Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: Tv3pEpMAxVNXsPI+zJ+PgJsYnrqv3EXtlIVbawt53yM=
Subject key identifier: 6A:6C:11:F0:6E:D5:36:0F:37:3E:A6:94:CE:90:1F:63:3C:D8:76:32
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 01936AEB72D8A0C6659616D2F5355427D352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 06FE
Signing time: Wed 27 Nov 2024 00:00:35 +0000
Manifest this update: Wed 27 Nov 2024 00:00:35 +0000
Manifest next update: Thu 28 Nov 2024 00:00:35 +0000
Files and hashes: 1: KJWYNaY7Bcx8FX7L6sUedRnIZ8A.roa (hash: U6BLWOzo6T3emcopgU8TaikYBEuRCFjPlH41HBa2b7w=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: moCFCY714s2kehYGZXhn7ttPS6eEzdGOX/WQJ6WKWS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:72:d8:a0:c6:65:96:16:d2:f5:35:54:27:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Nov 27 00:00:35 2024 GMT
Not After : Nov 28 00:00:35 2024 GMT
Subject: CN=6a6c11f06ed5360f373ea694ce901f633cd87632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:70:b4:22:0f:71:39:c1:20:11:29:0e:63:
27:2f:a0:4f:8f:74:96:34:bd:de:9f:98:ac:89:3e:
da:2a:5a:ca:52:6f:4e:bb:37:ee:c2:69:70:c4:fa:
83:43:15:49:40:09:ba:b2:c6:89:5e:76:21:0a:10:
c5:11:4a:e9:d0:ed:2b:b8:9d:1d:cc:14:5c:c9:15:
2f:5a:98:27:a7:88:37:97:cd:95:a3:14:b3:83:4a:
4f:f5:99:f2:00:a3:be:99:0e:86:31:a2:4b:dc:63:
f7:f1:10:a3:78:ab:16:71:59:09:05:7d:bf:54:5f:
10:e1:41:ce:67:0a:3d:62:05:df:93:e5:13:88:4c:
6a:f8:11:be:6e:8b:16:61:f8:59:ad:26:9c:3f:fd:
e5:d8:b3:8e:9a:c3:30:93:60:4c:49:75:4a:92:06:
94:04:14:ef:69:2c:a3:09:c1:c3:ee:2b:22:04:98:
71:2e:2a:03:10:2b:d3:15:9d:78:0b:1b:39:fe:f4:
9b:bc:ee:0a:47:5b:4a:3c:7a:16:52:73:08:5f:d0:
5f:f5:bf:89:41:b7:ad:48:09:08:13:b1:6d:8a:7f:
55:58:7b:dd:b9:c3:27:6f:b9:7c:b6:c1:b2:6e:20:
fd:df:d8:66:c9:69:02:dd:18:18:24:bd:5f:8d:0f:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:11:F0:6E:D5:36:0F:37:3E:A6:94:CE:90:1F:63:3C:D8:76:32
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3f:a6:02:e8:94:85:55:b6:73:06:20:cf:fb:33:ee:45:7a:
4b:60:6e:8c:94:19:df:66:c2:44:d9:fd:75:d0:9d:ed:3c:3f:
bf:4e:fa:68:be:6b:a5:10:0e:d9:28:2c:e9:6e:b9:9f:1b:ad:
84:11:be:af:79:7e:70:63:1f:81:0d:8f:4b:36:9f:4e:81:c1:
5d:b5:4d:67:83:90:60:38:a8:05:80:3c:16:53:42:54:c3:b2:
3a:81:ad:7f:73:ba:57:1a:36:eb:36:4c:e4:26:c6:c9:5c:1a:
51:fa:cf:84:6b:8a:ea:0d:7f:4e:e6:6b:69:cf:15:c0:ab:73:
f1:d3:88:27:f9:66:fe:95:67:da:d2:16:e0:0a:f4:fb:87:62:
9d:7f:23:66:b8:e4:38:2b:24:7d:ac:7f:b0:0b:1a:52:7b:1c:
58:f6:3a:c3:d9:13:ba:e0:8b:55:e8:91:d1:a4:15:81:16:98:
07:2c:5d:d2:1d:73:3d:c5:00:66:e3:dd:3b:3b:d6:67:89:16:
73:01:1d:9b:48:4d:0c:27:88:43:78:7c:70:75:05:c6:94:87:
68:f9:e8:36:b2:ad:ae:ff:df:e8:7f:2a:d6:25:86:d8:bb:4f:
6d:3a:10:e6:c5:1d:26:1e:7a:9b:a5:61:69:ea:21:ac:63:a9:
26:7e:fe:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq63LYoMZllhbS9TVUJ9NSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw
OWJlOGUwHhcNMjQxMTI3MDAwMDM1WhcNMjQxMTI4MDAwMDM1WjAzMTEwLwYDVQQD
Eyg2YTZjMTFmMDZlZDUzNjBmMzczZWE2OTRjZTkwMWY2MzNjZDg3NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9FwtCIPcTnBIBEpDmMnL6BPj3SW
NL3en5isiT7aKlrKUm9OuzfuwmlwxPqDQxVJQAm6ssaJXnYhChDFEUrp0O0ruJ0d
zBRcyRUvWpgnp4g3l82VoxSzg0pP9ZnyAKO+mQ6GMaJL3GP38RCjeKsWcVkJBX2/
VF8Q4UHOZwo9YgXfk+UTiExq+BG+bosWYfhZrSacP/3l2LOOmsMwk2BMSXVKkgaU
BBTvaSyjCcHD7isiBJhxLioDECvTFZ14Cxs5/vSbvO4KR1tKPHoWUnMIX9Bf9b+J
QbetSAkIE7Ftin9VWHvducMnb7l8tsGybiD939hmyWkC3RgYJL1fjQ9o/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpsEfBu1TYPNz6mlM6QH2M82HYyMB8GA1UdIwQY
MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt
MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0
LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD+mAuiU
hVW2cwYgz/sz7kV6S2BujJQZ32bCRNn9ddCd7Tw/v076aL5rpRAO2Sgs6W65nxut
hBG+r3l+cGMfgQ2PSzafToHBXbVNZ4OQYDioBYA8FlNCVMOyOoGtf3O6Vxo26zZM
5CbGyVwaUfrPhGuK6g1/TuZrac8VwKtz8dOIJ/lm/pVn2tIW4Ar0+4dinX8jZrjk
OCskfax/sAsaUnscWPY6w9kTuuCLVeiR0aQVgRaYByxd0h1zPcUAZuPdOzvWZ4kW
cwEdm0hNDCeIQ3h8cHUFxpSHaPnoNrKtrv/f6H8q1iWG2LtPbToQ5sUdJh56m6Vh
aeohrGOpJn7+Mw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:22 2024 by rpki-client on console-ams.rpki-client.org