Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: Q+ZCEbGHA3Jqro/10uUU53LGhL9AZTpEGstBi3OSQWs=
Subject key identifier: 2A:3F:CB:CF:53:64:86:35:9C:04:4D:41:88:EE:1A:F4:34:65:2D:86
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019357645D6814F199CF691F13819155C6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 137A
Signing time: Sat 23 Nov 2024 05:00:15 +0000
Manifest this update: Sat 23 Nov 2024 05:00:15 +0000
Manifest next update: Sun 24 Nov 2024 05:00:15 +0000
Files and hashes: 1: HkVVDBgWDr67Ybb9SULldptbZ-8.roa (hash: 8/I7pJirwilS11WDjzmjdG5p77jIs4Vrp68wu9Ha3UI=)
2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: ayMys3uGWriz23BISCnEyU7gjHxP/ceNWG3ftzKLjvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:5d:68:14:f1:99:cf:69:1f:13:81:91:55:c6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Nov 23 05:00:15 2024 GMT
Not After : Nov 24 05:00:15 2024 GMT
Subject: CN=2a3fcbcf536486359c044d4188ee1af434652d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:23:09:6f:d4:40:7c:fa:bd:90:48:04:fd:
be:d8:0f:2d:e7:46:fa:35:17:8b:9c:2e:a9:f8:22:
67:a0:45:fc:6f:77:96:eb:78:65:85:61:95:b4:f6:
ca:6b:f7:58:8b:6c:24:2a:b6:33:1b:ea:af:9f:dd:
02:f2:c2:d1:7c:6b:15:c0:22:28:b2:c1:b2:43:62:
75:7f:aa:25:f3:86:e1:75:58:a7:1f:06:77:61:02:
ff:9e:f3:cd:54:42:bd:94:6b:bc:d8:e0:cc:51:8b:
db:ec:8a:6e:23:2d:56:fe:76:e5:36:3c:74:08:e8:
90:5b:df:91:39:b8:84:2f:92:79:cf:ba:c7:76:fc:
83:2e:e3:20:29:a3:ec:44:e9:20:f9:06:1e:a7:c6:
e9:eb:c0:8a:7d:af:2c:fe:ed:e3:cf:81:1f:db:e1:
d7:9d:e3:79:d8:c1:43:e7:87:6c:24:2c:fa:0c:3c:
9e:ae:3c:dd:f9:21:a9:38:95:b4:f4:e4:54:ca:8e:
09:76:1a:8b:97:10:e3:73:d3:70:83:28:56:e6:ed:
21:05:b7:38:b7:84:44:ca:e2:f4:da:22:dd:7b:51:
59:ce:64:87:fd:93:45:26:71:57:35:af:c3:d8:04:
e6:cf:ad:72:f6:8c:b8:23:61:76:d5:03:29:52:c9:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3F:CB:CF:53:64:86:35:9C:04:4D:41:88:EE:1A:F4:34:65:2D:86
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:66:a8:7b:1c:c9:6f:13:84:5b:e7:72:90:a7:73:25:98:
99:7b:41:8a:ae:3b:58:b8:fe:2a:be:04:76:1c:20:93:a5:b9:
65:c8:72:3b:71:4f:66:6b:be:59:6f:0f:21:ae:a5:0d:e6:4c:
c0:07:b4:17:b1:e7:c6:c4:8e:45:89:ab:e8:56:62:dc:e7:ce:
43:ac:a2:f7:fc:f2:5e:e4:56:1d:94:35:cf:b1:b6:99:92:1d:
8a:46:40:f7:27:d2:21:7e:c8:a7:9d:d9:69:cb:79:16:61:06:
93:b5:db:91:3c:5f:ee:31:cc:e4:b8:a2:4f:9d:b7:f1:a0:d0:
b5:87:52:cc:93:c8:df:a8:0a:2c:b1:26:d6:11:80:d6:f6:20:
c9:29:1c:6c:55:92:a4:c8:c6:8c:e3:58:2e:48:79:f0:4a:1a:
a2:e6:68:be:6b:88:9d:19:cf:bb:50:61:3d:e2:e9:2f:87:36:
22:be:0a:83:a9:e3:c7:2d:44:27:e3:08:d0:3a:71:8c:6b:1f:
d0:4b:98:f8:99:f9:8a:cd:85:fb:cd:73:b5:37:40:05:bd:38:
3a:3f:ce:b4:18:93:ae:9f:41:d3:18:7c:d6:2c:23:22:18:95:
82:1c:e6:2b:be:08:a9:24:18:fb:48:8e:36:79:6c:bf:b9:08:
29:3a:72:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZF1oFPGZz2kfE4GRVcbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjQxMTIzMDUwMDE1WhcNMjQxMTI0MDUwMDE1WjAzMTEwLwYDVQQD
EygyYTNmY2JjZjUzNjQ4NjM1OWMwNDRkNDE4OGVlMWFmNDM0NjUyZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspwjCW/UQHz6vZBIBP2+2A8t50b6
NReLnC6p+CJnoEX8b3eW63hlhWGVtPbKa/dYi2wkKrYzG+qvn90C8sLRfGsVwCIo
ssGyQ2J1f6ol84bhdVinHwZ3YQL/nvPNVEK9lGu82ODMUYvb7IpuIy1W/nblNjx0
COiQW9+RObiEL5J5z7rHdvyDLuMgKaPsROkg+QYep8bp68CKfa8s/u3jz4Ef2+HX
neN52MFD54dsJCz6DDyerjzd+SGpOJW09ORUyo4JdhqLlxDjc9NwgyhW5u0hBbc4
t4REyuL02iLde1FZzmSH/ZNFJnFXNa/D2ATmz61y9oy4I2F21QMpUsmM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo/y89TZIY1nARNQYjuGvQ0ZS2GMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxBmqHsc
yW8ThFvncpCncyWYmXtBiq47WLj+Kr4Edhwgk6W5ZchyO3FPZmu+WW8PIa6lDeZM
wAe0F7HnxsSORYmr6FZi3OfOQ6yi9/zyXuRWHZQ1z7G2mZIdikZA9yfSIX7Ip53Z
act5FmEGk7XbkTxf7jHM5LiiT5238aDQtYdSzJPI36gKLLEm1hGA1vYgySkcbFWS
pMjGjONYLkh58EoaouZovmuInRnPu1BhPeLpL4c2Ir4Kg6njxy1EJ+MI0DpxjGsf
0EuY+Jn5is2F+81ztTdABb04Oj/OtBiTrp9B0xh81iwjIhiVghzmK74IqSQY+0iO
Nnlsv7kIKTpyOQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:55 2024 by rpki-client on console-ams.rpki-client.org