Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json)
Hash identifier: lczsaG6ntcl/rZLTVC7ymYcMyyl6+emlmG8fgJ6KNJg=
Subject key identifier: 90:5E:F6:0C:FA:F2:45:3A:AB:36:F5:51:14:7C:0A:32:D2:B4:44:DE
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 019350BFE40FCB369ED167DC6C04F731283E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
Manifest number: 1371
Signing time: Thu 21 Nov 2024 22:02:53 +0000
Manifest this update: Thu 21 Nov 2024 22:02:53 +0000
Manifest next update: Fri 22 Nov 2024 22:02:53 +0000
Files and hashes: 1: Ev8SGvmsQrnuD8ae4V9_p_o8VRI.roa (hash: CKaQDX5cirCXdBtt3FNYkZwu0tkh4NzQ012wzeXdQfY=)
2: KOgnCQq2e_EiOqSOCIumPoYtzNE.roa (hash: alVXywodtTLvU07tkVFVGj6Rb2PrhdJcOLjb0+ZAIkU=)
3: KOi4x8IHdJ5Stu1MNoVaZQJnYe4.roa (hash: Z1ibA9L04LunQH4TGEiiDR8FqkoMLgZODKH0HPzLH6Q=)
4: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: tKjPVZfWqKRW0V8izaEaaeRm1j9E03medozeAP5MR2g=)
5: XIwK18_GB5dBJUx0gyZUAiwWYc8.roa (hash: 6DgZEO5hhZKa66777bxezti+NRSRejtBfBXvep4VMME=)
6: ecWVSUbjWBO2oIo4yKbKbAQtFMc.roa (hash: OdvTRi7rtCaOog25SlWlT1jHWCrGKRfFJ24ynVGUBmw=)
7: kEKEUvdU-ZG69qsSiMb8vq-5av4.roa (hash: bri6Y4b0BezF2wKHisZjlAWqkk13BYb8wU37wiJ4usk=)
8: qHzUgADKGEkwJlAz53szPYAqlO4.roa (hash: sAD4+fm4JXvKo1Kz9KEwZgIAz6Re5WsL0M9WBzjsGwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:e4:0f:cb:36:9e:d1:67:dc:6c:04:f7:31:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Nov 21 22:02:53 2024 GMT
Not After : Nov 22 22:02:53 2024 GMT
Subject: CN=905ef60cfaf2453aab36f551147c0a32d2b444de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:ca:3c:81:ce:0f:59:cc:7b:20:23:dc:9b:
7d:45:cc:70:f4:19:53:af:0b:2c:63:ca:eb:54:ce:
66:56:f0:91:da:5a:fc:fc:e8:f0:1c:e9:ed:11:31:
b0:bf:31:5b:af:e0:d4:d6:76:63:9c:7a:76:53:b9:
3d:85:ed:d9:4a:62:55:a4:e4:af:94:9b:4a:78:ec:
8d:74:d7:48:fe:53:d7:0e:e7:e3:d8:a3:1d:07:94:
dc:fe:eb:bb:e4:8a:e4:c4:35:f2:8c:5f:7c:01:98:
77:e0:81:81:df:b8:a9:21:da:53:5a:86:c6:9c:24:
d4:17:f3:a2:74:82:44:b1:2f:1b:b7:92:35:f6:24:
7c:08:31:a5:df:77:c7:9c:f2:24:28:54:3a:35:ed:
a3:2c:fc:71:95:2f:7f:ef:9b:c0:f4:12:56:f9:1b:
d7:e7:3f:9a:e9:aa:97:4a:9b:95:44:86:ec:3c:25:
2d:81:3b:e6:f1:81:b5:d0:c6:41:8e:94:cb:95:5b:
5d:fe:ab:85:2e:61:ff:2e:ee:e2:6f:27:7e:18:8b:
14:60:23:b6:4c:02:f5:e5:21:10:fe:47:6a:f6:72:
3e:f6:52:1f:1a:a1:cf:fc:98:70:5c:be:3c:19:c7:
de:fa:3a:58:d6:72:0b:f4:7e:9c:e2:fc:51:51:9d:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:F6:0C:FA:F2:45:3A:AB:36:F5:51:14:7C:0A:32:D2:B4:44:DE
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:63:b3:15:47:c8:9a:77:a3:7a:fa:12:b7:d4:4d:ff:b2:
68:c2:75:2a:12:ba:98:ea:77:25:29:70:3c:ee:eb:4f:70:4e:
ad:69:f1:e1:eb:44:9d:a3:a2:1d:b2:c1:ce:a3:03:34:70:37:
88:21:c7:27:37:bd:d3:f2:4a:d1:3f:70:14:9d:d7:02:d8:b6:
82:9d:06:d2:72:4c:11:eb:16:5b:35:0e:59:db:7c:43:00:2e:
eb:e2:27:13:46:87:9b:23:2a:99:25:69:5c:7c:68:90:45:b2:
51:e3:32:0e:55:a9:f2:8a:20:ad:27:87:4e:42:ec:dc:29:28:
e9:7d:80:ec:37:95:2a:86:19:9b:d1:f8:de:b8:b5:16:23:32:
6a:e5:13:f8:53:a2:c9:0b:c5:32:95:f0:92:5c:d6:cb:ab:14:
95:d8:9b:e9:a3:a7:a4:e4:7c:92:f4:92:56:fc:96:63:53:ba:
90:51:ad:76:cd:38:78:83:46:89:11:6c:a0:ea:4a:f8:f1:d9:
ef:6d:59:d0:e9:78:cd:c3:e8:ed:e2:ab:c8:78:ee:73:3b:2b:
b6:0b:0c:25:17:fd:fd:17:16:e3:f4:23:f7:59:70:89:06:b7:
7a:8a:d1:15:70:39:df:11:33:e2:c9:7c:b0:af:ce:83:82:1d:
ed:c4:34:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQv+QPyzae0WfcbAT3MSg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjQxMTIxMjIwMjUzWhcNMjQxMTIyMjIwMjUzWjAzMTEwLwYDVQQD
Eyg5MDVlZjYwY2ZhZjI0NTNhYWIzNmY1NTExNDdjMGEzMmQyYjQ0NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DLKPIHOD1nMeyAj3Jt9Rcxw9BlT
rwssY8rrVM5mVvCR2lr8/OjwHOntETGwvzFbr+DU1nZjnHp2U7k9he3ZSmJVpOSv
lJtKeOyNdNdI/lPXDufj2KMdB5Tc/uu75IrkxDXyjF98AZh34IGB37ipIdpTWobG
nCTUF/OidIJEsS8bt5I19iR8CDGl33fHnPIkKFQ6Ne2jLPxxlS9/75vA9BJW+RvX
5z+a6aqXSpuVRIbsPCUtgTvm8YG10MZBjpTLlVtd/quFLmH/Lu7ibyd+GIsUYCO2
TAL15SEQ/kdq9nI+9lIfGqHP/JhwXL48Gcfe+jpY1nIL9H6c4vxRUZ03YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBe9gz68kU6qzb1URR8CjLStETeMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoVjsxVH
yJp3o3r6ErfUTf+yaMJ1KhK6mOp3JSlwPO7rT3BOrWnx4etEnaOiHbLBzqMDNHA3
iCHHJze90/JK0T9wFJ3XAti2gp0G0nJMEesWWzUOWdt8QwAu6+InE0aHmyMqmSVp
XHxokEWyUeMyDlWp8oogrSeHTkLs3Cko6X2A7DeVKoYZm9H43ri1FiMyauUT+FOi
yQvFMpXwklzWy6sUldib6aOnpOR8kvSSVvyWY1O6kFGtds04eINGiRFsoOpK+PHZ
721Z0Ol4zcPo7eKryHjuczsrtgsMJRf9/RcW4/Qj91lwiQa3eorRFXA53xEz4sl8
sK/Og4Id7cQ0/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:48 2024 by rpki-client on console-fra.rpki-client.org