Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: kNt0bA5yGyhBatDX7XqczzxoKtt5oWS1HILKb+ZvisU=
Subject key identifier: D9:5A:F9:B9:9C:25:7A:3E:43:58:CE:4B:FB:29:97:D6:39:8B:28:D6
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0193538832A4BA52286CCE614B58C1079AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 11:00:54 +0000
Manifest this update: Fri 22 Nov 2024 11:00:54 +0000
Manifest next update: Sat 23 Nov 2024 11:00:54 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: 925kvVhUXqAfTVTbU8eEggCpBDEnF927Cd2m3WGhQ78=)
2: R0Aserci1TJlr-b10aeSTE-yFVc.roa (hash: b3M4Lu8qHzKc/jXgTvP9W2F1Rw1rucr4YhAxlwwIZl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:88:32:a4:ba:52:28:6c:ce:61:4b:58:c1:07:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Nov 22 11:00:54 2024 GMT
Not After : Nov 23 11:00:54 2024 GMT
Subject: CN=d95af9b99c257a3e4358ce4bfb2997d6398b28d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:8c:ba:34:54:08:52:a3:c2:63:b6:90:85:
55:71:74:7e:e6:43:c8:38:9d:6b:10:36:b2:7a:65:
1b:a5:7e:a2:53:6f:9e:d4:d5:16:82:87:96:cf:19:
da:7c:88:8a:a4:d5:41:7d:ef:ac:f4:5b:11:e6:08:
69:0f:53:e0:b2:8b:43:86:73:61:0e:ab:c4:c3:7b:
9b:0b:6d:23:ec:75:81:5e:0e:1d:c9:fb:07:4b:0a:
33:a6:a5:96:f8:1d:78:06:c3:6a:cd:71:ce:ea:bf:
98:4c:93:ff:2f:ba:42:f2:a7:80:0e:79:6a:b6:f7:
e6:b7:9a:f3:98:a8:6a:de:ed:39:b3:f0:c7:5b:d6:
8d:2e:c8:40:7f:85:0f:74:2b:f1:7e:fc:e2:12:b3:
89:c0:9d:9d:8f:34:e9:f1:4d:02:03:81:d6:9b:a4:
b3:e0:4d:ff:1a:d2:f9:8d:50:12:3b:1b:b6:82:cd:
4a:2b:9a:60:7f:45:b3:0a:b5:37:ee:f3:7e:1e:2b:
99:8b:af:22:3c:0d:04:8b:6a:35:79:7d:da:cc:7f:
20:12:6b:1a:b7:64:75:3a:62:e0:f5:a6:d5:a0:09:
da:e3:60:eb:f6:b8:03:ed:30:63:b3:4f:3f:42:0a:
4d:39:90:04:d2:82:d3:e9:31:17:85:37:14:12:bd:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:F9:B9:9C:25:7A:3E:43:58:CE:4B:FB:29:97:D6:39:8B:28:D6
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b0:01:d3:dc:70:c8:77:52:33:77:14:41:aa:51:4b:5a:3a:
ea:51:39:60:39:da:6a:5c:a2:7e:82:aa:42:d6:ed:ad:f2:4c:
9a:ce:cf:a9:03:bf:b3:b5:bc:26:12:15:8c:c7:fe:97:ac:66:
2c:aa:a7:a3:04:55:49:38:a3:66:84:fd:e7:d7:61:dd:5c:65:
71:5b:c4:58:b1:75:2c:89:d0:4a:8d:17:52:37:39:a5:d5:34:
c1:c0:bd:89:f3:5e:f5:72:6b:c7:60:71:45:1a:db:40:1b:b3:
a6:0f:6b:3b:29:41:a2:0a:3b:c8:cc:b8:fb:a5:bc:b9:24:45:
0e:d9:27:4c:2b:e5:03:7f:66:e9:97:e2:98:32:91:90:51:1a:
ea:6d:94:2f:99:7e:06:c6:b1:92:1b:64:46:0c:5a:17:f3:9b:
00:82:aa:9a:f9:e7:75:47:0a:c2:9a:27:b3:3a:34:a6:9c:fe:
10:8e:3d:85:05:3c:2b:aa:33:78:a6:58:8d:eb:48:8b:15:ac:
f1:07:d7:27:f8:c6:00:18:d2:fb:e6:b2:0f:3b:e9:81:36:f0:
a3:c6:44:12:54:34:d7:26:eb:8b:26:0f:fd:ee:6e:54:99:43:
df:6c:ef:18:5e:2e:cf:2c:eb:03:4a:71:0e:da:cd:05:99:86:
b4:86:e4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTiDKkulIobM5hS1jBB5rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx
YTY3MTEwHhcNMjQxMTIyMTEwMDU0WhcNMjQxMTIzMTEwMDU0WjAzMTEwLwYDVQQD
EyhkOTVhZjliOTljMjU3YTNlNDM1OGNlNGJmYjI5OTdkNjM5OGIyOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LmMujRUCFKjwmO2kIVVcXR+5kPI
OJ1rEDayemUbpX6iU2+e1NUWgoeWzxnafIiKpNVBfe+s9FsR5ghpD1PgsotDhnNh
DqvEw3ubC20j7HWBXg4dyfsHSwozpqWW+B14BsNqzXHO6r+YTJP/L7pC8qeADnlq
tvfmt5rzmKhq3u05s/DHW9aNLshAf4UPdCvxfvziErOJwJ2djzTp8U0CA4HWm6Sz
4E3/GtL5jVASOxu2gs1KK5pgf0WzCrU37vN+HiuZi68iPA0Ei2o1eX3azH8gEmsa
t2R1OmLg9abVoAna42Dr9rgD7TBjs08/QgpNOZAE0oLT6TEXhTcUEr3wZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNla+bmcJXo+Q1jOS/spl9Y5iyjWMB8GA1UdIwQY
MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et
M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi
LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7AB09xw
yHdSM3cUQapRS1o66lE5YDnaalyifoKqQtbtrfJMms7PqQO/s7W8JhIVjMf+l6xm
LKqnowRVSTijZoT959dh3VxlcVvEWLF1LInQSo0XUjc5pdU0wcC9ifNe9XJrx2Bx
RRrbQBuzpg9rOylBogo7yMy4+6W8uSRFDtknTCvlA39m6ZfimDKRkFEa6m2UL5l+
BsaxkhtkRgxaF/ObAIKqmvnndUcKwponszo0ppz+EI49hQU8K6ozeKZYjetIixWs
8QfXJ/jGABjS++ayDzvpgTbwo8ZEElQ01ybriyYP/e5uVJlD32zvGF4uzyzrA0px
DtrNBZmGtIbkMQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:05 2024 by rpki-client on console-fra.rpki-client.org