Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: MfUqY0Ek9RA8XgGGsbD9VJJepB8IkZtWfvdHFCJBPpY=
Subject key identifier: 18:71:85:41:FC:B1:0D:D5:4B:99:84:F9:53:F1:1C:2E:B3:69:05:B1
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01935688EDA9C425B81E72064C1026324E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:00:34 +0000
Manifest this update: Sat 23 Nov 2024 01:00:34 +0000
Manifest next update: Sun 24 Nov 2024 01:00:34 +0000
Files and hashes: 1: GwjrkF2zXtLRosULtK0gysnuFQ4.roa (hash: tb3gZ6q92YhbhhkD6hl3RlVapYA0THWNIfKqf+5nYW4=)
2: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 20u7rRebkvHEw+nK+bkfjWLrcxXyEkdf0QrvJQtj+8Q=)
3: YcA9bVoLwYeI32NLAkpuR7qgDlQ.roa (hash: JLAyakMfdZ5Xke8HCU8KghsGWYMX+eSng2qOKj4FNKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:ed:a9:c4:25:b8:1e:72:06:4c:10:26:32:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Nov 23 01:00:34 2024 GMT
Not After : Nov 24 01:00:34 2024 GMT
Subject: CN=18718541fcb10dd54b9984f953f11c2eb36905b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:a1:65:01:9d:db:9d:c8:8d:bc:f9:04:a7:
83:ce:dd:82:61:13:ab:85:c1:7d:49:a4:3d:3e:b3:
6a:80:ea:48:7f:03:8d:65:50:6e:b2:89:3a:3a:f4:
2f:75:35:ed:d4:de:b4:95:52:22:88:26:3b:2e:ae:
68:5b:62:40:4e:3b:7e:17:13:6b:b3:95:3a:b9:8a:
7c:87:3f:8d:90:36:41:5f:d0:ca:d6:01:97:aa:b0:
69:6a:88:cb:72:66:72:03:ec:23:82:00:b7:46:31:
cc:6d:35:e4:7a:38:57:f8:c5:06:76:cf:51:6b:6d:
46:01:a2:87:71:55:67:a0:69:a9:eb:74:69:e3:8b:
39:c6:63:b0:2a:0a:e2:1d:09:6c:4b:05:ed:9e:7c:
b2:8b:fb:fc:b0:e5:e5:dc:00:6c:5a:30:d8:32:f7:
4e:38:ea:ea:1d:98:42:7c:a3:ff:42:45:8b:bb:8e:
c0:50:b7:98:fb:57:e2:04:04:5d:bd:a2:12:6d:f1:
8a:bf:b7:39:c1:60:5a:dc:84:01:96:4f:9e:ec:8c:
ff:83:b9:98:b5:ea:9f:d7:42:8c:34:c0:21:f8:b4:
95:06:37:f1:2e:98:e1:4d:ea:35:b7:06:f4:80:a2:
34:fa:80:7a:1f:3d:d9:fa:89:af:40:0c:a3:c7:78:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:85:41:FC:B1:0D:D5:4B:99:84:F9:53:F1:1C:2E:B3:69:05:B1
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6b:1d:0f:8e:df:61:f9:0b:8e:1a:c6:b0:85:29:05:5e:6d:
5c:aa:70:09:41:00:9c:df:4c:89:6e:69:98:cd:e2:fd:f0:3f:
35:62:69:00:f6:ac:d6:ce:e2:76:a3:52:05:5d:d2:73:91:ad:
be:2c:af:7c:9d:9f:64:b2:38:bb:2b:31:ac:09:7f:a3:45:7f:
01:bc:f9:c0:5d:4a:03:03:13:82:9b:eb:33:d9:0c:d5:e2:51:
fc:ce:00:29:5c:00:d4:0d:00:28:fe:cc:70:74:fd:20:df:84:
00:e3:9d:80:7b:26:1b:2b:10:b2:b9:e4:08:d1:de:54:a3:62:
d2:29:20:f0:2f:e2:fd:47:ee:df:82:ba:89:2c:3f:cc:f9:2a:
c2:04:0c:c6:1b:21:bf:51:12:4f:fe:7a:28:fc:08:7e:31:48:
ae:f2:bb:eb:a9:65:5f:ea:68:24:02:25:3a:29:cb:cd:7c:0a:
d9:01:59:c7:5c:bf:a6:d4:16:70:91:f7:c8:d0:96:bb:14:83:
4f:46:da:dd:19:d8:24:0e:3f:e6:9d:e1:f4:3a:f1:3a:ae:fc:
d7:a1:ec:36:ca:d7:98:77:2c:8f:36:47:ea:bd:85:fe:c4:b2:
7f:05:84:a8:ea:03:56:bb:2d:94:ee:32:a9:1a:28:6b:f6:57:
55:22:bb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiO2pxCW4HnIGTBAmMk4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZhNzdiM2NkNzgyOTMzZTVmMjU1NDQ1ZDQyOGFkZmJk
Y2EwZTEwHhcNMjQxMTIzMDEwMDM0WhcNMjQxMTI0MDEwMDM0WjAzMTEwLwYDVQQD
EygxODcxODU0MWZjYjEwZGQ1NGI5OTg0Zjk1M2YxMWMyZWIzNjkwNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP6hZQGd253Ijbz5BKeDzt2CYROr
hcF9SaQ9PrNqgOpIfwONZVBusok6OvQvdTXt1N60lVIiiCY7Lq5oW2JATjt+FxNr
s5U6uYp8hz+NkDZBX9DK1gGXqrBpaojLcmZyA+wjggC3RjHMbTXkejhX+MUGds9R
a21GAaKHcVVnoGmp63Rp44s5xmOwKgriHQlsSwXtnnyyi/v8sOXl3ABsWjDYMvdO
OOrqHZhCfKP/QkWLu47AULeY+1fiBARdvaISbfGKv7c5wWBa3IQBlk+e7Iz/g7mY
teqf10KMNMAh+LSVBjfxLpjhTeo1twb0gKI0+oB6Hz3Z+omvQAyjx3jjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhxhUH8sQ3VS5mE+VPxHC6zaQWxMB8GA1UdIwQY
MBaAFCG/p3s814KTPl8lVEXUKK373KDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYt
NTQ4NGMzOWIyZDRlLzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85YzdhZmYtZDgzZS00ZjUxLTliOTYtNTQ4NGMzOWIyZDRl
LzEvSWItbmV6elhncE0tWHlWVVJkUW9yZnZjb09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmsdD47f
YfkLjhrGsIUpBV5tXKpwCUEAnN9MiW5pmM3i/fA/NWJpAPas1s7idqNSBV3Sc5Gt
viyvfJ2fZLI4uysxrAl/o0V/Abz5wF1KAwMTgpvrM9kM1eJR/M4AKVwA1A0AKP7M
cHT9IN+EAOOdgHsmGysQsrnkCNHeVKNi0ikg8C/i/Ufu34K6iSw/zPkqwgQMxhsh
v1EST/56KPwIfjFIrvK766llX+poJAIlOinLzXwK2QFZx1y/ptQWcJH3yNCWuxSD
T0ba3RnYJA4/5p3h9DrxOq7816HsNsrXmHcsjzZH6r2F/sSyfwWEqOoDVrstlO4y
qRooa/ZXVSK7ug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:59 2024 by rpki-client on console-ams.rpki-client.org