Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: ULnPqVwIefqJQi9JiKeSyD/v2d7NAui9+e4jUECdpoM=
Subject key identifier: D2:7E:40:4E:2F:D6:EB:F9:5B:27:A6:92:60:EF:F1:01:E3:AD:60:C5
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 01935877D879BE5E79EA4BD7410168006017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:01:09 +0000
Manifest this update: Sat 23 Nov 2024 10:01:09 +0000
Manifest next update: Sun 24 Nov 2024 10:01:09 +0000
Files and hashes: 1: Czi28_UqSlX3DD8bfCsTEyQJNAY.roa (hash: U3usmIUZJ5/S09+4kHHMMVDGMYSxW4/mpuj56A3xGKE=)
2: Q2LvLIGmJKtctOAlQIuyCV1_KNQ.roa (hash: IR5VEnnRTWrl0Dc4nezJsU2FEwjyh+6Rz7X9BuCOPb4=)
3: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: s8/FwOlA3PagRdCNvPi1V1bCXGU978Ku4M5b/V7xPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:d8:79:be:5e:79:ea:4b:d7:41:01:68:00:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Nov 23 10:01:09 2024 GMT
Not After : Nov 24 10:01:09 2024 GMT
Subject: CN=d27e404e2fd6ebf95b27a69260eff101e3ad60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:b6:83:21:50:40:5a:46:de:da:10:92:f6:
87:f3:e6:68:c2:45:d8:74:0b:1a:5f:93:45:86:ba:
26:99:35:89:7c:6e:5d:42:e4:b8:f1:de:34:94:93:
bd:10:f2:de:09:05:27:38:a5:be:54:f7:47:ad:68:
ff:a2:f4:b6:eb:1e:ca:1b:14:3f:d7:d9:d2:02:91:
a5:e7:f9:d5:bc:dd:da:ed:aa:b2:d8:c6:e7:dd:c3:
b4:5e:fc:e0:db:4c:6c:85:16:06:cc:1e:44:39:55:
54:89:45:a7:14:df:61:8d:8e:ab:e0:d3:0c:7b:89:
23:db:ae:e6:0e:59:bc:74:fe:2b:26:81:3d:fe:86:
7b:07:6c:01:d5:ed:00:8b:9c:2a:6e:61:4b:26:e6:
b5:9a:6a:2c:8a:5b:97:ca:7d:64:01:d1:52:1d:f2:
c7:8b:1a:78:d5:f6:c7:ae:d6:8d:32:0f:b7:f3:46:
74:a0:dd:e7:6a:1a:6d:68:c3:f8:55:29:c0:e3:70:
b3:9a:89:c2:46:48:fd:96:a1:5c:8c:a5:ee:9a:e7:
10:e9:58:28:6d:8b:dd:e3:60:b2:00:91:f3:09:20:
7c:6a:18:1a:1d:7b:c5:90:e7:02:9f:c4:42:0a:76:
e7:d5:44:01:d6:68:b8:40:36:09:df:f4:0b:3a:e3:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:40:4E:2F:D6:EB:F9:5B:27:A6:92:60:EF:F1:01:E3:AD:60:C5
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f4:ed:9c:59:9c:c4:2d:d0:fc:f7:e5:37:c3:09:c1:be:13:
46:d0:fe:11:3f:ed:26:65:f7:43:17:fc:b4:4d:c3:68:97:33:
3f:ef:4b:df:f2:cd:34:36:d1:20:dc:0a:80:83:a9:cd:8d:2f:
d2:be:19:aa:6d:86:15:ff:a3:0b:3b:fd:c0:3d:17:1d:65:8f:
ec:27:cd:8d:f5:56:75:47:19:20:e4:5a:d6:f3:5d:0f:56:20:
3f:a0:43:43:09:b5:8a:27:6b:3c:3b:da:21:b2:36:1d:36:66:
bb:d9:b9:62:d0:a7:08:24:4f:96:a3:4e:c0:9a:9b:db:8b:86:
bf:3e:b1:3f:d5:3a:43:c0:4e:e9:c0:9a:22:a4:1a:d5:82:80:
4e:03:ec:93:51:b4:95:e2:fd:14:93:98:f8:c1:8c:92:cf:fc:
77:ce:85:da:67:6c:c9:ae:25:36:0a:2d:af:5f:cb:57:24:c4:
fd:0d:01:02:06:1c:dd:e1:57:d6:23:4d:ce:50:62:0e:12:b1:
1d:eb:ca:d0:3c:ba:03:68:45:35:18:8f:81:7e:aa:ba:63:c2:
87:35:90:c2:cf:f9:6a:a8:7f:7c:3e:bf:96:85:f0:ac:6b:3c:
78:72:3f:a4:74:91:31:11:de:6e:31:16:67:e4:98:e9:8a:45:
4e:7c:4b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd9h5vl556kvXQQFoAGAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjQxMTIzMTAwMTA5WhcNMjQxMTI0MTAwMTA5WjAzMTEwLwYDVQQD
EyhkMjdlNDA0ZTJmZDZlYmY5NWIyN2E2OTI2MGVmZjEwMWUzYWQ2MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+B+2gyFQQFpG3toQkvaH8+ZowkXY
dAsaX5NFhrommTWJfG5dQuS48d40lJO9EPLeCQUnOKW+VPdHrWj/ovS26x7KGxQ/
19nSApGl5/nVvN3a7aqy2Mbn3cO0Xvzg20xshRYGzB5EOVVUiUWnFN9hjY6r4NMM
e4kj267mDlm8dP4rJoE9/oZ7B2wB1e0Ai5wqbmFLJua1mmosiluXyn1kAdFSHfLH
ixp41fbHrtaNMg+380Z0oN3nahptaMP4VSnA43CzmonCRkj9lqFcjKXumucQ6Vgo
bYvd42CyAJHzCSB8ahgaHXvFkOcCn8RCCnbn1UQB1mi4QDYJ3/QLOuMEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ+QE4v1uv5WyemkmDv8QHjrWDFMB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvTtnFmc
xC3Q/PflN8MJwb4TRtD+ET/tJmX3Qxf8tE3DaJczP+9L3/LNNDbRINwKgIOpzY0v
0r4Zqm2GFf+jCzv9wD0XHWWP7CfNjfVWdUcZIORa1vNdD1YgP6BDQwm1iidrPDva
IbI2HTZmu9m5YtCnCCRPlqNOwJqb24uGvz6xP9U6Q8BO6cCaIqQa1YKATgPsk1G0
leL9FJOY+MGMks/8d86F2mdsya4lNgotr1/LVyTE/Q0BAgYc3eFX1iNNzlBiDhKx
HevK0Dy6A2hFNRiPgX6qumPChzWQws/5aqh/fD6/loXwrGs8eHI/pHSRMRHebjEW
Z+SY6YpFTnxLIw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:38 2024 by rpki-client on console-fra.rpki-client.org