Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: IiEGRcl2NizuDBwXFdyHrjuBvj4AHLz6nOIzwZlEPes=
Subject key identifier: 27:42:0A:95:C8:DF:1B:B1:B2:72:22:D3:0A:71:2F:28:D7:8A:91:11
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 019406B41E1F397CCB340ADE0DCB4B3F92DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 108C
Signing time: Fri 27 Dec 2024 06:00:54 +0000
Manifest this update: Fri 27 Dec 2024 06:00:54 +0000
Manifest next update: Sat 28 Dec 2024 06:00:54 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: v/rgEgT9viSysSIjTtZLfyw8SU8B/LabnKCUidfDe0I=)
2: IszRMTB3G-DJ4axv_EpdvVlf6gw.roa (hash: CY0TRU9a1uxqs27AvjddrwTXdq92hZRTpG3jg6Iljv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b4:1e:1f:39:7c:cb:34:0a:de:0d:cb:4b:3f:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Dec 27 06:00:54 2024 GMT
Not After : Dec 28 06:00:54 2024 GMT
Subject: CN=27420a95c8df1bb1b27222d30a712f28d78a9111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:e5:e1:bc:c4:f4:e0:67:ab:c5:7d:87:d1:
23:44:7e:2c:32:f8:68:85:93:7f:45:2c:36:d1:fd:
74:f8:26:82:c2:c4:35:86:1e:8e:c9:1f:e9:d4:94:
72:ce:63:28:1c:6d:a1:43:3e:89:8c:55:73:74:e1:
bb:3b:77:07:e6:0e:63:d0:d3:0b:97:5f:b6:c3:68:
6d:a4:69:08:cb:48:e3:08:f2:a4:54:f6:65:ae:0e:
f9:61:e9:ce:3b:dc:af:68:5c:7a:cc:e3:a5:c4:f8:
fa:a9:e8:32:42:2e:08:5d:77:45:15:6a:c9:95:91:
97:0d:7f:6e:a3:01:44:6d:fa:fa:df:06:af:27:65:
47:33:48:4e:5d:0c:31:b9:ea:5a:cc:65:d5:6c:af:
f3:97:50:1f:10:df:77:7e:36:83:1b:bc:f9:36:5d:
cf:4a:f3:18:56:f9:29:12:cc:cf:c3:52:49:1b:e7:
91:44:52:6c:73:33:03:a9:b1:80:7a:dc:ec:c0:50:
1d:69:57:0a:9b:8a:75:cf:43:7f:a4:9b:7d:c3:ab:
16:a6:17:c2:c2:5b:cf:aa:f5:e0:39:a4:69:27:40:
7e:56:aa:bb:f4:04:67:84:26:9c:5e:c7:4c:9a:a4:
e6:61:95:9c:3d:9d:e8:03:a8:3e:f5:b5:36:ac:d2:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:0A:95:C8:DF:1B:B1:B2:72:22:D3:0A:71:2F:28:D7:8A:91:11
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:73:3c:59:34:6d:d8:24:b3:b6:4a:75:02:d3:fb:a1:26:
1f:cb:f5:1d:9e:56:86:f5:2f:eb:ff:24:97:65:bf:41:39:29:
1a:4f:06:7a:ab:fa:34:25:59:5b:b6:c0:7b:6f:5f:76:e3:29:
f5:22:9a:cd:68:22:04:e9:dd:2f:6b:47:6d:0b:ce:c7:ce:12:
f7:88:1a:c0:56:12:ec:40:13:b1:f4:af:93:bc:da:3e:7f:72:
9c:af:ed:c6:3f:09:5f:e4:27:b0:b2:8b:3f:a8:20:b9:9c:42:
96:97:bd:9e:95:19:5d:88:9d:3e:80:94:39:46:11:96:33:69:
a4:0b:75:7f:46:51:84:c4:51:02:fe:a8:c7:de:ca:61:ce:4e:
55:95:f8:64:21:87:3c:2a:c0:08:1c:19:ed:71:ff:08:2a:65:
a9:f8:8a:90:7d:42:1c:c8:37:4f:81:81:dc:04:b1:f5:01:bd:
f2:f7:e6:9a:60:57:62:39:7a:7d:11:f3:93:53:83:9a:07:41:
a3:41:54:9e:bb:89:6d:d3:3a:e8:9d:6a:54:8f:42:80:ba:36:
be:c5:54:b4:69:29:1e:83:4e:77:07:29:db:cb:52:1b:38:cb:
7f:db:1e:7d:c6:39:1e:80:2b:96:a0:4f:70:75:38:56:70:9b:
f0:fd:fd:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGtB4fOXzLNAreDctLP5LfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjNlMTEzY2NmYWVlZTE5OTZiYTkwYzQ2MTQwN2ZjZTI5
MGE5ZGIwHhcNMjQxMjI3MDYwMDU0WhcNMjQxMjI4MDYwMDU0WjAzMTEwLwYDVQQD
EygyNzQyMGE5NWM4ZGYxYmIxYjI3MjIyZDMwYTcxMmYyOGQ3OGE5MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRnl4bzE9OBnq8V9h9EjRH4sMvho
hZN/RSw20f10+CaCwsQ1hh6OyR/p1JRyzmMoHG2hQz6JjFVzdOG7O3cH5g5j0NML
l1+2w2htpGkIy0jjCPKkVPZlrg75YenOO9yvaFx6zOOlxPj6qegyQi4IXXdFFWrJ
lZGXDX9uowFEbfr63wavJ2VHM0hOXQwxuepazGXVbK/zl1AfEN93fjaDG7z5Nl3P
SvMYVvkpEszPw1JJG+eRRFJsczMDqbGAetzswFAdaVcKm4p1z0N/pJt9w6sWphfC
wlvPqvXgOaRpJ0B+Vqq79ARnhCacXsdMmqTmYZWcPZ3oA6g+9bU2rNI6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdCCpXI3xuxsnIi0wpxLyjXipERMB8GA1UdIwQY
MBaAFO6z4RPM+u7hmWupDEYUB/zikKnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JQaEU4ejY3dUdaYTZrTVJoUUhfT0tRcWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZDVlYTktOGJkMS00MWVmLTgzNTYt
ZmFkYzM1MjRmYTMwLzEvN3JQaEU4ejY3dUdaYTZrTVJoUUhfT0tRcWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZDVlYTktOGJkMS00MWVmLTgzNTYtZmFkYzM1MjRmYTMw
LzEvN3JQaEU4ejY3dUdaYTZrTVJoUUhfT0tRcWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/ZzPFk0
bdgks7ZKdQLT+6EmH8v1HZ5WhvUv6/8kl2W/QTkpGk8Geqv6NCVZW7bAe29fduMp
9SKazWgiBOndL2tHbQvOx84S94gawFYS7EATsfSvk7zaPn9ynK/txj8JX+QnsLKL
P6gguZxClpe9npUZXYidPoCUOUYRljNppAt1f0ZRhMRRAv6ox97KYc5OVZX4ZCGH
PCrACBwZ7XH/CCplqfiKkH1CHMg3T4GB3ASx9QG98vfmmmBXYjl6fRHzk1ODmgdB
o0FUnruJbdM66J1qVI9CgLo2vsVUtGkpHoNOdwcp28tSGzjLf9sefcY5HoArlqBP
cHU4VnCb8P39vw==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:34 2024 by rpki-client on console-fra.rpki-client.org