Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
File: sof_KnM-M76vU0lKkO7BUrvHWLw.mft (raw, json)
Hash identifier: TPByM7YBpykOtZIQMPAPQRT8twySBXBdycqhYvoJZgs=
Subject key identifier: E9:61:34:27:0E:47:E0:90:87:04:1D:42:46:45:77:A0:B4:59:5A:9F
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 019357D2DE59F5AFE972410BBE8742A58BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
Manifest number: 1291
Signing time: Sat 23 Nov 2024 07:00:57 +0000
Manifest this update: Sat 23 Nov 2024 07:00:57 +0000
Manifest next update: Sun 24 Nov 2024 07:00:57 +0000
Files and hashes: 1: 0kW1TDfI9q6fxVYuKR51Kvqsmjk.roa (hash: BWFM+1Rz4lxzOiEU1vKhEB1GQDsmewa6ZTWhGeddIa0=)
2: sof_KnM-M76vU0lKkO7BUrvHWLw.crl (hash: WlkI2VBdcOOSDYpU3fjv65EDzUEggVgh59mOc/H7Ic0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:de:59:f5:af:e9:72:41:0b:be:87:42:a5:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: Nov 23 07:00:57 2024 GMT
Not After : Nov 24 07:00:57 2024 GMT
Subject: CN=e96134270e47e09087041d42464577a0b4595a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:5d:fa:ea:a6:c3:ef:58:a2:2a:ec:70:b3:
39:cf:8b:73:23:fb:8f:30:ba:fa:5d:47:7c:f6:dd:
7a:16:6d:0f:3e:7a:f9:73:dd:2b:b3:29:7b:38:e1:
d5:5a:2d:19:79:c1:1c:66:76:9e:81:a1:19:c7:ef:
c2:aa:96:20:d3:25:dd:e4:5a:c2:f9:92:ec:2b:47:
cc:3c:e0:69:b3:35:f5:20:03:0e:f2:ee:0a:55:4b:
ab:42:01:92:23:bc:62:c8:a4:cd:5a:33:cf:5a:56:
bb:e7:86:1f:09:1f:61:d2:52:4f:ab:37:10:78:6d:
e3:f5:27:30:90:f0:2b:e2:5a:db:96:fb:db:0e:ad:
23:18:5c:46:2a:bd:29:08:70:f0:b4:d5:64:9d:31:
d8:5d:2b:cd:32:1c:dc:8e:68:23:9e:3d:f1:ea:9b:
90:c9:bf:da:3c:46:48:50:64:0c:91:b2:4a:4c:83:
a7:51:fc:eb:18:be:42:06:36:9e:d6:71:dd:fb:4d:
0f:dc:85:77:f3:41:c7:8a:e3:b4:06:e3:7d:29:24:
3f:a4:45:ab:e3:44:c4:39:10:8e:80:76:32:c3:80:
1a:73:84:49:de:2c:5e:6d:09:41:44:82:8b:df:ad:
c6:74:00:86:b2:6e:ed:91:72:05:60:bf:2c:87:df:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:61:34:27:0E:47:E0:90:87:04:1D:42:46:45:77:A0:B4:59:5A:9F
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:ec:a2:10:f0:26:50:cd:65:f1:4c:97:f3:f7:a6:cd:cf:
ed:57:e1:17:49:18:2d:f8:6d:4e:10:73:b3:46:17:ce:73:d9:
e9:60:5c:e6:a6:76:c3:fe:9c:22:24:db:67:ce:7b:03:8a:8e:
80:92:0c:2c:b2:d1:ac:c2:0b:b2:3b:ce:1e:ee:b0:10:fc:99:
a3:e2:e1:68:45:1c:b8:7d:ca:a5:cc:f2:da:99:eb:dc:57:de:
f0:59:55:d5:95:dc:e9:6c:f4:08:f5:ee:3a:d5:49:cf:d8:b7:
5f:d0:0b:83:01:58:0f:38:b7:48:78:2f:02:d0:4b:53:71:c1:
1d:8b:f6:3c:14:51:87:26:e0:2f:4b:94:b4:55:83:a7:10:6b:
5b:f7:eb:29:12:f0:f5:c7:f4:3e:ee:7a:93:a2:33:3f:e9:76:
13:69:8e:66:8c:18:0c:63:5d:ab:ff:cd:94:bc:e2:a3:bb:19:
7e:e4:2d:52:d3:58:07:b6:76:e5:e9:3f:cb:2d:aa:35:82:4a:
a0:08:6f:32:c4:63:39:a1:91:87:b0:a6:01:93:72:f7:39:63:
29:f4:77:aa:35:70:97:da:c9:f0:46:c0:5c:58:a2:5f:1c:e7:
ad:f7:84:9a:f9:ec:61:34:8a:06:8a:d4:90:89:e9:c9:9d:ec:
74:86:0a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0t5Z9a/pckELvodCpYu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODdmZjJhNzMzZTMzYmVhZjUzNDk0YTkwZWVjMTUyYmJj
NzU4YmMwHhcNMjQxMTIzMDcwMDU3WhcNMjQxMTI0MDcwMDU3WjAzMTEwLwYDVQQD
EyhlOTYxMzQyNzBlNDdlMDkwODcwNDFkNDI0NjQ1NzdhMGI0NTk1YTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJNd+uqmw+9YoirscLM5z4tzI/uP
MLr6XUd89t16Fm0PPnr5c90rsyl7OOHVWi0ZecEcZnaegaEZx+/CqpYg0yXd5FrC
+ZLsK0fMPOBpszX1IAMO8u4KVUurQgGSI7xiyKTNWjPPWla754YfCR9h0lJPqzcQ
eG3j9ScwkPAr4lrblvvbDq0jGFxGKr0pCHDwtNVknTHYXSvNMhzcjmgjnj3x6puQ
yb/aPEZIUGQMkbJKTIOnUfzrGL5CBjae1nHd+00P3IV380HHiuO0BuN9KSQ/pEWr
40TEORCOgHYyw4Aac4RJ3ixebQlBRIKL363GdACGsm7tkXIFYL8sh9/7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlhNCcOR+CQhwQdQkZFd6C0WVqfMB8GA1UdIwQY
MBaAFLKH/ypzPjO+r1NJSpDuwVK7x1i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYt
NGY1ZWMwYTdlMDA2LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYtNGY1ZWMwYTdlMDA2
LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjfsohDw
JlDNZfFMl/P3ps3P7VfhF0kYLfhtThBzs0YXznPZ6WBc5qZ2w/6cIiTbZ857A4qO
gJIMLLLRrMILsjvOHu6wEPyZo+LhaEUcuH3Kpczy2pnr3Ffe8FlV1ZXc6Wz0CPXu
OtVJz9i3X9ALgwFYDzi3SHgvAtBLU3HBHYv2PBRRhybgL0uUtFWDpxBrW/frKRLw
9cf0Pu56k6IzP+l2E2mOZowYDGNdq//NlLzio7sZfuQtUtNYB7Z25ek/yy2qNYJK
oAhvMsRjOaGRh7CmAZNy9zljKfR3qjVwl9rJ8EbAXFiiXxznrfeEmvnsYTSKBorU
kInpyZ3sdIYKwA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:15 2024 by rpki-client on console-ams.rpki-client.org