Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: aOwRok7aok45L4uAExmdLog+IGpuaRdpoc++wGVENSg=
Subject key identifier: 8C:19:7C:2C:08:E0:B9:A3:71:19:17:E5:79:B5:20:0A:96:8A:4A:2F
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 01935953361C344618ED56AB474E1E56AD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 031D
Signing time: Sat 23 Nov 2024 14:00:45 +0000
Manifest this update: Sat 23 Nov 2024 14:00:45 +0000
Manifest next update: Sun 24 Nov 2024 14:00:45 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: S96E4BX3Q2YofLuksRkmwWhtmRUGaWbxiFGwb5jckng=)
2: iRrC0Sw0Gud3aFWIYExGz8eivns.roa (hash: cn4QghMqqkQU+FaaDjuGy5NsrWJXqfbB3ZwPQmGWq2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:36:1c:34:46:18:ed:56:ab:47:4e:1e:56:ad:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Nov 23 14:00:45 2024 GMT
Not After : Nov 24 14:00:45 2024 GMT
Subject: CN=8c197c2c08e0b9a3711917e579b5200a968a4a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:55:b5:41:5b:e3:48:db:a1:90:0a:73:e5:
81:5b:56:2c:48:11:32:ca:15:e1:c1:7d:94:5c:6a:
9f:ff:e6:f2:0e:ac:36:f1:1a:dc:a6:46:55:33:03:
b4:4d:2e:15:aa:51:38:6b:43:27:f2:f0:79:1d:a6:
15:67:6f:19:1c:97:21:fe:ff:47:ff:0a:60:0e:60:
0f:aa:56:1f:1d:0d:63:0e:83:77:50:0b:d6:34:3b:
0b:09:23:c2:0d:3e:b9:cb:37:58:b3:de:74:14:22:
21:29:a3:18:28:d5:17:70:dd:aa:c3:56:01:bc:0e:
10:52:9c:df:9f:07:40:e0:da:f5:84:e3:71:68:7d:
a3:bc:f6:af:4e:61:cc:fc:14:05:2c:02:d7:30:5f:
85:d3:95:f7:fa:64:20:56:20:70:1f:3a:8a:91:ae:
f1:02:88:71:d9:08:1f:1c:cd:d0:f9:0a:8f:3f:44:
54:77:98:c4:5e:a5:2d:13:75:70:74:3e:e2:9a:e5:
d5:bd:67:dc:55:dd:8e:dc:c6:40:01:e6:7c:a5:c1:
c9:08:86:7e:87:bc:44:ee:42:f3:0b:84:18:a0:b9:
26:30:de:6d:0e:33:79:c1:0f:18:9e:74:68:66:2d:
20:b6:4e:8b:69:55:7f:46:d5:d5:a2:0e:7a:84:75:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:7C:2C:08:E0:B9:A3:71:19:17:E5:79:B5:20:0A:96:8A:4A:2F
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:c4:52:96:e8:6e:23:20:80:4d:6d:38:64:dc:96:47:78:
93:6a:12:82:fd:a5:56:bb:e7:61:c5:44:c6:25:be:10:0b:4c:
8f:32:5f:3a:72:96:10:a0:4f:48:d7:19:af:fa:06:70:cb:2d:
ff:8a:da:e1:d5:8d:c4:70:b5:0a:76:48:da:9e:29:8d:c8:47:
c2:90:cb:da:b9:70:23:6e:57:98:c2:22:9e:7e:9e:50:3b:22:
ff:04:fa:36:89:79:4e:6a:51:e7:ac:fa:74:36:7d:14:c8:7f:
36:f9:b2:7e:94:ed:60:94:3f:71:ba:18:ec:66:18:16:6e:ef:
43:f8:7b:71:fe:19:28:98:c1:0b:d9:2d:d8:f0:51:dd:d1:fa:
85:cc:9f:59:ab:b7:b5:2e:5d:82:02:d5:94:69:9e:8e:b6:86:
33:12:8a:38:ba:ed:ec:5d:cc:76:b9:b3:ba:98:3b:0a:1a:75:
e0:5b:6c:42:94:99:11:b1:04:f5:57:7e:96:0b:f3:85:39:f9:
05:4d:21:46:2f:53:9f:99:c9:2b:88:2e:6d:2d:42:bb:9b:53:
e3:ba:d8:94:60:a6:ae:42:e1:b0:f7:35:11:35:a3:53:c1:35:
9f:5a:67:73:86:b5:c9:a7:77:2e:82:ee:a4:99:4c:4f:f6:f0:
b1:0e:5e:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNZUzYcNEYY7VarR04eVq1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm
YTBjZWIwHhcNMjQxMTIzMTQwMDQ1WhcNMjQxMTI0MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg4YzE5N2MyYzA4ZTBiOWEzNzExOTE3ZTU3OWI1MjAwYTk2OGE0YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFVtUFb40jboZAKc+WBW1YsSBEy
yhXhwX2UXGqf/+byDqw28RrcpkZVMwO0TS4VqlE4a0Mn8vB5HaYVZ28ZHJch/v9H
/wpgDmAPqlYfHQ1jDoN3UAvWNDsLCSPCDT65yzdYs950FCIhKaMYKNUXcN2qw1YB
vA4QUpzfnwdA4Nr1hONxaH2jvPavTmHM/BQFLALXMF+F05X3+mQgViBwHzqKka7x
Aohx2QgfHM3Q+QqPP0RUd5jEXqUtE3VwdD7imuXVvWfcVd2O3MZAAeZ8pcHJCIZ+
h7xE7kLzC4QYoLkmMN5tDjN5wQ8YnnRoZi0gtk6LaVV/RtXVog56hHUP1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIwZfCwI4LmjcRkX5Xm1IAqWikovMB8GA1UdIwQY
MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj
LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm
YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1zE
UpbobiMggE1tOGTclkd4k2oSgv2lVrvnYcVExiW+EAtMjzJfOnKWEKBPSNcZr/oG
cMst/4ra4dWNxHC1CnZI2p4pjchHwpDL2rlwI25XmMIinn6eUDsi/wT6Nol5TmpR
56z6dDZ9FMh/NvmyfpTtYJQ/cboY7GYYFm7vQ/h7cf4ZKJjBC9kt2PBR3dH6hcyf
Wau3tS5dggLVlGmejraGMxKKOLrt7F3Mdrmzupg7Chp14FtsQpSZEbEE9Vd+lgvz
hTn5BU0hRi9Tn5nJK4gubS1Cu5tT47rYlGCmrkLhsPc1ETWjU8E1n1pnc4a1yad3
LoLupJlMT/bwsQ5ekA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:44 2024 by rpki-client on console-ams.rpki-client.org