Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: W6ohJ6fGY+vx4bCo7GM4SYeUGaOZzXULicpPDgiV2ps=
Subject key identifier: 7E:08:85:A3:3D:7A:AE:DC:DA:10:F2:CD:A3:EF:FF:08:60:21:69:41
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 019352ABFABF4AB2CC1C4B83F9E3B00791FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0A56
Signing time: Fri 22 Nov 2024 07:00:22 +0000
Manifest this update: Fri 22 Nov 2024 07:00:22 +0000
Manifest next update: Sat 23 Nov 2024 07:00:22 +0000
Files and hashes: 1: Cz_VZdeyonShFI8qEn_6G9MByhg.roa (hash: /ya8WO4O70K4WE/wDyMOo9qSHotLu3V4Zdy7toLvRRs=)
2: Mzy1w5n2hqTEQmRtGJiD6cltRGY.roa (hash: UMdHSdtudYBclN7puqWRGD2kkJNfiHTRa0kTB4vhCyU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: 2Jw5Aj3ZeS3HDAWnzIzcKXvauDSqdiSZaoLEmgcSCWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:fa:bf:4a:b2:cc:1c:4b:83:f9:e3:b0:07:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Nov 22 07:00:22 2024 GMT
Not After : Nov 23 07:00:22 2024 GMT
Subject: CN=7e0885a33d7aaedcda10f2cda3efff0860216941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:f2:b8:94:2f:ce:94:fd:34:a0:39:2f:09:
f2:76:05:eb:42:87:00:bc:1a:d1:4e:29:e0:66:af:
2a:ba:b4:bd:c6:71:0e:62:a9:ad:cb:85:fe:d3:c2:
15:ae:d6:e7:2d:31:b4:31:1a:6b:e3:59:30:79:76:
c3:58:3f:e6:22:29:90:3b:5c:23:0e:b9:19:a4:e1:
06:e8:1b:e6:fd:69:8b:b7:8e:9c:f0:b5:d0:44:26:
4d:64:90:f4:36:b8:cb:46:b3:0a:d0:ce:7d:f1:4a:
01:73:c0:71:97:9f:ed:bb:55:c4:b8:c0:35:7d:63:
00:01:bd:00:43:be:f6:b8:9a:48:f7:df:ca:29:91:
af:78:cf:86:10:6b:65:45:93:44:f0:4d:0d:79:fa:
f6:a1:a2:ab:1b:59:98:fe:30:f4:71:50:43:e8:76:
53:6e:97:bf:72:01:92:a0:68:1b:d1:34:40:24:f5:
52:92:02:6d:6c:76:4b:ca:af:7c:20:cb:c3:ee:de:
b5:37:c3:ab:25:31:8e:43:1e:66:e2:5d:01:74:c7:
75:20:82:4c:7d:ea:ac:2a:c6:f0:c9:69:c7:63:41:
3d:15:e7:11:da:75:4d:ba:e5:d3:e0:d0:3c:a7:d7:
ec:35:ef:c1:14:4f:e7:18:53:52:81:35:9d:d8:20:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:85:A3:3D:7A:AE:DC:DA:10:F2:CD:A3:EF:FF:08:60:21:69:41
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:00:a7:39:e7:ab:2a:43:25:94:b7:bc:5f:a5:c1:32:da:1d:
36:c6:1a:83:73:77:88:1f:fb:87:09:c8:a8:07:a1:f2:cc:ad:
de:74:02:57:a3:53:1b:2b:5f:79:3e:40:eb:24:58:06:e5:5d:
4d:07:a8:83:0c:e6:a5:bf:67:21:a4:2f:78:27:03:5b:35:0d:
78:1e:dc:b7:e3:a7:12:a8:cc:b3:c6:46:68:22:88:fc:01:b4:
33:50:8a:05:59:27:a8:28:fd:3a:c8:9b:50:d1:f0:97:f6:b8:
af:43:e4:b7:00:6b:57:ba:8d:93:a2:2c:7b:2e:7b:c2:97:bb:
fb:9b:69:d6:ca:f4:6c:69:e0:1b:ad:68:5b:90:da:6f:df:9e:
59:b5:a4:26:8c:62:f1:cd:67:20:80:61:85:d1:77:3e:6a:44:
2c:f5:89:a6:8c:27:e0:e2:f7:95:63:4a:87:b4:8d:f2:dd:7e:
78:25:78:28:2a:53:c1:ad:ca:7b:11:3d:d0:f7:04:c4:20:a0:
b2:8f:e4:cb:b3:96:45:85:15:ba:90:cb:f3:dd:25:f0:0b:ab:
43:23:49:9e:a9:64:b8:50:61:9a:17:1c:b0:38:54:08:6f:ae:
82:5e:44:e6:ad:17:68:9a:e5:a2:97:28:95:ef:79:7f:a8:d3:
07:d3:f6:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSq/q/SrLMHEuD+eOwB5H6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz
ZjMxMmEwHhcNMjQxMTIyMDcwMDIyWhcNMjQxMTIzMDcwMDIyWjAzMTEwLwYDVQQD
Eyg3ZTA4ODVhMzNkN2FhZWRjZGExMGYyY2RhM2VmZmYwODYwMjE2OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz3yuJQvzpT9NKA5LwnydgXrQocA
vBrRTingZq8qurS9xnEOYqmty4X+08IVrtbnLTG0MRpr41kweXbDWD/mIimQO1wj
DrkZpOEG6Bvm/WmLt46c8LXQRCZNZJD0NrjLRrMK0M598UoBc8Bxl5/tu1XEuMA1
fWMAAb0AQ772uJpI99/KKZGveM+GEGtlRZNE8E0Nefr2oaKrG1mY/jD0cVBD6HZT
bpe/cgGSoGgb0TRAJPVSkgJtbHZLyq98IMvD7t61N8OrJTGOQx5m4l0BdMd1IIJM
feqsKsbwyWnHY0E9FecR2nVNuuXT4NA8p9fsNe/BFE/nGFNSgTWd2CDpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4IhaM9eq7c2hDyzaPv/whgIWlBMB8GA1UdIwQY
MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt
YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3
LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQCnOeer
KkMllLe8X6XBMtodNsYag3N3iB/7hwnIqAeh8syt3nQCV6NTGytfeT5A6yRYBuVd
TQeogwzmpb9nIaQveCcDWzUNeB7ct+OnEqjMs8ZGaCKI/AG0M1CKBVknqCj9Osib
UNHwl/a4r0PktwBrV7qNk6Isey57wpe7+5tp1sr0bGngG61oW5Dab9+eWbWkJoxi
8c1nIIBhhdF3PmpELPWJpown4OL3lWNKh7SN8t1+eCV4KCpTwa3KexE90PcExCCg
so/ky7OWRYUVupDL890l8AurQyNJnqlkuFBhmhccsDhUCG+ugl5E5q0XaJrlopco
le95f6jTB9P2Uw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:12 2024 by rpki-client on console-ams.rpki-client.org