Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier: hJGs/OCrAIvP72at/GEVqSbnjTVx2yrGJDO1Vw4p9P4=
Subject key identifier: 63:42:06:12:FB:E6:90:F2:07:E7:40:4F:47:64:09:56:18:9A:68:C5
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer: /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial: 0193549BD03E587C77D5E360281ADC31AEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number: 0F75
Signing time: Fri 22 Nov 2024 16:01:57 +0000
Manifest this update: Fri 22 Nov 2024 16:01:57 +0000
Manifest next update: Sat 23 Nov 2024 16:01:57 +0000
Files and hashes: 1: FFFEI0feF1we-y4XDtZFTqivdRU.roa (hash: IQq1O8QQvg3aIDJIhb4dePDf18TvdXdk6kzIvZMXBQ0=)
2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: d68w0EVGZLFa+3tOazYv872PvjdKRxK3SSehUKWgHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:d0:3e:58:7c:77:d5:e3:60:28:1a:dc:31:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Validity
Not Before: Nov 22 16:01:57 2024 GMT
Not After : Nov 23 16:01:57 2024 GMT
Subject: CN=63420612fbe690f207e7404f47640956189a68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:0b:14:2e:3e:07:d5:f5:9c:0e:c6:04:d9:
fd:fc:88:a7:8f:91:e9:26:54:bd:99:fa:15:81:c0:
ce:85:bf:e6:80:19:fc:56:8b:cd:b7:0b:fb:af:68:
75:5b:62:71:25:35:48:3d:5c:de:48:39:22:5f:43:
00:d3:cf:6e:47:20:b4:dd:f0:33:9e:57:07:39:90:
59:bb:5d:32:42:1c:e4:fd:50:7e:89:e3:b6:55:21:
17:1f:57:0b:b6:76:5f:44:51:23:48:74:1f:af:15:
42:2d:d3:f6:dd:e4:a5:97:88:26:63:dc:1b:b3:0f:
65:5e:65:57:38:a4:5e:d6:7c:a1:34:a0:75:f2:4c:
41:69:af:28:84:c1:1c:b3:ca:b4:c4:b0:aa:1a:4a:
45:99:39:97:5f:67:e3:e9:2e:6c:57:c7:75:fb:a8:
4e:f0:06:a4:01:80:95:37:47:1f:66:7c:1d:37:16:
ea:b6:07:29:61:da:ad:67:8b:52:a6:71:3a:b3:3c:
20:ec:37:91:ac:74:ab:4e:7a:6e:58:2e:d7:9b:00:
d3:d4:1f:d0:21:71:4a:4e:2a:76:b8:92:cf:19:72:
08:ab:78:3a:7e:4e:86:7c:0c:e0:f6:ef:0e:10:c1:
be:18:d0:9b:b5:b2:0a:9c:16:2c:37:d0:6c:1b:31:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:06:12:FB:E6:90:F2:07:E7:40:4F:47:64:09:56:18:9A:68:C5
X509v3 Authority Key Identifier:
keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:41:49:bd:5e:0b:31:f8:14:25:c2:7f:28:51:07:9f:1b:
bd:f7:ef:49:fd:ea:e4:70:0e:85:ca:57:e1:0e:e9:dd:c5:a0:
ff:5b:fe:16:07:61:ed:4b:dc:00:26:00:90:1d:9a:5b:4a:0d:
77:bd:44:65:f5:e5:44:be:df:8d:ad:bb:e2:e0:10:8a:ae:87:
e1:d7:4e:e0:be:7a:0d:df:1f:61:82:1a:86:39:b4:a8:8a:a9:
8a:73:e7:e0:b2:0a:15:d8:3e:19:0b:49:1c:2a:e3:f3:d2:97:
ef:e5:42:7b:1e:98:fe:c6:69:4b:f3:24:ef:a1:29:d4:1a:8b:
ef:b4:e6:dc:4b:9a:bb:be:09:b0:ed:7d:02:a5:1a:8c:d3:34:
39:3f:4f:5d:df:e2:1e:aa:b2:c3:99:e7:f4:d7:7c:9c:6d:76:
1a:fe:ef:7f:f0:3f:4f:a7:4e:cd:ad:94:ab:6a:3c:2c:97:e6:
65:74:15:26:77:c7:af:eb:21:26:7b:0e:c6:7e:18:5d:6a:54:
04:b3:5b:d9:a9:d9:29:f5:f0:6d:5a:c1:c3:d1:ef:07:89:e4:
29:b5:54:82:7a:27:cc:44:5c:d1:fa:99:e2:12:11:0f:cc:97:
c8:04:2b:23:fe:4c:35:f0:44:15:ec:72:1f:af:8b:c3:79:51:
85:03:1b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm9A+WHx31eNgKBrcMa6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzYzYzUyNGU1NWRmMzRiZjc1ODI4Mjc3NTNlNzdhNzY5
OWM3YTIwHhcNMjQxMTIyMTYwMTU3WhcNMjQxMTIzMTYwMTU3WjAzMTEwLwYDVQQD
Eyg2MzQyMDYxMmZiZTY5MGYyMDdlNzQwNGY0NzY0MDk1NjE4OWE2OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ELFC4+B9X1nA7GBNn9/Iinj5Hp
JlS9mfoVgcDOhb/mgBn8VovNtwv7r2h1W2JxJTVIPVzeSDkiX0MA089uRyC03fAz
nlcHOZBZu10yQhzk/VB+ieO2VSEXH1cLtnZfRFEjSHQfrxVCLdP23eSll4gmY9wb
sw9lXmVXOKRe1nyhNKB18kxBaa8ohMEcs8q0xLCqGkpFmTmXX2fj6S5sV8d1+6hO
8AakAYCVN0cfZnwdNxbqtgcpYdqtZ4tSpnE6szwg7DeRrHSrTnpuWC7XmwDT1B/Q
IXFKTip2uJLPGXIIq3g6fk6GfAzg9u8OEMG+GNCbtbIKnBYsN9BsGzF1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNCBhL75pDyB+dAT0dkCVYYmmjFMB8GA1UdIwQY
MBaAFP7GPFJOVd80v3WCgndT53p2mceiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDIt
YjMxZGY3MTE3NzE1LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jY2ExMTUtMmI5My00YWZkLWFkMDItYjMxZGY3MTE3NzE1
LzEvX3NZOFVrNVYzelNfZFlLQ2QxUG5lbmFaeDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIFBSb1e
CzH4FCXCfyhRB58bvffvSf3q5HAOhcpX4Q7p3cWg/1v+Fgdh7UvcACYAkB2aW0oN
d71EZfXlRL7fja274uAQiq6H4ddO4L56Dd8fYYIahjm0qIqpinPn4LIKFdg+GQtJ
HCrj89KX7+VCex6Y/sZpS/Mk76Ep1BqL77Tm3Euau74JsO19AqUajNM0OT9PXd/i
Hqqyw5nn9Nd8nG12Gv7vf/A/T6dOza2Uq2o8LJfmZXQVJnfHr+shJnsOxn4YXWpU
BLNb2anZKfXwbVrBw9HvB4nkKbVUgnonzERc0fqZ4hIRD8yXyAQrI/5MNfBEFexy
H6+Lw3lRhQMbFA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:19 2024 by rpki-client on console-fra.rpki-client.org