Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: DvGDFrVqQJuBWjiRhWJNovRA/9VmqGaNUyZIeZhJL4c=
Subject key identifier: 0B:6B:F3:F9:4A:5B:06:DE:39:AC:A0:24:EF:45:37:02:BB:FF:63:E2
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019369DAFC7CE76E79ADFD47F8D01E76578B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 19:02:59 +0000
Manifest this update: Tue 26 Nov 2024 19:02:59 +0000
Manifest next update: Wed 27 Nov 2024 19:02:59 +0000
Files and hashes: 1: AUnkV6XEKtxbP8gm_jE7Z1QsKWs.roa (hash: cPpG8LGNvzjfOetj/9bg4Qamc65v5eZvi2pM37VUI7k=)
2: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: LSxXl75UgL/QFKuittAaU3g3SUIoZc14vIJYTj0tuz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:fc:7c:e7:6e:79:ad:fd:47:f8:d0:1e:76:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Nov 26 19:02:59 2024 GMT
Not After : Nov 27 19:02:59 2024 GMT
Subject: CN=0b6bf3f94a5b06de39aca024ef453702bbff63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:52:77:fa:29:85:fe:48:ea:d4:3c:f3:ad:
95:51:63:ef:62:7f:f5:3e:53:19:87:cb:74:17:74:
5c:38:8c:8d:58:0a:c8:b1:34:d9:d9:eb:b3:2d:3c:
53:fa:21:5a:d8:95:1d:31:0d:00:00:4b:a4:2d:f2:
c3:69:a9:c2:84:22:28:41:af:c1:f0:5b:63:a2:31:
9e:a0:be:6f:ab:29:df:1d:9b:d9:81:0b:84:87:7a:
dd:a2:b7:e6:8d:09:05:db:7e:90:50:b7:19:ca:bb:
99:45:b8:a4:ac:06:6c:ca:2d:47:06:f4:06:ac:5b:
f7:5d:02:56:12:4c:0b:1e:f1:fc:48:09:b0:5c:12:
7b:48:42:b8:47:7d:20:82:0d:0a:c0:35:13:d2:e0:
ce:28:b1:fa:0b:45:c9:11:f1:6f:74:b9:95:91:c6:
3f:e4:c3:66:e9:37:4f:3a:d6:1c:3f:3a:36:9b:5f:
63:ca:1a:98:d6:20:c0:c7:f4:bc:f7:48:71:be:a6:
a9:0b:09:b8:03:a2:02:02:94:96:08:66:b5:0e:be:
73:6e:99:43:16:d9:c2:81:8a:f9:d2:7b:4e:47:5a:
7b:fc:f9:64:67:0a:f0:70:2e:c0:cf:d3:95:b9:ce:
e4:f3:e3:a7:eb:d7:96:2b:60:87:4b:14:97:a3:44:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:F3:F9:4A:5B:06:DE:39:AC:A0:24:EF:45:37:02:BB:FF:63:E2
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c2:4b:c0:9d:12:57:be:30:c5:29:f8:d4:67:a2:7f:eb:95:
ff:ca:d7:8b:43:69:bb:44:b0:e8:37:e3:be:b7:50:1f:69:31:
d6:e8:53:ba:ae:b1:a0:63:d2:eb:b1:63:b7:d2:6e:d5:75:fb:
93:17:82:5f:b3:3e:9d:19:9e:fa:05:e8:4c:4a:19:53:f0:07:
36:8a:88:c3:42:10:5a:a9:6b:05:c7:ce:88:87:56:90:44:a9:
29:8b:b1:9a:59:a0:42:f1:d7:12:ec:35:4e:67:59:ab:77:6c:
61:86:b4:f0:10:dd:c7:91:ad:af:e9:18:17:ed:dd:09:c0:19:
15:49:40:31:d2:b2:45:9b:cb:4d:f8:12:e2:8e:ef:03:f9:7f:
fe:b9:80:9d:45:d1:a1:b0:d6:0e:ff:89:8a:7c:67:e1:9a:51:
85:e3:f3:a4:e4:18:bd:0c:54:31:34:08:4b:48:0f:1d:f6:15:
51:7a:93:e9:45:8f:9a:a2:63:57:e0:32:8a:b4:5c:34:fa:51:
4e:19:e3:a3:9a:2e:6e:51:15:20:8a:e7:eb:91:5b:2e:de:ab:
f2:fa:24:f7:95:a8:85:60:79:70:32:0d:b9:bc:d5:53:16:07:
ba:6a:d0:33:dc:bd:8e:06:f2:67:92:c2:72:91:14:fd:3f:75:
94:48:7d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2vx85255rf1H+NAedleLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1
NTM4NmMwHhcNMjQxMTI2MTkwMjU5WhcNMjQxMTI3MTkwMjU5WjAzMTEwLwYDVQQD
EygwYjZiZjNmOTRhNWIwNmRlMzlhY2EwMjRlZjQ1MzcwMmJiZmY2M2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QRSd/ophf5I6tQ8862VUWPvYn/1
PlMZh8t0F3RcOIyNWArIsTTZ2euzLTxT+iFa2JUdMQ0AAEukLfLDaanChCIoQa/B
8FtjojGeoL5vqynfHZvZgQuEh3rdorfmjQkF236QULcZyruZRbikrAZsyi1HBvQG
rFv3XQJWEkwLHvH8SAmwXBJ7SEK4R30ggg0KwDUT0uDOKLH6C0XJEfFvdLmVkcY/
5MNm6TdPOtYcPzo2m19jyhqY1iDAx/S890hxvqapCwm4A6ICApSWCGa1Dr5zbplD
FtnCgYr50ntOR1p7/PlkZwrwcC7Az9OVuc7k8+On69eWK2CHSxSXo0TTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtr8/lKWwbeOaygJO9FNwK7/2PiMB8GA1UdIwQY
MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt
NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3
LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecJLwJ0S
V74wxSn41Geif+uV/8rXi0Npu0Sw6DfjvrdQH2kx1uhTuq6xoGPS67Fjt9Ju1XX7
kxeCX7M+nRme+gXoTEoZU/AHNoqIw0IQWqlrBcfOiIdWkESpKYuxmlmgQvHXEuw1
TmdZq3dsYYa08BDdx5Gtr+kYF+3dCcAZFUlAMdKyRZvLTfgS4o7vA/l//rmAnUXR
obDWDv+Jinxn4ZpRhePzpOQYvQxUMTQIS0gPHfYVUXqT6UWPmqJjV+AyirRcNPpR
Thnjo5oublEVIIrn65FbLt6r8vok95WohWB5cDINubzVUxYHumrQM9y9jgbyZ5LC
cpEU/T91lEh93w==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:20 2024 by rpki-client on console-ams.rpki-client.org