Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: cuthsX1DJWdUORJNxuvRfDTmzIDTD51W+1I+pNQ16g0=
Subject key identifier: B2:A0:D0:A9:99:FA:F6:65:C4:A4:A7:12:9B:5D:E1:8A:EA:3B:7C:D1
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 019356F69DE0110CC5603D94DA1C41D0DAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 08E5
Signing time: Sat 23 Nov 2024 03:00:22 +0000
Manifest this update: Sat 23 Nov 2024 03:00:22 +0000
Manifest next update: Sun 24 Nov 2024 03:00:22 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: hoqXcUgSYmKJRQogWq1sT6ZVNRWRGV6GTUFe/Yfa5i4=)
2: noG9d_seh5PrEbkz4dTE2pw53HI.roa (hash: hvT9tx10Xwi8mh6cqtO+f1DTjSCBzwEsw4J6UBoGC24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:9d:e0:11:0c:c5:60:3d:94:da:1c:41:d0:da:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Nov 23 03:00:22 2024 GMT
Not After : Nov 24 03:00:22 2024 GMT
Subject: CN=b2a0d0a999faf665c4a4a7129b5de18aea3b7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:86:2f:48:10:b7:cb:0a:79:dc:22:3e:38:
c0:ab:96:ac:87:1a:25:a5:18:cb:e6:b2:54:a5:be:
9b:8a:d3:dd:93:a3:58:cd:77:ef:7b:5b:2e:32:d8:
2e:cb:68:3a:e1:86:d7:38:1e:8f:e9:29:f6:fc:80:
7f:1e:4d:24:df:c0:18:2f:2c:e3:5c:5a:11:3e:ee:
bf:d8:a1:3f:29:a5:0a:d0:70:9c:b5:91:03:76:db:
b3:22:bf:12:65:7e:7f:f9:bb:1b:55:0f:d7:00:9c:
45:61:62:e6:87:91:64:bc:d0:90:a9:ed:4a:af:21:
fa:d2:c3:6c:89:bd:af:b3:42:87:8e:75:d6:48:cd:
f7:52:5e:3d:a7:45:50:c3:a1:53:e2:5d:52:d8:ee:
b7:5a:79:47:ff:13:0c:d5:8e:01:fd:a4:bc:d0:a3:
d9:db:0b:e2:0d:44:c2:93:4b:16:1f:be:09:99:52:
5d:a6:21:43:a4:7a:9d:29:15:4c:56:54:ed:51:d4:
1d:4c:4c:9e:a2:e6:64:fc:65:f6:11:b8:ff:81:ba:
13:63:38:e8:93:39:9c:ef:df:24:41:d0:f1:29:f3:
21:b3:02:ee:e2:6d:7c:46:e0:09:34:3b:73:4c:62:
06:ca:f2:df:d8:3a:d1:35:95:82:e1:24:13:68:e0:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A0:D0:A9:99:FA:F6:65:C4:A4:A7:12:9B:5D:E1:8A:EA:3B:7C:D1
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ea:4a:83:14:5a:23:dd:89:6f:9e:9b:4b:3c:ac:74:bc:13:
b0:a9:db:a7:f4:6b:9e:5f:ae:96:ce:b2:32:82:41:97:18:16:
c1:eb:45:8e:2e:65:f6:00:fe:5f:f7:f1:f6:fd:59:a0:92:22:
ae:e1:e7:8c:1a:79:27:06:47:11:b8:a0:66:13:2a:ac:3e:6f:
a8:a8:f5:f0:35:17:68:c5:67:29:d5:bd:88:2d:c2:5e:26:fa:
ce:f8:d2:11:70:e7:8e:0f:06:37:8c:50:a0:80:a6:74:c9:4b:
0c:25:f7:9e:1e:34:44:b0:11:54:54:7b:bb:79:e9:3a:1a:ff:
95:b5:c5:ba:61:16:09:93:72:de:49:af:61:c8:2a:13:0c:21:
98:ec:c2:98:57:75:88:16:08:12:06:12:a8:c5:0c:94:e2:70:
90:97:9b:b6:08:31:bf:75:61:88:a3:d2:81:e2:fe:22:47:0e:
1e:59:8d:0c:e8:a8:0d:84:d8:e9:f0:ae:f1:00:e2:0f:cf:57:
42:5f:55:17:40:a4:5a:a1:eb:15:ae:37:68:d5:d4:a2:b9:3f:
1b:cd:fb:8f:51:42:f7:8e:b7:3f:19:dd:c5:b5:99:bb:52:d2:
f9:a1:0d:5e:5d:69:50:3d:b8:95:d6:dc:bd:81:99:aa:05:ff:
0e:36:f7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9p3gEQzFYD2U2hxB0NqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2
MDE3Y2UwHhcNMjQxMTIzMDMwMDIyWhcNMjQxMTI0MDMwMDIyWjAzMTEwLwYDVQQD
EyhiMmEwZDBhOTk5ZmFmNjY1YzRhNGE3MTI5YjVkZTE4YWVhM2I3Y2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rKGL0gQt8sKedwiPjjAq5ashxol
pRjL5rJUpb6bitPdk6NYzXfve1suMtguy2g64YbXOB6P6Sn2/IB/Hk0k38AYLyzj
XFoRPu6/2KE/KaUK0HCctZEDdtuzIr8SZX5/+bsbVQ/XAJxFYWLmh5FkvNCQqe1K
ryH60sNsib2vs0KHjnXWSM33Ul49p0VQw6FT4l1S2O63WnlH/xMM1Y4B/aS80KPZ
2wviDUTCk0sWH74JmVJdpiFDpHqdKRVMVlTtUdQdTEyeouZk/GX2Ebj/gboTYzjo
kzmc798kQdDxKfMhswLu4m18RuAJNDtzTGIGyvLf2DrRNZWC4SQTaODupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKg0KmZ+vZlxKSnEptd4YrqO3zRMB8GA1UdIwQY
MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt
NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl
LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPupKgxRa
I92Jb56bSzysdLwTsKnbp/Rrnl+uls6yMoJBlxgWwetFji5l9gD+X/fx9v1ZoJIi
ruHnjBp5JwZHEbigZhMqrD5vqKj18DUXaMVnKdW9iC3CXib6zvjSEXDnjg8GN4xQ
oICmdMlLDCX3nh40RLARVFR7u3npOhr/lbXFumEWCZNy3kmvYcgqEwwhmOzCmFd1
iBYIEgYSqMUMlOJwkJebtggxv3VhiKPSgeL+IkcOHlmNDOioDYTY6fCu8QDiD89X
Ql9VF0CkWqHrFa43aNXUork/G837j1FC9463PxndxbWZu1LS+aENXl1pUD24ldbc
vYGZqgX/Djb3dQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:17 2024 by rpki-client on console-ams.rpki-client.org