Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: NizRYkhGc1jOSL6wV9fpLzvhPk9yh1l16QXgYoGODdM=
Subject key identifier: 1D:38:1E:B3:D4:64:D4:E8:0B:55:AE:84:05:33:54:11:B6:88:79:9C
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 01936AB4E4226840EF655EC060E9C82F6B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: DE
Signing time: Tue 26 Nov 2024 23:00:59 +0000
Manifest this update: Tue 26 Nov 2024 23:00:59 +0000
Manifest next update: Wed 27 Nov 2024 23:00:59 +0000
Files and hashes: 1: 9NeYawwx-LTygaMW_mJ3XNOhoQU.roa (hash: Yoq+xHsPWSGxJXhDuSWErwwtoA9QIRI0V5W/hGams0M=)
2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: quAgOE5wtOhiyfD66SObl0yD9zWo5HhPkOc0szqDDhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:e4:22:68:40:ef:65:5e:c0:60:e9:c8:2f:6b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Nov 26 23:00:59 2024 GMT
Not After : Nov 27 23:00:59 2024 GMT
Subject: CN=1d381eb3d464d4e80b55ae8405335411b688799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:bf:78:fe:99:56:68:17:51:49:9c:a0:fc:
f9:12:a3:4b:a4:38:cb:03:82:29:4f:9a:aa:68:f2:
7b:89:1b:df:7f:82:11:32:aa:d9:1f:d8:80:ac:43:
0e:96:63:bd:c2:61:fc:78:c7:11:f9:2e:dd:85:c6:
77:11:63:8e:cf:08:da:0d:ea:89:9f:7f:01:04:84:
0b:4e:51:c3:f8:55:e6:78:93:16:3f:ae:09:dc:cd:
a6:da:2c:4c:a7:bc:0c:c2:11:9f:2d:dd:96:81:aa:
1e:d0:66:34:2a:8a:f8:54:d4:4c:4f:a5:49:ac:21:
61:d7:b3:e4:f9:c8:96:64:66:26:b9:7e:0d:42:3e:
27:8b:07:be:4b:50:15:c9:b1:49:50:be:56:22:5f:
eb:4c:5e:87:0c:a5:85:c5:ba:55:5c:50:99:00:bd:
46:aa:41:4f:f4:5a:76:8a:6e:dc:8d:8b:57:40:07:
bd:4d:a2:ec:76:21:9d:33:77:6f:c9:7c:3c:9a:f0:
ad:9c:f0:97:f0:06:36:80:42:42:5f:da:23:cc:b0:
fb:07:e1:50:32:a7:f1:57:d7:ae:da:71:ea:72:e3:
8f:49:fc:39:32:00:9d:a5:5f:32:7a:93:a8:e2:13:
79:18:a9:e4:92:ab:86:2e:fc:1f:af:cb:30:04:ca:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:1E:B3:D4:64:D4:E8:0B:55:AE:84:05:33:54:11:B6:88:79:9C
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:aa:3a:eb:f2:42:ad:9d:ba:f8:eb:86:74:ca:77:32:f6:
85:70:df:9b:80:0c:6f:9b:9e:ff:4f:63:f2:6a:1d:0d:ae:29:
97:46:82:6c:5c:14:bb:11:0d:00:8c:84:38:af:22:35:15:47:
93:7c:ec:51:0c:56:c6:7f:93:c6:b5:e6:47:ea:54:f2:44:24:
35:68:3e:de:0c:b8:c0:a0:97:1b:b7:4d:49:49:55:cf:14:3c:
ea:ea:ac:7d:7d:c0:f7:a0:78:5e:5b:6e:24:eb:d7:cc:95:96:
88:cb:2c:c3:8e:c4:2d:f5:86:4a:33:2c:8f:b5:3e:34:bd:be:
b4:86:0f:23:52:9b:e9:a5:1e:22:b9:14:cb:71:1e:b6:d0:f2:
f3:6d:4a:be:1b:01:0c:80:20:a9:51:e8:da:5e:7a:f6:bc:55:
37:d6:31:f6:15:5f:e0:92:5e:b5:ac:0c:8a:16:63:55:f6:22:
3b:41:67:6b:bb:7c:4d:20:aa:f8:82:33:b8:22:d8:38:eb:1e:
9b:87:50:9d:8e:25:2f:52:a1:dc:1f:51:3d:2b:fc:88:ce:d6:
2b:28:93:52:42:b2:72:97:94:33:c2:f9:26:c9:dc:6b:54:2b:
0d:94:0c:e8:ad:4f:5c:fd:e2:d9:01:6c:96:d8:9e:ae:b5:00:
67:09:4d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtOQiaEDvZV7AYOnIL2sDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1
MTc4ZmIwHhcNMjQxMTI2MjMwMDU5WhcNMjQxMTI3MjMwMDU5WjAzMTEwLwYDVQQD
EygxZDM4MWViM2Q0NjRkNGU4MGI1NWFlODQwNTMzNTQxMWI2ODg3OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MW/eP6ZVmgXUUmcoPz5EqNLpDjL
A4IpT5qqaPJ7iRvff4IRMqrZH9iArEMOlmO9wmH8eMcR+S7dhcZ3EWOOzwjaDeqJ
n38BBIQLTlHD+FXmeJMWP64J3M2m2ixMp7wMwhGfLd2Wgaoe0GY0Kor4VNRMT6VJ
rCFh17Pk+ciWZGYmuX4NQj4niwe+S1AVybFJUL5WIl/rTF6HDKWFxbpVXFCZAL1G
qkFP9Fp2im7cjYtXQAe9TaLsdiGdM3dvyXw8mvCtnPCX8AY2gEJCX9ojzLD7B+FQ
MqfxV9eu2nHqcuOPSfw5MgCdpV8yepOo4hN5GKnkkquGLvwfr8swBMrOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB04HrPUZNToC1WuhAUzVBG2iHmcMB8GA1UdIwQY
MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct
NTBkNmJhNmFhY2I4LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4
LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2eqOuvy
Qq2duvjrhnTKdzL2hXDfm4AMb5ue/09j8modDa4pl0aCbFwUuxENAIyEOK8iNRVH
k3zsUQxWxn+TxrXmR+pU8kQkNWg+3gy4wKCXG7dNSUlVzxQ86uqsfX3A96B4Xltu
JOvXzJWWiMssw47ELfWGSjMsj7U+NL2+tIYPI1Kb6aUeIrkUy3EettDy821KvhsB
DIAgqVHo2l569rxVN9Yx9hVf4JJetawMihZjVfYiO0Fna7t8TSCq+IIzuCLYOOse
m4dQnY4lL1Kh3B9RPSv8iM7WKyiTUkKycpeUM8L5Jsnca1QrDZQM6K1PXP3i2QFs
ltierrUAZwlNLg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:35 2024 by rpki-client on console-fra.rpki-client.org