Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: wGYsJwMFDPPr+2OoH1Ms/fi5tQYShSbzwxCzRM4BSXI=
Subject key identifier: 6F:76:77:65:3F:AC:89:F9:11:7D:ED:36:1A:57:BC:DB:1D:DD:47:4A
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019365FDCF742FD62854644B857B0C01A414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 01:02:32 +0000
Manifest this update: Tue 26 Nov 2024 01:02:32 +0000
Manifest next update: Wed 27 Nov 2024 01:02:32 +0000
Files and hashes: 1: TLQPe9nDu--y9fTRnbjIpHeIHc4.roa (hash: NcP54iR/sRbHngPxhjsh27XJ36idctMJtS4AAiLlpRg=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: b7/9sLGnxn2sGDaiii9WbRu+nsEJ0i7OQ6sskyi0Opg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fd:cf:74:2f:d6:28:54:64:4b:85:7b:0c:01:a4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Nov 26 01:02:32 2024 GMT
Not After : Nov 27 01:02:32 2024 GMT
Subject: CN=6f7677653fac89f9117ded361a57bcdb1ddd474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:9d:1b:d0:60:5b:12:ab:6c:53:d5:58:4e:
ac:1b:fe:84:69:b2:39:31:ea:0c:69:03:52:34:70:
53:cc:9e:29:81:86:5c:35:b3:6d:77:bc:39:0a:fc:
14:e4:22:36:fd:92:50:21:5f:2a:f4:bd:6f:ac:e9:
b2:4d:53:3b:11:aa:ee:68:2d:97:f4:cd:c6:54:1f:
2b:e4:43:2e:72:65:dd:fe:ed:87:f8:60:8e:fb:ea:
95:4a:01:39:2b:bf:d9:b0:1a:b4:5d:ab:9a:47:b7:
83:a2:d7:98:58:cc:fd:cf:e7:47:2c:c8:a1:df:c0:
78:9a:50:62:d1:af:6d:1e:ea:99:c9:e1:6a:6c:ca:
c6:e3:ee:56:d1:9c:04:95:84:25:61:4a:d0:0d:62:
ac:af:04:45:68:fd:10:07:2f:be:26:5f:5f:c7:68:
d6:90:24:69:0b:35:90:6b:ee:a3:d7:1c:05:0d:48:
85:82:2c:70:ca:a5:15:7d:87:48:34:58:a8:9f:d4:
cd:3a:36:4e:15:53:2c:07:02:e3:2b:96:b3:45:59:
a8:11:a0:a2:4f:75:d6:22:55:42:d5:e3:fd:72:ed:
b6:1f:e1:c3:7d:86:11:78:9b:d2:25:15:55:a5:5a:
d5:cf:77:60:c5:a6:69:70:c6:9a:ba:46:cc:9b:23:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:77:65:3F:AC:89:F9:11:7D:ED:36:1A:57:BC:DB:1D:DD:47:4A
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:63:a2:07:ab:ab:c2:e7:5c:d8:a5:21:2c:2f:9e:f8:21:d4:
a2:3d:af:b2:4d:bb:20:a7:59:52:a9:ef:8e:c1:d2:81:b4:23:
6f:77:49:31:57:cd:75:f5:6c:7d:81:ac:24:a2:ac:79:9e:fd:
cc:76:a8:f9:0a:9e:83:5b:30:c0:e8:31:60:aa:b7:41:19:17:
6b:8f:38:0d:00:29:01:2a:b5:25:16:75:23:c4:78:9d:8d:8e:
db:a4:0f:e9:51:cf:c9:4a:1a:b0:db:25:1a:b7:2f:fb:cf:89:
dc:58:df:a5:37:a7:b2:75:64:d5:72:18:6e:44:c4:95:23:25:
1d:88:16:a3:ec:a5:9f:8d:d7:7e:a1:8f:d0:29:f2:c9:c0:d9:
63:7d:a1:60:68:f1:d4:df:69:3c:8e:c9:b7:25:54:db:69:45:
74:a9:92:fd:5f:86:f0:4e:1a:cc:1f:ef:00:a1:dd:4e:e6:6e:
af:72:39:14:95:45:0a:52:74:8b:85:a3:74:ee:aa:bd:1b:d1:
28:b4:c8:e2:b1:44:ca:7d:ff:19:a7:a3:e7:ba:f3:8e:03:23:
50:38:71:57:e5:10:ec:94:8a:db:b4:b4:ea:ba:c0:39:a0:a8:
1e:49:9a:92:72:bb:df:01:69:5f:58:40:5d:7c:7c:e3:38:7b:
f1:f9:97:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/c90L9YoVGRLhXsMAaQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZTA3OGI1MTgxYmU1ZmJlOTE0YjQxMmE0MTIwOTZiYzhk
NzE1NDkwHhcNMjQxMTI2MDEwMjMyWhcNMjQxMTI3MDEwMjMyWjAzMTEwLwYDVQQD
Eyg2Zjc2Nzc2NTNmYWM4OWY5MTE3ZGVkMzYxYTU3YmNkYjFkZGQ0NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKydG9BgWxKrbFPVWE6sG/6EabI5
MeoMaQNSNHBTzJ4pgYZcNbNtd7w5CvwU5CI2/ZJQIV8q9L1vrOmyTVM7EaruaC2X
9M3GVB8r5EMucmXd/u2H+GCO++qVSgE5K7/ZsBq0XauaR7eDoteYWMz9z+dHLMih
38B4mlBi0a9tHuqZyeFqbMrG4+5W0ZwElYQlYUrQDWKsrwRFaP0QBy++Jl9fx2jW
kCRpCzWQa+6j1xwFDUiFgixwyqUVfYdINFion9TNOjZOFVMsBwLjK5azRVmoEaCi
T3XWIlVC1eP9cu22H+HDfYYReJvSJRVVpVrVz3dgxaZpcMaaukbMmyP0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG92d2U/rIn5EX3tNhpXvNsd3UdKMB8GA1UdIwQY
MBaAFGjgeLUYG+X76RS0EqQSCWvI1xVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQt
ZTY3MWQ5NGIwYTIwLzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zMTM5ODgtNmYyMS00NTNlLThlZjQtZTY3MWQ5NGIwYTIw
LzEvYU9CNHRSZ2I1ZnZwRkxRU3BCSUphOGpYRlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomOiB6ur
wudc2KUhLC+e+CHUoj2vsk27IKdZUqnvjsHSgbQjb3dJMVfNdfVsfYGsJKKseZ79
zHao+Qqeg1swwOgxYKq3QRkXa484DQApASq1JRZ1I8R4nY2O26QP6VHPyUoasNsl
Grcv+8+J3FjfpTensnVk1XIYbkTElSMlHYgWo+yln43XfqGP0CnyycDZY32hYGjx
1N9pPI7JtyVU22lFdKmS/V+G8E4azB/vAKHdTuZur3I5FJVFClJ0i4WjdO6qvRvR
KLTI4rFEyn3/Gaej57rzjgMjUDhxV+UQ7JSK27S06rrAOaCoHkmaknK73wFpX1hA
XXx84zh78fmXww==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:02:05 2024 by rpki-client on console-fra.rpki-client.org