Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File: iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier: C9u7/Q/4LxQZ8Dh4nOtAanVGAOzGPhIj00+HeclY6po=
Subject key identifier: 95:DE:FA:1D:FE:8B:94:56:B1:D5:24:B5:03:08:28:25:B1:AC:2C:9E
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 01936A4643B8CBA567A05ECACA9564ABB38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 21:00:09 +0000
Manifest this update: Tue 26 Nov 2024 21:00:09 +0000
Manifest next update: Wed 27 Nov 2024 21:00:09 +0000
Files and hashes: 1: SUQYe2qXmJr5r-vCzJCpD1VDSh0.roa (hash: TZdigseljNfkkPzKpgMEE1g2XHYrkBt6hOR71T5A3JA=)
2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: fERuJKGbOAoHZm2i82+xv9MF0Ofqm9qLjMRi1gSRgYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:43:b8:cb:a5:67:a0:5e:ca:ca:95:64:ab:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Nov 26 21:00:09 2024 GMT
Not After : Nov 27 21:00:09 2024 GMT
Subject: CN=95defa1dfe8b9456b1d524b503082825b1ac2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:89:52:29:18:4d:7c:c4:fa:66:90:01:c6:
c9:67:2b:60:c1:a3:0b:5a:76:3d:42:eb:3f:95:dc:
93:29:bf:6f:a3:7b:ae:30:7c:28:ec:5c:4b:c8:bc:
18:b5:b7:c6:35:8b:ba:c7:27:cb:f7:87:97:cf:9e:
7a:d8:71:9a:a2:66:ea:4a:d0:f8:8a:4f:76:b5:90:
3f:ff:d6:b1:69:c1:d8:aa:be:3e:ab:57:bf:b9:38:
cb:47:7d:ff:40:bd:10:e1:5b:06:55:11:a8:50:ef:
db:dd:be:60:83:e8:a2:d1:66:59:93:10:7b:5e:87:
bc:1b:b9:67:78:ab:a4:2c:b0:60:6b:a7:ed:16:93:
f2:5c:ea:3b:54:7a:81:ba:b4:df:bf:68:13:b6:dd:
66:65:74:93:88:4f:bc:cf:08:40:de:bd:56:09:ef:
a6:f5:0c:f3:fd:e3:1b:ef:68:0d:d1:e7:0f:5b:64:
d1:c4:c4:df:6f:81:0c:32:1b:1a:7e:66:45:d7:02:
b8:85:cf:52:98:bc:2f:41:34:55:cd:f3:08:b2:0b:
ba:dc:b8:15:be:3d:99:fd:c1:4a:03:86:fa:85:7c:
be:b5:f2:04:65:b7:da:38:22:b9:29:60:e1:1e:3b:
91:72:45:36:25:96:fb:c1:9a:4d:9a:7f:ec:c8:c0:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:FA:1D:FE:8B:94:56:B1:D5:24:B5:03:08:28:25:B1:AC:2C:9E
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b0:6b:60:07:a7:d1:4d:1b:d9:41:6e:50:13:34:f9:6f:e4:
65:24:5b:a7:4b:eb:c3:e8:b6:2d:28:06:e8:4c:d5:98:ff:a5:
f1:e4:5d:73:41:fc:9d:e7:48:d7:b5:e4:14:ad:80:44:b3:35:
87:f2:22:2e:68:f5:37:0b:b8:2c:07:66:2c:a3:cf:18:2e:e5:
f6:53:28:01:df:da:53:60:7e:41:cf:61:be:19:c8:a1:26:05:
c1:8f:ee:18:f9:a7:6f:34:da:25:b4:2d:d3:33:00:18:ce:e8:
ad:ba:5d:a6:f1:b3:f6:af:49:03:f5:7d:df:b9:56:04:32:b9:
0c:24:07:e2:28:3b:10:f5:8d:38:c5:4e:9a:d1:21:74:5a:9c:
65:00:51:66:b6:b1:2e:a7:93:c3:dd:b7:82:af:17:b3:22:8d:
c8:e8:f5:22:12:d7:49:ba:83:71:9a:32:55:c9:85:b5:ac:37:
20:aa:eb:8f:e1:6b:42:eb:13:21:f5:9e:2a:a0:70:21:68:68:
b0:64:58:b5:6e:55:3b:ce:89:85:63:f7:f2:c2:1d:a0:32:5d:
e2:50:ce:6c:be:a0:97:02:3b:fa:95:64:dc:e2:ef:ee:5d:7a:
df:3a:4e:c5:5c:69:a7:e5:63:9d:b5:84:04:8e:0b:1d:60:18:
60:5b:d8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRkO4y6VnoF7KypVkq7ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTk0YTQxNDBlMTliMzIwNjNmYzZlNzc5ZjU5MzE0YTc0
YTBjNTEwHhcNMjQxMTI2MjEwMDA5WhcNMjQxMTI3MjEwMDA5WjAzMTEwLwYDVQQD
Eyg5NWRlZmExZGZlOGI5NDU2YjFkNTI0YjUwMzA4MjgyNWIxYWMyYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2+JUikYTXzE+maQAcbJZytgwaML
WnY9Qus/ldyTKb9vo3uuMHwo7FxLyLwYtbfGNYu6xyfL94eXz5562HGaombqStD4
ik92tZA//9axacHYqr4+q1e/uTjLR33/QL0Q4VsGVRGoUO/b3b5gg+ii0WZZkxB7
Xoe8G7lneKukLLBga6ftFpPyXOo7VHqBurTfv2gTtt1mZXSTiE+8zwhA3r1WCe+m
9Qzz/eMb72gN0ecPW2TRxMTfb4EMMhsafmZF1wK4hc9SmLwvQTRVzfMIsgu63LgV
vj2Z/cFKA4b6hXy+tfIEZbfaOCK5KWDhHjuRckU2JZb7wZpNmn/syMB9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXe+h3+i5RWsdUktQMIKCWxrCyeMB8GA1UdIwQY
MBaAFIipSkFA4ZsyBj/G53n1kxSnSgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtsS1FVRGhteklHUDhibmVmV1RGS2RLREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MWNjZDQtZTA1My00NWUwLWI2MzUt
N2ZlYTA2NmYwYjk2LzEvaUtsS1FVRGhteklHUDhibmVmV1RGS2RLREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS82MWNjZDQtZTA1My00NWUwLWI2MzUtN2ZlYTA2NmYwYjk2
LzEvaUtsS1FVRGhteklHUDhibmVmV1RGS2RLREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrBrYAen
0U0b2UFuUBM0+W/kZSRbp0vrw+i2LSgG6EzVmP+l8eRdc0H8nedI17XkFK2ARLM1
h/IiLmj1Nwu4LAdmLKPPGC7l9lMoAd/aU2B+Qc9hvhnIoSYFwY/uGPmnbzTaJbQt
0zMAGM7orbpdpvGz9q9JA/V937lWBDK5DCQH4ig7EPWNOMVOmtEhdFqcZQBRZrax
LqeTw923gq8XsyKNyOj1IhLXSbqDcZoyVcmFtaw3IKrrj+FrQusTIfWeKqBwIWho
sGRYtW5VO86JhWP38sIdoDJd4lDObL6glwI7+pVk3OLv7l163zpOxVxpp+VjnbWE
BI4LHWAYYFvYTg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:51 2024 by rpki-client on console-ams.rpki-client.org