Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: kizvr2ZahGnChuqI9hZRK1jovR1P0M8Jc1NUIWAyEE8=
Subject key identifier: C9:62:04:20:B7:E9:9C:C5:54:D6:3F:5C:EE:12:10:63:D2:CE:52:57
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 019364E97399DAE90B730B61464B39ECC545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 0205
Signing time: Mon 25 Nov 2024 20:00:41 +0000
Manifest this update: Mon 25 Nov 2024 20:00:41 +0000
Manifest next update: Tue 26 Nov 2024 20:00:41 +0000
Files and hashes: 1: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: TruwLcBqpxFOMBAXv4Tgq9uIsq2zodXbAVniEmAdkoo=)
2: kKaiiklxSLDqp0rZWbmYYGUYrGs.roa (hash: rQs3Z63nD7QHQaTYuIEAVSYHHNBsNg87Aw1zVk4K3ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:73:99:da:e9:0b:73:0b:61:46:4b:39:ec:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Nov 25 20:00:41 2024 GMT
Not After : Nov 26 20:00:41 2024 GMT
Subject: CN=c9620420b7e99cc554d63f5cee121063d2ce5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:d6:2d:74:3d:60:3c:b0:cd:91:5f:67:34:
24:0a:6c:33:3e:f2:1c:87:ff:d5:d1:ff:73:ba:e3:
ec:b7:09:01:75:f6:13:1e:a7:79:8d:e7:27:9f:57:
d6:f6:fa:f2:a8:84:24:48:cd:f3:57:ae:80:ae:82:
b1:58:db:74:df:a2:8c:23:7a:e2:c9:d5:d6:3e:15:
46:e0:29:cf:1e:4f:90:0e:31:a0:cf:28:fa:c0:71:
a8:cf:fa:36:6b:7e:ad:de:f4:96:e5:88:d0:5a:b8:
57:b8:03:ef:69:c8:f3:34:37:08:96:b7:d0:e2:1d:
d8:e7:3b:65:70:53:eb:30:bf:da:31:1f:db:a3:90:
9b:b0:3c:02:4a:95:60:0e:10:71:bb:8a:5d:0e:c8:
ba:3a:e3:04:e0:32:81:65:76:1f:bf:33:26:26:15:
42:15:58:7e:75:cc:96:ec:cd:2f:5f:4c:bf:ec:0d:
2b:a5:37:f3:da:27:f2:bb:3d:43:66:59:2d:f6:4c:
2a:e2:bb:c6:ca:f5:6f:ab:94:36:a5:4b:f2:4f:38:
18:05:99:ea:ba:09:c4:cf:7f:20:1b:fd:e8:79:f4:
e5:44:e5:b6:29:71:7f:4f:fd:55:a2:2c:44:7e:05:
d5:64:ef:7c:a4:4b:1a:93:c0:c0:3a:14:75:0b:f6:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:04:20:B7:E9:9C:C5:54:D6:3F:5C:EE:12:10:63:D2:CE:52:57
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:21:bc:e4:ff:6a:f9:1f:dc:cc:5e:bf:cb:69:b8:7c:a2:63:
3e:cd:17:d0:37:bf:df:51:9d:59:be:2d:60:d0:bc:05:cb:69:
43:5c:be:ad:4d:25:02:5f:fe:0b:ad:d0:37:0c:c4:d7:9d:ff:
1e:e3:a6:da:5c:17:9b:24:da:20:25:ff:62:38:3e:99:88:70:
90:b2:67:8d:58:54:e2:cb:ce:4c:3c:7f:db:29:db:43:1b:1d:
e4:1d:54:50:7f:81:ae:0e:bf:01:eb:40:2b:50:54:f7:6a:b4:
73:d8:b2:c0:bc:30:a7:32:bc:c3:f2:f2:e0:e6:16:f3:09:d9:
cb:d8:99:e5:95:b4:7e:77:72:e8:72:e8:5d:a9:8c:fa:39:cf:
68:1a:5d:8f:a0:af:82:37:52:96:14:3b:b6:c2:1e:ed:59:f1:
00:96:6c:74:9b:f0:fe:f7:6c:51:c2:9a:a3:8d:d7:d3:4f:29:
72:7c:a7:00:fc:d7:64:01:05:bd:97:e5:d6:1f:4d:b6:5a:51:
39:84:f6:25:df:d0:c7:76:1a:f3:c6:17:b8:2e:7d:89:25:c0:
65:19:5c:9f:c9:e6:ae:57:e8:33:e5:cf:d2:de:39:64:8c:23:
f6:7a:3d:41:d4:ae:c8:b7:a0:54:fc:ff:ef:ac:32:e5:57:9e:
47:92:42:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNk6XOZ2ukLcwthRks57MVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMmUyZWUzYmU3ZDc1MjVlZDc0YjdhYWUwN2U5MmFlY2Fm
ODQ5MzYwHhcNMjQxMTI1MjAwMDQxWhcNMjQxMTI2MjAwMDQxWjAzMTEwLwYDVQQD
EyhjOTYyMDQyMGI3ZTk5Y2M1NTRkNjNmNWNlZTEyMTA2M2QyY2U1MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0XWLXQ9YDywzZFfZzQkCmwzPvIc
h//V0f9zuuPstwkBdfYTHqd5jecnn1fW9vryqIQkSM3zV66AroKxWNt036KMI3ri
ydXWPhVG4CnPHk+QDjGgzyj6wHGoz/o2a36t3vSW5YjQWrhXuAPvacjzNDcIlrfQ
4h3Y5ztlcFPrML/aMR/bo5CbsDwCSpVgDhBxu4pdDsi6OuME4DKBZXYfvzMmJhVC
FVh+dcyW7M0vX0y/7A0rpTfz2ifyuz1DZlkt9kwq4rvGyvVvq5Q2pUvyTzgYBZnq
ugnEz38gG/3oefTlROW2KXF/T/1VoixEfgXVZO98pEsak8DAOhR1C/YjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMliBCC36ZzFVNY/XO4SEGPSzlJXMB8GA1UdIwQY
MBaAFIouLuO+fXUl7XS3quB+kq7K+Ek2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTkt
ZjViYjJiMmQ2M2JlLzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8xMTk3ZjItN2Y4ZS00OGU0LWJkYTktZjViYjJiMmQ2M2Jl
LzEvaWk0dTQ3NTlkU1h0ZExlcTRINlNyc3I0U1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCG85P9q
+R/czF6/y2m4fKJjPs0X0De/31GdWb4tYNC8BctpQ1y+rU0lAl/+C63QNwzE153/
HuOm2lwXmyTaICX/Yjg+mYhwkLJnjVhU4svOTDx/2ynbQxsd5B1UUH+Brg6/AetA
K1BU92q0c9iywLwwpzK8w/Ly4OYW8wnZy9iZ5ZW0fndy6HLoXamM+jnPaBpdj6Cv
gjdSlhQ7tsIe7VnxAJZsdJvw/vdsUcKao43X008pcnynAPzXZAEFvZfl1h9NtlpR
OYT2Jd/Qx3Ya88YXuC59iSXAZRlcn8nmrlfoM+XP0t45ZIwj9no9QdSuyLegVPz/
76wy5VeeR5JC8g==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:24:56 2024 by rpki-client on console-fra.rpki-client.org