Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: Mt2Ujy9wsckPInqkd2jALPM33+50LFvzxtIOpccXcVk=
Subject key identifier: 9F:39:F1:C7:4D:4A:64:94:37:96:CE:B5:E7:28:78:CD:A6:EC:46:2E
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 01935989D4F8D183B9EFA1AF9BA7189FFBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 15:00:25 +0000
Manifest this update: Sat 23 Nov 2024 15:00:25 +0000
Manifest next update: Sun 24 Nov 2024 15:00:25 +0000
Files and hashes: 1: QOvI-aPjyBYHDsXiNNA1Huh3oo4.roa (hash: ckgU1+HuLWudEmEFVpgG2rQHbph4ywnNyAzoIk/yUY8=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: /87Kr6VqVqEmS0AeRu/Xth6BOP0s8wxzVUvJayH9WfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:d4:f8:d1:83:b9:ef:a1:af:9b:a7:18:9f:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Nov 23 15:00:25 2024 GMT
Not After : Nov 24 15:00:25 2024 GMT
Subject: CN=9f39f1c74d4a64943796ceb5e72878cda6ec462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:b2:68:42:c1:54:64:56:a5:64:9f:8e:83:
a1:b5:46:df:02:2b:9f:97:c7:62:28:2e:23:94:da:
c0:d8:c7:2f:4d:de:d3:78:9f:53:87:8f:c5:9e:2f:
19:4c:38:9c:11:46:15:2b:29:42:e7:c9:4c:c7:7c:
42:f9:7c:fe:60:e4:43:2e:24:62:b1:3c:bf:ed:d9:
1a:d9:3f:21:1e:54:7a:72:92:b2:be:ab:99:46:a4:
d6:f2:e0:fe:5e:00:69:ea:6b:e5:0b:0e:68:07:5a:
1d:e3:a9:38:14:bf:41:aa:01:15:4c:df:17:4b:38:
1d:ca:9b:4e:92:65:3f:7f:4c:a1:b1:0c:1e:93:43:
46:83:14:da:ca:f4:18:5c:b6:9b:cc:2b:db:34:b7:
b2:8a:c9:cb:07:80:96:b3:a7:fb:7e:43:70:39:c3:
09:1c:55:9b:94:77:bb:c6:48:47:21:6b:8d:14:c0:
8e:af:da:61:c1:79:c2:1d:c1:f8:0b:a5:76:4d:39:
6a:42:c4:9a:3b:ba:21:38:fa:60:28:70:b0:37:78:
72:7d:15:59:8e:35:ca:5a:f2:f6:97:c0:e4:f0:d5:
2e:f1:a3:ad:5e:65:e6:bc:a6:ed:36:76:c4:37:2b:
42:c0:4d:6c:28:3a:b0:52:bd:2e:fc:0a:33:53:9b:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:F1:C7:4D:4A:64:94:37:96:CE:B5:E7:28:78:CD:A6:EC:46:2E
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5c:f8:01:9b:06:2b:93:85:82:29:7e:e0:e8:4d:44:c9:57:
61:3b:d9:26:08:3f:64:2e:9f:c8:d4:2b:aa:89:fd:d5:a6:9d:
55:49:a4:63:53:89:93:85:97:8a:25:ee:00:99:40:5b:12:73:
09:1f:6b:14:6b:07:41:05:33:ad:e4:4a:a5:c1:ec:49:b2:22:
15:be:92:8a:f2:52:4c:b3:7d:44:83:a4:05:2c:85:83:2e:9d:
ef:13:c0:24:d5:48:b2:b6:3e:13:3d:47:87:b8:85:2b:b0:6d:
4e:cf:15:cb:cc:71:59:aa:75:ee:79:87:3d:38:ab:2a:7b:c7:
cd:df:e9:d5:8c:ce:9e:fe:90:35:cf:25:bf:ad:07:4d:51:62:
97:35:9a:d8:19:b3:b2:af:ad:6f:94:31:57:a4:14:4c:cd:c9:
80:95:5e:dd:53:87:7b:32:74:ca:e4:4c:04:41:a0:46:f9:02:
bf:85:d7:7a:d0:01:f5:27:70:b8:01:58:ab:eb:c4:a7:2e:48:
06:8e:5f:55:e7:0e:74:64:65:6c:9c:53:3a:72:7a:96:07:32:
cd:f6:c0:e1:3e:8c:57:df:f8:88:08:b1:6c:a7:fa:0f:24:22:
bd:fd:69:e0:ca:45:07:ca:09:8e:e6:65:ff:43:6c:f3:3c:7d:
c6:e8:f0:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZidT40YO576Gvm6cYn/vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx
NjFiOWIwHhcNMjQxMTIzMTUwMDI1WhcNMjQxMTI0MTUwMDI1WjAzMTEwLwYDVQQD
Eyg5ZjM5ZjFjNzRkNGE2NDk0Mzc5NmNlYjVlNzI4NzhjZGE2ZWM0NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+yaELBVGRWpWSfjoOhtUbfAiuf
l8diKC4jlNrA2McvTd7TeJ9Th4/Fni8ZTDicEUYVKylC58lMx3xC+Xz+YORDLiRi
sTy/7dka2T8hHlR6cpKyvquZRqTW8uD+XgBp6mvlCw5oB1od46k4FL9BqgEVTN8X
SzgdyptOkmU/f0yhsQwek0NGgxTayvQYXLabzCvbNLeyisnLB4CWs6f7fkNwOcMJ
HFWblHe7xkhHIWuNFMCOr9phwXnCHcH4C6V2TTlqQsSaO7ohOPpgKHCwN3hyfRVZ
jjXKWvL2l8Dk8NUu8aOtXmXmvKbtNnbENytCwE1sKDqwUr0u/AozU5tPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ858cdNSmSUN5bOtecoeM2m7EYuMB8GA1UdIwQY
MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct
N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi
LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFz4AZsG
K5OFgil+4OhNRMlXYTvZJgg/ZC6fyNQrqon91aadVUmkY1OJk4WXiiXuAJlAWxJz
CR9rFGsHQQUzreRKpcHsSbIiFb6SivJSTLN9RIOkBSyFgy6d7xPAJNVIsrY+Ez1H
h7iFK7BtTs8Vy8xxWap17nmHPTirKnvHzd/p1YzOnv6QNc8lv60HTVFilzWa2Bmz
sq+tb5QxV6QUTM3JgJVe3VOHezJ0yuRMBEGgRvkCv4XXetAB9SdwuAFYq+vEpy5I
Bo5fVecOdGRlbJxTOnJ6lgcyzfbA4T6MV9/4iAixbKf6DyQivf1p4MpFB8oJjuZl
/0Ns8zx9xujwTQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:35 2024 by rpki-client on console-fra.rpki-client.org