Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: jGrJwcArHWknUmKYeQf+TbJNbwclvbXMKbtEOq/aPOc=
Subject key identifier: 52:A1:49:5C:32:90:5B:AF:E3:3A:98:BE:EA:55:5A:6F:76:03:39:D6
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 019358770C915376AC9C617AE54D25A35EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 1030
Signing time: Sat 23 Nov 2024 10:00:17 +0000
Manifest this update: Sat 23 Nov 2024 10:00:17 +0000
Manifest next update: Sun 24 Nov 2024 10:00:17 +0000
Files and hashes: 1: U5wKQsq4yED7UQOtd4LlmyvH1Ww.roa (hash: l2C5ESNBrAxld77b3qxHHo5+M2By0kN89mW5lE7hnQI=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: BnHypCCu8X6KVDbHqwfMijTYkKiBygsRJhxMmrVsAys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:0c:91:53:76:ac:9c:61:7a:e5:4d:25:a3:5e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Nov 23 10:00:17 2024 GMT
Not After : Nov 24 10:00:17 2024 GMT
Subject: CN=52a1495c32905bafe33a98beea555a6f760339d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:42:9d:14:24:9c:9b:b4:88:a6:f9:d3:61:
02:42:f6:72:3f:c1:b2:75:45:d9:af:7b:de:78:f2:
11:0e:0f:e6:a1:69:cc:25:b6:3c:a1:59:7b:e0:d3:
83:e3:0c:06:c6:2e:ae:4b:17:64:ea:5b:a4:6d:10:
73:73:69:cf:a4:3f:1e:f7:77:2b:7f:b1:d5:85:f6:
3b:f5:50:05:0a:16:04:44:f9:cc:dc:83:b9:25:8e:
28:82:a6:60:21:05:46:9a:1f:41:6c:b2:85:6a:23:
e1:88:ba:09:2d:70:be:0a:fa:45:b8:6d:9b:e4:ad:
c7:36:51:36:7f:7f:9b:64:01:b0:84:02:56:51:22:
58:1b:0d:20:50:0f:5e:8f:20:dc:a8:1e:94:20:21:
21:af:1f:81:f2:6d:6a:26:cb:25:88:fe:04:a4:4f:
6d:b2:e5:a7:e9:3b:c1:6e:70:07:6f:7a:0c:f6:e3:
84:ed:08:4c:3a:7b:8f:25:85:1c:d0:d1:64:9f:81:
4c:c7:cb:86:e0:70:59:75:32:e7:3c:51:4b:cd:8c:
02:88:51:4a:6a:f9:50:69:dd:85:56:ab:20:bb:7f:
29:6f:54:27:5e:0a:38:e9:71:60:36:1b:bd:48:c7:
91:bf:52:b8:92:1e:97:ad:29:73:43:7c:f0:2a:71:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:49:5C:32:90:5B:AF:E3:3A:98:BE:EA:55:5A:6F:76:03:39:D6
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:71:49:ef:6a:7e:24:e3:e1:5f:e5:73:43:6a:5e:e9:a8:50:
c8:fc:9a:70:8c:59:d8:47:66:95:b3:71:69:e7:5b:08:cc:47:
9e:0d:fb:89:ba:5f:1b:df:5c:b6:4c:3c:69:55:0d:3c:6a:65:
04:7f:74:6c:d1:da:4f:49:46:a1:b3:d6:0e:7a:dd:e3:f8:f8:
ea:43:1d:43:0b:8f:04:ac:53:d6:91:bc:aa:df:dc:b1:e4:63:
ff:4b:f5:6d:79:f4:43:86:bc:c5:70:0b:25:d2:78:ef:a5:f0:
69:98:ee:a6:b0:bd:12:41:56:78:a4:1e:cb:1a:cb:09:79:3b:
34:da:3a:3a:ca:06:af:ff:33:1e:71:c5:fd:a4:9e:c7:b8:48:
74:70:1f:fd:9d:75:0a:dd:15:16:54:59:8a:03:94:db:97:f7:
23:49:4e:50:77:f5:92:60:ac:2b:41:25:b8:65:2b:58:e6:83:
10:78:73:74:2c:6a:92:a8:87:c1:eb:ea:12:0a:49:7d:9c:e1:
9d:af:69:e3:9e:9d:24:c5:a8:8d:ae:f7:80:a3:6c:2c:48:63:
b7:3f:72:12:23:20:42:4e:62:c7:d1:23:85:24:22:15:9f:48:
a7:6f:ee:cd:dc:ff:d5:da:a0:b9:ed:86:39:a0:84:7c:7b:d7:
b6:69:d4:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdwyRU3asnGF65U0lo16tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjQxMTIzMTAwMDE3WhcNMjQxMTI0MTAwMDE3WjAzMTEwLwYDVQQD
Eyg1MmExNDk1YzMyOTA1YmFmZTMzYTk4YmVlYTU1NWE2Zjc2MDMzOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv1CnRQknJu0iKb502ECQvZyP8Gy
dUXZr3veePIRDg/moWnMJbY8oVl74NOD4wwGxi6uSxdk6lukbRBzc2nPpD8e93cr
f7HVhfY79VAFChYERPnM3IO5JY4ogqZgIQVGmh9BbLKFaiPhiLoJLXC+CvpFuG2b
5K3HNlE2f3+bZAGwhAJWUSJYGw0gUA9ejyDcqB6UICEhrx+B8m1qJssliP4EpE9t
suWn6TvBbnAHb3oM9uOE7QhMOnuPJYUc0NFkn4FMx8uG4HBZdTLnPFFLzYwCiFFK
avlQad2FVqsgu38pb1QnXgo46XFgNhu9SMeRv1K4kh6XrSlzQ3zwKnGP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKhSVwykFuv4zqYvupVWm92AznWMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnFJ72p+
JOPhX+VzQ2pe6ahQyPyacIxZ2EdmlbNxaedbCMxHng37ibpfG99ctkw8aVUNPGpl
BH90bNHaT0lGobPWDnrd4/j46kMdQwuPBKxT1pG8qt/cseRj/0v1bXn0Q4a8xXAL
JdJ476XwaZjuprC9EkFWeKQeyxrLCXk7NNo6OsoGr/8zHnHF/aSex7hIdHAf/Z11
Ct0VFlRZigOU25f3I0lOUHf1kmCsK0EluGUrWOaDEHhzdCxqkqiHwevqEgpJfZzh
na9p456dJMWoja73gKNsLEhjtz9yEiMgQk5ix9EjhSQiFZ9Ip2/uzdz/1dqgue2G
OaCEfHvXtmnUxg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:30 2024 by rpki-client on console-ams.rpki-client.org