Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: nRdrohGzuynhjWfGi2po1CuVCVTivGnYsvobamj/wt0=
Subject key identifier: 96:1E:77:E4:1F:4C:BC:DC:61:16:EB:45:FD:BD:D4:86:97:03:1B:3F
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0193568A847ECA83C8A15C1FD033E87C9383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 12DC
Signing time: Sat 23 Nov 2024 01:02:18 +0000
Manifest this update: Sat 23 Nov 2024 01:02:18 +0000
Manifest next update: Sun 24 Nov 2024 01:02:18 +0000
Files and hashes: 1: 5SNCG70WUu3bVRTc1E_UTdK87HM.roa (hash: cK5FKdBT36dKzN7mYtSROZYTmwJKXuEjjaJGvwK/id4=)
2: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: BHwXzNPYd2Go+IDzsJoyam3XoWcTfKuO0nvMtqYDRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:84:7e:ca:83:c8:a1:5c:1f:d0:33:e8:7c:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Nov 23 01:02:18 2024 GMT
Not After : Nov 24 01:02:18 2024 GMT
Subject: CN=961e77e41f4cbcdc6116eb45fdbdd48697031b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:65:9d:4e:9b:26:f1:e5:b0:86:41:7b:80:
9d:8f:00:6d:f6:bf:6d:51:bd:9c:67:4a:69:6b:c1:
53:97:4a:80:54:3b:ff:e0:78:f3:9f:94:29:4a:8f:
ba:b5:66:74:a7:3f:96:29:5d:a6:11:4b:12:36:3c:
ae:b3:fc:ee:4a:5d:f1:58:5b:85:49:d9:93:0d:81:
dc:c7:f6:e9:d9:aa:44:c5:a3:39:58:ae:1f:84:f2:
a2:77:77:41:51:0e:e7:66:fc:f3:26:9d:59:79:23:
f9:d0:39:fc:25:00:6a:2e:de:b5:36:3a:cb:91:84:
9d:a3:4d:ff:ec:25:20:ed:65:13:2f:95:b5:44:15:
34:ab:db:bc:eb:d8:fb:62:ec:5f:9d:ef:f5:0b:14:
8b:57:0c:79:11:7c:0d:28:e0:82:e2:9d:a5:34:60:
23:f8:23:c3:2f:f5:f7:f9:0d:f0:b0:96:a8:be:17:
36:45:84:bc:83:ce:56:06:ed:5f:dc:98:ac:3a:ef:
4f:7e:ef:5d:1a:f6:5d:2d:06:c0:24:ea:21:45:08:
75:a5:70:d3:22:b9:85:33:3b:a0:b8:16:20:94:5b:
b5:31:fc:bf:3d:79:16:7f:77:01:32:63:13:7d:0c:
70:50:b3:9e:19:3a:c0:09:ea:bf:ee:77:87:5f:57:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:77:E4:1F:4C:BC:DC:61:16:EB:45:FD:BD:D4:86:97:03:1B:3F
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d5:eb:e4:7b:a7:41:91:6e:d7:23:0b:c6:06:69:84:4f:6d:
8d:41:a6:c2:78:0e:e6:56:5d:be:4c:5d:a2:13:11:ce:1e:80:
10:5d:b3:60:51:d4:8c:42:94:4a:79:8e:da:22:31:47:cc:be:
97:6d:d5:9d:65:d5:47:fe:74:18:b6:7b:81:0a:42:9d:0c:eb:
ca:ea:6e:0b:f2:ea:88:b6:bc:ec:25:08:93:73:a3:98:c1:91:
de:5f:6e:fa:c2:11:05:91:0f:e6:6b:8c:cf:58:0d:43:3a:f8:
b5:2c:bd:e5:9b:9b:a9:32:13:76:9c:57:f4:44:a1:58:9b:51:
1e:0a:0a:76:50:f2:34:dc:1c:c2:5e:47:05:ae:7f:c4:fe:a5:
0b:17:c8:7f:31:e1:3c:cc:53:15:b9:b3:2d:4d:da:7f:44:da:
82:40:a4:b4:08:d2:bc:c0:6c:f7:67:3f:9f:5e:c9:b6:88:9d:
78:1d:eb:37:7b:50:6a:d1:6e:fe:b7:74:9e:00:d9:79:05:03:
6f:f3:31:6c:21:1e:22:02:53:cc:c6:85:e8:7f:d4:c7:6d:7c:
96:2b:1f:f6:4e:bc:18:0d:99:02:af:bf:0e:69:19:e9:d6:1e:
dc:fa:c8:bb:d6:76:87:01:70:09:a9:1e:01:59:5b:86:12:c5:
2a:40:3c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioR+yoPIoVwf0DPofJODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5
NGU0OWMwHhcNMjQxMTIzMDEwMjE4WhcNMjQxMTI0MDEwMjE4WjAzMTEwLwYDVQQD
Eyg5NjFlNzdlNDFmNGNiY2RjNjExNmViNDVmZGJkZDQ4Njk3MDMxYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZlnU6bJvHlsIZBe4CdjwBt9r9t
Ub2cZ0ppa8FTl0qAVDv/4Hjzn5QpSo+6tWZ0pz+WKV2mEUsSNjyus/zuSl3xWFuF
SdmTDYHcx/bp2apExaM5WK4fhPKid3dBUQ7nZvzzJp1ZeSP50Dn8JQBqLt61NjrL
kYSdo03/7CUg7WUTL5W1RBU0q9u869j7Yuxfne/1CxSLVwx5EXwNKOCC4p2lNGAj
+CPDL/X3+Q3wsJaovhc2RYS8g85WBu1f3JisOu9Pfu9dGvZdLQbAJOohRQh1pXDT
IrmFMzuguBYglFu1Mfy/PXkWf3cBMmMTfQxwULOeGTrACeq/7neHX1co3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYed+QfTLzcYRbrRf291IaXAxs/MB8GA1UdIwQY
MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt
NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj
LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNXr5Hun
QZFu1yMLxgZphE9tjUGmwngO5lZdvkxdohMRzh6AEF2zYFHUjEKUSnmO2iIxR8y+
l23VnWXVR/50GLZ7gQpCnQzryupuC/LqiLa87CUIk3OjmMGR3l9u+sIRBZEP5muM
z1gNQzr4tSy95ZubqTITdpxX9EShWJtRHgoKdlDyNNwcwl5HBa5/xP6lCxfIfzHh
PMxTFbmzLU3af0TagkCktAjSvMBs92c/n17JtoideB3rN3tQatFu/rd0ngDZeQUD
b/MxbCEeIgJTzMaF6H/Ux218lisf9k68GA2ZAq+/DmkZ6dYe3PrIu9Z2hwFwCake
AVlbhhLFKkA8Lg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:52 2024 by rpki-client on console-ams.rpki-client.org