Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: W9N52gPRlrCmD7kYtvnYHFOzw3TuRPHwG2H4qv+59bE=
Subject key identifier: F6:3D:42:76:CD:71:2B:25:1A:DE:C0:62:C0:3E:46:4A:0D:3E:4E:0E
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01935463761E6D151D4CA2A44E50118C26FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0190
Signing time: Fri 22 Nov 2024 15:00:24 +0000
Manifest this update: Fri 22 Nov 2024 15:00:24 +0000
Manifest next update: Sat 23 Nov 2024 15:00:24 +0000
Files and hashes: 1: qh_78Z8T-0tCBmCXyHRnTig-fXk.roa (hash: D50TJVZs4p+oPZgQ3m83Z9RVfgzTw4Y105WFzT7kphw=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: K4o+c3sIBvL+KJbsSM82YzR05CIWNRmRj8Oq9BT5QRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:63:76:1e:6d:15:1d:4c:a2:a4:4e:50:11:8c:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Nov 22 15:00:24 2024 GMT
Not After : Nov 23 15:00:24 2024 GMT
Subject: CN=f63d4276cd712b251adec062c03e464a0d3e4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:ef:84:02:a5:71:1e:ce:1c:a4:28:50:c7:
1f:7f:f1:54:94:15:8f:69:83:11:c6:61:59:06:22:
9f:b0:71:05:d8:21:2e:29:d1:23:74:0a:90:2f:83:
56:4e:34:b7:db:a8:8b:c9:6e:9f:68:49:96:76:33:
a9:78:8f:14:71:79:d9:22:93:5c:6d:f7:65:ac:c6:
ed:bf:d8:cf:92:b8:73:96:88:61:2b:b2:1d:6a:6c:
ef:e7:0d:48:37:ce:73:c2:a1:8b:94:5e:14:97:99:
4e:24:b6:6a:99:c2:75:44:fd:92:e9:14:0a:8d:86:
4e:4b:f4:99:07:25:93:de:10:eb:8a:db:2d:96:b1:
83:ad:af:af:e7:1f:3f:12:c3:b4:b4:10:e7:0a:28:
31:54:e8:a0:72:14:b5:fa:95:28:d5:eb:1e:e1:1a:
33:d5:af:6a:f6:35:6e:c2:d6:b9:18:80:b1:12:73:
88:f4:fe:fa:46:38:ee:1d:05:5c:74:91:17:31:06:
79:90:7a:07:4e:dd:8f:fa:58:dc:08:d8:84:04:f3:
d4:f8:b9:40:b3:13:37:95:ef:f5:cb:29:85:14:29:
45:df:1c:fe:78:9b:9f:fc:37:7d:c5:c4:1b:85:50:
fb:b3:36:75:d8:3d:ee:56:11:2e:6d:81:cc:dc:d5:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:42:76:CD:71:2B:25:1A:DE:C0:62:C0:3E:46:4A:0D:3E:4E:0E
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:55:ad:4b:f7:2d:10:66:3f:92:3c:af:f2:35:d8:73:9a:
26:f5:89:0b:f6:e0:09:1d:4d:b0:29:89:9a:08:ab:89:8f:3c:
95:95:bf:19:df:74:36:fe:98:54:2e:e0:7a:f7:fd:24:d3:08:
52:8c:21:80:e8:8c:17:24:3e:e6:04:5f:9b:30:87:95:4a:1c:
e0:c2:41:20:77:d2:76:30:a3:7b:f4:81:23:f5:af:5d:f7:3f:
bc:06:f3:bf:d3:39:87:e8:56:f5:82:a5:0b:ab:12:b3:f9:c5:
f9:89:b0:24:d3:a2:19:4a:fb:91:0e:56:b2:5d:d8:14:e5:74:
47:5e:0e:d6:94:a0:b8:b2:e9:7c:a0:d7:d8:00:4f:90:f6:61:
a5:0d:0c:00:46:9c:2b:36:93:d6:ea:f4:19:55:a8:dd:0e:0e:
b4:13:74:57:da:00:17:ef:d7:98:ee:9b:57:1d:71:f8:5d:7c:
16:2f:a6:14:36:e3:50:02:47:d5:5a:08:7e:7e:45:cc:4a:a2:
6a:e1:80:57:18:ed:51:49:b1:52:43:74:11:10:0d:be:29:37:
14:f7:06:b7:91:b8:d4:23:b6:5b:1d:6e:f8:4a:d0:09:5f:38:
aa:26:3d:ff:42:b7:1f:a9:83:80:77:1b:78:12:34:23:db:d6:
f4:9c:39:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUY3YebRUdTKKkTlARjCb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjQxMTIyMTUwMDI0WhcNMjQxMTIzMTUwMDI0WjAzMTEwLwYDVQQD
EyhmNjNkNDI3NmNkNzEyYjI1MWFkZWMwNjJjMDNlNDY0YTBkM2U0ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOrvhAKlcR7OHKQoUMcff/FUlBWP
aYMRxmFZBiKfsHEF2CEuKdEjdAqQL4NWTjS326iLyW6faEmWdjOpeI8UcXnZIpNc
bfdlrMbtv9jPkrhzlohhK7Idamzv5w1IN85zwqGLlF4Ul5lOJLZqmcJ1RP2S6RQK
jYZOS/SZByWT3hDritstlrGDra+v5x8/EsO0tBDnCigxVOigchS1+pUo1ese4Roz
1a9q9jVuwta5GICxEnOI9P76RjjuHQVcdJEXMQZ5kHoHTt2P+ljcCNiEBPPU+LlA
sxM3le/1yymFFClF3xz+eJuf/Dd9xcQbhVD7szZ12D3uVhEubYHM3NXbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY9QnbNcSslGt7AYsA+RkoNPk4OMB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO9VrUv3
LRBmP5I8r/I12HOaJvWJC/bgCR1NsCmJmgiriY88lZW/Gd90Nv6YVC7gevf9JNMI
UowhgOiMFyQ+5gRfmzCHlUoc4MJBIHfSdjCje/SBI/WvXfc/vAbzv9M5h+hW9YKl
C6sSs/nF+YmwJNOiGUr7kQ5Wsl3YFOV0R14O1pSguLLpfKDX2ABPkPZhpQ0MAEac
KzaT1ur0GVWo3Q4OtBN0V9oAF+/XmO6bVx1x+F18Fi+mFDbjUAJH1VoIfn5FzEqi
auGAVxjtUUmxUkN0ERANvik3FPcGt5G41CO2Wx1u+ErQCV84qiY9/0K3H6mDgHcb
eBI0I9vW9Jw5Wg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:30 2024 by rpki-client on console-ams.rpki-client.org