Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: rdEO2WhOyAIQj8DRdv5GbRZtLTZrHAHctNYXHgULAo8=
Subject key identifier: 19:18:62:AF:13:89:CF:A8:89:79:B3:AC:8E:1D:E7:17:D3:81:C9:53
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 01935689382E4DFD04000EB26FF18058D076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:00:53 +0000
Manifest this update: Sat 23 Nov 2024 01:00:53 +0000
Manifest next update: Sun 24 Nov 2024 01:00:53 +0000
Files and hashes: 1: R6CZu8M8ZodQuBIrW-jQDVFyAPA.roa (hash: U5RGI6wnuJnpDbmTAmmwYqnFA2lwv9ntL9CuQg8D1nU=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: KAiwunAH0N/LkxTw9Um7hNUPO0CfwxhfcNzY5BAWFYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:38:2e:4d:fd:04:00:0e:b2:6f:f1:80:58:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Nov 23 01:00:53 2024 GMT
Not After : Nov 24 01:00:53 2024 GMT
Subject: CN=191862af1389cfa88979b3ac8e1de717d381c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:ca:e8:5a:bc:da:51:9c:41:ed:9a:ce:94:
cc:1f:54:93:2b:a9:bf:57:a5:77:d8:43:13:37:71:
d0:64:c8:2c:7e:10:89:e3:8c:f8:97:e2:30:ab:aa:
44:ce:3c:d6:59:37:4a:a8:af:b4:36:ec:fc:19:91:
ce:15:d2:d7:87:dc:0b:e7:f8:8d:7a:d3:79:95:15:
dd:99:be:33:07:7a:aa:02:74:ab:38:e9:4b:33:fc:
ec:15:5c:04:04:6c:b2:b1:5e:c0:13:05:18:be:9b:
95:e5:38:c7:32:67:1b:2e:c6:e5:4c:7b:a3:af:fd:
53:97:86:1a:ac:3c:35:f3:fe:e8:54:47:be:b6:d2:
f8:e4:0b:fb:4a:ca:29:4f:47:ea:f8:15:fd:a2:b2:
5d:34:12:87:a1:95:e1:6e:be:47:72:b0:e7:8c:ed:
71:a4:55:bf:aa:c0:64:74:e5:5b:fc:4e:93:39:22:
e6:9f:80:51:50:6f:1a:c7:bf:77:71:e5:10:1b:29:
2c:78:18:cc:d9:2c:8f:02:7e:c6:d5:a9:1c:f0:83:
60:6a:da:58:65:ca:f0:76:71:be:7d:98:68:cf:94:
38:6a:ae:06:4c:4d:35:98:12:d3:8d:86:61:84:dd:
ea:27:c5:dd:b0:28:c2:28:4f:75:fb:96:0c:f4:16:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:62:AF:13:89:CF:A8:89:79:B3:AC:8E:1D:E7:17:D3:81:C9:53
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ea:a2:49:bf:32:01:25:42:f3:37:4c:60:31:16:e1:25:35:
d0:f4:c7:00:e3:5d:88:00:af:ce:88:1c:f6:6a:35:67:06:28:
8f:e4:bf:92:d1:75:15:e6:01:a0:10:68:0e:18:84:71:3a:6f:
43:93:2e:05:d8:91:18:8b:4c:73:09:f6:9f:aa:67:24:3f:e5:
d5:59:34:f7:43:a5:d7:27:a3:b5:2d:9f:3f:4d:5e:83:43:03:
2b:79:df:fc:e8:ad:2a:0b:ec:85:b0:6e:a3:36:6d:80:95:c2:
86:a8:b3:94:66:7a:fd:3d:78:ea:7c:4c:03:23:30:a7:e0:84:
05:dd:d5:fc:af:8a:d8:fc:c3:4a:ec:23:37:6b:1c:30:7a:67:
49:38:f3:17:71:b8:fa:ad:4b:ef:25:5c:7c:ef:f6:8f:38:0a:
2a:b6:26:8d:58:6e:a9:db:a9:c0:05:73:b8:70:e6:cd:94:49:
77:88:53:91:e7:8e:6c:ee:b4:7e:59:d6:ab:ae:c5:b4:68:a2:
f4:1f:de:c7:42:00:85:42:ac:87:62:bd:10:66:06:23:67:be:
e8:7a:bf:90:05:11:d7:46:67:29:0d:21:60:4f:c8:90:a4:81:
84:43:99:cb:b8:9d:6d:47:0b:36:9e:9f:49:e0:33:a2:13:a9:
88:45:0c:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiTguTf0EAA6yb/GAWNB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzI4OTI1NmUzMzg4Nzc3ZDk1ZTRkNTMxNTY3Y2UzNjcy
YTE0OWEwHhcNMjQxMTIzMDEwMDUzWhcNMjQxMTI0MDEwMDUzWjAzMTEwLwYDVQQD
EygxOTE4NjJhZjEzODljZmE4ODk3OWIzYWM4ZTFkZTcxN2QzODFjOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/fK6Fq82lGcQe2azpTMH1STK6m/
V6V32EMTN3HQZMgsfhCJ44z4l+Iwq6pEzjzWWTdKqK+0Nuz8GZHOFdLXh9wL5/iN
etN5lRXdmb4zB3qqAnSrOOlLM/zsFVwEBGyysV7AEwUYvpuV5TjHMmcbLsblTHuj
r/1Tl4YarDw18/7oVEe+ttL45Av7SsopT0fq+BX9orJdNBKHoZXhbr5HcrDnjO1x
pFW/qsBkdOVb/E6TOSLmn4BRUG8ax793ceUQGykseBjM2SyPAn7G1akc8INgatpY
ZcrwdnG+fZhoz5Q4aq4GTE01mBLTjYZhhN3qJ8XdsCjCKE91+5YM9Ba2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkYYq8Tic+oiXmzrI4d5xfTgclTMB8GA1UdIwQY
MBaAFEkyiSVuM4h3fZXk1TFWfONnKhSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEt
ZDRkOWEyZTYwZTY0LzEvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEtZDRkOWEyZTYwZTY0
LzEvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOqiSb8y
ASVC8zdMYDEW4SU10PTHAONdiACvzogc9mo1ZwYoj+S/ktF1FeYBoBBoDhiEcTpv
Q5MuBdiRGItMcwn2n6pnJD/l1Vk090Ol1yejtS2fP01eg0MDK3nf/OitKgvshbBu
ozZtgJXChqizlGZ6/T146nxMAyMwp+CEBd3V/K+K2PzDSuwjN2scMHpnSTjzF3G4
+q1L7yVcfO/2jzgKKrYmjVhuqdupwAVzuHDmzZRJd4hTkeeObO60flnWq67FtGii
9B/ex0IAhUKsh2K9EGYGI2e+6Hq/kAUR10ZnKQ0hYE/IkKSBhEOZy7idbUcLNp6f
SeAzohOpiEUMSg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:58 2024 by rpki-client on console-ams.rpki-client.org