Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: 93+yVIRb4PHTMNEHJnInsHKqbJFe19IiUF109cfybaE=
Subject key identifier: BD:D4:0A:F6:A3:3D:B6:09:7B:E4:22:73:ED:91:88:D6:3A:73:64:12
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019237DCCDF2675D83209F2D5392096D3115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 12DA
Signing time: Sat 28 Sep 2024 09:01:10 +0000
Manifest this update: Sat 28 Sep 2024 09:01:10 +0000
Manifest next update: Sun 29 Sep 2024 09:01:10 +0000
Files and hashes: 1: ZMAwMb7VDQsTeztaVHjSn3g81Sk.roa (hash: GrTyAz1DcUiUmutPuFy+vnSgtRYCK+PdUzfNRqCdQMg=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: vNqhq4Tn6sT/X3TXClnBsJ32iSQVZ8rZvaeHfB7FNHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:dc:cd:f2:67:5d:83:20:9f:2d:53:92:09:6d:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Sep 28 09:01:10 2024 GMT
Not After : Sep 29 09:01:10 2024 GMT
Subject: CN=bdd40af6a33db6097be42273ed9188d63a736412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:dd:1c:04:2f:f1:1d:d5:40:c5:29:f9:d7:
bd:e0:d6:7a:45:93:54:44:98:e5:a8:30:00:9b:28:
2c:bc:7c:83:ff:28:97:95:16:b2:31:05:e2:ee:6c:
6e:d5:7f:9e:b1:e8:c9:07:97:74:a7:3e:65:34:9e:
35:29:a3:36:23:34:6e:4d:26:7d:0a:2c:1c:7b:04:
78:a4:64:fb:d1:3b:ad:e2:f4:66:ed:9e:3b:87:a5:
83:43:7f:70:16:b8:7c:bc:67:63:af:80:9e:9f:6d:
2e:99:a1:e5:8f:33:be:4c:7e:86:10:a4:22:c2:d5:
48:a1:e2:e7:d1:50:6a:15:20:d0:cf:e3:4b:1c:2f:
e3:00:8e:a0:80:1c:83:d8:1d:4b:c7:36:7a:08:88:
fc:7a:f9:97:5c:22:3f:0a:d4:8d:38:b2:a7:1a:e8:
6f:ad:89:b6:b4:25:ed:90:fd:5b:3b:10:38:de:f4:
5b:98:02:74:b5:ca:d2:d6:da:7d:7a:b7:17:93:bd:
4b:bd:11:31:ea:6f:f1:fb:64:f6:68:9c:e0:f2:e1:
96:2a:5f:95:60:35:0b:35:65:bf:2a:d1:bd:ef:12:
35:d5:81:a5:f9:98:c9:25:4a:b1:1c:69:11:01:17:
64:c6:30:7d:91:9d:b1:d3:af:49:c1:37:ea:69:25:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:0A:F6:A3:3D:B6:09:7B:E4:22:73:ED:91:88:D6:3A:73:64:12
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:8c:30:5f:13:09:30:c4:a4:d9:07:dc:cd:c4:50:65:7c:d8:
40:e9:78:8c:fe:e3:55:4a:ca:11:ad:53:3d:9b:30:b3:74:60:
05:1c:4a:82:22:22:e0:e7:75:69:6e:67:73:ca:b2:f7:4b:a1:
52:f9:5e:91:20:05:56:68:9e:30:1f:97:61:ab:38:4d:42:2f:
70:f5:10:c8:27:d9:36:81:ca:0e:73:8e:ee:f3:cf:27:2b:68:
2d:a1:4d:84:5c:b4:61:4c:d6:3e:51:5f:f9:8b:a0:d9:60:17:
67:34:c8:b2:7f:6f:50:49:bf:9d:1d:b2:0b:4f:78:28:5e:a6:
bb:21:be:0d:77:dd:50:e1:05:84:31:5b:86:ce:b0:c2:1a:64:
75:ce:4a:0f:5c:ea:52:7a:44:00:ef:43:b1:a2:d3:d8:90:a1:
84:10:eb:80:51:5f:bd:16:53:cd:fb:ab:10:e9:ac:b2:4b:8e:
bd:ee:dd:9b:63:c3:d4:59:79:d6:5e:91:8d:47:6e:ba:a0:e1:
e9:2c:27:e1:50:ea:21:4c:b2:5c:05:d6:18:1d:5c:33:dd:ea:
03:6d:b5:ce:6a:ba:b0:04:30:a7:12:16:33:62:d0:aa:5a:b1:
6e:4c:65:7e:7a:ad:52:d7:ff:02:39:64:82:d9:82:f9:42:fc:
a1:98:62:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI33M3yZ12DIJ8tU5IJbTEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMjY5NDgyYmEyNjFiODgwMDU2MDhlYzUwYjdiOTA5ZDNm
M2ZkNGUwHhcNMjQwOTI4MDkwMTEwWhcNMjQwOTI5MDkwMTEwWjAzMTEwLwYDVQQD
EyhiZGQ0MGFmNmEzM2RiNjA5N2JlNDIyNzNlZDkxODhkNjNhNzM2NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTndHAQv8R3VQMUp+de94NZ6RZNU
RJjlqDAAmygsvHyD/yiXlRayMQXi7mxu1X+esejJB5d0pz5lNJ41KaM2IzRuTSZ9
CiwcewR4pGT70Tut4vRm7Z47h6WDQ39wFrh8vGdjr4Cen20umaHljzO+TH6GEKQi
wtVIoeLn0VBqFSDQz+NLHC/jAI6ggByD2B1LxzZ6CIj8evmXXCI/CtSNOLKnGuhv
rYm2tCXtkP1bOxA43vRbmAJ0tcrS1tp9ercXk71LvREx6m/x+2T2aJzg8uGWKl+V
YDULNWW/KtG97xI11YGl+ZjJJUqxHGkRARdkxjB9kZ2x069JwTfqaSXpqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3UCvajPbYJe+Qic+2RiNY6c2QSMB8GA1UdIwQY
MBaAFM0mlIK6JhuIAFYI7FC3uQnT8/1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2Mt
MmJlMjVmOWQ1ZWQyLzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2MtMmJlMjVmOWQ1ZWQy
LzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0IwwXxMJ
MMSk2QfczcRQZXzYQOl4jP7jVUrKEa1TPZsws3RgBRxKgiIi4Od1aW5nc8qy90uh
UvlekSAFVmieMB+XYas4TUIvcPUQyCfZNoHKDnOO7vPPJytoLaFNhFy0YUzWPlFf
+Yug2WAXZzTIsn9vUEm/nR2yC094KF6muyG+DXfdUOEFhDFbhs6wwhpkdc5KD1zq
UnpEAO9DsaLT2JChhBDrgFFfvRZTzfurEOmsskuOve7dm2PD1Fl51l6RjUduuqDh
6Swn4VDqIUyyXAXWGB1cM93qA221zmq6sAQwpxIWM2LQqlqxbkxlfnqtUtf/Ajlk
gtmC+UL8oZhiJQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:34:14 2024 by rpki-client on console-ams.rpki-client.org