Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: s2Wk1xrOdvEwDTpnV8/RDOhPVfW8VZfgsc0wLMBQiEE=
Subject key identifier: C0:89:6B:39:91:45:4E:8E:85:57:E9:14:9F:2D:88:41:01:10:AC:7B
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01935576126062628DA81E2925F11BC613C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1301
Signing time: Fri 22 Nov 2024 20:00:21 +0000
Manifest this update: Fri 22 Nov 2024 20:00:21 +0000
Manifest next update: Sat 23 Nov 2024 20:00:21 +0000
Files and hashes: 1: IDgJjGX2iwIYnHwwYxJ1xknr4h8.roa (hash: LnxgYlJ8zAuGY/xtENZzCnfBzxUIP6E7uNcII7wPHWc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: D2h+0JQe+bcpwghCuX1R1ul/VnJy74LUwHVvcsmX38k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:12:60:62:62:8d:a8:1e:29:25:f1:1b:c6:13:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Nov 22 20:00:21 2024 GMT
Not After : Nov 23 20:00:21 2024 GMT
Subject: CN=c0896b3991454e8e8557e9149f2d88410110ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:be:b4:72:9e:a1:25:e9:2e:f1:24:e7:27:
d2:4e:f2:3b:97:06:9f:e3:92:34:df:b1:8b:56:0e:
51:51:30:e5:27:3f:b1:1f:d2:95:06:25:a4:90:cc:
6d:ba:4e:42:cd:41:72:1a:fa:2c:2e:3c:65:cc:1e:
6e:ed:d4:49:58:07:e4:15:f3:42:5c:43:bc:e6:97:
00:a1:60:13:5a:15:7c:e6:6a:2a:3a:0b:d5:32:e5:
9a:48:4f:16:fe:4a:fd:c6:de:1b:bd:f7:55:ef:61:
8e:79:2d:01:4d:e4:1b:7b:cc:91:99:4c:4a:95:03:
b4:a1:b2:e6:51:d0:c6:42:95:0c:44:5c:98:5b:4d:
8f:50:51:1b:8b:1a:94:5c:e7:1a:2b:14:42:fa:9a:
b2:02:55:4c:10:bb:e4:b7:50:e0:ef:d0:82:93:46:
18:dd:f3:c0:98:2a:0a:9e:64:58:a8:41:9f:26:08:
d3:c1:4e:4b:0a:52:73:1a:ff:3b:1d:a7:37:c0:26:
d2:94:5c:de:b2:70:98:07:01:db:66:71:83:4f:88:
d4:01:95:af:83:dc:80:6b:0e:9f:cf:64:84:1f:f2:
1d:37:a9:c2:e9:53:f7:eb:c5:2e:57:3c:7e:05:17:
03:48:dd:68:4a:2a:07:75:ff:2f:bb:b3:31:a0:c7:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:6B:39:91:45:4E:8E:85:57:E9:14:9F:2D:88:41:01:10:AC:7B
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:70:63:6a:19:a3:d3:d7:67:c1:2f:33:8a:65:e8:fd:bc:c6:
87:7d:a1:c6:77:e0:e6:3b:db:77:5a:3f:e1:15:a9:a1:ce:8f:
b3:54:44:5c:8a:ca:81:0c:7a:fe:13:d4:a8:cb:28:30:c1:17:
4e:b5:d4:ab:92:64:39:6e:f4:74:4b:d9:dd:eb:78:5b:a8:f9:
1e:14:39:04:06:cc:c7:ba:da:3d:9b:18:ee:b1:29:2f:4e:49:
5b:9c:10:e9:28:a4:42:45:46:6a:aa:19:ac:31:56:d9:ea:68:
35:f1:fa:16:54:a5:39:e2:e4:9c:30:71:93:0d:ae:ec:48:cd:
6e:a6:aa:1f:3d:b3:9a:31:5f:55:97:d2:06:4d:ea:7f:6a:53:
eb:5c:5a:5d:8e:8a:dd:f6:c1:44:5c:b7:8a:58:aa:63:b8:8d:
75:b1:95:25:ef:90:c4:b8:23:8b:ed:cc:87:b0:21:e2:6d:8f:
db:d7:ee:7b:ff:b8:ef:62:e2:fa:01:93:cc:11:8c:69:95:82:
04:0f:d5:a8:5b:f9:7d:bc:14:5e:81:b0:7e:ea:1a:5d:1c:bb:
63:cf:97:c9:d3:c9:a8:64:43:ac:62:86:57:ad:05:38:6c:e1:
89:99:0e:ee:62:d6:71:5c:44:e8:d8:94:ea:b3:30:83:e0:5d:
08:47:59:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdhJgYmKNqB4pJfEbxhPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjQxMTIyMjAwMDIxWhcNMjQxMTIzMjAwMDIxWjAzMTEwLwYDVQQD
EyhjMDg5NmIzOTkxNDU0ZThlODU1N2U5MTQ5ZjJkODg0MTAxMTBhYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMu+tHKeoSXpLvEk5yfSTvI7lwaf
45I037GLVg5RUTDlJz+xH9KVBiWkkMxtuk5CzUFyGvosLjxlzB5u7dRJWAfkFfNC
XEO85pcAoWATWhV85moqOgvVMuWaSE8W/kr9xt4bvfdV72GOeS0BTeQbe8yRmUxK
lQO0obLmUdDGQpUMRFyYW02PUFEbixqUXOcaKxRC+pqyAlVMELvkt1Dg79CCk0YY
3fPAmCoKnmRYqEGfJgjTwU5LClJzGv87Hac3wCbSlFzesnCYBwHbZnGDT4jUAZWv
g9yAaw6fz2SEH/IdN6nC6VP368UuVzx+BRcDSN1oSioHdf8vu7MxoMfVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCJazmRRU6OhVfpFJ8tiEEBEKx7MB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHBjahmj
09dnwS8zimXo/bzGh32hxnfg5jvbd1o/4RWpoc6Ps1REXIrKgQx6/hPUqMsoMMEX
TrXUq5JkOW70dEvZ3et4W6j5HhQ5BAbMx7raPZsY7rEpL05JW5wQ6SikQkVGaqoZ
rDFW2epoNfH6FlSlOeLknDBxkw2u7EjNbqaqHz2zmjFfVZfSBk3qf2pT61xaXY6K
3fbBRFy3iliqY7iNdbGVJe+QxLgji+3Mh7Ah4m2P29fue/+472Li+gGTzBGMaZWC
BA/VqFv5fbwUXoGwfuoaXRy7Y8+XydPJqGRDrGKGV60FOGzhiZkO7mLWcVxE6NiU
6rMwg+BdCEdZqA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:40 2024 by rpki-client on console-ams.rpki-client.org