Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: TCLMkhjpZDzLLoxgwDTt3Pg77fdrC/3OMB7mVZ4auuk=
Subject key identifier: AD:3B:59:39:7D:D3:67:79:84:56:98:D0:9A:6F:B6:34:37:44:9B:17
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019357D2C24D683048C7B07528E3B90FD7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 09AE
Signing time: Sat 23 Nov 2024 07:00:50 +0000
Manifest this update: Sat 23 Nov 2024 07:00:50 +0000
Manifest next update: Sun 24 Nov 2024 07:00:50 +0000
Files and hashes: 1: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: AD/NSbMoz2ZjHxzmG5JqTfgqB7487OwUitiv1GqkkPc=)
2: rpXzzQqo1NF3dX9pFS61JkDNiNY.roa (hash: pLgHmlwb9frHbbUK6rzU2+3pnLWqMCgVCa6x+QGE99Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:c2:4d:68:30:48:c7:b0:75:28:e3:b9:0f:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Nov 23 07:00:50 2024 GMT
Not After : Nov 24 07:00:50 2024 GMT
Subject: CN=ad3b59397dd36779845698d09a6fb63437449b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:4c:3c:f1:72:7f:0b:cb:db:ad:b3:af:3b:
1b:45:91:19:2e:be:0d:88:2c:fc:50:01:d0:e6:7f:
4e:b8:f3:a1:16:8e:bb:b2:7e:b7:e4:72:fd:14:4d:
25:1a:0c:15:d0:a8:29:2f:ce:69:38:6c:1b:3b:b8:
e6:87:8d:cc:7c:c8:20:ba:97:c4:ae:01:6a:e5:9e:
0c:1c:29:19:cc:72:eb:0e:ce:11:b1:51:bb:51:71:
ed:d3:5d:1c:de:92:c4:90:4f:9a:e2:5f:73:36:51:
c4:ff:4c:0d:88:0d:d8:72:a2:7b:36:5e:11:d5:26:
08:aa:8e:6e:67:ff:aa:65:23:5f:06:5e:ff:c0:e5:
16:c8:77:e6:6d:2a:e2:b8:bf:7c:b9:1b:c1:30:5f:
5d:fe:6e:b0:cc:b6:3c:8b:e9:e0:8a:1f:c4:5a:9d:
01:cf:6a:3f:9f:6e:95:ba:42:5f:08:13:80:ce:0f:
26:1c:cb:e7:29:7e:14:b6:f2:d8:d6:c1:1a:80:24:
20:fc:f9:6f:55:fb:d9:dc:94:84:28:64:d7:49:5a:
fb:d7:9f:00:2a:4c:69:b5:f0:13:ce:a5:e0:5a:c6:
bb:ec:48:e5:8d:89:49:26:a4:ed:51:ba:f7:3c:a8:
28:88:97:31:a4:69:9a:4f:2a:f0:4c:47:7d:87:6f:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:59:39:7D:D3:67:79:84:56:98:D0:9A:6F:B6:34:37:44:9B:17
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:43:f0:82:2f:ff:29:5f:0f:89:c9:06:c6:f1:88:fb:23:
95:bd:e3:c4:88:2a:6b:dc:66:e0:53:d1:c5:a8:3b:49:8f:a1:
b7:16:e1:30:8a:82:92:4d:e9:37:7e:53:32:2a:3b:a0:34:81:
f2:fc:b9:20:5e:7c:fd:0e:52:0d:0f:00:01:f2:e5:e0:8d:22:
08:44:cb:83:70:af:a3:c6:d3:f3:31:cd:71:df:ea:ce:3c:d1:
5e:84:61:25:34:91:7e:97:26:48:f5:94:35:77:6a:4c:c1:15:
86:89:32:57:aa:41:dd:98:ef:5a:92:f5:25:b5:c9:26:1d:06:
91:fa:e1:93:c2:6a:ce:73:7d:2f:b3:48:92:a0:08:c6:f0:4c:
65:dc:7c:fc:7b:f4:89:4b:a6:05:5f:04:f1:24:ed:1a:00:1b:
f0:97:a4:53:29:c4:56:e5:3b:b4:79:85:ee:e9:06:78:31:bc:
bc:ee:cc:72:eb:56:45:f5:65:83:c0:66:ab:4f:08:16:08:8e:
f5:7f:98:95:cd:9d:e0:d6:d3:e8:64:03:20:23:6f:63:0f:a6:
33:43:7f:9c:28:f3:e3:f9:02:8b:e1:3c:97:48:02:6b:bb:0d:
33:3d:02:4f:90:87:fa:93:c3:4b:71:4a:54:43:15:64:ee:35:
e6:1d:a9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0sJNaDBIx7B1KOO5D9foMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTg1ODBiYjg0MzUxOWMxMDQ0MjBlNTljMGI1YzI0MDM0
MTQ2MDcwHhcNMjQxMTIzMDcwMDUwWhcNMjQxMTI0MDcwMDUwWjAzMTEwLwYDVQQD
EyhhZDNiNTkzOTdkZDM2Nzc5ODQ1Njk4ZDA5YTZmYjYzNDM3NDQ5YjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XFMPPFyfwvL262zrzsbRZEZLr4N
iCz8UAHQ5n9OuPOhFo67sn635HL9FE0lGgwV0KgpL85pOGwbO7jmh43MfMggupfE
rgFq5Z4MHCkZzHLrDs4RsVG7UXHt010c3pLEkE+a4l9zNlHE/0wNiA3YcqJ7Nl4R
1SYIqo5uZ/+qZSNfBl7/wOUWyHfmbSriuL98uRvBMF9d/m6wzLY8i+ngih/EWp0B
z2o/n26VukJfCBOAzg8mHMvnKX4UtvLY1sEagCQg/PlvVfvZ3JSEKGTXSVr7158A
KkxptfATzqXgWsa77EjljYlJJqTtUbr3PKgoiJcxpGmaTyrwTEd9h29TaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK07WTl902d5hFaY0JpvtjQ3RJsXMB8GA1UdIwQY
MBaAFGeYWAu4Q1GcEEQg5ZwLXCQDQUYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQt
MWY2N2Q5NDViOGI5LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQtMWY2N2Q5NDViOGI5
LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPlD8IIv
/ylfD4nJBsbxiPsjlb3jxIgqa9xm4FPRxag7SY+htxbhMIqCkk3pN35TMio7oDSB
8vy5IF58/Q5SDQ8AAfLl4I0iCETLg3Cvo8bT8zHNcd/qzjzRXoRhJTSRfpcmSPWU
NXdqTMEVhokyV6pB3ZjvWpL1JbXJJh0Gkfrhk8JqznN9L7NIkqAIxvBMZdx8/Hv0
iUumBV8E8STtGgAb8JekUynEVuU7tHmF7ukGeDG8vO7McutWRfVlg8Bmq08IFgiO
9X+Ylc2d4NbT6GQDICNvYw+mM0N/nCjz4/kCi+E8l0gCa7sNMz0CT5CH+pPDS3FK
VEMVZO415h2pcw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:53 2024 by rpki-client on console-fra.rpki-client.org