Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: JrvTAFWxs8PzlIJchbB8kMEGjECwAiDuseL7zq32nMs=
Subject key identifier: 38:FB:44:8D:46:64:0B:A6:A4:54:62:1E:96:9D:BA:D5:43:B8:18:65
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0193568A8A47264423627065F4FC1AC1440D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0CB1
Signing time: Sat 23 Nov 2024 01:02:19 +0000
Manifest this update: Sat 23 Nov 2024 01:02:19 +0000
Manifest next update: Sun 24 Nov 2024 01:02:19 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: Oh4uA6zV10tvkuoEsdLhKIGu/xopQY39jNxp9DyyUE8=)
2: mFq30EVov3KZFiRshDeTe09LZZA.roa (hash: edRdrry42HRz6aSneIIBcdSuCyi3jNjLyDn5ZqVmFP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:8a:47:26:44:23:62:70:65:f4:fc:1a:c1:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Nov 23 01:02:19 2024 GMT
Not After : Nov 24 01:02:19 2024 GMT
Subject: CN=38fb448d46640ba6a454621e969dbad543b81865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:32:86:b6:96:79:0b:0e:f8:1d:f9:2f:b1:
c9:bf:e7:9e:57:ff:08:55:50:65:82:fc:14:34:8c:
87:6e:6e:2e:36:aa:9a:0b:1f:ba:f4:3d:cf:12:3c:
ec:a1:46:49:46:b0:4e:83:db:ee:25:26:21:e7:20:
d2:5a:2d:71:78:d8:b8:97:80:19:5e:bc:14:49:fb:
d6:5e:96:c8:b7:78:2c:00:9d:3e:b6:4d:de:03:63:
4c:a7:26:4f:27:b0:64:64:f9:ae:6d:65:5f:da:47:
96:80:f0:cf:29:09:a5:6f:af:0d:2f:d4:e1:a3:dc:
5c:4a:67:f8:fd:3c:e1:c8:e7:05:79:70:9a:c1:5f:
42:29:ea:68:dc:d9:a8:78:25:04:a6:bc:92:ba:a8:
04:02:6d:1d:f4:dc:ef:64:12:9b:a1:21:38:99:a9:
c2:66:81:a8:3a:0d:01:6b:a9:1e:5b:f1:5d:79:d5:
21:a8:86:1d:6a:0a:ea:39:a6:a2:aa:54:d3:93:ee:
8b:3a:a2:da:37:05:e1:65:56:d9:ea:67:b0:60:49:
18:2d:ad:59:4f:d3:0f:7d:b4:b8:84:f8:2e:81:c5:
70:66:dc:cc:14:a0:6f:a8:49:15:8a:24:71:2c:c7:
e1:c8:93:f2:d1:a3:bb:be:07:5e:a7:5e:68:7e:ae:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:44:8D:46:64:0B:A6:A4:54:62:1E:96:9D:BA:D5:43:B8:18:65
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:cf:32:85:91:23:5e:75:e6:0c:8a:8c:9d:f7:c0:7a:22:
90:f4:93:e5:1e:de:39:4a:be:04:49:8a:2e:8e:f7:77:1f:67:
99:ce:d4:63:fc:12:fe:d4:57:17:55:f6:9b:a3:73:ea:e8:10:
bd:2a:b0:e7:0e:af:d8:28:87:c0:94:93:69:21:9d:91:68:04:
44:03:8c:6b:8e:0f:66:e5:cb:d3:b8:13:2c:9d:16:bc:23:bb:
3e:e7:a6:76:58:8b:4f:1b:15:d4:74:e3:25:d6:42:9c:b0:d5:
a7:40:d4:97:df:b0:f9:97:21:2b:03:ff:29:73:bb:b1:95:f4:
04:16:dc:73:c3:4e:a4:81:40:f9:9d:b6:1a:43:21:97:fb:ab:
ae:58:32:dd:ad:cc:3d:03:b3:1d:f0:15:6f:6d:7d:ad:1e:a3:
5c:26:96:63:5c:cc:de:81:98:68:f7:43:8f:e6:20:7c:f0:76:
a8:32:94:2e:ba:f3:05:dc:29:cb:7a:44:fd:f3:9a:e1:8b:93:
35:43:19:9e:37:8c:72:58:11:2f:6b:64:25:96:80:69:b3:ec:
cc:59:32:4f:fa:70:bc:a1:d6:b7:ba:11:62:f0:3b:88:3c:2a:
d7:3d:c4:ea:7f:87:e7:8e:75:b3:97:47:46:2f:ea:2c:37:1a:
cf:1d:65:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiopHJkQjYnBl9PwawUQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy
YTE0MmYwHhcNMjQxMTIzMDEwMjE5WhcNMjQxMTI0MDEwMjE5WjAzMTEwLwYDVQQD
EygzOGZiNDQ4ZDQ2NjQwYmE2YTQ1NDYyMWU5NjlkYmFkNTQzYjgxODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw34yhraWeQsO+B35L7HJv+eeV/8I
VVBlgvwUNIyHbm4uNqqaCx+69D3PEjzsoUZJRrBOg9vuJSYh5yDSWi1xeNi4l4AZ
XrwUSfvWXpbIt3gsAJ0+tk3eA2NMpyZPJ7BkZPmubWVf2keWgPDPKQmlb68NL9Th
o9xcSmf4/TzhyOcFeXCawV9CKepo3NmoeCUEprySuqgEAm0d9NzvZBKboSE4manC
ZoGoOg0Ba6keW/FdedUhqIYdagrqOaaiqlTTk+6LOqLaNwXhZVbZ6mewYEkYLa1Z
T9MPfbS4hPgugcVwZtzMFKBvqEkViiRxLMfhyJPy0aO7vgdep15ofq6JDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj7RI1GZAumpFRiHpadutVDuBhlMB8GA1UdIwQY
MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt
YzM3M2Y0NTNhMjQ1LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1
LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6/PMoWR
I1515gyKjJ33wHoikPST5R7eOUq+BEmKLo73dx9nmc7UY/wS/tRXF1X2m6Nz6ugQ
vSqw5w6v2CiHwJSTaSGdkWgERAOMa44PZuXL07gTLJ0WvCO7PuemdliLTxsV1HTj
JdZCnLDVp0DUl9+w+ZchKwP/KXO7sZX0BBbcc8NOpIFA+Z22GkMhl/urrlgy3a3M
PQOzHfAVb219rR6jXCaWY1zM3oGYaPdDj+YgfPB2qDKULrrzBdwpy3pE/fOa4YuT
NUMZnjeMclgRL2tkJZaAabPszFkyT/pwvKHWt7oRYvA7iDwq1z3E6n+H5451s5dH
Ri/qLDcazx1l0Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:25 2024 by rpki-client on console-ams.rpki-client.org