Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: EtKoS/HrHYikZ4awB0RxE9yMQmbY49UsyZXKSR8D3ig=
Subject key identifier: E3:41:40:54:19:CF:D3:FC:B4:83:56:89:28:8C:08:A8:50:5A:DC:BB
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 01935876F4FD63F32E323A2179E13155C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 1112
Signing time: Sat 23 Nov 2024 10:00:11 +0000
Manifest this update: Sat 23 Nov 2024 10:00:11 +0000
Manifest next update: Sun 24 Nov 2024 10:00:11 +0000
Files and hashes: 1: iYD17s3tsaOOMPUOKzORlwDeSQ4.roa (hash: szsX7VfRjs7HlW2zx1S4kNLHyTcMAGc7aCMg7nW3KoE=)
2: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: otxglGchoVOAdJDWczrPABolTtRvHf4+S46cs8+VPA8=)
3: pOa3mva2TPJjuMonrSyv7tssVjs.roa (hash: 2pXxVcn+z35BZovq0P23uf2JupkAfayMooyXSjmXRY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:76:f4:fd:63:f3:2e:32:3a:21:79:e1:31:55:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Nov 23 10:00:11 2024 GMT
Not After : Nov 24 10:00:11 2024 GMT
Subject: CN=e341405419cfd3fcb4835689288c08a8505adcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:52:5a:20:b1:a7:fe:89:61:1b:21:2a:66:
99:39:1e:02:7d:39:a2:a0:c3:f8:32:a2:73:0d:a0:
b9:2c:35:48:2f:ba:aa:24:ce:2d:d4:2b:9c:d2:f3:
60:77:f5:74:9c:4e:d6:9a:eb:72:21:5e:d4:20:05:
02:6d:e1:31:59:20:5c:61:c6:1f:83:c3:f0:36:03:
54:95:1e:4a:b9:fa:43:79:af:24:55:d3:34:92:ff:
5c:32:b4:8f:7f:da:49:96:9c:c6:3e:d6:94:c2:12:
90:55:da:35:22:1e:a8:c1:83:fb:fb:78:10:94:b8:
84:c5:da:1c:31:87:df:69:09:a3:44:45:9c:44:c9:
18:e8:ff:cf:fe:3f:5a:de:68:f9:f8:77:5c:f7:7c:
55:1e:5b:94:50:45:8d:d1:b3:e3:c3:91:58:bd:9d:
76:17:0e:24:80:2b:55:54:19:64:e9:2d:56:a4:8d:
5a:bf:98:3d:7b:a3:be:d0:e2:73:c1:d8:2f:74:d2:
ed:07:32:41:37:b6:59:8e:d4:b1:6f:52:1e:22:9d:
6d:38:5f:5e:97:83:68:4b:bd:1b:60:c4:53:c9:c0:
7f:8b:3a:93:48:81:9e:16:f5:de:48:a4:8e:77:15:
7b:e1:e5:f3:db:97:95:de:2e:31:cf:69:08:ea:3f:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:40:54:19:CF:D3:FC:B4:83:56:89:28:8C:08:A8:50:5A:DC:BB
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:8f:d1:bf:72:72:d6:7a:4a:38:05:ce:6b:f3:70:80:0c:
6e:b0:2a:a5:9d:d0:83:8a:05:7b:a6:40:e0:1f:47:3b:8f:8b:
31:20:af:17:a2:b4:e9:34:85:22:b6:31:29:b3:f5:be:94:2a:
32:da:bd:e5:03:9d:a1:66:9e:7e:ad:bb:9d:fe:e4:64:47:11:
14:cb:20:ae:d6:40:1b:b5:5b:44:40:26:74:7c:f1:05:4b:43:
31:a7:89:0c:b6:57:7f:09:3c:35:ba:e1:81:71:36:90:4e:fe:
e5:32:74:61:c9:ed:0b:dd:05:e0:d5:bd:03:3e:5b:2d:cc:01:
36:0b:6e:aa:91:10:39:80:00:5d:9c:9a:b3:cb:23:53:ba:79:
42:9c:ca:c9:6e:78:b8:5f:a8:49:a5:6a:b8:e1:55:38:0c:bb:
fb:0a:fa:7d:0f:51:52:d0:cf:d3:0c:4a:1e:cd:c1:76:ce:30:
e7:cf:fe:15:07:8c:8d:93:62:36:aa:75:4f:14:db:f2:ab:36:
fb:d6:7c:63:01:22:9b:bf:ca:80:53:8e:ee:7f:60:80:26:b8:
33:b7:27:cc:15:f2:39:b5:68:4e:e9:c4:0c:e5:4f:0a:9c:20:
35:b3:64:b9:41:05:8a:78:5e:56:0c:0a:95:7e:90:f0:49:dc:
b6:74:7d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdvT9Y/MuMjoheeExVcDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk
MTNjOTEwHhcNMjQxMTIzMTAwMDExWhcNMjQxMTI0MTAwMDExWjAzMTEwLwYDVQQD
EyhlMzQxNDA1NDE5Y2ZkM2ZjYjQ4MzU2ODkyODhjMDhhODUwNWFkY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtNSWiCxp/6JYRshKmaZOR4CfTmi
oMP4MqJzDaC5LDVIL7qqJM4t1Cuc0vNgd/V0nE7WmutyIV7UIAUCbeExWSBcYcYf
g8PwNgNUlR5KufpDea8kVdM0kv9cMrSPf9pJlpzGPtaUwhKQVdo1Ih6owYP7+3gQ
lLiExdocMYffaQmjREWcRMkY6P/P/j9a3mj5+Hdc93xVHluUUEWN0bPjw5FYvZ12
Fw4kgCtVVBlk6S1WpI1av5g9e6O+0OJzwdgvdNLtBzJBN7ZZjtSxb1IeIp1tOF9e
l4NoS70bYMRTycB/izqTSIGeFvXeSKSOdxV74eXz25eV3i4xz2kI6j/qowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONBQFQZz9P8tINWiSiMCKhQWty7MB8GA1UdIwQY
MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt
N2RlOTEwZTAwYmVkLzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYtN2RlOTEwZTAwYmVk
LzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnmP0b9y
ctZ6SjgFzmvzcIAMbrAqpZ3Qg4oFe6ZA4B9HO4+LMSCvF6K06TSFIrYxKbP1vpQq
Mtq95QOdoWaefq27nf7kZEcRFMsgrtZAG7VbREAmdHzxBUtDMaeJDLZXfwk8Nbrh
gXE2kE7+5TJ0YcntC90F4NW9Az5bLcwBNgtuqpEQOYAAXZyas8sjU7p5QpzKyW54
uF+oSaVquOFVOAy7+wr6fQ9RUtDP0wxKHs3Bds4w58/+FQeMjZNiNqp1TxTb8qs2
+9Z8YwEim7/KgFOO7n9ggCa4M7cnzBXyObVoTunEDOVPCpwgNbNkuUEFinheVgwK
lX6Q8EnctnR9Pw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:10:39 2024 by rpki-client on console-ams.rpki-client.org