Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: s1t0LT82iqeLDgd2KJYrBccooZOrG+kL33S6iZ9adxQ=
Subject key identifier: 70:F5:1F:5C:0A:B8:AB:A4:93:3E:9C:F4:42:C7:2F:AB:1A:34:1F:64
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0192102C3D013F5D453CE1219E9C61EF9A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 12C7
Signing time: Fri 20 Sep 2024 16:03:07 +0000
Manifest this update: Fri 20 Sep 2024 16:03:07 +0000
Manifest next update: Sat 21 Sep 2024 16:03:07 +0000
Files and hashes: 1: 1-ssy0-yoqd5R-Q7CxwU08yYNoEU.roa (hash: xxorrPgGhibm1LVNslz/eu4sB/DUVv+d6JOXL87mZsA=)
2: B6aiypPBJwF9WF96eM1aliv6Ytc.roa (hash: SUocFgW7haypZNKnRVVtFvn7JGuwypnhcmngeyRkyUE=)
3: Hpk97f0PJjVPLe2BoUnjl9stAhM.roa (hash: XKHHQ2pQX8XRqZOI7sVWAz52AZz/3OOq5R5Hv0JOa64=)
4: KGBLnva5ARvlTLBSnmRFC4IAyUI.roa (hash: Rwy27//niGDT/nhip0lFyFMBKJj6gkq1XpSIJf0SfFE=)
5: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: puq9gqt/QAb0w08KYwaasvPR+AHgni2NQy5ff7KdvWI=)
6: OoMhY-on5mZKRPIaHPT8RmDWs0M.roa (hash: T/XTDbcwpykhFeZz4gN+AdXGxEPEbkg67zNU6Y5jt5w=)
7: Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa (hash: EYK7sWbRsbVpho6DMTrL6SCJ2Jaf9EXREE8OiWtY6Q4=)
8: TeaokV9XloCZ3x4uSvXZp2hsVFY.roa (hash: nfx8X04SWlEJgUH4rNHEk/aE6HfuXUwzR5Egmy/xUUk=)
9: ten4fFcmXZM6KPrU99BCgE2Lg-k.roa (hash: 1pFF1Qje8HR1vWxIX2kYSOCjzZ0UUviOFA5tsSARfmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:2c:3d:01:3f:5d:45:3c:e1:21:9e:9c:61:ef:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Sep 20 16:03:07 2024 GMT
Not After : Sep 21 16:03:07 2024 GMT
Subject: CN=70f51f5c0ab8aba4933e9cf442c72fab1a341f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:d6:ab:02:8e:89:e0:a2:d0:e7:38:90:bb:
21:88:5f:00:d9:4f:86:1b:9f:88:b1:d6:c4:b4:25:
53:95:6f:ad:41:c7:d0:ac:f7:d0:07:1c:3b:09:b1:
5d:8e:cf:9a:17:50:79:8a:7e:d5:b3:4d:47:5d:9e:
e7:38:aa:b6:2e:c1:98:3d:b7:98:c1:3e:a1:cf:c3:
58:3a:01:b0:07:03:f1:ed:4a:22:9a:e3:25:69:fb:
d7:56:1f:d7:f8:41:d7:86:94:9e:d8:36:ff:d7:36:
c6:4b:cb:48:6b:b7:10:d2:3c:86:9d:fb:c7:f0:09:
f3:7b:0c:46:35:c6:08:80:8b:09:e2:38:7a:8b:76:
54:bd:a9:90:20:24:4d:80:18:9f:30:18:01:5c:5e:
04:ff:c5:e2:28:57:3f:25:ee:a9:c2:f8:e3:16:c9:
b6:63:93:5a:d0:6a:c9:05:de:3d:2c:f0:61:97:b7:
18:80:b2:4a:3d:9a:a3:6d:25:76:53:d8:bc:ab:83:
e9:fa:da:f6:d2:c7:9c:37:65:7c:22:1d:50:73:d9:
c9:39:c0:3f:a9:7e:2d:e0:e6:85:d5:47:b7:61:bf:
ed:5b:e9:98:0d:52:89:4c:d2:2a:61:e1:75:39:ca:
94:a6:6f:1a:89:23:31:3b:14:f3:4b:c3:71:d8:5a:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:1F:5C:0A:B8:AB:A4:93:3E:9C:F4:42:C7:2F:AB:1A:34:1F:64
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:b6:dc:53:0d:13:1c:f5:36:86:66:2f:60:e3:cb:ae:b1:
00:a5:a4:2c:ba:98:87:0f:89:7c:14:c5:24:03:27:4c:2d:70:
6d:26:4b:e5:f8:43:ee:89:12:0e:7e:99:81:83:13:3d:8e:76:
de:bf:4c:d9:34:1c:9c:fd:fb:6f:58:65:cd:a5:76:f8:ac:8f:
b2:84:91:17:48:3a:07:76:af:31:15:3e:5b:c9:b7:f2:e9:95:
b2:3d:56:84:47:07:3f:e3:26:dc:3c:f7:f6:a6:5b:da:4a:4b:
4b:d2:dc:9d:d0:dd:49:37:cb:1d:05:23:9b:d5:f4:52:29:f6:
3c:9c:fd:d5:53:0f:ff:a8:7f:79:7f:ad:b2:82:44:87:29:68:
21:35:95:9c:6e:5f:30:19:b3:4c:d1:ed:8b:bb:8f:70:0e:76:
04:73:07:c2:7e:e3:3d:d3:d5:7d:c9:49:77:2d:f3:62:b3:30:
0f:55:00:bb:a1:b2:c3:8d:11:6a:ed:97:30:7e:c1:bd:ca:53:
e1:08:bd:65:28:45:cc:4f:41:73:d5:43:20:32:63:72:cb:69:
6b:f9:6c:4a:2c:3e:84:00:c7:b4:c5:37:c5:67:e3:6b:5c:0a:
07:8f:0e:51:38:6d:3f:05:8e:f4:6a:e8:b9:84:7b:85:1a:47:
97:c3:70:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIQLD0BP11FPOEhnpxh75qSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjQwOTIwMTYwMzA3WhcNMjQwOTIxMTYwMzA3WjAzMTEwLwYDVQQD
Eyg3MGY1MWY1YzBhYjhhYmE0OTMzZTljZjQ0MmM3MmZhYjFhMzQxZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybHWqwKOieCi0Oc4kLshiF8A2U+G
G5+IsdbEtCVTlW+tQcfQrPfQBxw7CbFdjs+aF1B5in7Vs01HXZ7nOKq2LsGYPbeY
wT6hz8NYOgGwBwPx7UoimuMlafvXVh/X+EHXhpSe2Db/1zbGS8tIa7cQ0jyGnfvH
8AnzewxGNcYIgIsJ4jh6i3ZUvamQICRNgBifMBgBXF4E/8XiKFc/Je6pwvjjFsm2
Y5Na0GrJBd49LPBhl7cYgLJKPZqjbSV2U9i8q4Pp+tr20secN2V8Ih1Qc9nJOcA/
qX4t4OaF1Ue3Yb/tW+mYDVKJTNIqYeF1OcqUpm8aiSMxOxTzS8Nx2FpcZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD1H1wKuKukkz6c9ELHL6saNB9kMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9W23FMN
Exz1NoZmL2Djy66xAKWkLLqYhw+JfBTFJAMnTC1wbSZL5fhD7okSDn6ZgYMTPY52
3r9M2TQcnP37b1hlzaV2+KyPsoSRF0g6B3avMRU+W8m38umVsj1WhEcHP+Mm3Dz3
9qZb2kpLS9LcndDdSTfLHQUjm9X0Uin2PJz91VMP/6h/eX+tsoJEhyloITWVnG5f
MBmzTNHti7uPcA52BHMHwn7jPdPVfclJdy3zYrMwD1UAu6Gyw40Rau2XMH7BvcpT
4Qi9ZShFzE9Bc9VDIDJjcstpa/lsSiw+hADHtMU3xWfja1wKB48OUThtPwWO9Gro
uYR7hRpHl8NweA==
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:31:04 2024 by rpki-client on console-ams.rpki-client.org