Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
File: sBPFYipfl576yc-xh2I-ShzfAGI.mft (raw, json)
Hash identifier: ETCzFQpWgaACRvOUBuE4CwVgD2lK0o82WyaL4tr8qMA=
Subject key identifier: 66:E9:62:BB:DF:94:BC:2E:CC:11:26:04:B9:9A:DA:E4:17:23:8C:F5
Authority key identifier: B0:13:C5:62:2A:5F:97:9E:FA:C9:CF:B1:87:62:3E:4A:1C:DF:00:62
Certificate issuer: /CN=b013c5622a5f979efac9cfb187623e4a1cdf0062
Certificate serial: 019354D1336A3A813531E770D39C90F68ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBPFYipfl576yc-xh2I-ShzfAGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
Manifest number: A4
Signing time: Fri 22 Nov 2024 17:00:16 +0000
Manifest this update: Fri 22 Nov 2024 17:00:16 +0000
Manifest next update: Sat 23 Nov 2024 17:00:16 +0000
Files and hashes: 1: WImvxaT26a0LDX9dPPOZYx0apD8.roa (hash: zQVVdb+OZJGsBiW7LTOlGWkUC9d5W15KvVTQbt7V7U0=)
2: sBPFYipfl576yc-xh2I-ShzfAGI.crl (hash: /uVaIdlKMGchcGnAlaBWyI+zYTpCyZRnpFW+f/vI2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBPFYipfl576yc-xh2I-ShzfAGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d1:33:6a:3a:81:35:31:e7:70:d3:9c:90:f6:8e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b013c5622a5f979efac9cfb187623e4a1cdf0062
Validity
Not Before: Nov 22 17:00:16 2024 GMT
Not After : Nov 23 17:00:16 2024 GMT
Subject: CN=66e962bbdf94bc2ecc112604b99adae417238cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:a7:59:45:3f:9b:8f:cf:76:df:01:4c:9a:
77:18:e7:ba:59:b2:ce:21:31:40:1a:2c:d0:b4:fe:
a5:46:ec:25:67:1a:63:64:f0:ce:17:a8:53:65:e7:
13:fc:62:de:7d:df:d3:59:df:db:65:e1:6c:67:03:
d6:cd:0d:28:51:29:0a:0c:b5:7d:e8:a2:9e:72:74:
64:7e:89:69:5d:5a:0f:c3:99:25:28:41:5a:1d:a3:
bb:3d:7f:e4:de:d2:47:0a:eb:13:9f:2c:77:80:ca:
a5:3e:aa:57:76:d2:b1:ee:2b:c5:40:7e:d9:34:db:
46:87:5f:2b:f3:a0:6a:f3:43:54:18:d1:84:8d:e3:
61:5e:a0:fc:91:ee:c0:f6:01:d4:e0:c4:2a:f5:4d:
62:eb:4c:19:fb:e1:b4:d9:54:87:5c:45:5e:08:f8:
89:53:a5:f7:3d:ea:f0:98:3c:ce:82:1e:cf:28:bf:
69:31:fe:36:ce:8b:c7:c5:44:18:82:d6:3f:88:75:
7b:5c:71:6b:36:b9:97:50:12:35:0d:f3:c6:72:6d:
11:81:fc:d2:2d:94:3f:ea:d6:29:ee:48:4f:06:cb:
e5:59:b4:f1:54:3f:d2:bf:cc:57:52:c1:4d:2f:96:
9b:c2:a2:22:e9:77:36:f0:ec:6f:1c:00:4f:1b:70:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:62:BB:DF:94:BC:2E:CC:11:26:04:B9:9A:DA:E4:17:23:8C:F5
X509v3 Authority Key Identifier:
keyid:B0:13:C5:62:2A:5F:97:9E:FA:C9:CF:B1:87:62:3E:4A:1C:DF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBPFYipfl576yc-xh2I-ShzfAGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/11bc81-7563-4545-ac20-de3520cf14af/1/sBPFYipfl576yc-xh2I-ShzfAGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:29:2e:f5:9e:e7:28:44:a8:42:99:1b:9c:49:0f:ac:be:
6f:29:7e:73:7f:5c:5b:34:b6:ea:fb:16:dd:09:de:e1:53:c3:
c8:30:06:d1:36:73:90:8e:7b:c2:dc:30:7e:d4:ed:a3:49:20:
d3:d1:07:74:4a:42:79:56:41:63:4c:e3:a3:1e:a9:f8:c5:53:
4d:e0:e2:7d:70:6f:32:28:99:a6:ad:6d:95:ae:1d:34:a3:81:
4f:94:4e:ba:3b:6d:48:aa:b9:c3:14:79:64:d6:77:7c:71:1a:
86:75:5a:07:8e:e7:13:61:bc:63:1e:2c:c3:8b:db:4c:ff:35:
14:f5:36:a0:e9:06:66:1f:d3:9b:7b:3b:6f:2b:3b:9f:73:c2:
a2:3d:11:e0:70:eb:0a:b0:cb:8d:61:2f:2d:42:99:b2:17:7e:
55:42:6d:61:f3:2f:f3:d8:89:da:ee:bb:d3:29:9e:a1:d5:6a:
41:c0:32:04:e2:7e:26:f8:12:b3:ff:1e:b5:05:30:ac:09:4c:
ca:74:1b:3b:12:60:b5:73:da:2c:ef:49:a0:5f:ec:28:be:b7:
23:80:c2:c9:bd:40:20:1c:5c:3a:ae:16:b0:0d:2f:20:18:b2:
f9:3b:be:71:6b:14:08:b2:c4:68:6d:59:23:c6:81:09:1c:af:
ed:5e:ac:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNU0TNqOoE1Medw05yQ9o7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTNjNTYyMmE1Zjk3OWVmYWM5Y2ZiMTg3NjIzZTRhMWNk
ZjAwNjIwHhcNMjQxMTIyMTcwMDE2WhcNMjQxMTIzMTcwMDE2WjAzMTEwLwYDVQQD
Eyg2NmU5NjJiYmRmOTRiYzJlY2MxMTI2MDRiOTlhZGFlNDE3MjM4Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A6nWUU/m4/Pdt8BTJp3GOe6WbLO
ITFAGizQtP6lRuwlZxpjZPDOF6hTZecT/GLefd/TWd/bZeFsZwPWzQ0oUSkKDLV9
6KKecnRkfolpXVoPw5klKEFaHaO7PX/k3tJHCusTnyx3gMqlPqpXdtKx7ivFQH7Z
NNtGh18r86Bq80NUGNGEjeNhXqD8ke7A9gHU4MQq9U1i60wZ++G02VSHXEVeCPiJ
U6X3PerwmDzOgh7PKL9pMf42zovHxUQYgtY/iHV7XHFrNrmXUBI1DfPGcm0RgfzS
LZQ/6tYp7khPBsvlWbTxVD/Sv8xXUsFNL5abwqIi6Xc28OxvHABPG3DRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbpYrvflLwuzBEmBLma2uQXI4z1MB8GA1UdIwQY
MBaAFLATxWIqX5ee+snPsYdiPkoc3wBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JQRllpcGZsNTc2eWMteGgySS1TaHpmQUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xMWJjODEtNzU2My00NTQ1LWFjMjAt
ZGUzNTIwY2YxNGFmLzEvc0JQRllpcGZsNTc2eWMteGgySS1TaHpmQUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xMWJjODEtNzU2My00NTQ1LWFjMjAtZGUzNTIwY2YxNGFm
LzEvc0JQRllpcGZsNTc2eWMteGgySS1TaHpmQUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+IpLvWe
5yhEqEKZG5xJD6y+byl+c39cWzS26vsW3Qne4VPDyDAG0TZzkI57wtwwftTto0kg
09EHdEpCeVZBY0zjox6p+MVTTeDifXBvMiiZpq1tla4dNKOBT5ROujttSKq5wxR5
ZNZ3fHEahnVaB47nE2G8Yx4sw4vbTP81FPU2oOkGZh/Tm3s7bys7n3PCoj0R4HDr
CrDLjWEvLUKZshd+VUJtYfMv89iJ2u670ymeodVqQcAyBOJ+JvgSs/8etQUwrAlM
ynQbOxJgtXPaLO9JoF/sKL63I4DCyb1AIBxcOq4WsA0vIBiy+Tu+cWsUCLLEaG1Z
I8aBCRyv7V6s6w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:58 2024 by rpki-client on console-ams.rpki-client.org