Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: rQ+yRbP8/hf4GCTvhg0TbZ8rWf+/QZopBzphIDAnOck=
Subject key identifier: DD:24:4C:CB:2A:C2:33:46:AE:19:7D:38:61:E5:1B:7F:29:BC:76:95
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 01936AEBA086EB8A351374F70112C710D3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 080E
Signing time: Wed 27 Nov 2024 00:00:47 +0000
Manifest this update: Wed 27 Nov 2024 00:00:47 +0000
Manifest next update: Thu 28 Nov 2024 00:00:47 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: SX+Mnp2yMJ4zGa4N/8QCJo2xcsUW5uyj8GNo28SehS4=)
2: 5u2Kc86-i8DmloPrX0_1MHtcQbQ.roa (hash: ov0RpkEyu6kd0vhA+R4zjRAOZCVB2wodz7TjPHtD0QE=)
3: r9F6xLE6SXXmIhl2hiAxIspeJxc.roa (hash: Qb1UrJxesLYzob0lj+nBr4nLsNewGVh2e9CpqCyhVBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:a0:86:eb:8a:35:13:74:f7:01:12:c7:10:d3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Nov 27 00:00:47 2024 GMT
Not After : Nov 28 00:00:47 2024 GMT
Subject: CN=dd244ccb2ac23346ae197d3861e51b7f29bc7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:d0:87:8c:16:43:2c:5e:3b:64:8d:33:bf:
89:67:be:37:40:9d:9c:66:79:3c:03:22:01:e8:71:
7a:50:87:4a:51:8d:a1:91:6e:7d:43:73:fb:98:9b:
2c:f7:fa:32:56:fe:b3:a5:30:b7:40:d1:8e:a2:d8:
7c:1b:50:47:61:a7:d2:a8:aa:b4:d0:e2:9e:f6:57:
f6:f8:f4:7a:ab:72:b2:f8:5d:5c:f1:bc:00:59:77:
68:c3:7d:fb:c7:5d:48:6e:85:4b:6e:b1:3e:7f:d4:
dc:0c:b7:43:1d:16:af:77:57:86:a3:ab:3e:81:80:
03:a0:cd:37:29:ea:79:89:d9:54:2d:7c:2c:5b:88:
29:9a:51:53:cc:d0:c3:f2:88:9f:bb:62:89:cb:82:
26:d6:06:06:cd:37:51:dd:c1:5e:f9:cd:61:b1:c0:
13:fc:3a:a6:6a:3d:b2:36:da:be:c2:d5:ff:40:87:
5d:ab:d2:01:74:ef:77:df:d1:ca:8b:b6:3d:03:29:
6e:89:d4:56:59:87:f4:5c:69:cd:b1:56:8f:c8:e9:
d3:b6:1c:a3:4a:3d:ca:51:55:f1:60:47:b2:50:98:
d1:49:3a:d2:b9:01:07:bc:15:aa:35:b6:8d:5b:4d:
77:ac:e3:22:1c:6a:65:51:36:36:60:62:f0:84:de:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:4C:CB:2A:C2:33:46:AE:19:7D:38:61:E5:1B:7F:29:BC:76:95
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5e:41:0e:c2:c2:2f:7b:16:77:86:ca:99:74:11:62:e3:eb:
4e:23:d4:0f:10:dd:9f:b6:d9:59:28:3e:18:d2:de:c0:d8:96:
d0:4d:1d:1d:9e:64:d8:ef:3e:4f:59:88:80:04:17:c8:16:48:
76:80:83:2b:96:44:8f:6e:53:80:05:14:93:14:4d:4d:c1:a0:
70:16:f1:de:48:9a:07:a9:f4:00:8a:82:79:23:40:0b:53:3f:
da:3b:0c:69:e3:3d:fa:4b:64:93:42:21:a1:32:e5:df:6b:4a:
ac:09:ec:a3:e1:27:09:f0:ab:2f:06:a2:5c:72:1b:59:f9:2c:
23:9c:7f:fc:88:3a:c5:c5:c0:97:3f:99:16:4b:90:41:ef:b3:
5f:91:90:06:6e:c2:e6:fb:b7:0b:3d:43:0c:5a:34:de:79:62:
fd:ee:57:51:33:65:9a:0c:b6:4e:59:af:e1:7c:7a:a1:31:56:
cd:9d:9c:97:4b:7b:23:42:b5:d2:4a:48:10:46:69:11:70:36:
62:23:8a:16:66:b6:31:a4:cb:71:82:8f:83:55:b8:7e:ed:fd:
a9:6e:d6:43:e0:00:9d:6e:24:97:96:09:82:4d:50:a3:bb:da:
0a:90:3c:df:9f:42:45:44:99:12:f1:ae:ff:08:58:32:8f:b9:
e6:69:29:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq66CG64o1E3T3ARLHENPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm
NjI1NTEwHhcNMjQxMTI3MDAwMDQ3WhcNMjQxMTI4MDAwMDQ3WjAzMTEwLwYDVQQD
EyhkZDI0NGNjYjJhYzIzMzQ2YWUxOTdkMzg2MWU1MWI3ZjI5YmM3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/7Qh4wWQyxeO2SNM7+JZ743QJ2c
Znk8AyIB6HF6UIdKUY2hkW59Q3P7mJss9/oyVv6zpTC3QNGOoth8G1BHYafSqKq0
0OKe9lf2+PR6q3Ky+F1c8bwAWXdow337x11IboVLbrE+f9TcDLdDHRavd1eGo6s+
gYADoM03Kep5idlULXwsW4gpmlFTzNDD8oifu2KJy4Im1gYGzTdR3cFe+c1hscAT
/Dqmaj2yNtq+wtX/QIddq9IBdO9339HKi7Y9AyluidRWWYf0XGnNsVaPyOnTthyj
Sj3KUVXxYEeyUJjRSTrSuQEHvBWqNbaNW013rOMiHGplUTY2YGLwhN4phwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0kTMsqwjNGrhl9OGHlG38pvHaVMB8GA1UdIwQY
MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt
YzRjZTNlODA3M2RiLzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri
LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal5BDsLC
L3sWd4bKmXQRYuPrTiPUDxDdn7bZWSg+GNLewNiW0E0dHZ5k2O8+T1mIgAQXyBZI
doCDK5ZEj25TgAUUkxRNTcGgcBbx3kiaB6n0AIqCeSNAC1M/2jsMaeM9+ktkk0Ih
oTLl32tKrAnso+EnCfCrLwaiXHIbWfksI5x//Ig6xcXAlz+ZFkuQQe+zX5GQBm7C
5vu3Cz1DDFo03nli/e5XUTNlmgy2Tlmv4Xx6oTFWzZ2cl0t7I0K10kpIEEZpEXA2
YiOKFma2MaTLcYKPg1W4fu39qW7WQ+AAnW4kl5YJgk1Qo7vaCpA8359CRUSZEvGu
/whYMo+55mkpyg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:54 2024 by rpki-client on console-fra.rpki-client.org