Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: a5z2XlJV85r4TK/mU1rx7oYx5HbFa47CkJRxqeaG1jM=
Subject key identifier: AC:69:6C:CB:E8:B8:12:1D:42:CC:78:C1:F7:1F:96:C3:60:9A:80:B0
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0193561AC65A3D2A6ADDC47062064B81D9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 011E
Signing time: Fri 22 Nov 2024 23:00:15 +0000
Manifest this update: Fri 22 Nov 2024 23:00:15 +0000
Manifest next update: Sat 23 Nov 2024 23:00:15 +0000
Files and hashes: 1: DessAVNOY-5JxMS1XSNiv0GUTtc.roa (hash: hZuttjpuCFd/WQan1H1xoLdE4K4oNGU+QF8dhGgSW1M=)
2: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: B1Owy8DB1MfNWzaUe4w/go2kf/O/c5ucLbQl2OeuI0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:c6:5a:3d:2a:6a:dd:c4:70:62:06:4b:81:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Nov 22 23:00:15 2024 GMT
Not After : Nov 23 23:00:15 2024 GMT
Subject: CN=ac696ccbe8b8121d42cc78c1f71f96c3609a80b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:81:02:61:97:4b:18:ba:cd:56:45:e0:63:
95:da:42:21:01:0f:9d:4d:db:85:98:e8:6a:f1:66:
93:2c:57:67:e8:56:e0:b2:1f:a3:00:6e:12:66:59:
a6:79:ea:f2:7c:57:95:73:96:03:eb:b6:96:c5:cc:
7c:dc:c6:80:7a:5c:f5:c5:68:ac:23:76:1e:e0:92:
98:99:2b:5d:9e:e8:16:58:f8:60:21:d2:d0:81:8f:
21:db:dc:4a:7a:72:5f:11:c6:2a:eb:6b:54:93:5b:
25:48:18:cc:76:15:14:db:0e:7d:c3:10:48:2e:f6:
fc:4c:cd:aa:58:68:b5:1e:c8:c9:3e:b5:7a:e2:4a:
60:19:66:df:67:11:b3:f5:ef:bf:8d:90:34:4c:58:
d9:3c:55:3b:62:d2:5f:71:c9:c9:7c:56:a0:08:c0:
a0:82:77:6a:ac:c9:fa:26:a3:84:5f:f6:2d:df:50:
e7:77:54:d2:bb:2c:8f:86:30:43:4d:b5:21:c0:64:
2f:e6:d9:2b:ce:a2:b1:6c:32:1a:27:19:50:4b:d1:
8e:6e:00:b2:f5:2a:05:a2:35:f3:60:d7:0d:24:71:
a5:84:aa:50:41:3d:13:5d:b5:9d:c5:1d:e4:b3:5c:
54:31:d0:c4:38:82:3e:0e:8e:5a:33:4f:bf:c3:18:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:6C:CB:E8:B8:12:1D:42:CC:78:C1:F7:1F:96:C3:60:9A:80:B0
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:55:0f:c7:02:57:dd:6f:13:e8:f6:32:d1:32:3b:a0:f7:03:
72:db:a7:bc:51:b0:a8:29:39:33:fb:4c:43:f0:2f:be:64:37:
ee:d2:74:44:87:01:0d:1f:7f:4c:31:45:37:68:f3:b9:7b:9a:
c0:14:11:ee:35:3a:17:91:79:10:3c:1b:b4:68:8a:1c:3f:5b:
bc:77:ec:af:6a:f8:71:e1:9a:9f:49:70:ce:b9:41:06:53:dd:
be:91:f3:be:56:10:8d:13:bf:dc:71:14:96:14:01:89:cb:5b:
69:57:cd:f9:75:b3:5f:e7:26:27:39:62:63:76:46:c3:7c:cf:
07:62:6e:a4:f1:da:01:16:ea:91:7a:10:bc:c8:f8:fa:0e:ce:
a5:b0:ed:b8:9c:01:1b:e4:4e:72:f6:e1:71:f8:74:43:45:b5:
46:ba:1d:bc:f7:b0:08:88:7d:45:93:0d:10:73:c2:9e:5c:e5:
d3:fd:a5:48:da:f5:f0:03:c7:84:5b:68:ce:46:71:37:bf:e8:
d0:1e:38:9c:e7:39:3e:54:5e:bd:14:d5:58:f7:aa:4d:1c:40:
9f:ba:8c:1d:0d:6e:8f:14:2e:67:ba:c5:95:fc:ca:54:7d:6d:
84:8f:eb:d5:17:e3:1d:7c:67:fd:d7:32:eb:68:27:dd:e5:6d:
1f:3f:13:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGsZaPSpq3cRwYgZLgdn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4
MDE5NDkwHhcNMjQxMTIyMjMwMDE1WhcNMjQxMTIzMjMwMDE1WjAzMTEwLwYDVQQD
EyhhYzY5NmNjYmU4YjgxMjFkNDJjYzc4YzFmNzFmOTZjMzYwOWE4MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzWBAmGXSxi6zVZF4GOV2kIhAQ+d
TduFmOhq8WaTLFdn6Fbgsh+jAG4SZlmmeeryfFeVc5YD67aWxcx83MaAelz1xWis
I3Ye4JKYmStdnugWWPhgIdLQgY8h29xKenJfEcYq62tUk1slSBjMdhUU2w59wxBI
Lvb8TM2qWGi1HsjJPrV64kpgGWbfZxGz9e+/jZA0TFjZPFU7YtJfccnJfFagCMCg
gndqrMn6JqOEX/Yt31Dnd1TSuyyPhjBDTbUhwGQv5tkrzqKxbDIaJxlQS9GObgCy
9SoFojXzYNcNJHGlhKpQQT0TXbWdxR3ks1xUMdDEOII+Do5aM0+/wxgR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxpbMvouBIdQsx4wfcflsNgmoCwMB8GA1UdIwQY
MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt
M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw
LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1UPxwJX
3W8T6PYy0TI7oPcDctunvFGwqCk5M/tMQ/AvvmQ37tJ0RIcBDR9/TDFFN2jzuXua
wBQR7jU6F5F5EDwbtGiKHD9bvHfsr2r4ceGan0lwzrlBBlPdvpHzvlYQjRO/3HEU
lhQBictbaVfN+XWzX+cmJzliY3ZGw3zPB2JupPHaARbqkXoQvMj4+g7OpbDtuJwB
G+ROcvbhcfh0Q0W1RrodvPewCIh9RZMNEHPCnlzl0/2lSNr18APHhFtozkZxN7/o
0B44nOc5PlRevRTVWPeqTRxAn7qMHQ1ujxQuZ7rFlfzKVH1thI/r1RfjHXxn/dcy
62gn3eVtHz8TYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:46 2024 by rpki-client on console-ams.rpki-client.org