Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: y3kx/NbWD72ZNOxOkMbCE3ugUcBBTv4KUdAL38GZbnM=
Subject key identifier: 04:11:03:C4:BE:1B:CD:B6:7C:3C:AE:92:8F:12:5C:C9:3E:E9:F4:D2
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 0193572DA01B5858C5E12FF61D3C5538089B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 04:00:27 +0000
Manifest this update: Sat 23 Nov 2024 04:00:27 +0000
Manifest next update: Sun 24 Nov 2024 04:00:27 +0000
Files and hashes: 1: 1n6WtssH9LMHR7CBNlKGRAwI7Oc.roa (hash: JAgsS6xyQZ82zrSC9+KNirl7dtcfgzaUBodOlnbT2RY=)
2: BEHSdhZw70lna7yHBqMNWBbgCro.roa (hash: 9n8XbDjEEdgQygnEK0FJrpVdV41Qh/8fo2JB7O0xXao=)
3: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: kOgiR6UyGKpgBvzORGj1qL8z8RDg3qbRIHYQ3b5p4bQ=)
4: ogWOf9bTQe_2f3k_b04UkLXohNQ.roa (hash: bgvU2zf3tsBQoXPVvkwb23EGiwRi7NPGScTQkkgsPEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a0:1b:58:58:c5:e1:2f:f6:1d:3c:55:38:08:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Nov 23 04:00:27 2024 GMT
Not After : Nov 24 04:00:27 2024 GMT
Subject: CN=041103c4be1bcdb67c3cae928f125cc93ee9f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:73:11:17:ee:2b:42:45:2e:4c:d7:cf:c1:
5a:4b:86:fc:1d:e6:8d:63:ef:34:7d:ac:17:39:96:
23:80:99:7d:1a:70:05:90:d2:23:1c:74:34:d9:99:
2b:51:f5:29:d6:bc:c6:be:de:ab:f4:e5:da:99:75:
01:c5:52:c7:fc:9f:86:7a:f8:34:20:14:73:f6:5b:
68:92:d5:45:cd:19:8e:01:eb:d2:74:e9:4c:b5:4d:
3d:f0:63:66:b7:ba:2b:f6:d4:21:90:f1:7d:7e:33:
71:f4:71:d0:f8:d7:41:df:a6:55:fa:00:d8:e6:d2:
e5:0e:12:70:75:f3:04:49:b0:c6:fb:2f:86:a1:72:
be:df:4f:fb:80:a7:dd:06:e4:33:ea:c4:99:c9:cf:
44:f8:c1:24:ad:95:25:8a:4e:96:7d:89:6e:4b:73:
96:c9:5b:e5:04:bf:61:2c:dc:fe:6e:16:df:65:1a:
be:8e:b8:a3:6c:05:1c:72:6b:18:7c:c0:05:fa:c3:
40:76:77:b6:80:d0:84:77:bf:5c:58:49:eb:8b:c2:
c2:9e:aa:0f:ea:7e:9a:a4:ed:0e:c8:95:99:f4:c6:
b9:ca:b9:3c:3b:b3:7d:55:88:2c:10:3c:fb:12:13:
c5:6d:d0:f9:c2:da:f7:42:6c:df:47:8e:9f:c3:48:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:03:C4:BE:1B:CD:B6:7C:3C:AE:92:8F:12:5C:C9:3E:E9:F4:D2
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:71:94:91:95:ff:ca:35:95:4f:18:bd:74:e6:d7:85:09:
bc:5c:17:76:e3:6f:02:91:c8:c5:10:a8:91:55:c1:70:5f:b6:
4e:a7:aa:bb:25:bf:0f:71:29:5d:c6:51:f1:71:b0:84:e0:e8:
7b:8b:25:3b:74:08:14:f2:10:64:9d:ae:b6:38:8b:15:3d:9c:
7e:0c:2e:73:46:4e:29:26:58:5f:6f:3b:1c:43:67:12:0d:18:
33:d4:e2:fa:30:d2:ad:8d:40:8a:13:8e:58:8d:1a:1e:d9:50:
99:5c:c4:0c:bf:c6:c3:c8:11:a9:be:60:69:d5:c9:ea:9d:bb:
a3:67:a5:86:18:eb:70:90:43:ed:75:1e:e1:62:de:da:5b:f6:
09:f8:ad:7f:04:75:32:31:2e:6d:ef:d1:8f:6d:a2:79:23:9d:
c4:2f:d4:07:c7:f0:5e:14:57:e9:cb:b4:cd:cd:91:08:fc:66:
69:02:86:e8:0b:6a:be:ac:d9:06:ef:77:a4:3a:2b:6b:c5:da:
ea:4b:9f:7d:3d:d3:50:c0:29:ed:47:78:1d:9d:a6:05:62:d7:
de:5a:62:d1:74:00:49:d7:41:11:ef:82:25:95:1f:b9:34:a3:
c5:e5:67:b9:a8:12:5d:1b:24:24:df:4e:78:ea:ef:37:18:e5:
51:97:f3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaAbWFjF4S/2HTxVOAibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw
OTJlYzIwHhcNMjQxMTIzMDQwMDI3WhcNMjQxMTI0MDQwMDI3WjAzMTEwLwYDVQQD
EygwNDExMDNjNGJlMWJjZGI2N2MzY2FlOTI4ZjEyNWNjOTNlZTlmNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrpzERfuK0JFLkzXz8FaS4b8HeaN
Y+80fawXOZYjgJl9GnAFkNIjHHQ02ZkrUfUp1rzGvt6r9OXamXUBxVLH/J+Gevg0
IBRz9ltoktVFzRmOAevSdOlMtU098GNmt7or9tQhkPF9fjNx9HHQ+NdB36ZV+gDY
5tLlDhJwdfMESbDG+y+GoXK+30/7gKfdBuQz6sSZyc9E+MEkrZUlik6WfYluS3OW
yVvlBL9hLNz+bhbfZRq+jrijbAUccmsYfMAF+sNAdne2gNCEd79cWEnri8LCnqoP
6n6apO0OyJWZ9Ma5yrk8O7N9VYgsEDz7EhPFbdD5wtr3QmzfR46fw0iu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQRA8S+G822fDyuko8SXMk+6fTSMB8GA1UdIwQY
MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt
YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh
LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKItxlJGV
/8o1lU8YvXTm14UJvFwXduNvApHIxRCokVXBcF+2TqequyW/D3EpXcZR8XGwhODo
e4slO3QIFPIQZJ2utjiLFT2cfgwuc0ZOKSZYX287HENnEg0YM9Ti+jDSrY1AihOO
WI0aHtlQmVzEDL/Gw8gRqb5gadXJ6p27o2elhhjrcJBD7XUe4WLe2lv2CfitfwR1
MjEube/Rj22ieSOdxC/UB8fwXhRX6cu0zc2RCPxmaQKG6AtqvqzZBu93pDora8Xa
6kuffT3TUMAp7Ud4HZ2mBWLX3lpi0XQASddBEe+CJZUfuTSjxeVnuagSXRskJN9O
eOrvNxjlUZfzhA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:32 2024 by rpki-client on console-fra.rpki-client.org