Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: smrJ80ukt6UFyPasDOfgzN5EI+nv7wmqVf5YBy80QQs=
Subject key identifier: 1E:3C:0A:CC:54:B9:6F:10:62:DA:2E:0D:9F:7E:4F:EF:69:66:47:C6
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 01935952D3B0991CA8DF53307092BF361F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 14:00:20 +0000
Manifest this update: Sat 23 Nov 2024 14:00:20 +0000
Manifest next update: Sun 24 Nov 2024 14:00:20 +0000
Files and hashes: 1: gwnhfksbEDFvoQHHgbm1Kbss0Ss.roa (hash: R8LINBS/WUtxAb73fc11HttPimd6MYyxIcBLTIXvr3c=)
2: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: FiKLOMGiH9WKNKXuDx1nZYwgKrlye5cJvJuiMegh4Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:d3:b0:99:1c:a8:df:53:30:70:92:bf:36:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Nov 23 14:00:20 2024 GMT
Not After : Nov 24 14:00:20 2024 GMT
Subject: CN=1e3c0acc54b96f1062da2e0d9f7e4fef696647c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:f5:4f:9e:43:d8:f3:d9:9e:bd:89:4b:70:
55:da:df:92:60:55:f5:7b:b1:a3:78:0f:54:f5:88:
23:23:b8:cb:4f:b5:7a:8a:80:9f:7f:8c:a0:29:02:
4c:00:ae:8c:38:9c:69:56:7e:e9:5a:f0:50:ca:14:
c0:e3:17:c4:a0:3b:d8:ee:af:76:05:03:af:df:6e:
44:4c:93:cd:6e:7f:f7:7c:9a:f7:08:1d:87:82:9b:
7e:41:f3:fd:24:bf:1e:c3:33:3b:33:ef:f3:40:46:
ad:26:8d:db:46:27:87:e8:2d:9c:ec:c4:79:76:46:
cd:75:c0:c4:5e:b8:a9:ba:ef:36:79:55:8f:16:e9:
1b:28:ac:1d:74:2f:c1:b9:81:a6:68:e4:6a:3c:c5:
35:f7:f0:dc:ee:ea:a1:5a:c2:2e:aa:3c:dd:7d:84:
0d:56:4d:05:e8:cf:d3:f5:58:4c:23:38:dc:38:08:
37:81:11:d3:40:d1:01:1f:7f:4d:21:fd:59:8a:97:
8a:7d:46:77:3a:3c:1b:75:6b:a5:de:9e:8a:cd:02:
cc:b0:3b:8e:35:8b:53:07:4a:6c:d1:4f:c6:7f:04:
64:a5:58:7d:df:1d:07:e9:a5:49:d6:05:8e:b3:89:
26:24:93:a6:d9:a8:bd:54:84:3b:16:d1:f9:a5:8f:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:0A:CC:54:B9:6F:10:62:DA:2E:0D:9F:7E:4F:EF:69:66:47:C6
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ad:5b:cd:09:89:40:67:e4:a4:79:fc:96:70:9c:c4:ac:8f:
40:84:b6:dc:31:33:5f:36:9e:62:25:5f:88:17:04:a1:3d:b6:
35:f2:4d:b9:b0:9b:31:03:c5:47:11:cd:df:6f:0f:a1:34:b6:
90:c0:68:e3:c0:0d:63:10:e9:d2:9f:5f:86:ff:85:25:4a:64:
17:76:3f:c1:e8:e2:4e:88:2a:9f:30:e5:5a:a1:53:6e:e5:c1:
57:9a:74:5d:37:08:43:87:c3:8c:01:ec:b4:ed:43:b7:2c:03:
17:14:89:25:f9:3f:32:f3:b8:6a:5e:ee:8c:da:1f:63:4f:92:
7f:3b:d1:00:62:9c:6a:2e:18:c7:a6:f3:72:9a:35:25:ad:85:
ef:75:3e:4b:50:99:f9:6e:1e:43:3f:e6:fa:77:74:41:ef:bc:
2c:a2:6d:10:35:e0:dc:1c:fd:ae:5e:68:3f:ac:fd:58:0e:ae:
34:7b:66:d8:0e:03:ca:06:4b:88:97:e0:a0:26:d8:df:a7:c4:
6e:75:e6:df:fa:a3:de:2a:4e:80:37:55:a7:5c:4b:c8:87:a7:
93:67:16:36:c0:90:5c:c1:ed:71:27:be:24:96:b5:5f:ac:ea:
e4:08:3f:bb:bf:39:f7:5c:54:06:5a:76:69:dd:68:cb:2a:50:
fe:37:d2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUtOwmRyo31MwcJK/Nh8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjQxMTIzMTQwMDIwWhcNMjQxMTI0MTQwMDIwWjAzMTEwLwYDVQQD
EygxZTNjMGFjYzU0Yjk2ZjEwNjJkYTJlMGQ5ZjdlNGZlZjY5NjY0N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZj1T55D2PPZnr2JS3BV2t+SYFX1
e7GjeA9U9YgjI7jLT7V6ioCff4ygKQJMAK6MOJxpVn7pWvBQyhTA4xfEoDvY7q92
BQOv325ETJPNbn/3fJr3CB2Hgpt+QfP9JL8ewzM7M+/zQEatJo3bRieH6C2c7MR5
dkbNdcDEXripuu82eVWPFukbKKwddC/BuYGmaORqPMU19/Dc7uqhWsIuqjzdfYQN
Vk0F6M/T9VhMIzjcOAg3gRHTQNEBH39NIf1ZipeKfUZ3OjwbdWul3p6KzQLMsDuO
NYtTB0ps0U/GfwRkpVh93x0H6aVJ1gWOs4kmJJOm2ai9VIQ7FtH5pY9+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB48CsxUuW8QYtouDZ9+T+9pZkfGMB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq1bzQmJ
QGfkpHn8lnCcxKyPQIS23DEzXzaeYiVfiBcEoT22NfJNubCbMQPFRxHN328PoTS2
kMBo48ANYxDp0p9fhv+FJUpkF3Y/wejiTogqnzDlWqFTbuXBV5p0XTcIQ4fDjAHs
tO1DtywDFxSJJfk/MvO4al7ujNofY0+SfzvRAGKcai4Yx6bzcpo1Ja2F73U+S1CZ
+W4eQz/m+nd0Qe+8LKJtEDXg3Bz9rl5oP6z9WA6uNHtm2A4DygZLiJfgoCbY36fE
bnXm3/qj3ipOgDdVp1xLyIenk2cWNsCQXMHtcSe+JJa1X6zq5Ag/u78591xUBlp2
ad1oyypQ/jfSTw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:49:42 2024 by rpki-client on console-ams.rpki-client.org