Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: Je+kqlS6NrEBOQWc/iKB+bNphybXvF7cFdK+YxZ5P7o=
Subject key identifier: 94:0F:C9:17:8A:D2:5E:8C:35:F0:39:CF:70:AB:1F:08:23:34:F0:8A
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 019368C63DB1346D8E86465209899BC10E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 14:00:42 +0000
Manifest this update: Tue 26 Nov 2024 14:00:42 +0000
Manifest next update: Wed 27 Nov 2024 14:00:42 +0000
Files and hashes: 1: 5AH1h4NyVjQ13ETy-e_gxxUeMO0.roa (hash: YDzcaiAcRe3E+XVxNNIlIo8aFfopUyxWoIIuZFhkJmA=)
2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: HhpKich5HNCc5B0KPUcn1rAC2wA1tQGT/qCpolcAknM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:3d:b1:34:6d:8e:86:46:52:09:89:9b:c1:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Nov 26 14:00:42 2024 GMT
Not After : Nov 27 14:00:42 2024 GMT
Subject: CN=940fc9178ad25e8c35f039cf70ab1f082334f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:f4:84:b8:d8:82:57:f3:ba:51:24:3a:dd:
e3:e2:42:a3:d5:a2:58:a4:c4:2b:09:18:ab:9d:72:
cf:1a:30:cf:42:e4:96:4f:34:db:9f:e3:cb:45:55:
2d:6b:bc:07:e3:1e:4b:db:f6:0f:8f:0a:b7:f6:3c:
ef:1a:09:82:f8:8a:47:9b:d4:70:fc:05:ad:ab:78:
cb:ba:7e:7d:48:f2:78:86:de:77:73:d3:71:5a:10:
b6:2d:de:d3:bf:1b:aa:60:c8:70:fe:26:e8:4c:5a:
6b:cf:ca:16:83:ee:90:56:4d:57:83:e4:25:ad:b8:
78:6b:50:f7:67:84:79:1d:5c:ce:9a:e4:bc:0f:9a:
52:6e:84:79:b5:f2:d7:2c:bc:50:c8:89:50:84:7a:
9d:4e:b4:4b:3b:af:9c:9a:9d:27:a9:c1:76:3e:f9:
fa:23:cc:95:84:5b:21:4a:37:5b:55:de:83:24:64:
a4:60:dc:19:18:a6:92:4d:ba:50:c5:77:e3:24:78:
9e:8f:84:5c:db:30:71:16:9b:99:f5:c3:b7:5e:11:
d1:3d:be:e4:e1:c1:bc:49:b0:c5:d0:45:c0:5f:23:
02:ca:0c:73:2c:c7:3e:0e:6e:60:be:cb:05:35:ca:
17:88:30:63:4c:00:a1:41:a7:fb:bc:55:99:d0:e5:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:C9:17:8A:D2:5E:8C:35:F0:39:CF:70:AB:1F:08:23:34:F0:8A
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:69:10:e5:b1:e4:3e:34:ac:4f:53:1b:f1:a9:f8:31:cc:2a:
cd:0a:c2:7c:31:2d:e7:db:06:0a:e0:3d:d0:a1:d3:eb:c6:e3:
23:47:f2:fd:37:61:63:e0:5b:35:f0:99:f2:b4:9e:ce:ff:af:
16:29:37:42:ed:75:5b:ce:4c:2c:61:16:59:22:6f:c4:50:72:
05:45:ee:cc:2e:2b:cb:d3:b2:cf:da:85:29:8c:7e:ed:17:55:
f5:f3:9d:78:26:72:09:fe:1e:39:d2:b4:41:01:d0:4f:ec:8c:
e2:7b:ff:8b:2c:24:0c:35:11:83:4f:98:d8:ae:cf:45:cb:e4:
1c:61:0e:a6:86:4f:c1:89:86:2b:6d:2f:58:89:56:70:13:25:
fc:37:9b:a2:dd:2e:29:13:0c:82:2f:25:9d:4d:37:dd:c6:b3:
c6:c8:08:4b:86:19:85:19:cb:4e:15:15:c7:b3:1e:70:ad:66:
15:fc:0b:8b:7f:ff:80:cf:90:cb:7c:05:73:48:4e:20:d7:43:
d7:fb:c0:b2:63:0d:29:0e:bd:2b:df:eb:3a:ed:4a:6c:22:a3:
46:7f:ca:9f:b5:60:84:5c:f9:be:c6:f0:a5:e3:c2:00:57:1b:
97:9e:36:69:6b:a9:62:9d:11:05:89:86:f3:73:3e:ed:8d:aa:
6f:9e:a3:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoxj2xNG2OhkZSCYmbwQ4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjI0NGRlMDE5MGE2ZGQ1YTg5OWEyYjM3YjAwMmI5YWU2
MzJjODYwHhcNMjQxMTI2MTQwMDQyWhcNMjQxMTI3MTQwMDQyWjAzMTEwLwYDVQQD
Eyg5NDBmYzkxNzhhZDI1ZThjMzVmMDM5Y2Y3MGFiMWYwODIzMzRmMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp30hLjYglfzulEkOt3j4kKj1aJY
pMQrCRirnXLPGjDPQuSWTzTbn+PLRVUta7wH4x5L2/YPjwq39jzvGgmC+IpHm9Rw
/AWtq3jLun59SPJ4ht53c9NxWhC2Ld7TvxuqYMhw/iboTFprz8oWg+6QVk1Xg+Ql
rbh4a1D3Z4R5HVzOmuS8D5pSboR5tfLXLLxQyIlQhHqdTrRLO6+cmp0nqcF2Pvn6
I8yVhFshSjdbVd6DJGSkYNwZGKaSTbpQxXfjJHiej4Rc2zBxFpuZ9cO3XhHRPb7k
4cG8SbDF0EXAXyMCygxzLMc+Dm5gvssFNcoXiDBjTAChQaf7vFWZ0OUfywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQPyReK0l6MNfA5z3CrHwgjNPCKMB8GA1UdIwQY
MBaAFGdiRN4BkKbdWomaKzewArmuYyyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYt
Y2UzMmQ2NmYzMGE4LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYtY2UzMmQ2NmYzMGE4
LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWkQ5bHk
PjSsT1Mb8an4McwqzQrCfDEt59sGCuA90KHT68bjI0fy/TdhY+BbNfCZ8rSezv+v
Fik3Qu11W85MLGEWWSJvxFByBUXuzC4ry9Oyz9qFKYx+7RdV9fOdeCZyCf4eOdK0
QQHQT+yM4nv/iywkDDURg0+Y2K7PRcvkHGEOpoZPwYmGK20vWIlWcBMl/Debot0u
KRMMgi8lnU033cazxsgIS4YZhRnLThUVx7MecK1mFfwLi3//gM+Qy3wFc0hOINdD
1/vAsmMNKQ69K9/rOu1KbCKjRn/Kn7VghFz5vsbwpePCAFcbl542aWupYp0RBYmG
83M+7Y2qb56jkA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 23:02:05 2024 by rpki-client on console-fra.rpki-client.org