Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: dc8xBPeHUFmxmdSpbTInlrj5NP1WhsmzJ5R+iN1Df9c=
Subject key identifier: 20:2F:90:1D:C5:F4:BE:BB:DE:01:5D:B4:2E:05:38:A9:88:1D:21:40
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0193572DA509E13D175FD3260F5E5ABA7388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0C61
Signing time: Sat 23 Nov 2024 04:00:29 +0000
Manifest this update: Sat 23 Nov 2024 04:00:29 +0000
Manifest next update: Sun 24 Nov 2024 04:00:29 +0000
Files and hashes: 1: 5TTqix2iOKfjBahfXZZ-ML87goo.roa (hash: 0C2PsrUIBEtTRGUBR80N45H8dDWp/c6p/9E39F4htRw=)
2: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: /zsRbvlsBP++qSNnrCJTr2L5S3ZQUAGO7WlB61xp4TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a5:09:e1:3d:17:5f:d3:26:0f:5e:5a:ba:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Nov 23 04:00:29 2024 GMT
Not After : Nov 24 04:00:29 2024 GMT
Subject: CN=202f901dc5f4bebbde015db42e0538a9881d2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:94:ff:3d:b0:1b:fe:99:8f:e5:e3:bc:9f:
3d:59:41:e9:37:06:a0:0b:f9:86:e6:c9:45:2a:94:
74:51:6c:3f:af:2e:8a:4f:78:50:dc:d7:41:99:0b:
82:84:58:0c:fc:80:5a:25:c8:7c:56:a1:3d:13:20:
95:0d:e2:bb:0b:a6:9a:0f:88:d8:08:28:0e:5c:3b:
d2:82:30:8f:f8:bb:34:37:2a:84:09:87:76:3d:81:
ce:5e:4e:02:05:cf:97:b3:f3:8e:55:a7:39:4c:09:
3b:5d:0e:a3:2d:da:75:90:76:d6:1c:2f:86:75:04:
5e:65:16:21:9b:4e:bd:9e:1c:57:83:73:37:c3:03:
d7:33:db:75:6f:98:9a:2a:33:47:8b:91:0f:95:ae:
a6:54:b8:4d:e2:26:6d:7a:11:d4:2a:4c:1a:36:20:
ec:28:f4:3e:0e:7b:35:3b:ea:3b:51:be:4c:5e:10:
df:e8:3f:a5:18:95:1c:92:60:11:2f:13:89:c0:5d:
79:3a:3a:d1:14:df:81:92:a7:de:85:70:96:2a:c4:
68:e1:6d:6a:8b:3c:bf:c1:ec:b8:3b:5f:e6:96:f7:
74:42:4e:79:b9:a3:2a:a3:d8:23:4f:4a:6e:27:54:
8b:57:25:9b:01:c3:33:8d:45:2d:a0:2f:c0:4b:92:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:90:1D:C5:F4:BE:BB:DE:01:5D:B4:2E:05:38:A9:88:1D:21:40
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:40:ca:46:a8:29:06:a8:f5:bf:1a:ba:f8:42:1f:a4:a6:38:
f0:67:f1:41:a0:97:9a:89:0e:63:80:d5:9f:87:3d:c0:80:76:
7e:97:19:d1:2d:3a:3b:be:e7:ec:b8:52:b4:59:30:b5:06:29:
7c:07:78:7d:1b:c3:4b:2a:7c:76:9e:e2:62:8c:26:52:bf:83:
c2:76:a9:88:89:eb:86:ef:47:4d:00:7b:88:7e:ac:f0:67:99:
a4:91:a8:fa:9c:0a:46:1c:ef:e7:70:87:1e:f0:54:70:0f:21:
14:17:26:d8:f7:f0:10:1d:8d:20:4a:b2:7e:38:81:34:57:b9:
8e:86:ac:ea:b3:46:55:01:89:86:44:37:8f:64:90:2c:57:16:
0e:35:94:2e:5e:47:46:08:9b:7d:57:02:84:ef:80:7a:65:8f:
c9:12:b4:9e:f8:5f:60:cf:17:03:d8:38:bb:a9:7e:47:18:ec:
97:e5:a8:ba:73:39:7e:8b:fb:43:44:6e:11:a8:6a:6b:ad:c0:
21:92:f4:9c:29:5e:6d:24:91:9f:55:df:96:e9:b8:48:e3:69:
e1:9f:eb:20:d1:c2:82:3c:92:10:7b:50:7b:fd:6d:c2:24:79:
25:15:ed:46:b0:0d:cd:da:4d:ca:76:d7:82:05:af:70:7d:b1:
35:b3:45:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaUJ4T0XX9MmD15aunOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj
OWE5OTIwHhcNMjQxMTIzMDQwMDI5WhcNMjQxMTI0MDQwMDI5WjAzMTEwLwYDVQQD
EygyMDJmOTAxZGM1ZjRiZWJiZGUwMTVkYjQyZTA1MzhhOTg4MWQyMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbqU/z2wG/6Zj+XjvJ89WUHpNwag
C/mG5slFKpR0UWw/ry6KT3hQ3NdBmQuChFgM/IBaJch8VqE9EyCVDeK7C6aaD4jY
CCgOXDvSgjCP+Ls0NyqECYd2PYHOXk4CBc+Xs/OOVac5TAk7XQ6jLdp1kHbWHC+G
dQReZRYhm069nhxXg3M3wwPXM9t1b5iaKjNHi5EPla6mVLhN4iZtehHUKkwaNiDs
KPQ+Dns1O+o7Ub5MXhDf6D+lGJUckmARLxOJwF15OjrRFN+BkqfehXCWKsRo4W1q
izy/wey4O1/mlvd0Qk55uaMqo9gjT0puJ1SLVyWbAcMzjUUtoC/AS5J8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAvkB3F9L673gFdtC4FOKmIHSFAMB8GA1UdIwQY
MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt
OWI4ZDY4ZWU4N2ZjLzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj
LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEDKRqgp
Bqj1vxq6+EIfpKY48GfxQaCXmokOY4DVn4c9wIB2fpcZ0S06O77n7LhStFkwtQYp
fAd4fRvDSyp8dp7iYowmUr+DwnapiInrhu9HTQB7iH6s8GeZpJGo+pwKRhzv53CH
HvBUcA8hFBcm2PfwEB2NIEqyfjiBNFe5joas6rNGVQGJhkQ3j2SQLFcWDjWULl5H
RgibfVcChO+AemWPyRK0nvhfYM8XA9g4u6l+Rxjsl+WounM5fov7Q0RuEahqa63A
IZL0nClebSSRn1Xflum4SONp4Z/rINHCgjySEHtQe/1twiR5JRXtRrANzdpNynbX
ggWvcH2xNbNFpQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:21 2024 by rpki-client on console-fra.rpki-client.org