Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: pTS0fT9/jf0LkYaDC9lbgh+5uK/t3BoOSIvDUPYTUCI=
Subject key identifier: 6C:0D:6B:AD:CB:C7:8A:3F:94:10:29:5D:D6:69:93:DF:BB:2E:65:A1
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 01935764E454D05B60FA832A6916EF9D7024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 05:00:50 +0000
Manifest this update: Sat 23 Nov 2024 05:00:50 +0000
Manifest next update: Sun 24 Nov 2024 05:00:50 +0000
Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: LJ2jNVUNGvMSqrVWxrXQy7HhwuNCRFE9NzEgQ++1i5o=)
2: pUhLV5jj3coAxE3Ju7rywmRya5c.roa (hash: kBOsEAO5A7FXXMfxoUuO7F5xQDeCNI1O9Pci+7Z8sp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e4:54:d0:5b:60:fa:83:2a:69:16:ef:9d:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Nov 23 05:00:50 2024 GMT
Not After : Nov 24 05:00:50 2024 GMT
Subject: CN=6c0d6badcbc78a3f9410295dd66993dfbb2e65a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:d1:c0:d4:7d:e6:ba:3f:18:0e:2d:3a:0b:
c8:2f:ba:bd:91:a2:ea:ab:7e:89:f4:4a:c8:31:c7:
64:37:5e:ff:23:7e:cb:d6:c1:de:5c:98:6e:68:af:
fb:66:10:6b:bf:1d:92:7e:f7:63:8a:67:17:9e:48:
9e:36:76:e4:78:4e:2d:ef:54:c2:3a:c9:55:bf:9e:
32:1e:62:d9:00:ec:64:d9:d7:b6:a5:18:02:d4:88:
1f:14:9a:78:29:9e:06:67:16:6e:65:7a:8a:38:7d:
63:89:d0:39:97:22:f5:76:03:13:41:c4:ac:e1:b1:
b9:ee:ed:26:9a:97:a4:94:45:af:23:1b:b2:84:fa:
c5:22:e1:5b:bc:84:0e:34:44:d5:12:03:9b:8a:b3:
41:2c:95:b1:15:4a:b9:d3:6f:e4:b5:6b:76:03:5c:
29:4a:58:bd:bd:bc:df:26:4a:65:fe:5b:c6:5e:48:
5c:44:60:9d:66:39:4d:e3:c9:d8:6a:31:7a:db:c4:
73:88:17:ee:e6:87:14:8d:fa:56:08:f6:c0:3b:c0:
8d:e8:8f:14:60:0c:dc:1d:82:91:e4:4e:98:7e:59:
6b:b5:d0:03:c5:c2:c1:5b:a6:df:eb:c0:8a:11:a5:
37:d9:15:51:7d:23:91:c0:d0:43:48:4e:03:80:ca:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:6B:AD:CB:C7:8A:3F:94:10:29:5D:D6:69:93:DF:BB:2E:65:A1
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:e3:d4:08:de:1c:21:02:5e:61:47:dd:e5:52:66:30:12:
b5:97:ef:f3:72:55:87:e3:7c:59:eb:5b:e5:d9:aa:c7:54:4f:
4e:d9:e3:f5:4a:c3:6c:e0:8e:a9:0d:c3:fb:1d:75:68:69:d5:
4d:fb:e7:1b:98:26:8b:22:24:4b:64:1e:dd:93:d5:bf:e3:c8:
de:fd:12:72:2d:c7:5c:e2:75:32:ec:91:a5:1d:e6:39:86:ef:
62:92:68:27:a9:60:98:7e:dc:61:1f:71:b4:3d:14:29:bd:bb:
78:72:26:c1:91:c8:26:fe:62:dc:8c:79:2a:94:70:8f:86:85:
16:cb:ee:d3:9a:4a:b2:ff:00:41:3a:ee:05:bb:5f:19:72:ce:
5b:72:b4:af:1c:1f:72:13:89:24:1d:95:4b:4c:a6:0f:f9:11:
f6:25:b5:7b:d2:4c:11:ef:e9:29:77:16:a3:92:7c:97:83:fa:
40:d1:01:f8:74:d0:69:26:f1:f9:d2:ee:23:fa:f2:15:bc:f4:
3f:e4:c8:af:ed:c9:be:48:9d:03:ad:67:43:88:0a:f5:65:e9:
43:a5:cd:f0:85:4c:a6:9e:55:50:7a:f6:c9:87:3b:a5:a0:e0:
d7:b8:0c:52:40:5f:bf:8c:84:aa:41:aa:b4:35:31:1f:b1:b8:
9f:6d:53:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZORU0Ftg+oMqaRbvnXAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjQxMTIzMDUwMDUwWhcNMjQxMTI0MDUwMDUwWjAzMTEwLwYDVQQD
Eyg2YzBkNmJhZGNiYzc4YTNmOTQxMDI5NWRkNjY5OTNkZmJiMmU2NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mzRwNR95ro/GA4tOgvIL7q9kaLq
q36J9ErIMcdkN17/I37L1sHeXJhuaK/7ZhBrvx2SfvdjimcXnkieNnbkeE4t71TC
OslVv54yHmLZAOxk2de2pRgC1IgfFJp4KZ4GZxZuZXqKOH1jidA5lyL1dgMTQcSs
4bG57u0mmpeklEWvIxuyhPrFIuFbvIQONETVEgObirNBLJWxFUq502/ktWt2A1wp
Sli9vbzfJkpl/lvGXkhcRGCdZjlN48nYajF628RziBfu5ocUjfpWCPbAO8CN6I8U
YAzcHYKR5E6YfllrtdADxcLBW6bf68CKEaU32RVRfSORwNBDSE4DgMoNOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwNa63Lx4o/lBApXdZpk9+7LmWhMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhPj1Aje
HCECXmFH3eVSZjAStZfv83JVh+N8Wetb5dmqx1RPTtnj9UrDbOCOqQ3D+x11aGnV
TfvnG5gmiyIkS2Qe3ZPVv+PI3v0Sci3HXOJ1MuyRpR3mOYbvYpJoJ6lgmH7cYR9x
tD0UKb27eHImwZHIJv5i3Ix5KpRwj4aFFsvu05pKsv8AQTruBbtfGXLOW3K0rxwf
chOJJB2VS0ymD/kR9iW1e9JMEe/pKXcWo5J8l4P6QNEB+HTQaSbx+dLuI/ryFbz0
P+TIr+3JvkidA61nQ4gK9WXpQ6XN8IVMpp5VUHr2yYc7paDg17gMUkBfv4yEqkGq
tDUxH7G4n21TGw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:51 2024 by rpki-client on console-ams.rpki-client.org