Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier: 4uVtL5EYU4BlZGfvOyJdNS+sEycCtDS1olcXM/6Tp1Y=
Subject key identifier: DC:8E:B9:DA:5A:DC:55:08:6C:47:FE:BB:81:E7:75:81:99:B1:5E:EA
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial: 019350F49F9E0CC6BBEAE013B23A767AEFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number: 0FE5
Signing time: Thu 21 Nov 2024 23:00:29 +0000
Manifest this update: Thu 21 Nov 2024 23:00:29 +0000
Manifest next update: Fri 22 Nov 2024 23:00:29 +0000
Files and hashes: 1: cgPWmg3DCMksBA4NsSJ5V0DaLtc.roa (hash: UOlKurKxdTX+NvQ6l/dOkOP4eO3JjEliFTUI2mkRfII=)
2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 9ypFyuvFzOoCcO7EyvJSrFfZO3j+JN1Q3ZalPdKZ7MM=)
3: nO87UM6XQyW8FbdAMS6qdYCedjc.roa (hash: Z5c2Nn/AP59h4CubpozQndrkIb7d+GCr0FqteK/fggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:9f:9e:0c:c6:bb:ea:e0:13:b2:3a:76:7a:ef:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Validity
Not Before: Nov 21 23:00:29 2024 GMT
Not After : Nov 22 23:00:29 2024 GMT
Subject: CN=dc8eb9da5adc55086c47febb81e7758199b15eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:a1:3f:21:1b:d2:50:ac:49:50:7d:cb:f6:
b9:39:f5:85:72:3c:e4:b3:e4:ec:9d:b6:ef:90:b4:
38:70:e4:4f:6c:4a:c1:39:90:fd:61:ec:15:4c:c3:
ab:53:5b:f1:52:f3:18:69:cc:10:9d:42:67:28:1d:
93:47:ef:3a:db:09:d9:b4:33:6a:65:b6:90:24:4c:
16:da:f3:da:e7:64:16:15:1f:ad:a1:f4:4d:fd:8e:
7f:7d:4d:47:c5:c8:58:0b:b7:97:f9:2a:a2:b3:b9:
7f:d2:00:10:35:b1:05:52:39:ae:86:f0:98:ef:d3:
86:74:5e:fa:27:be:c0:50:7d:b5:1e:85:15:aa:9d:
90:30:ba:f7:5b:08:36:7d:05:34:cd:95:0b:e8:7c:
87:94:1e:33:a1:a3:be:82:f5:4c:9f:94:7b:57:d6:
a4:80:64:ec:78:94:c8:c9:65:c5:fe:35:2a:b1:dc:
76:d8:b3:13:ae:92:82:4c:ed:34:0a:79:aa:50:32:
65:65:d0:4f:77:3d:15:4d:82:55:2b:50:97:86:06:
44:9b:b8:31:b1:d4:57:41:9b:47:cc:0a:e3:2c:9f:
2b:ed:c8:79:12:14:45:5f:52:ba:99:cc:5a:0b:a9:
c9:28:ee:1e:6d:d7:7b:13:56:06:a0:01:9f:4a:df:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:B9:DA:5A:DC:55:08:6C:47:FE:BB:81:E7:75:81:99:B1:5E:EA
X509v3 Authority Key Identifier:
keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:44:61:18:e2:69:11:94:85:e1:a4:71:67:eb:7e:23:ef:
1f:53:56:91:15:f4:42:ac:b5:08:13:ef:29:79:b0:c3:c3:c4:
db:46:7b:1f:73:52:bd:4d:c4:d1:c7:06:5f:99:61:9d:0c:8d:
b2:5e:03:b5:0c:4f:55:db:79:45:00:27:85:82:92:5e:83:8f:
d3:e3:1f:bc:2f:06:30:1b:4e:a1:7c:20:a6:8a:a8:96:e2:67:
c5:91:d5:5c:e8:ff:34:ef:53:ff:7d:fc:5c:ea:80:c2:31:ac:
c1:59:82:54:6c:4d:9f:44:8c:b1:69:c9:dc:b4:5b:72:32:d0:
e7:28:09:ba:0f:55:42:ff:f7:1a:dc:9f:c5:58:ba:01:83:c9:
82:ea:5a:df:ea:cd:55:eb:a9:1d:e8:ed:fe:e1:06:68:8c:a7:
e6:46:34:e3:ff:45:de:71:00:c6:1d:6c:7f:29:4e:64:68:67:
d0:4b:e0:a7:e5:0a:04:b8:10:43:aa:d1:44:4f:d2:af:5b:69:
d4:35:02:d7:f4:4b:2e:da:14:6b:7a:67:24:5d:16:84:81:1e:
ce:2c:a2:5f:08:33:da:5a:34:4e:f6:96:5e:17:ff:e5:35:f7:
68:8b:f5:83:de:12:28:6c:a1:b3:46:03:a4:b7:36:04:7f:b2:
24:21:89:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQ9J+eDMa76uATsjp2eu/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri
ZmM3ZDQwHhcNMjQxMTIxMjMwMDI5WhcNMjQxMTIyMjMwMDI5WjAzMTEwLwYDVQQD
EyhkYzhlYjlkYTVhZGM1NTA4NmM0N2ZlYmI4MWU3NzU4MTk5YjE1ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfehPyEb0lCsSVB9y/a5OfWFcjzk
s+TsnbbvkLQ4cORPbErBOZD9YewVTMOrU1vxUvMYacwQnUJnKB2TR+862wnZtDNq
ZbaQJEwW2vPa52QWFR+tofRN/Y5/fU1HxchYC7eX+Sqis7l/0gAQNbEFUjmuhvCY
79OGdF76J77AUH21HoUVqp2QMLr3Wwg2fQU0zZUL6HyHlB4zoaO+gvVMn5R7V9ak
gGTseJTIyWXF/jUqsdx22LMTrpKCTO00CnmqUDJlZdBPdz0VTYJVK1CXhgZEm7gx
sdRXQZtHzArjLJ8r7ch5EhRFX1K6mcxaC6nJKO4ebdd7E1YGoAGfSt/GqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyOudpa3FUIbEf+u4HndYGZsV7qMB8GA1UdIwQY
MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt
NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh
LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6hEYRji
aRGUheGkcWfrfiPvH1NWkRX0Qqy1CBPvKXmww8PE20Z7H3NSvU3E0ccGX5lhnQyN
sl4DtQxPVdt5RQAnhYKSXoOP0+MfvC8GMBtOoXwgpoqoluJnxZHVXOj/NO9T/338
XOqAwjGswVmCVGxNn0SMsWnJ3LRbcjLQ5ygJug9VQv/3GtyfxVi6AYPJgupa3+rN
VeupHejt/uEGaIyn5kY04/9F3nEAxh1sfylOZGhn0Evgp+UKBLgQQ6rRRE/Sr1tp
1DUC1/RLLtoUa3pnJF0WhIEeziyiXwgz2lo0TvaWXhf/5TX3aIv1g94SKGyhs0YD
pLc2BH+yJCGJHg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:07 2024 by rpki-client on console-ams.rpki-client.org