Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: /YwurllcEJYrLRG3Q8VjaKe3ytBmGh/8wa0FuKQkNWw=
Subject key identifier: 4B:05:AB:F6:1A:39:0B:D1:24:21:7E:A7:CE:CE:8D:36:26:FE:FE:B3
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0193568A320507DB9FB105A99212249C2119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:57 +0000
Manifest this update: Sat 23 Nov 2024 01:01:57 +0000
Manifest next update: Sun 24 Nov 2024 01:01:57 +0000
Files and hashes: 1: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: JBZY30w2Q9VoC5yg92wZs5JmOilqBh7ZWuqHwy/PVqQ=)
2: yAQi_JmZBYvY9Knr3ls8S3CRUls.roa (hash: A7usJXlUxK6zOrYK5gG5oqFRotiVPH23BXEtQz+qTh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:32:05:07:db:9f:b1:05:a9:92:12:24:9c:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Nov 23 01:01:57 2024 GMT
Not After : Nov 24 01:01:57 2024 GMT
Subject: CN=4b05abf61a390bd124217ea7cece8d3626fefeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:46:5c:09:af:08:fb:45:de:de:a0:01:38:
a4:03:5c:10:21:19:d0:7d:df:a7:a1:d6:42:45:58:
3d:a8:1e:3c:77:85:0b:7b:3f:52:42:58:47:07:ab:
28:f9:c0:cc:eb:be:e5:67:5f:ac:d8:f4:45:0e:cd:
e0:c5:ba:a6:bf:75:e8:fc:05:99:65:9f:6e:02:bf:
11:3e:c2:99:71:2a:ee:7e:67:78:82:81:b2:c2:d6:
1c:20:ab:58:fa:9d:86:b0:07:ed:04:ec:4f:e8:b8:
8f:be:a9:7a:77:53:3c:19:ae:bb:b1:c0:46:1e:8e:
b3:f3:cc:c9:4e:fe:5b:c3:42:1b:4f:39:73:e6:be:
50:8d:3f:d1:30:7d:40:52:f3:46:0f:70:f8:20:42:
ee:1c:63:eb:3f:4c:67:a9:d7:0e:64:89:11:97:9d:
85:45:7a:56:b4:96:5c:9c:85:d2:ff:77:97:23:2b:
ad:45:53:2c:0e:31:dd:60:6b:27:81:8a:55:9d:e8:
39:8d:22:1e:33:37:fb:62:04:6e:1c:76:ef:12:a3:
f2:59:37:fb:27:00:46:83:6b:fc:3f:a4:4a:c7:e8:
b6:1f:09:bc:cf:85:00:d3:87:66:93:c0:ea:1e:fa:
64:c0:df:f7:75:f5:2d:8f:fb:e3:3c:c9:94:17:87:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:AB:F6:1A:39:0B:D1:24:21:7E:A7:CE:CE:8D:36:26:FE:FE:B3
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:8e:8f:ac:31:73:e1:4c:63:92:3f:6b:3e:86:58:92:40:20:
c7:3f:b0:07:64:cd:55:0f:45:85:ee:f5:cf:c9:ac:fe:1b:87:
ce:db:fa:ab:8f:62:2b:ec:55:60:0e:25:a2:2d:d5:c8:31:2d:
98:3a:1c:0a:da:7b:1e:11:35:e3:b3:e2:12:96:63:dc:ff:34:
62:89:3d:73:2c:5a:24:a9:e8:49:3b:46:d6:5f:6e:d6:72:26:
07:5d:1b:8f:45:ec:d2:03:da:2d:4d:20:44:79:e7:96:b2:6c:
b7:de:de:6e:66:e1:5e:3f:de:26:32:6f:22:13:72:3a:e4:00:
0a:2b:80:a1:a6:f2:47:38:c9:4b:7c:57:44:bb:de:5c:0e:8b:
a3:3e:1b:de:09:f0:81:d5:ec:cc:7d:e9:11:53:b5:59:2e:23:
5a:b1:96:6a:4f:3e:b4:b1:3a:1e:77:06:39:f7:4d:06:dd:b6:
c6:57:07:ae:c9:d7:07:2e:fe:e8:d8:c0:48:c1:52:a3:b5:b2:
56:e9:be:87:6b:64:1d:ad:bf:23:30:b3:a0:30:44:93:0d:4e:
bc:8c:52:0b:c4:60:b6:cf:d1:96:1b:44:62:c6:b1:1b:73:27:
68:64:75:ea:5e:f2:30:dd:18:57:b5:d2:ef:07:27:1e:d4:f9:
8e:d8:e8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWijIFB9ufsQWpkhIknCEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1
YjM1NzMwHhcNMjQxMTIzMDEwMTU3WhcNMjQxMTI0MDEwMTU3WjAzMTEwLwYDVQQD
Eyg0YjA1YWJmNjFhMzkwYmQxMjQyMTdlYTdjZWNlOGQzNjI2ZmVmZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZGXAmvCPtF3t6gATikA1wQIRnQ
fd+nodZCRVg9qB48d4ULez9SQlhHB6so+cDM677lZ1+s2PRFDs3gxbqmv3Xo/AWZ
ZZ9uAr8RPsKZcSrufmd4goGywtYcIKtY+p2GsAftBOxP6LiPvql6d1M8Ga67scBG
Ho6z88zJTv5bw0IbTzlz5r5QjT/RMH1AUvNGD3D4IELuHGPrP0xnqdcOZIkRl52F
RXpWtJZcnIXS/3eXIyutRVMsDjHdYGsngYpVneg5jSIeMzf7YgRuHHbvEqPyWTf7
JwBGg2v8P6RKx+i2Hwm8z4UA04dmk8DqHvpkwN/3dfUtj/vjPMmUF4fIowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsFq/YaOQvRJCF+p87OjTYm/v6zMB8GA1UdIwQY
MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt
MDM5ZGU3ODRkOTQxLzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx
LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz46PrDFz
4Uxjkj9rPoZYkkAgxz+wB2TNVQ9Fhe71z8ms/huHztv6q49iK+xVYA4loi3VyDEt
mDocCtp7HhE147PiEpZj3P80Yok9cyxaJKnoSTtG1l9u1nImB10bj0Xs0gPaLU0g
RHnnlrJst97ebmbhXj/eJjJvIhNyOuQACiuAoabyRzjJS3xXRLveXA6Loz4b3gnw
gdXszH3pEVO1WS4jWrGWak8+tLE6HncGOfdNBt22xlcHrsnXBy7+6NjASMFSo7Wy
Vum+h2tkHa2/IzCzoDBEkw1OvIxSC8Rgts/RlhtEYsaxG3MnaGR16l7yMN0YV7XS
7wcnHtT5jtjoig==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:24 2024 by rpki-client on console-ams.rpki-client.org