Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: v5Sm2+AC/T6YzNT7SZIktH+pJpt4Of9VGcwv1UMGpak=
Subject key identifier: DD:1A:CE:DE:E8:9A:A8:7E:D0:A3:DA:1C:F6:6A:CE:BA:54:A7:C5:80
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 01935689D3BF26D46A94B2C69CA9A823B3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 12C1
Signing time: Sat 23 Nov 2024 01:01:33 +0000
Manifest this update: Sat 23 Nov 2024 01:01:33 +0000
Manifest next update: Sun 24 Nov 2024 01:01:33 +0000
Files and hashes: 1: DGHZfxKkPZ0U0K76ps1pA7WjgFs.roa (hash: eIIsnrnmldXq85Y0NjvDM3h7EV85y/dWrYtK0n9jQJo=)
2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: Q4feACZBQLMnJwDmkO/FWlU3C/eWpDZETC/+8n33B5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:d3:bf:26:d4:6a:94:b2:c6:9c:a9:a8:23:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Nov 23 01:01:33 2024 GMT
Not After : Nov 24 01:01:33 2024 GMT
Subject: CN=dd1acedee89aa87ed0a3da1cf66aceba54a7c580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:53:af:17:11:be:7a:05:b1:27:00:68:1f:
58:1f:8c:d9:ec:a9:e2:3d:93:23:0a:a8:29:22:23:
a8:4a:65:fc:c9:43:48:cb:4d:16:66:0c:e5:b8:8a:
d3:bd:69:a9:61:9a:26:c6:8c:80:e2:e7:b5:95:80:
80:1c:39:64:a1:ca:71:ac:01:cc:69:21:63:08:0a:
e0:11:4a:ff:74:11:2e:23:37:83:06:b0:73:04:0e:
dc:ce:a9:fc:a1:cb:02:81:44:a0:3c:d8:e6:f9:a1:
6a:c3:e5:0a:c2:c0:12:17:23:df:d0:2f:57:82:82:
70:04:32:9c:ff:a8:c4:25:ad:32:38:9d:ca:6f:0c:
9e:4c:0f:65:96:e7:36:da:5e:0e:fd:48:59:89:69:
09:29:5f:fe:83:46:b0:7a:41:c2:d2:69:59:9d:46:
6e:a9:d3:98:3a:b8:fd:ea:42:14:31:55:64:d9:34:
b5:02:4c:bc:ef:dd:c6:80:9b:25:e3:93:45:a6:32:
01:48:d8:92:94:9a:dd:14:51:3b:b1:6c:5f:72:f2:
26:70:1e:e8:e6:1c:e6:81:97:1f:8b:d8:19:60:17:
31:b6:45:25:53:79:0b:5c:81:ca:6c:54:26:09:79:
7a:57:e4:dd:2a:d5:a3:92:78:11:d2:a2:e9:54:87:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:CE:DE:E8:9A:A8:7E:D0:A3:DA:1C:F6:6A:CE:BA:54:A7:C5:80
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:7a:b0:8f:9f:52:b2:9b:d4:87:df:ec:9d:37:df:b2:93:
83:39:d1:f7:c1:bc:1b:5e:07:b8:50:70:fa:43:74:f8:4d:87:
80:ef:27:00:8d:1e:86:88:15:89:42:2c:bb:b4:98:53:58:b8:
b3:e4:97:43:5b:ed:65:7e:34:7b:25:d7:86:02:af:db:7f:c1:
84:a7:72:ad:14:0d:da:2b:ee:ab:93:a9:b2:5d:1c:8f:12:88:
b2:79:b8:bd:06:a1:b4:81:37:25:77:81:72:fa:63:42:99:ca:
ad:cd:eb:6e:f0:c4:b9:a1:dc:4b:4d:24:98:ef:24:5b:cf:7d:
a1:45:4f:c5:54:5b:8f:51:21:39:c1:f4:6d:ac:a9:75:33:af:
84:2b:59:cf:bb:b7:12:64:25:a8:10:53:05:fb:1d:30:6e:e2:
07:ed:c6:72:1c:ec:25:4d:e3:1c:91:79:ec:08:c7:1c:af:a1:
2c:90:a0:ad:c2:57:84:7b:a1:1e:0d:a8:1e:e9:f3:7c:01:1c:
b7:97:24:e1:85:1d:b4:53:79:ca:80:74:00:1c:aa:4c:71:73:
71:73:12:06:e2:ce:04:b6:2a:46:1e:9c:fe:8e:fe:c8:67:72:
57:5e:d8:b9:5a:a8:30:88:d3:d8:0c:09:fc:81:4f:c3:97:de:
07:4b:3a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWidO/JtRqlLLGnKmoI7PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0
NGQzMGMwHhcNMjQxMTIzMDEwMTMzWhcNMjQxMTI0MDEwMTMzWjAzMTEwLwYDVQQD
EyhkZDFhY2VkZWU4OWFhODdlZDBhM2RhMWNmNjZhY2ViYTU0YTdjNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJNTrxcRvnoFsScAaB9YH4zZ7Kni
PZMjCqgpIiOoSmX8yUNIy00WZgzluIrTvWmpYZomxoyA4ue1lYCAHDlkocpxrAHM
aSFjCArgEUr/dBEuIzeDBrBzBA7czqn8ocsCgUSgPNjm+aFqw+UKwsASFyPf0C9X
goJwBDKc/6jEJa0yOJ3KbwyeTA9lluc22l4O/UhZiWkJKV/+g0awekHC0mlZnUZu
qdOYOrj96kIUMVVk2TS1Aky8793GgJsl45NFpjIBSNiSlJrdFFE7sWxfcvImcB7o
5hzmgZcfi9gZYBcxtkUlU3kLXIHKbFQmCXl6V+TdKtWjkngR0qLpVId1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0azt7omqh+0KPaHPZqzrpUp8WAMB8GA1UdIwQY
MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt
MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj
LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG96sI+f
UrKb1Iff7J0337KTgznR98G8G14HuFBw+kN0+E2HgO8nAI0ehogViUIsu7SYU1i4
s+SXQ1vtZX40eyXXhgKv23/BhKdyrRQN2ivuq5Opsl0cjxKIsnm4vQahtIE3JXeB
cvpjQpnKrc3rbvDEuaHcS00kmO8kW899oUVPxVRbj1EhOcH0baypdTOvhCtZz7u3
EmQlqBBTBfsdMG7iB+3GchzsJU3jHJF57AjHHK+hLJCgrcJXhHuhHg2oHunzfAEc
t5ck4YUdtFN5yoB0AByqTHFzcXMSBuLOBLYqRh6c/o7+yGdyV17YuVqoMIjT2AwJ
/IFPw5feB0s6iA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:17 2024 by rpki-client on console-fra.rpki-client.org