Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
File: TUQhxgZa4gAa_NgtotDbIRISRag.mft (raw, json)
Hash identifier: wo+9hGEbIxn5eyYVzBdPecv8Pug/GTPXuP88lDA9idE=
Subject key identifier: 24:D7:BD:A2:00:BA:D3:3D:7D:36:4F:1D:C2:29:EF:91:71:87:AE:67
Authority key identifier: 4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
Certificate issuer: /CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Certificate serial: 01936BC7E92034E453D4240180AA1674CCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
Manifest number: 0127
Signing time: Wed 27 Nov 2024 04:01:23 +0000
Manifest this update: Wed 27 Nov 2024 04:01:23 +0000
Manifest next update: Thu 28 Nov 2024 04:01:23 +0000
Files and hashes: 1: TUQhxgZa4gAa_NgtotDbIRISRag.crl (hash: YsP4i95GWLwkXjHGyqcZ1u+fq2V7aAHaySptA2cnNv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c7:e9:20:34:e4:53:d4:24:01:80:aa:16:74:cc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Validity
Not Before: Nov 27 04:01:23 2024 GMT
Not After : Nov 28 04:01:23 2024 GMT
Subject: CN=24d7bda200bad33d7d364f1dc229ef917187ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:a9:3f:19:dd:64:73:5d:97:fa:25:db:30:
2d:06:f9:21:7a:22:4e:36:14:45:ff:3b:26:b2:1c:
93:2e:7e:a7:59:7b:79:42:bf:d6:1e:9e:8d:df:60:
01:21:49:59:f1:ca:c4:b8:23:53:c3:ea:bb:53:8b:
58:45:52:71:dc:1f:3b:6c:fb:b7:63:42:bf:7f:83:
30:37:33:f8:7a:53:8b:05:09:6d:8b:2a:fe:19:31:
16:82:a7:1b:ec:31:0c:e4:23:ae:23:35:cb:75:fe:
22:fb:a2:4e:c4:a0:fc:87:2a:e8:de:d8:1b:b1:5d:
55:9b:06:df:90:b6:d7:ca:26:1e:f0:b8:61:2f:15:
c9:ad:3f:fb:d3:a3:4a:e1:12:94:3e:12:f6:b9:41:
66:f3:60:d6:4e:27:fe:de:f2:b8:16:54:89:06:0a:
3c:0d:c4:42:f7:4f:4b:a9:3a:1a:4a:0e:9b:96:fe:
85:52:2e:30:48:c5:45:b3:0b:fe:6d:73:13:ae:4e:
41:4c:25:0e:e5:98:f9:f6:ae:b2:1a:5e:60:09:18:
8f:cd:b5:07:cb:cf:ee:e5:a8:53:3d:b7:6b:b8:11:
87:a6:f5:02:48:84:88:ba:a1:0c:d2:a5:80:44:b4:
7f:72:0c:06:1a:03:c0:7d:8c:85:b1:b0:eb:90:d5:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:BD:A2:00:BA:D3:3D:7D:36:4F:1D:C2:29:EF:91:71:87:AE:67
X509v3 Authority Key Identifier:
keyid:4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:26:45:23:fe:e3:1d:01:bb:5c:77:df:65:4b:73:29:45:e8:
4e:af:9f:5f:e8:0a:cd:44:70:dd:ff:ee:ad:4f:74:f8:3d:fc:
af:a0:a7:03:69:2a:92:ef:8a:38:4c:bd:e7:67:dd:2c:0e:70:
6e:5c:82:2e:88:60:44:bf:f8:22:0c:20:52:e6:aa:16:63:ec:
91:f8:b3:02:dc:6a:2a:98:04:b6:22:b7:90:ea:e7:9c:05:7b:
52:8f:33:cc:58:53:a1:76:e8:26:f3:88:58:0e:e4:47:01:b2:
4c:66:a4:a5:68:d2:8a:d0:3f:da:48:f1:7f:bc:3f:c3:ab:b4:
d9:df:e2:ba:07:ed:83:82:cc:88:96:db:95:f7:50:12:be:d2:
79:a9:38:ae:69:5f:a6:08:c5:e7:96:5e:48:c6:0b:96:5a:64:
1d:fb:2f:64:67:bf:3c:1f:d0:56:9c:dd:97:90:e6:f6:9e:ac:
24:4a:94:3a:9e:36:47:62:e1:fa:22:20:44:8a:d8:8b:f7:36:
7f:94:c2:48:e6:26:b0:d7:e0:1d:58:aa:3d:46:6a:e8:90:0c:
64:9a:cb:5f:5c:aa:22:71:af:57:f3:16:b3:20:e5:f5:7e:cd:
9c:43:3b:6e:61:12:b7:2c:f1:34:68:b7:cb:08:2a:e3:83:7b:
1a:64:ac:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrx+kgNORT1CQBgKoWdMzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNDQyMWM2MDY1YWUyMDAxYWZjZDgyZGEyZDBkYjIxMTIx
MjQ1YTgwHhcNMjQxMTI3MDQwMTIzWhcNMjQxMTI4MDQwMTIzWjAzMTEwLwYDVQQD
EygyNGQ3YmRhMjAwYmFkMzNkN2QzNjRmMWRjMjI5ZWY5MTcxODdhZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDupPxndZHNdl/ol2zAtBvkheiJO
NhRF/zsmshyTLn6nWXt5Qr/WHp6N32ABIUlZ8crEuCNTw+q7U4tYRVJx3B87bPu3
Y0K/f4MwNzP4elOLBQltiyr+GTEWgqcb7DEM5COuIzXLdf4i+6JOxKD8hyro3tgb
sV1VmwbfkLbXyiYe8LhhLxXJrT/706NK4RKUPhL2uUFm82DWTif+3vK4FlSJBgo8
DcRC909LqToaSg6blv6FUi4wSMVFswv+bXMTrk5BTCUO5Zj59q6yGl5gCRiPzbUH
y8/u5ahTPbdruBGHpvUCSISIuqEM0qWARLR/cgwGGgPAfYyFsbDrkNXbKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTXvaIAutM9fTZPHcIp75Fxh65nMB8GA1UdIwQY
MBaAFE1EIcYGWuIAGvzYLaLQ2yESEkWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84MGE1M2UtNTU1Yy00ZTVhLWI1Mjct
M2ZjNTZjODZmNDc2LzEvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84MGE1M2UtNTU1Yy00ZTVhLWI1MjctM2ZjNTZjODZmNDc2
LzEvVFVRaHhnWmE0Z0FhX05ndG90RGJJUklTUmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCZFI/7j
HQG7XHffZUtzKUXoTq+fX+gKzURw3f/urU90+D38r6CnA2kqku+KOEy952fdLA5w
blyCLohgRL/4IgwgUuaqFmPskfizAtxqKpgEtiK3kOrnnAV7Uo8zzFhToXboJvOI
WA7kRwGyTGakpWjSitA/2kjxf7w/w6u02d/iugftg4LMiJbblfdQEr7Seak4rmlf
pgjF55ZeSMYLllpkHfsvZGe/PB/QVpzdl5Dm9p6sJEqUOp42R2Lh+iIgRIrYi/c2
f5TCSOYmsNfgHViqPUZq6JAMZJrLX1yqInGvV/MWsyDl9X7NnEM7bmEStyzxNGi3
ywgq44N7GmSsuA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 06:19:16 2024 by rpki-client on console-ams.rpki-client.org