Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: 9JKjz9NHSJttXCqiqe37+0vafN3kCop5E1AHNwnlgoU=
Subject key identifier: 36:51:E1:49:0C:18:6F:B8:AA:9B:57:B9:17:3A:CD:A0:34:16:F6:FB
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 019379B97BFF2BC0D897E63897FF596A4450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 1125
Signing time: Fri 29 Nov 2024 21:00:19 +0000
Manifest this update: Fri 29 Nov 2024 21:00:19 +0000
Manifest next update: Sat 30 Nov 2024 21:00:19 +0000
Files and hashes: 1: BR3K5fXUIgTyut830-9N_EQKnNY.roa (hash: zGHEAHhLEg2+uUJ0XbGBmSIUpysKCNc17ZlWAWzKrP0=)
2: N0iQVnjKj4L889HWEOwkVYuaN8M.roa (hash: gkQ7aufg4DkJgfMxsAd1tSW4mMs9ofPLN7ug6L1Ist0=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: FBfpHiexog9cf3joC5u1sIbzXCMqXB8fpAW10Qm0qro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 Nov 2024 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:79:b9:7b:ff:2b:c0:d8:97:e6:38:97:ff:59:6a:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Nov 29 21:00:19 2024 GMT
Not After : Nov 30 21:00:19 2024 GMT
Subject: CN=3651e1490c186fb8aa9b57b9173acda03416f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:74:54:79:9b:80:90:c7:48:5b:44:9c:3c:
12:f6:70:fa:72:de:17:30:3a:d5:ea:b3:78:67:2f:
7b:6a:14:53:ba:2f:a8:7e:05:3e:28:4f:60:97:4d:
3c:2f:82:a5:77:7a:8e:86:c2:b8:a7:e7:d8:ee:06:
f4:89:e2:17:e6:1f:b3:11:cb:b6:76:59:30:9d:43:
ac:e3:ff:6c:83:51:1d:4b:f1:31:23:89:c4:e4:15:
40:34:8b:ae:ac:b7:08:89:a0:21:94:15:f0:2b:3c:
5d:4d:d8:ee:1a:7f:71:ba:e4:73:60:cf:ca:8f:dd:
48:2d:ce:37:15:b5:59:a7:ac:5d:41:74:fe:96:50:
1c:5c:fc:3d:d1:73:1c:65:23:41:31:7d:b7:ec:73:
a4:76:b6:2c:90:58:2f:4e:97:8f:14:e3:c0:42:63:
60:4f:8c:f4:ea:75:c2:91:6c:2a:87:de:c5:5a:d3:
1f:31:ac:9b:2e:0f:43:5e:56:26:70:e2:11:c5:58:
a3:fa:63:25:14:ba:fe:38:07:3a:06:51:b2:29:2d:
a2:6f:32:ee:f5:ae:c0:53:73:b6:f1:1a:e8:03:31:
3b:2f:4b:2d:02:21:eb:d2:76:54:8c:fb:b6:2b:92:
7a:7c:10:f2:32:6a:ee:9d:a5:27:99:33:2e:c7:96:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:51:E1:49:0C:18:6F:B8:AA:9B:57:B9:17:3A:CD:A0:34:16:F6:FB
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:11:71:1a:07:73:38:b6:24:01:59:55:2e:88:cb:e1:5b:02:
55:3e:00:74:c1:5e:2a:15:69:0e:b2:6e:64:5c:a6:bf:52:07:
a4:53:45:b9:16:6c:64:84:24:32:d3:31:d6:df:e8:f9:54:b6:
7e:21:59:b2:e4:15:f2:7d:34:52:96:ef:ca:a1:64:59:75:fc:
2d:c9:8d:ac:d9:7d:fe:13:01:5a:28:7d:1a:d3:5b:67:f6:0e:
39:4c:34:ad:71:de:83:69:08:0c:24:3b:eb:f2:62:08:12:e4:
be:bd:41:5b:84:a1:dc:0b:26:4f:f2:d1:b0:dd:29:6f:15:cb:
5e:2a:68:66:f8:f4:e2:0f:f8:45:37:c4:1c:de:16:47:a1:a3:
78:39:97:14:f1:2e:f1:b7:99:f4:46:f9:24:20:40:6e:6d:77:
3c:ce:a8:29:1b:a7:4d:51:eb:29:af:59:ee:a7:dc:b3:dd:b8:
1b:f3:0e:8c:32:89:26:61:14:9a:34:65:1b:4d:8d:79:70:e9:
e9:4b:99:bd:e3:78:24:fb:32:f5:69:9e:8e:73:75:43:ba:2a:
24:f8:4c:a3:d4:aa:5a:11:7f:cf:c3:ae:07:a0:65:b6:8d:8f:
2e:dd:f5:b0:c0:fd:c8:d3:79:6d:65:0c:d9:76:91:e6:86:31:
c2:60:26:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZN5uXv/K8DYl+Y4l/9ZakRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjQxMTI5MjEwMDE5WhcNMjQxMTMwMjEwMDE5WjAzMTEwLwYDVQQD
EygzNjUxZTE0OTBjMTg2ZmI4YWE5YjU3YjkxNzNhY2RhMDM0MTZmNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDV0VHmbgJDHSFtEnDwS9nD6ct4X
MDrV6rN4Zy97ahRTui+ofgU+KE9gl008L4Kld3qOhsK4p+fY7gb0ieIX5h+zEcu2
dlkwnUOs4/9sg1EdS/ExI4nE5BVANIuurLcIiaAhlBXwKzxdTdjuGn9xuuRzYM/K
j91ILc43FbVZp6xdQXT+llAcXPw90XMcZSNBMX237HOkdrYskFgvTpePFOPAQmNg
T4z06nXCkWwqh97FWtMfMaybLg9DXlYmcOIRxVij+mMlFLr+OAc6BlGyKS2ibzLu
9a7AU3O28RroAzE7L0stAiHr0nZUjPu2K5J6fBDyMmrunaUnmTMux5b8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZR4UkMGG+4qptXuRc6zaA0Fvb7MB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2xFxGgdz
OLYkAVlVLojL4VsCVT4AdMFeKhVpDrJuZFymv1IHpFNFuRZsZIQkMtMx1t/o+VS2
fiFZsuQV8n00UpbvyqFkWXX8LcmNrNl9/hMBWih9GtNbZ/YOOUw0rXHeg2kIDCQ7
6/JiCBLkvr1BW4Sh3AsmT/LRsN0pbxXLXipoZvj04g/4RTfEHN4WR6GjeDmXFPEu
8beZ9Eb5JCBAbm13PM6oKRunTVHrKa9Z7qfcs924G/MOjDKJJmEUmjRlG02NeXDp
6UuZveN4JPsy9WmejnN1Q7oqJPhMo9SqWhF/z8OuB6Blto2PLt31sMD9yNN5bWUM
2XaR5oYxwmAm6g==
-----END CERTIFICATE-----
Generated at Fri Nov 29 23:12:56 2024 by rpki-client on console-ams.rpki-client.org