Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
File: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft (raw, json)
Hash identifier: yNW3oNF43YPL+im3HCu6AWJMkor6FJxa9QyiiRmNtiA=
Subject key identifier: 7F:FC:57:10:D0:67:BB:41:34:0F:51:2C:4D:11:1C:E7:51:1F:AA:31
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 01935B0A7480BE675F9F3CEB8F20F5F7570A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
Manifest number: 0D34
Signing time: Sat 23 Nov 2024 22:00:32 +0000
Manifest this update: Sat 23 Nov 2024 22:00:32 +0000
Manifest next update: Sun 24 Nov 2024 22:00:32 +0000
Files and hashes: 1: QJg-CbaRmp7x7cWECceto1So7ig.roa (hash: VCDbu3ps5PQjvpKEg6A+yNRmqHLrVBgU+3KXmVTaxIg=)
2: aoIUzEs6QhPKBDGrylsB49coCpQ.roa (hash: njsc2yMTQjcEgBeAXcbusvFBe4XeVh5KYG+KfigxNV4=)
3: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl (hash: aNAWUHeeFRjZiDPWYviz0VGE6ahNyq2w/BD9fKunInY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:0a:74:80:be:67:5f:9f:3c:eb:8f:20:f5:f7:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Nov 23 22:00:32 2024 GMT
Not After : Nov 24 22:00:32 2024 GMT
Subject: CN=7ffc5710d067bb41340f512c4d111ce7511faa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:74:45:a8:d3:13:dc:78:4d:a6:4d:fa:47:
66:16:72:68:ff:48:c1:3d:59:45:24:f1:3a:d7:a6:
d8:c8:f9:ff:71:37:f6:21:7c:fd:48:ad:70:fb:7b:
3d:47:0c:f9:0a:2d:c4:2a:53:fb:49:69:2d:8a:61:
f2:14:52:7c:fa:8e:39:b7:00:3a:bb:3f:15:52:aa:
45:71:df:d7:f9:05:ae:d4:0e:13:4a:77:33:0a:e4:
41:03:ac:dd:e2:35:6f:82:12:50:ad:e1:5a:76:9e:
d5:d8:1a:5f:34:cf:6c:cc:49:c8:d5:f6:12:97:7b:
dc:4a:e6:48:b9:26:17:d9:ac:c9:74:d0:34:60:97:
4e:86:62:f3:90:de:4d:04:47:a3:d2:2c:94:45:75:
be:6d:c3:08:e3:fb:23:98:60:1f:ba:a4:47:9d:f6:
e4:9b:d9:ca:53:58:13:c6:a6:4f:22:5a:bd:03:29:
5f:b9:3d:6d:9d:e2:f1:5d:8c:37:9c:4d:be:ed:9a:
98:cd:bb:b8:75:27:df:44:bc:cf:3f:f1:e2:a9:ca:
0e:72:4f:82:91:14:2d:be:1d:f8:6c:28:6e:b1:a6:
5e:81:1e:80:66:5d:4f:e1:01:85:2f:c6:ed:5b:b5:
b3:d3:30:3a:42:ee:02:78:22:19:49:c0:92:9b:25:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:57:10:D0:67:BB:41:34:0F:51:2C:4D:11:1C:E7:51:1F:AA:31
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:57:3e:29:cc:28:77:45:b4:df:98:53:67:60:a8:17:4d:
1b:11:f1:ec:bb:60:31:98:21:17:93:92:68:c0:4f:fc:d1:04:
36:b5:c6:e9:fc:fa:bb:60:8b:10:bc:54:80:44:41:f6:63:8a:
7a:36:37:9b:0c:e0:c7:0e:ad:66:59:5c:46:d7:70:6e:61:03:
db:7f:74:3e:36:3b:90:25:1b:31:f5:74:bd:b2:b7:7e:cb:03:
ea:00:5e:ff:c2:fa:36:14:eb:14:47:e2:6c:95:40:0f:1a:da:
49:cc:d9:92:34:63:d1:47:be:5d:13:f9:a6:e4:7e:75:81:c9:
64:fe:bd:c8:2c:3e:dc:44:36:60:94:26:08:aa:39:01:27:b3:
1e:7c:e4:c4:00:2d:f4:23:b7:61:05:a4:d1:cd:1e:50:04:71:
4f:ac:92:fa:38:eb:21:fc:28:43:27:6e:e0:30:11:c6:d5:1f:
ac:16:75:a5:56:e4:7e:8d:5a:0b:dd:c3:7e:f3:bf:88:b6:7a:
69:ce:56:4e:a4:35:95:d3:b6:0e:51:fc:67:ad:39:c3:4a:d9:
94:83:45:ca:34:51:6a:db:ee:12:25:bd:50:b4:52:a2:7e:dd:
8a:db:25:16:f9:a7:b6:ee:9b:5f:37:87:fd:98:c4:c1:f8:79:
73:ba:05:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNbCnSAvmdfnzzrjyD191cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDJkMDI3N2NlOTkxMjEzZTY3YjdiYmRjNzY1MDQ5MGY4
YTMxYmYwHhcNMjQxMTIzMjIwMDMyWhcNMjQxMTI0MjIwMDMyWjAzMTEwLwYDVQQD
Eyg3ZmZjNTcxMGQwNjdiYjQxMzQwZjUxMmM0ZDExMWNlNzUxMWZhYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVd0RajTE9x4TaZN+kdmFnJo/0jB
PVlFJPE616bYyPn/cTf2IXz9SK1w+3s9Rwz5Ci3EKlP7SWktimHyFFJ8+o45twA6
uz8VUqpFcd/X+QWu1A4TSnczCuRBA6zd4jVvghJQreFadp7V2BpfNM9szEnI1fYS
l3vcSuZIuSYX2azJdNA0YJdOhmLzkN5NBEej0iyURXW+bcMI4/sjmGAfuqRHnfbk
m9nKU1gTxqZPIlq9AylfuT1tneLxXYw3nE2+7ZqYzbu4dSffRLzPP/HiqcoOck+C
kRQtvh34bChusaZegR6AZl1P4QGFL8btW7Wz0zA6Qu4CeCIZScCSmyUeswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/8VxDQZ7tBNA9RLE0RHOdRH6oxMB8GA1UdIwQY
MBaAFIzS0Cd86ZEhPme3u9x2UEkPijG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTkt
Y2FkMzAwOTlhYjFlLzEvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTktY2FkMzAwOTlhYjFl
LzEvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVVXPinM
KHdFtN+YU2dgqBdNGxHx7LtgMZghF5OSaMBP/NEENrXG6fz6u2CLELxUgERB9mOK
ejY3mwzgxw6tZllcRtdwbmED2390PjY7kCUbMfV0vbK3fssD6gBe/8L6NhTrFEfi
bJVADxraSczZkjRj0Ue+XRP5puR+dYHJZP69yCw+3EQ2YJQmCKo5ASezHnzkxAAt
9CO3YQWk0c0eUARxT6yS+jjrIfwoQydu4DARxtUfrBZ1pVbkfo1aC93DfvO/iLZ6
ac5WTqQ1ldO2DlH8Z605w0rZlINFyjRRatvuEiW9ULRSon7ditslFvmntu6bXzeH
/ZjEwfh5c7oFwA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:18:49 2024 by rpki-client on console-ams.rpki-client.org