Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: jZl3p6R8athcvDbV+TScRiDYXSs+1TKXAhXnBOvNxIc=
Subject key identifier: E2:54:5C:57:98:1F:5D:0F:AF:DE:FF:29:A9:D9:4B:47:A0:EB:03:4E
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 0193568A81172EDA3783857B649631349503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:17 +0000
Manifest this update: Sat 23 Nov 2024 01:02:17 +0000
Manifest next update: Sun 24 Nov 2024 01:02:17 +0000
Files and hashes: 1: 2dGAU9HdMqGvTHzhqKHjTpCsK8Q.roa (hash: mLalQ/BF3idj7yfAPZVT0aNzX6CdHoDlA2NUdQrPLNk=)
2: 47cifHe4Tv4LsjBU5fG1bUYr5bg.roa (hash: w2ZjN5sDl4wrNrqvGfS9CgtWV3YSg0eNsZvJWaxsnvg=)
3: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: Y+WeH0kwNJcpQAijKmbLLoT5lN1Ojmm7qaa/gFvCzP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:81:17:2e:da:37:83:85:7b:64:96:31:34:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Nov 23 01:02:17 2024 GMT
Not After : Nov 24 01:02:17 2024 GMT
Subject: CN=e2545c57981f5d0fafdeff29a9d94b47a0eb034e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:d5:8c:f0:97:52:a3:86:10:c1:c8:90:40:
ac:66:a2:c9:33:0b:c5:c2:8d:18:d3:31:d1:0b:54:
db:97:75:d0:b8:56:be:74:ae:20:c6:fa:5d:d1:5d:
7c:ab:e6:2e:f4:b6:c4:06:fd:94:f6:75:c5:58:f0:
f0:ba:11:b4:5e:dc:df:74:4d:88:5b:10:92:72:c1:
c4:03:8c:8a:4c:2a:79:27:a0:05:cc:ee:1b:95:56:
e7:1b:79:0a:7f:bd:77:86:b9:14:ad:87:7d:a9:d9:
78:5c:7b:c4:55:c5:03:52:18:60:cb:96:8e:5e:34:
c2:7e:f2:a2:7e:91:f1:f9:4d:9a:61:ed:ab:9f:06:
78:b5:00:67:7a:6c:a6:50:f2:ea:7c:9b:65:41:90:
83:13:ea:aa:b9:6f:7a:68:f4:ca:6b:07:f2:a2:82:
54:ad:c6:be:c9:0d:47:53:2e:f6:6c:e1:52:97:31:
94:54:63:a8:d5:b7:cd:da:95:a7:5f:c4:d9:01:c4:
af:a1:07:81:38:ea:c5:40:0a:6f:ff:71:4a:41:9f:
e5:f6:8a:d0:2a:2c:c7:e3:0e:78:63:4e:2c:1d:a3:
be:1c:29:ac:c2:03:91:fa:3a:f5:44:f6:2e:88:3e:
3c:58:b0:15:95:2f:82:58:1c:ee:29:70:da:12:71:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:5C:57:98:1F:5D:0F:AF:DE:FF:29:A9:D9:4B:47:A0:EB:03:4E
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e7:eb:13:45:e0:d0:4e:1e:67:a6:34:f8:30:46:d9:b3:31:
65:c9:81:65:e9:d8:d2:91:27:d8:31:da:a3:19:4a:2c:bd:64:
54:65:36:bf:89:93:40:39:57:ec:fd:e1:fd:16:f4:3a:ac:fe:
ab:84:f0:a3:5e:d4:2f:2e:17:86:99:a7:b4:54:58:ee:8c:53:
b5:10:ca:b1:26:70:c7:0f:cb:88:55:80:4c:d1:02:16:2e:ca:
31:1d:98:69:de:89:eb:ac:95:c9:a5:cd:1c:66:22:14:64:85:
b5:a7:48:23:d7:e7:3f:ed:e1:2d:bd:e9:f5:08:f8:87:df:ed:
0b:22:67:53:0b:86:18:bf:bc:ac:0e:b9:5a:4f:ce:d5:d8:c4:
cd:cc:f9:e7:0d:d5:fc:26:91:24:43:e4:03:f0:83:a3:28:d3:
6a:2a:a1:ed:32:f6:60:73:7c:2c:4d:8d:1a:92:e5:a4:8b:01:
7b:a5:4f:c7:f3:78:3b:d3:f9:45:fc:4b:db:4d:8a:92:2c:e2:
87:6e:51:1c:96:91:91:e2:26:c7:72:13:34:66:f7:c6:28:fc:
1b:ce:2c:c5:b2:26:7f:fb:91:01:bf:e0:a4:f5:a7:62:5c:71:
3b:aa:70:bf:73:77:6f:8e:39:8c:f3:79:29:57:f4:8d:8c:8a:
ed:39:43:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioEXLto3g4V7ZJYxNJUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2I0M2Y1MzhmMGFlNzIwZTUyN2IyYTZjMGI4YTg3NmQ5
NmM5NDcwHhcNMjQxMTIzMDEwMjE3WhcNMjQxMTI0MDEwMjE3WjAzMTEwLwYDVQQD
EyhlMjU0NWM1Nzk4MWY1ZDBmYWZkZWZmMjlhOWQ5NGI0N2EwZWIwMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BHVjPCXUqOGEMHIkECsZqLJMwvF
wo0Y0zHRC1Tbl3XQuFa+dK4gxvpd0V18q+Yu9LbEBv2U9nXFWPDwuhG0XtzfdE2I
WxCScsHEA4yKTCp5J6AFzO4blVbnG3kKf713hrkUrYd9qdl4XHvEVcUDUhhgy5aO
XjTCfvKifpHx+U2aYe2rnwZ4tQBnemymUPLqfJtlQZCDE+qquW96aPTKawfyooJU
rca+yQ1HUy72bOFSlzGUVGOo1bfN2pWnX8TZAcSvoQeBOOrFQApv/3FKQZ/l9orQ
KizH4w54Y04sHaO+HCmswgOR+jr1RPYuiD48WLAVlS+CWBzuKXDaEnHswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJUXFeYH10Pr97/KanZS0eg6wNOMB8GA1UdIwQY
MBaAFGd7Q/U48K5yDlJ7KmwLiodtlslHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGIt
Mjg3ODIwM2EwMDlkLzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGItMjg3ODIwM2EwMDlk
LzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+frE0Xg
0E4eZ6Y0+DBG2bMxZcmBZenY0pEn2DHaoxlKLL1kVGU2v4mTQDlX7P3h/Rb0Oqz+
q4Two17ULy4XhpmntFRY7oxTtRDKsSZwxw/LiFWATNECFi7KMR2Yad6J66yVyaXN
HGYiFGSFtadII9fnP+3hLb3p9Qj4h9/tCyJnUwuGGL+8rA65Wk/O1djEzcz55w3V
/CaRJEPkA/CDoyjTaiqh7TL2YHN8LE2NGpLlpIsBe6VPx/N4O9P5RfxL202Kkizi
h25RHJaRkeImx3ITNGb3xij8G84sxbImf/uRAb/gpPWnYlxxO6pwv3N3b445jPN5
KVf0jYyK7TlDZQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:04 2024 by rpki-client on console-ams.rpki-client.org