Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: zGOJcXTnKA16CThmEXSh02RY1AYOKHXqG9iFLinQ27w=
Subject key identifier: 5B:DB:D4:68:71:26:57:5C:19:DB:1E:8F:04:15:99:1D:04:3E:E4:8F
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 0193579B79834E0BF6AD07C0DD7490F125EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 06:00:27 +0000
Manifest this update: Sat 23 Nov 2024 06:00:27 +0000
Manifest next update: Sun 24 Nov 2024 06:00:27 +0000
Files and hashes: 1: I89qaPPQ7xt2BGSLDSUFg6wIskE.roa (hash: stvFee/mjI6WEXOlNmHRR0UyASl3TY5yjuxZK8DDqzw=)
2: O0_EO4iaMQYNiWqYPPdTaKlPRvM.roa (hash: nCE6S3UEUtSm9sKa+TSMQkv2rCgGLve7BgcMMKy1v2s=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: KlT+rPHX4iJlvXWyXUgYlZOuTytJo850skkk3AH+vbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:79:83:4e:0b:f6:ad:07:c0:dd:74:90:f1:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Nov 23 06:00:27 2024 GMT
Not After : Nov 24 06:00:27 2024 GMT
Subject: CN=5bdbd4687126575c19db1e8f0415991d043ee48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:63:6d:80:35:85:b9:1e:07:a9:10:68:ef:
17:ff:f9:6c:c9:f1:ea:d7:d8:e6:5f:e3:26:37:bf:
76:c2:6b:14:2c:b3:7a:09:aa:38:60:6a:d1:a9:d9:
71:c2:a4:cc:33:98:42:f7:78:68:1c:06:b3:c8:4c:
b9:61:6e:8f:12:5b:5b:16:9c:fc:47:9b:d7:9e:3d:
d8:00:e4:34:6e:3b:54:e3:e8:d9:4b:97:80:4c:36:
01:d0:7a:6d:b5:69:d1:4d:30:82:73:ec:92:0e:6d:
a0:13:91:db:97:d8:0d:e0:d3:64:b3:d0:42:67:32:
02:04:88:a7:b6:39:bd:59:ef:70:a7:15:c1:96:b6:
51:c7:32:04:eb:a6:ab:6d:d1:1c:7f:55:e6:52:9a:
3c:ea:eb:3b:63:2e:d3:63:37:bf:34:8c:50:bb:61:
4b:e0:a4:25:62:e2:61:c9:0b:47:59:b7:c1:61:fb:
3a:b8:8a:74:fe:57:1e:08:35:1a:8e:ae:e6:43:d6:
fb:23:21:64:6b:e2:90:0d:e0:f1:5d:d6:77:0e:55:
6b:d3:5f:48:b9:08:3b:f7:33:8b:74:10:c6:9b:e4:
6d:5b:96:ef:8b:1e:c8:ff:91:7c:28:57:fc:ee:80:
3c:84:3c:d0:3c:6f:d6:be:4e:b3:ac:61:1d:0b:9b:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:D4:68:71:26:57:5C:19:DB:1E:8F:04:15:99:1D:04:3E:E4:8F
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:e3:1d:38:e2:ee:a6:2f:e3:fa:36:fe:a4:21:eb:60:d0:
e3:68:4b:3b:80:df:75:c4:fa:8c:fb:7b:ff:bc:06:93:99:c9:
ef:15:d5:1d:52:91:e5:85:80:13:c3:f9:2f:82:b9:b3:eb:dc:
76:28:88:43:b9:87:5c:c6:4f:f6:72:e2:b0:f9:9e:12:03:0f:
fb:9a:74:e9:f9:c4:17:f8:c4:9e:a8:f0:66:a5:2d:89:45:60:
79:cd:47:e8:ef:5a:d7:b3:5a:bc:2b:b1:24:d7:ba:51:e3:66:
eb:47:c4:a5:16:b7:0d:a9:65:40:07:a6:a2:6e:a1:a1:33:6d:
dc:62:f8:46:48:67:09:69:89:e2:87:8e:56:43:91:6b:1e:ce:
dc:b9:fa:34:55:7c:4f:e7:a1:2d:1d:f4:04:d5:24:e6:6e:38:
df:91:ed:29:77:3a:ad:56:76:c7:85:b7:45:a8:bd:cf:00:a9:
6f:58:29:ca:44:b6:02:83:c3:91:95:81:7a:c6:a2:d6:47:df:
e0:57:d9:1a:ca:27:51:9e:46:ba:48:0a:31:4b:85:f7:26:37:
03:39:73:6f:f0:58:a9:1a:cb:62:bf:56:4c:6f:03:ba:57:41:
38:a8:55:3a:df:70:47:0c:54:84:20:59:e7:27:4f:43:a5:51:
17:9c:d8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm3mDTgv2rQfA3XSQ8SXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjQxMTIzMDYwMDI3WhcNMjQxMTI0MDYwMDI3WjAzMTEwLwYDVQQD
Eyg1YmRiZDQ2ODcxMjY1NzVjMTlkYjFlOGYwNDE1OTkxZDA0M2VlNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBtjbYA1hbkeB6kQaO8X//lsyfHq
19jmX+MmN792wmsULLN6Cao4YGrRqdlxwqTMM5hC93hoHAazyEy5YW6PEltbFpz8
R5vXnj3YAOQ0bjtU4+jZS5eATDYB0HpttWnRTTCCc+ySDm2gE5Hbl9gN4NNks9BC
ZzICBIintjm9We9wpxXBlrZRxzIE66arbdEcf1XmUpo86us7Yy7TYze/NIxQu2FL
4KQlYuJhyQtHWbfBYfs6uIp0/lceCDUajq7mQ9b7IyFka+KQDeDxXdZ3DlVr019I
uQg79zOLdBDGm+RtW5bvix7I/5F8KFf87oA8hDzQPG/Wvk6zrGEdC5sm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvb1GhxJldcGdsejwQVmR0EPuSPMB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahvjHTji
7qYv4/o2/qQh62DQ42hLO4DfdcT6jPt7/7wGk5nJ7xXVHVKR5YWAE8P5L4K5s+vc
diiIQ7mHXMZP9nLisPmeEgMP+5p06fnEF/jEnqjwZqUtiUVgec1H6O9a17NavCux
JNe6UeNm60fEpRa3DallQAemom6hoTNt3GL4RkhnCWmJ4oeOVkORax7O3Ln6NFV8
T+ehLR30BNUk5m4435HtKXc6rVZ2x4W3Rai9zwCpb1gpykS2AoPDkZWBesai1kff
4FfZGsonUZ5GukgKMUuF9yY3Azlzb/BYqRrLYr9WTG8DuldBOKhVOt9wRwxUhCBZ
5ydPQ6VRF5zYTg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:22 2024 by rpki-client on console-fra.rpki-client.org