:80:
de:9e:ac:e3:04:a3:da:6c:f7:b6:9b:b9:17:75:98:
95:4b:7a:e4:64:2b:a1:c3:84:76:1d:30:49:34:c9:
db:30:8c:96:a3:4c:74:44:2d:09:3a:d8:73:01:99:
2d:48:fe:b6:83:39:64:47:97:0c:68:07:a2:19:87:
88:5b:35:79:cb:b0:bc:08:56:10:55:f8:0e:2b:0d:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:FF:38:32:08:7B:4A:81:8E:09:D2:5B:B9:1E:F1:01:87:BC:53
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:2b:c8:48:bd:87:1b:de:1a:3c:f5:6d:72:4e:3c:49:35:
50:c7:6b:3d:3d:78:1c:05:8f:3d:38:77:33:b1:88:4f:55:1f:
1e:9b:66:a5:48:2c:db:d7:fc:fd:2e:3e:c1:ff:5d:4e:65:f6:
68:94:30:73:fc:58:02:0a:8e:1c:0c:a1:de:df:49:8e:e5:5e:
fb:a3:fc:11:5e:bc:7c:cf:dd:e6:f2:5d:c9:ad:ee:b0:70:3a:
bc:2a:66:c2:f5:b8:14:d0:cc:d1:69:5a:5c:fe:39:86:6e:55:
d5:48:5e:bc:a7:28:c2:ff:b7:65:5a:4f:30:af:f1:6c:7e:14:
2f:d0:15:0f:d5:a1:40:8d:c0:0b:57:d3:7c:73:86:e0:a2:03:
b7:de:46:7d:cf:82:6e:78:65:bf:8b:a6:69:b3:69:d5:5f:be:
fc:e0:12:82:1e:5a:77:34:48:3f:66:a1:e6:0e:e7:16:01:02:
e5:c5:09:41:51:83:87:6f:4c:26:b1:2f:d7:8a:a6:7a:fa:bb:
8f:95:f7:1f:fb:0b:76:db:2f:21:e0:a7:b9:6b:fd:9a:d4:28:
1c:20:6f:40:02:72:03:f6:27:13:54:e4:57:fd:16:2d:f5:30:
45:58:6b:49:c1:0b:23:50:69:5f:35:51:9c:39:96:61:3d:2f:
40:04:0c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNnDqB35TMBolVvc3nu+nMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTEwMjQ4NGY3Mzk3Mjc4NmNjYzJkZjFjNDdjMjY4MmI4
Yjg1Y2EwHhcNMjQxMTI2MDYwMDMyWhcNMjQxMTI3MDYwMDMyWjAzMTEwLwYDVQQD
Eyg0NjE0ZmYzODMyMDg3YjRhODE4ZTA5ZDI1YmI5MWVmMTAxODdiYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ciCGrnCFekjbzpIOm3xwHiShNO
Mj9lvtfHb3xl06v6HtAspNWh+m3Q1qXnc4o0gvcXWqui7+ORItj5D9I5Jkhs6UYB
KnWeJF7ucHKkblGALqwskFPH0RHAtKXzhMHaP/1p88GOT58Q2Qzmrgdc1l76aBQW
SDsVmIPAjxZRBW5FLz9LEyuSkskZ1l2qPzAePwSgFmOTRxtvPaj/w/jimltNre3h
BYWTsm/so2GzOKEdC4DenqzjBKPabPe2m7kXdZiVS3rkZCuhw4R2HTBJNMnbMIyW
o0x0RC0JOthzAZktSP62gzlkR5cMaAeiGYeIWzV5y7C8CFYQVfgOKw0zXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYU/zgyCHtKgY4J0lu5HvEBh7xTMB8GA1UdIwQY
MBaAFLLhAkhPc5cnhszC3xxHwmgri4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMt
NDU5N2UxNDdjMTQwLzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMtNDU5N2UxNDdjMTQw
LzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9AryEi9
hxveGjz1bXJOPEk1UMdrPT14HAWPPTh3M7GIT1UfHptmpUgs29f8/S4+wf9dTmX2
aJQwc/xYAgqOHAyh3t9JjuVe+6P8EV68fM/d5vJdya3usHA6vCpmwvW4FNDM0Wla
XP45hm5V1UhevKcowv+3ZVpPMK/xbH4UL9AVD9WhQI3AC1fTfHOG4KIDt95Gfc+C
bnhlv4umabNp1V++/OASgh5adzRIP2ah5g7nFgEC5cUJQVGDh29MJrEv14qmevq7
j5X3H/sLdtsvIeCnuWv9mtQoHCBvQAJyA/YnE1TkV/0WLfUwRVhrScELI1BpXzVR
nDmWYT0vQAQM8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:57:49 2024 by rpki-client on console-fra.rpki-client.org