Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: 7C8tvXVyC1L08L/CZN8BXJd5CxWkJxvwIyTL1+D0nTc=
Subject key identifier: 73:DC:18:94:CC:CE:15:2E:62:B7:6E:BA:87:23:C9:15:C5:1E:12:D7
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019355E3E6F19B9C06504670A359A677EAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0964
Signing time: Fri 22 Nov 2024 22:00:19 +0000
Manifest this update: Fri 22 Nov 2024 22:00:19 +0000
Manifest next update: Sat 23 Nov 2024 22:00:19 +0000
Files and hashes: 1: MZSpqRhfdIzehE0rf9nVo-G31FY.roa (hash: znfoFNTJIbWzCd8WxpDAaLuGHzP4UL8j4XzzAC5kV5E=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: uOnZheIuB7Y7vfV29u27/56NM2nHRKx1oB4FJh1zu8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:e6:f1:9b:9c:06:50:46:70:a3:59:a6:77:ea:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Nov 22 22:00:19 2024 GMT
Not After : Nov 23 22:00:19 2024 GMT
Subject: CN=73dc1894ccce152e62b76eba8723c915c51e12d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:df:ac:d6:e8:1f:ae:94:00:a4:6d:7d:b0:
2e:d4:a5:bc:a1:6e:98:fa:b2:e6:15:cc:21:3e:9b:
4b:49:7d:a8:91:4f:a9:5a:d8:ca:21:8b:7b:6b:32:
a2:3a:d6:ae:f2:f2:96:e1:e5:cc:45:c9:66:86:bd:
7c:f4:43:ab:19:dc:67:10:9d:f9:44:d5:b5:02:51:
43:bd:ed:54:e0:31:43:d1:a8:b3:7f:a5:e6:70:4b:
0b:20:21:1d:df:fc:6b:93:db:44:6e:03:fc:af:c2:
5e:53:29:94:cf:72:bd:28:77:b4:37:d7:a2:9b:e8:
6f:47:f5:94:30:9e:7b:ff:26:87:9e:6f:69:73:37:
e9:3f:af:93:a9:06:f1:c7:b5:dc:b1:d3:d9:d7:3f:
75:a2:68:50:de:d1:09:62:03:4b:07:5a:a3:e9:3b:
52:15:ec:fc:a4:cd:3c:b0:71:b3:00:ae:d0:e3:72:
44:a3:5d:9c:5d:88:0d:2b:ec:89:ec:dc:9f:b2:00:
80:11:29:30:87:2f:a7:af:b2:d1:d2:4b:e5:d4:35:
e9:16:8c:6a:94:1b:9a:a1:a1:30:8f:73:ab:25:b5:
eb:59:c6:6d:4c:3a:88:3a:72:5e:56:55:f7:a2:98:
ae:5f:19:8c:d9:e1:4f:c4:8d:da:3d:53:b7:df:ff:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:18:94:CC:CE:15:2E:62:B7:6E:BA:87:23:C9:15:C5:1E:12:D7
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:94:86:66:3f:13:0f:1e:56:1b:3f:ce:b9:1d:0e:38:0d:e5:
8a:91:32:bc:48:3b:0f:7e:9d:e8:9f:94:7b:3e:39:e3:dc:0b:
5e:19:b5:23:fa:5e:05:3e:cb:87:56:a4:c0:f9:27:08:dc:31:
68:e2:08:2d:d2:b8:22:3c:8b:67:ec:dc:79:1d:f3:66:45:df:
be:6e:e5:0d:6a:52:ca:19:84:5a:2c:cc:59:ae:aa:fc:41:f6:
fb:6a:3a:b6:0e:a9:c3:ce:5b:13:c8:5c:7d:be:65:af:56:4b:
93:08:61:30:52:6b:2b:d0:d4:d3:b9:c2:7a:10:f8:d5:19:b2:
3b:64:4e:22:17:b6:9c:35:4d:4a:ff:1d:00:bc:cb:7a:65:98:
99:89:3c:ff:c2:3b:02:db:b2:56:0b:38:de:5e:c2:9e:56:21:
03:0f:d9:a3:8a:62:c0:4d:90:9b:1e:7e:97:14:ef:86:b5:28:
e6:2a:bd:cf:10:16:46:bd:c2:fa:c1:7a:84:9f:41:77:b9:27:
af:99:01:2e:9f:01:7d:88:25:e6:3d:d5:f6:64:92:18:5e:81:
76:ae:a2:e3:55:23:fc:f1:b3:c4:12:bb:cb:a6:1d:d6:68:58:
1b:6b:35:30:f5:49:4b:c0:d9:9e:27:d4:44:67:c3:e2:da:29:
96:d0:07:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV4+bxm5wGUEZwo1mmd+qnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw
YjI1MWUwHhcNMjQxMTIyMjIwMDE5WhcNMjQxMTIzMjIwMDE5WjAzMTEwLwYDVQQD
Eyg3M2RjMTg5NGNjY2UxNTJlNjJiNzZlYmE4NzIzYzkxNWM1MWUxMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nfrNboH66UAKRtfbAu1KW8oW6Y
+rLmFcwhPptLSX2okU+pWtjKIYt7azKiOtau8vKW4eXMRclmhr189EOrGdxnEJ35
RNW1AlFDve1U4DFD0aizf6XmcEsLICEd3/xrk9tEbgP8r8JeUymUz3K9KHe0N9ei
m+hvR/WUMJ57/yaHnm9pczfpP6+TqQbxx7XcsdPZ1z91omhQ3tEJYgNLB1qj6TtS
Fez8pM08sHGzAK7Q43JEo12cXYgNK+yJ7NyfsgCAESkwhy+nr7LR0kvl1DXpFoxq
lBuaoaEwj3OrJbXrWcZtTDqIOnJeVlX3opiuXxmM2eFPxI3aPVO33//btQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPcGJTMzhUuYrduuocjyRXFHhLXMB8GA1UdIwQY
MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt
ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz
LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5SGZj8T
Dx5WGz/OuR0OOA3lipEyvEg7D36d6J+Uez4549wLXhm1I/peBT7Lh1akwPknCNwx
aOIILdK4IjyLZ+zceR3zZkXfvm7lDWpSyhmEWizMWa6q/EH2+2o6tg6pw85bE8hc
fb5lr1ZLkwhhMFJrK9DU07nCehD41RmyO2ROIhe2nDVNSv8dALzLemWYmYk8/8I7
AtuyVgs43l7CnlYhAw/Zo4piwE2Qmx5+lxTvhrUo5iq9zxAWRr3C+sF6hJ9Bd7kn
r5kBLp8BfYgl5j3V9mSSGF6Bdq6i41Uj/PGzxBK7y6Yd1mhYG2s1MPVJS8DZnifU
RGfD4topltAHtg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:52 2024 by rpki-client on console-fra.rpki-client.org