Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: leHIjvMZ9p1pF5Y9NlkQ2vMS9oH80o+6EsLQ1pTS8w0=
Subject key identifier: 72:3A:30:F7:E0:39:77:3B:E0:8D:9C:1A:00:5D:EC:0C:59:C7:4F:00
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019351D0C67C3944D8760729172A70B836ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 03:00:56 +0000
Manifest this update: Fri 22 Nov 2024 03:00:56 +0000
Manifest next update: Sat 23 Nov 2024 03:00:56 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: MfLUh5jIH5NEQbnjUDKxHefL2Ug86mqtyPmh5XhHBCE=)
2: E89GMh-A15tveT6_UopgshZS8Mg.roa (hash: inD8phcXrz/bSY2ACFD4BlduaZGGD2Rd3VSViHSNKSY=)
3: KKmucZMZ3jwJheM5hzzSwYnu9nU.roa (hash: Tx968rA6DrBlAaUYvl60KKRXlY6UQcavwwsdFZ6Cxew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:c6:7c:39:44:d8:76:07:29:17:2a:70:b8:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Nov 22 03:00:56 2024 GMT
Not After : Nov 23 03:00:56 2024 GMT
Subject: CN=723a30f7e039773be08d9c1a005dec0c59c74f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:f1:3a:cf:2e:1f:e1:68:7b:4e:dd:3a:46:
89:9d:e1:e2:5d:ad:f8:24:83:09:3c:6b:fb:f7:ad:
1a:f9:f8:6a:b9:ca:bf:e5:62:49:be:3c:50:69:4a:
11:26:3b:2d:45:41:f0:87:eb:47:09:6d:5b:52:cd:
43:23:fa:43:50:8a:71:ec:b2:8e:ac:a8:e1:be:2a:
e6:a5:aa:de:c2:89:77:c2:0b:7b:de:fe:3c:44:1e:
4d:71:1f:4c:b5:2f:2d:6b:28:a2:92:78:32:aa:32:
d4:84:e6:93:1a:c7:2a:c2:ed:28:78:c4:52:cc:9f:
84:55:83:50:b5:ec:10:69:36:ce:8a:5d:8a:cd:24:
00:fc:0d:3d:66:0e:5a:22:fd:b3:74:96:94:51:8a:
1f:38:82:fe:d2:64:a3:50:07:ec:44:0c:81:24:d2:
01:16:2b:7d:bd:19:6d:a4:e8:48:59:52:c6:db:46:
14:fd:b6:72:19:76:5e:d8:3e:2c:05:5f:44:54:24:
62:84:10:b9:d5:c0:31:74:6a:b9:58:64:ba:a5:29:
03:e0:ff:b4:ed:09:c4:29:37:ea:52:8d:f3:5c:a1:
35:c7:4e:56:67:0f:1d:1c:1d:e8:f0:ba:04:38:73:
dc:35:be:32:c7:19:e9:dc:df:2e:62:13:e5:68:e2:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:30:F7:E0:39:77:3B:E0:8D:9C:1A:00:5D:EC:0C:59:C7:4F:00
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:49:c3:ed:eb:28:ce:4b:18:3f:ee:10:17:76:49:31:75:
a4:83:82:cb:db:41:e5:c3:8d:37:6c:aa:ee:89:cc:46:64:6d:
c8:29:f9:3d:fc:a3:9a:f4:a0:5b:1e:fb:f7:df:32:d2:5f:2e:
1f:7f:96:6d:83:2c:b8:33:4b:31:ca:e0:ce:89:a6:82:70:e2:
41:7d:6a:15:97:b4:9f:3c:34:a3:07:13:1e:a6:49:e5:f7:a7:
b6:75:6f:52:68:70:b3:db:c9:71:7e:c8:d7:ac:ba:3f:45:35:
a2:e9:e2:e2:1f:13:0b:fa:87:39:e4:a6:ad:04:6d:ad:ad:4a:
92:b8:5f:bb:37:6f:79:ed:cd:fe:5d:4a:71:3c:3b:d7:4c:d0:
36:f4:18:76:35:04:85:16:e2:77:d6:11:53:70:ab:52:bc:77:
d8:f3:5e:ee:0f:bb:46:49:fb:e0:61:dd:f0:4d:d8:42:4e:ce:
0b:ce:1d:8b:35:a0:1e:1c:11:72:32:4f:92:1f:96:1e:f9:06:
c2:c1:25:b7:75:f0:63:b1:6e:30:93:31:d8:d3:26:f6:b0:fa:
9b:f9:b0:0e:20:dd:dd:f4:a4:c4:09:2d:17:45:09:46:d9:7b:
f4:26:9c:12:a0:af:4b:37:d1:d0:b4:00:0f:98:3f:68:5e:2d:
92:db:25:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0MZ8OUTYdgcpFypwuDbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjQxMTIyMDMwMDU2WhcNMjQxMTIzMDMwMDU2WjAzMTEwLwYDVQQD
Eyg3MjNhMzBmN2UwMzk3NzNiZTA4ZDljMWEwMDVkZWMwYzU5Yzc0ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO3xOs8uH+Foe07dOkaJneHiXa34
JIMJPGv7960a+fhqucq/5WJJvjxQaUoRJjstRUHwh+tHCW1bUs1DI/pDUIpx7LKO
rKjhvirmparewol3wgt73v48RB5NcR9MtS8tayiikngyqjLUhOaTGscqwu0oeMRS
zJ+EVYNQtewQaTbOil2KzSQA/A09Zg5aIv2zdJaUUYofOIL+0mSjUAfsRAyBJNIB
Fit9vRltpOhIWVLG20YU/bZyGXZe2D4sBV9EVCRihBC51cAxdGq5WGS6pSkD4P+0
7QnEKTfqUo3zXKE1x05WZw8dHB3o8LoEOHPcNb4yxxnp3N8uYhPlaOIoYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI6MPfgOXc74I2cGgBd7AxZx08AMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLVJw+3r
KM5LGD/uEBd2STF1pIOCy9tB5cONN2yq7onMRmRtyCn5PfyjmvSgWx77998y0l8u
H3+WbYMsuDNLMcrgzommgnDiQX1qFZe0nzw0owcTHqZJ5fentnVvUmhws9vJcX7I
16y6P0U1ouni4h8TC/qHOeSmrQRtra1Kkrhfuzdvee3N/l1KcTw710zQNvQYdjUE
hRbid9YRU3CrUrx32PNe7g+7Rkn74GHd8E3YQk7OC84dizWgHhwRcjJPkh+WHvkG
wsElt3XwY7FuMJMx2NMm9rD6m/mwDiDd3fSkxAktF0UJRtl79CacEqCvSzfR0LQA
D5g/aF4tktslcw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:53 2024 by rpki-client on console-ams.rpki-client.org