Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: JuXyrXPq5jICNj6MfWuxH3e1lEDTqiD3in7f5D/OoqY=
Subject key identifier: 33:FF:80:23:60:DF:9B:DB:C7:05:9F:47:73:79:01:56:C0:E8:CC:98
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0193595321F3CFCE402FD8CE3C3A23628FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 105E
Signing time: Sat 23 Nov 2024 14:00:40 +0000
Manifest this update: Sat 23 Nov 2024 14:00:40 +0000
Manifest next update: Sun 24 Nov 2024 14:00:40 +0000
Files and hashes: 1: HAJdnz05mOkeznAsf7_irL_pRsQ.roa (hash: hqadjvwMaB0hkQBtJgNOYlHaGATh+ipy00dIL8fxjdg=)
2: UGAK2Vv5vfcj_tqLoCUvojrrljk.roa (hash: dWkfYmwCuxzjtc+jPQuHj1jjKrVCHzu8r1iCqHENxHc=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: oTBBeLI/d6GxB+6N8YzozT+7/YrhZlJTDDIOTxy7BVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:21:f3:cf:ce:40:2f:d8:ce:3c:3a:23:62:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Nov 23 14:00:40 2024 GMT
Not After : Nov 24 14:00:40 2024 GMT
Subject: CN=33ff802360df9bdbc7059f4773790156c0e8cc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:1a:8f:97:df:c6:02:eb:d1:46:fa:15:a6:
e5:78:b7:fa:70:bf:2d:c9:d3:99:c0:48:3a:cf:41:
20:ed:17:ca:cd:47:78:21:0e:91:29:6c:e3:fd:16:
be:18:b9:d2:d9:87:b5:c7:f2:34:9b:a2:0c:46:e4:
17:df:9f:5c:ac:a6:3f:5e:f8:d0:40:bf:c7:34:ff:
da:a4:5d:b9:19:c8:47:a2:e2:ea:54:4b:e6:a2:d2:
68:c7:75:a2:fa:b1:30:2a:24:d4:c5:d1:00:cf:99:
82:99:dc:98:d8:62:ba:43:36:e7:a6:8f:0c:8f:5f:
fd:a0:45:c8:3c:32:4a:53:8e:ae:73:0f:11:e4:22:
90:19:15:31:64:31:ee:19:cb:af:1b:81:25:ea:35:
3f:ce:89:a2:fc:b5:94:f8:0c:31:34:03:9e:93:08:
b5:2b:85:24:e6:d7:a2:55:38:be:4f:e6:a7:b9:7f:
72:73:d6:92:18:be:e9:65:06:e0:b8:46:af:d9:8b:
1d:7f:56:67:e4:3c:67:47:81:68:12:42:2a:8a:79:
2b:74:82:3c:62:f3:34:72:8a:43:80:7b:e3:9c:7f:
7e:77:28:9e:4b:81:95:02:c2:9e:57:2d:68:a7:1f:
dc:29:a0:53:f4:10:bb:24:54:eb:f5:d2:c5:8d:ca:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:80:23:60:DF:9B:DB:C7:05:9F:47:73:79:01:56:C0:E8:CC:98
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:31:49:ee:e6:5c:1e:41:d0:67:da:82:27:79:29:83:d6:06:
dc:00:d0:06:44:41:0b:ef:22:bf:ad:67:d1:de:3d:e2:54:87:
fe:65:c3:03:de:d7:ce:cf:40:f1:2c:b7:51:96:42:85:c5:f1:
f2:88:80:a5:d0:97:a7:e7:63:80:3e:84:28:cb:bc:6b:f1:b6:
fd:78:49:13:de:43:ad:f4:fc:44:a9:bd:2e:0c:3a:dd:ba:92:
4a:1a:06:71:6d:08:1b:d2:a8:5e:53:bb:ab:1b:a1:d8:84:cc:
8d:15:fb:82:94:45:21:96:a9:67:31:3c:42:5d:86:07:24:4c:
19:e3:c2:ed:f2:d0:df:6c:b1:45:50:b9:21:99:17:d9:df:90:
6b:37:ea:ae:33:d8:e2:e1:86:c7:e3:8a:4b:99:12:31:e7:bc:
88:a8:45:e7:96:10:f3:68:69:cb:1f:3f:0b:fd:d9:e1:65:b9:
36:22:3b:72:af:da:3f:54:e5:ac:ed:50:ed:4c:27:15:5d:1c:
c3:65:e0:bd:c5:74:b4:40:c2:eb:ee:d3:b5:88:37:b3:f9:20:
c0:2d:af:13:2d:f7:39:97:fa:e4:ab:48:34:64:b8:fd:20:71:
04:df:08:42:b3:28:14:9d:43:f7:9b:4c:e0:3f:de:d9:df:13:
ad:bf:de:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUyHzz85AL9jOPDojYo+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjQxMTIzMTQwMDQwWhcNMjQxMTI0MTQwMDQwWjAzMTEwLwYDVQQD
EygzM2ZmODAyMzYwZGY5YmRiYzcwNTlmNDc3Mzc5MDE1NmMwZThjYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhYaj5ffxgLr0Ub6FableLf6cL8t
ydOZwEg6z0Eg7RfKzUd4IQ6RKWzj/Ra+GLnS2Ye1x/I0m6IMRuQX359crKY/XvjQ
QL/HNP/apF25GchHouLqVEvmotJox3Wi+rEwKiTUxdEAz5mCmdyY2GK6Qzbnpo8M
j1/9oEXIPDJKU46ucw8R5CKQGRUxZDHuGcuvG4El6jU/zomi/LWU+AwxNAOekwi1
K4Uk5teiVTi+T+anuX9yc9aSGL7pZQbguEav2Ysdf1Zn5DxnR4FoEkIqinkrdII8
YvM0copDgHvjnH9+dyieS4GVAsKeVy1opx/cKaBT9BC7JFTr9dLFjcpV0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP/gCNg35vbxwWfR3N5AVbA6MyYMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjFJ7uZc
HkHQZ9qCJ3kpg9YG3ADQBkRBC+8iv61n0d494lSH/mXDA97Xzs9A8Sy3UZZChcXx
8oiApdCXp+djgD6EKMu8a/G2/XhJE95DrfT8RKm9Lgw63bqSShoGcW0IG9KoXlO7
qxuh2ITMjRX7gpRFIZapZzE8Ql2GByRMGePC7fLQ32yxRVC5IZkX2d+QazfqrjPY
4uGGx+OKS5kSMee8iKhF55YQ82hpyx8/C/3Z4WW5NiI7cq/aP1TlrO1Q7UwnFV0c
w2XgvcV0tEDC6+7TtYg3s/kgwC2vEy33OZf65KtINGS4/SBxBN8IQrMoFJ1D95tM
4D/e2d8Trb/eOg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:45 2024 by rpki-client on console-ams.rpki-client.org