Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: QxKqQckt+NVjkajs+Lzbq7pvtYmebDj63RnewMCWvHI=
Subject key identifier: DC:77:7C:97:3A:DC:F1:C5:CB:C1:19:B4:55:37:A5:CC:F9:8B:D3:76
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 01935689DF43BF846EBF16BD1314D76A8CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 130B
Signing time: Sat 23 Nov 2024 01:01:36 +0000
Manifest this update: Sat 23 Nov 2024 01:01:36 +0000
Manifest next update: Sun 24 Nov 2024 01:01:36 +0000
Files and hashes: 1: h6wzQpJhqqRXLVSSNX76iJRFaAI.roa (hash: M+fHF4o4k7Ua88UXJSXnPG24mCESu8q7y7YeuYHBRGI=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: kNHK/8hPhUy+bCXrbPqRgoRe/T+6Yc0XnT5as5kTqMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:df:43:bf:84:6e:bf:16:bd:13:14:d7:6a:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Nov 23 01:01:36 2024 GMT
Not After : Nov 24 01:01:36 2024 GMT
Subject: CN=dc777c973adcf1c5cbc119b45537a5ccf98bd376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:ca:4e:ab:7f:89:a9:b1:de:84:81:94:66:
f0:c9:0a:20:0f:ba:a3:e9:00:af:d7:ab:63:13:c5:
3e:a6:76:02:75:c2:91:9d:3a:37:86:a6:4a:7e:ac:
d8:10:0e:5c:67:7b:81:b8:68:ba:f5:04:f5:aa:ad:
68:4d:0e:14:f0:15:34:7b:00:71:9a:50:42:50:00:
b5:bb:fd:71:c0:79:80:b9:2f:13:70:28:33:a1:23:
d7:39:df:18:e7:36:bf:d8:cc:be:22:b7:20:fd:da:
e4:14:fb:7d:3d:71:87:c1:e4:13:8d:34:ca:5c:76:
fd:95:c6:b9:de:30:ee:88:df:07:60:80:e0:b5:61:
c0:40:f7:73:42:33:51:5f:90:4e:6d:cf:f7:87:f6:
b4:43:cb:4d:79:3e:18:c3:d6:f4:35:ea:11:a5:47:
2d:81:fe:76:6c:f3:bb:9e:1f:49:99:db:f6:5c:5c:
fc:95:d7:78:4c:b0:8a:dc:ea:91:f6:15:22:f5:4a:
2a:57:cc:aa:a6:82:94:47:b0:71:b7:93:e5:fe:d9:
f5:b8:19:01:b2:67:22:be:5a:c3:7f:09:c1:60:db:
e2:dc:86:1c:b6:d8:2e:81:fa:71:3a:a5:db:7b:e5:
99:03:6d:61:19:a1:c3:02:ba:ca:bd:19:9f:20:6d:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:77:7C:97:3A:DC:F1:C5:CB:C1:19:B4:55:37:A5:CC:F9:8B:D3:76
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9b:4e:21:5b:d5:69:9d:83:45:ae:a2:14:f8:fa:d1:36:0d:
1d:2d:e1:c8:41:22:71:a1:50:2c:32:c3:91:01:6a:56:3c:e0:
a3:c4:e5:48:79:c7:0a:f1:52:12:bc:08:33:63:40:6a:16:ae:
0a:a0:42:ac:79:43:c2:b1:6a:48:75:78:05:dd:b3:25:d2:1d:
fe:d7:a2:6f:25:14:22:2a:d5:48:ef:41:31:07:9c:46:af:4f:
8e:cc:72:b3:01:42:74:19:2f:0d:b0:61:6a:d3:95:ee:64:d5:
ca:a9:6e:5d:54:b8:3a:c3:a0:e7:e9:17:2e:67:44:b9:53:46:
3a:61:35:00:ae:3a:8b:29:78:4c:3b:50:5c:91:23:52:95:fd:
04:74:dd:a6:95:4b:7a:96:70:b6:79:ed:a1:74:19:4d:ac:e4:
57:c0:6b:d7:6b:b8:97:64:04:a0:c3:a4:af:c6:e1:13:e0:af:
cf:92:c0:f4:be:a0:fa:1b:dc:18:c2:96:91:34:e8:62:f6:a4:
37:59:b5:db:b0:3c:da:f7:a9:2e:1b:3b:d0:19:9c:99:6a:17:
73:18:67:6f:28:6f:47:04:b3:5c:e7:df:11:58:0e:61:b3:d1:
36:df:f4:10:ea:4b:64:90:13:b9:17:7e:6d:80:67:ad:06:0a:
8c:1a:d4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWid9Dv4Ruvxa9ExTXaozgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh
ZWQyMzgwHhcNMjQxMTIzMDEwMTM2WhcNMjQxMTI0MDEwMTM2WjAzMTEwLwYDVQQD
EyhkYzc3N2M5NzNhZGNmMWM1Y2JjMTE5YjQ1NTM3YTVjY2Y5OGJkMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlzKTqt/iamx3oSBlGbwyQogD7qj
6QCv16tjE8U+pnYCdcKRnTo3hqZKfqzYEA5cZ3uBuGi69QT1qq1oTQ4U8BU0ewBx
mlBCUAC1u/1xwHmAuS8TcCgzoSPXOd8Y5za/2My+Ircg/drkFPt9PXGHweQTjTTK
XHb9lca53jDuiN8HYIDgtWHAQPdzQjNRX5BObc/3h/a0Q8tNeT4Yw9b0NeoRpUct
gf52bPO7nh9Jmdv2XFz8ldd4TLCK3OqR9hUi9UoqV8yqpoKUR7Bxt5Pl/tn1uBkB
smcivlrDfwnBYNvi3IYcttgugfpxOqXbe+WZA21hGaHDArrKvRmfIG2+xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx3fJc63PHFy8EZtFU3pcz5i9N2MB8GA1UdIwQY
MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt
YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy
LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkptOIVvV
aZ2DRa6iFPj60TYNHS3hyEEicaFQLDLDkQFqVjzgo8TlSHnHCvFSErwIM2NAahau
CqBCrHlDwrFqSHV4Bd2zJdId/teibyUUIirVSO9BMQecRq9PjsxyswFCdBkvDbBh
atOV7mTVyqluXVS4OsOg5+kXLmdEuVNGOmE1AK46iyl4TDtQXJEjUpX9BHTdppVL
epZwtnntoXQZTazkV8Br12u4l2QEoMOkr8bhE+Cvz5LA9L6g+hvcGMKWkTToYvak
N1m127A82vepLhs70BmcmWoXcxhnbyhvRwSzXOffEVgOYbPRNt/0EOpLZJATuRd+
bYBnrQYKjBrUfA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:55 2024 by rpki-client on console-ams.rpki-client.org