Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: CXDGYeLeU5wtLev6UDTO4yyN+/Up3Rd7uRQgHv6gFUU=
Subject key identifier: 7A:77:59:39:8A:17:C3:5A:D6:7D:DC:F2:1B:91:0F:D0:07:45:18:CE
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019369DAE7A7AADE3ED481B5C7932E57C61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:02:54 +0000
Manifest this update: Tue 26 Nov 2024 19:02:54 +0000
Manifest next update: Wed 27 Nov 2024 19:02:54 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 3+yxtaFLe12Lbex+TfFO/iFbIR9Cg3T3MNTDl9cXZSw=)
2: bfmFbDra-6hZJoAKZPkidrJ9Q78.roa (hash: nG0HerAoGqMAo9L3MP93DVwxuHHpHfRJeA5vVVIeHnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:e7:a7:aa:de:3e:d4:81:b5:c7:93:2e:57:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Nov 26 19:02:54 2024 GMT
Not After : Nov 27 19:02:54 2024 GMT
Subject: CN=7a7759398a17c35ad67ddcf21b910fd0074518ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:67:fa:1b:aa:bf:5d:20:22:04:21:63:13:
94:3f:6b:60:d6:96:c1:cb:be:68:b7:9c:05:2b:fa:
56:22:82:a3:b0:c2:b4:33:37:da:f9:d5:3a:28:23:
d0:b9:ff:6d:6d:dc:4f:e5:58:84:7f:25:35:a5:35:
64:44:5b:10:9f:69:8a:52:63:33:b3:09:b8:77:2c:
14:03:91:1c:5b:df:86:13:3d:b8:8b:77:9f:eb:3c:
60:e9:bb:9e:0e:52:72:a4:74:04:40:0d:a8:3e:bf:
33:ba:de:08:04:f8:03:4e:d1:1c:da:69:e9:31:29:
86:54:d9:97:ad:c1:d0:12:1a:fa:ff:ed:4d:fc:08:
30:37:05:84:76:1a:4c:9a:fa:f1:82:ee:8d:9b:a7:
9d:67:96:16:45:28:bb:f1:db:65:39:82:82:29:cc:
51:19:1f:92:9b:2a:ab:79:e0:49:87:86:fa:e3:94:
49:35:3b:e6:0a:ea:3f:47:d1:ed:a8:db:23:22:cb:
2d:50:fc:60:5e:2e:94:82:da:f0:a6:0f:b7:8b:3e:
70:6b:a1:9c:29:84:d5:52:31:24:c7:6c:46:dc:be:
00:02:cf:e2:a1:79:38:a5:ec:83:ec:f9:4a:a3:05:
fe:a8:91:68:0a:50:9f:aa:8a:bc:dd:13:e2:3b:0c:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:59:39:8A:17:C3:5A:D6:7D:DC:F2:1B:91:0F:D0:07:45:18:CE
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:44:6d:cd:11:b2:9c:0d:5a:5b:8e:6c:e4:43:26:b6:23:c8:
aa:8c:23:05:2e:ca:6c:d9:4e:55:41:65:ae:54:60:a7:32:7f:
c7:7e:47:26:23:7f:5a:9f:fd:4d:19:df:bb:c6:92:13:dc:36:
c8:c3:33:55:f9:92:30:e3:44:8d:60:ac:4d:04:ae:ef:7b:0c:
a8:56:e8:1b:53:af:a0:c5:00:14:75:68:3a:f9:6c:6c:65:69:
a5:aa:63:91:f9:4d:6c:15:66:14:39:b1:da:6d:49:0f:8c:38:
83:94:88:60:8b:6b:1d:fc:f9:ba:dd:33:5d:e7:67:40:e7:15:
03:42:fd:3e:30:8f:0f:33:3f:c0:e0:02:ab:5f:e3:06:ab:ed:
e4:3b:7d:1d:97:a3:b3:29:ed:87:bc:df:f4:5e:25:3c:2c:05:
b0:a7:4e:98:4d:3d:f4:e9:02:01:7f:b4:75:fe:a4:45:49:2b:
c5:b0:9e:67:c7:a9:46:d1:22:44:fc:9d:60:17:8c:42:c5:42:
77:c5:58:8c:2f:ef:cf:d4:10:1b:04:1e:07:98:81:67:a3:9b:
85:57:c6:c4:65:0e:c4:85:96:8e:9c:7a:74:12:a2:b5:ad:50:
ec:72:87:76:9e:c9:e3:2a:cb:67:57:22:9c:e0:02:81:eb:20:
72:d7:84:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2uenqt4+1IG1x5MuV8YaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx
ZDQ2Y2IwHhcNMjQxMTI2MTkwMjU0WhcNMjQxMTI3MTkwMjU0WjAzMTEwLwYDVQQD
Eyg3YTc3NTkzOThhMTdjMzVhZDY3ZGRjZjIxYjkxMGZkMDA3NDUxOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7pn+huqv10gIgQhYxOUP2tg1pbB
y75ot5wFK/pWIoKjsMK0Mzfa+dU6KCPQuf9tbdxP5ViEfyU1pTVkRFsQn2mKUmMz
swm4dywUA5EcW9+GEz24i3ef6zxg6bueDlJypHQEQA2oPr8zut4IBPgDTtEc2mnp
MSmGVNmXrcHQEhr6/+1N/AgwNwWEdhpMmvrxgu6Nm6edZ5YWRSi78dtlOYKCKcxR
GR+SmyqreeBJh4b645RJNTvmCuo/R9HtqNsjIsstUPxgXi6Ugtrwpg+3iz5wa6Gc
KYTVUjEkx2xG3L4AAs/ioXk4peyD7PlKowX+qJFoClCfqoq83RPiOwzCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp3WTmKF8Na1n3c8huRD9AHRRjOMB8GA1UdIwQY
MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct
OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw
LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxERtzRGy
nA1aW45s5EMmtiPIqowjBS7KbNlOVUFlrlRgpzJ/x35HJiN/Wp/9TRnfu8aSE9w2
yMMzVfmSMONEjWCsTQSu73sMqFboG1OvoMUAFHVoOvlsbGVppapjkflNbBVmFDmx
2m1JD4w4g5SIYItrHfz5ut0zXednQOcVA0L9PjCPDzM/wOACq1/jBqvt5Dt9HZej
synth7zf9F4lPCwFsKdOmE099OkCAX+0df6kRUkrxbCeZ8epRtEiRPydYBeMQsVC
d8VYjC/vz9QQGwQeB5iBZ6ObhVfGxGUOxIWWjpx6dBKita1Q7HKHdp7J4yrLZ1ci
nOACgesgcteE5A==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:50 2024 by rpki-client on console-ams.rpki-client.org