Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
File: IKo_sAxQTBoJEqNJWo49uvPZako.mft (raw, json)
Hash identifier: 11foE0i/k9xK+XX01MsOhTJsoDz8ZUcSRdQ45At1rM0=
Subject key identifier: A3:02:66:7E:43:F5:FE:EB:21:AB:36:84:25:17:FB:7B:42:46:3C:AF
Authority key identifier: 20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
Certificate issuer: /CN=20aa3fb00c504c1a0912a3495a8e3dbaf3d96a4a
Certificate serial: 01901BFC802AA1DAE1D1079B8D9907696022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
Manifest number: 01E9
Signing time: Sat 15 Jun 2024 13:00:51 +0000
Manifest this update: Sat 15 Jun 2024 13:00:51 +0000
Manifest next update: Sun 16 Jun 2024 13:00:51 +0000
Files and hashes: 1: IKo_sAxQTBoJEqNJWo49uvPZako.crl (hash: SCQC5MLv9hk2B/ZJFtqSHwwq63VrQ4UlQT2pVYqh0Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fc:80:2a:a1:da:e1:d1:07:9b:8d:99:07:69:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa3fb00c504c1a0912a3495a8e3dbaf3d96a4a
Validity
Not Before: Jun 15 13:00:51 2024 GMT
Not After : Jun 16 13:00:51 2024 GMT
Subject: CN=a302667e43f5feeb21ab36842517fb7b42463caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:99:63:8f:2f:41:91:b0:76:d2:df:5c:69:
c1:ac:ef:e4:d2:9c:21:0e:51:b8:09:c1:e3:c6:71:
01:b7:a1:6b:55:98:44:f1:2f:0e:32:32:f9:16:ac:
3e:2f:46:cf:01:b7:c2:ec:62:8a:e8:62:f8:ac:f2:
f3:ef:0f:6f:d1:a5:19:42:60:a8:96:c9:6f:d4:8f:
9d:ef:b5:87:c2:ae:ef:cb:1d:44:75:8a:a8:47:0d:
26:87:c6:ac:c8:6e:8b:78:1d:60:7c:f4:c9:e3:46:
48:df:c4:e9:d7:16:17:6e:b2:7e:1b:4a:07:1c:82:
12:66:3a:b7:0e:f6:73:4e:17:60:86:4e:dc:d7:2d:
c6:84:93:71:5e:a6:18:00:79:4c:b7:f4:e2:3b:47:
70:dc:7e:df:e0:8b:f3:56:68:d2:00:34:26:a7:e8:
79:6a:c4:33:43:26:c1:1e:65:70:3d:bb:83:c9:e8:
8b:89:30:0a:49:41:32:06:76:35:54:32:fa:dd:ba:
cd:94:aa:90:f1:7f:b6:22:b4:c9:64:b8:f6:c4:3f:
0b:b6:60:ac:a1:23:e4:3a:cb:96:d4:f3:dd:00:60:
24:b6:2a:ed:52:eb:d6:e0:36:b6:0b:0f:61:c5:34:
eb:a5:c8:18:25:45:06:51:33:8f:e4:75:4d:af:e8:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:66:7E:43:F5:FE:EB:21:AB:36:84:25:17:FB:7B:42:46:3C:AF
X509v3 Authority Key Identifier:
keyid:20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:26:c7:cb:24:32:3a:62:bf:a3:cb:05:41:aa:4b:d6:49:
59:28:4e:0f:f6:8d:03:e5:ac:c2:5e:b5:a3:f8:41:28:c7:d4:
31:05:ce:6d:59:58:24:f4:84:eb:ee:e6:9a:84:13:1e:e8:67:
1d:93:b1:f7:2e:0a:d4:6f:1b:1d:28:19:9d:2f:d5:39:14:b2:
fe:bc:77:8c:0b:55:a8:4c:54:10:47:8b:90:11:3f:d3:4f:ef:
85:44:b5:78:03:65:aa:f1:da:46:23:80:7e:24:af:8c:4a:d7:
61:99:34:49:8f:9f:cb:c3:03:7f:99:d1:f3:a7:69:c7:ff:8d:
02:c4:a6:b8:a4:80:9e:0f:c7:cf:dc:02:b4:26:34:68:6f:da:
a2:ae:c3:2d:06:e4:d7:a6:d1:31:19:e3:e6:31:f8:48:17:b7:
8e:b3:40:10:28:c3:75:ed:3b:38:b5:4f:f6:c9:60:b8:8d:c2:
61:ad:87:cc:11:ad:4d:ce:10:5b:1d:6d:e6:f3:9d:5d:57:c3:
67:71:4d:66:e3:df:fa:67:26:98:d5:bd:46:8a:2b:fe:d4:00:
d7:41:fa:dd:b3:be:7b:31:0d:53:96:0d:bb:cd:b6:b5:ff:ee:
ad:ba:04:5d:ff:d0:9a:32:56:32:13:62:86:0a:18:d3:04:db:
75:0c:b9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/IAqodrh0QebjZkHaWAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYWEzZmIwMGM1MDRjMWEwOTEyYTM0OTVhOGUzZGJhZjNk
OTZhNGEwHhcNMjQwNjE1MTMwMDUxWhcNMjQwNjE2MTMwMDUxWjAzMTEwLwYDVQQD
EyhhMzAyNjY3ZTQzZjVmZWViMjFhYjM2ODQyNTE3ZmI3YjQyNDYzY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA046ZY48vQZGwdtLfXGnBrO/k0pwh
DlG4CcHjxnEBt6FrVZhE8S8OMjL5Fqw+L0bPAbfC7GKK6GL4rPLz7w9v0aUZQmCo
lslv1I+d77WHwq7vyx1EdYqoRw0mh8asyG6LeB1gfPTJ40ZI38Tp1xYXbrJ+G0oH
HIISZjq3DvZzThdghk7c1y3GhJNxXqYYAHlMt/TiO0dw3H7f4IvzVmjSADQmp+h5
asQzQybBHmVwPbuDyeiLiTAKSUEyBnY1VDL63brNlKqQ8X+2IrTJZLj2xD8LtmCs
oSPkOsuW1PPdAGAktirtUuvW4Da2Cw9hxTTrpcgYJUUGUTOP5HVNr+jj/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMCZn5D9f7rIas2hCUX+3tCRjyvMB8GA1UdIwQY
MBaAFCCqP7AMUEwaCRKjSVqOPbrz2WpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtvX3NBeFFUQm9KRXFOSldvNDl1dlBaYWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82N2I0MmEtY2FjMy00MjE2LWI1MTgt
ZDc0YTRkNGY1MmI0LzEvSUtvX3NBeFFUQm9KRXFOSldvNDl1dlBaYWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82N2I0MmEtY2FjMy00MjE2LWI1MTgtZDc0YTRkNGY1MmI0
LzEvSUtvX3NBeFFUQm9KRXFOSldvNDl1dlBaYWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMAmx8sk
Mjpiv6PLBUGqS9ZJWShOD/aNA+Wswl61o/hBKMfUMQXObVlYJPSE6+7mmoQTHuhn
HZOx9y4K1G8bHSgZnS/VORSy/rx3jAtVqExUEEeLkBE/00/vhUS1eANlqvHaRiOA
fiSvjErXYZk0SY+fy8MDf5nR86dpx/+NAsSmuKSAng/Hz9wCtCY0aG/aoq7DLQbk
16bRMRnj5jH4SBe3jrNAECjDde07OLVP9slguI3CYa2HzBGtTc4QWx1t5vOdXVfD
Z3FNZuPf+mcmmNW9Roor/tQA10H63bO+ezENU5YNu822tf/urboEXf/QmjJWMhNi
hgoY0wTbdQy5CQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:44:04 2024 by rpki-client on console-fra.rpki-client.org