Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: ESV1Z1Sxbd69BBQvdV5BaZhrTNkt0HqELqDHsUP3aQ0=
Subject key identifier: EC:40:38:7C:17:3E:AF:C3:A9:59:6D:34:D4:CA:36:A8:EB:DB:55:8E
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019358AE267816B45A841604559DB4E99840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 10C0
Signing time: Sat 23 Nov 2024 11:00:28 +0000
Manifest this update: Sat 23 Nov 2024 11:00:28 +0000
Manifest next update: Sun 24 Nov 2024 11:00:28 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: xM3jFrh/qGGrJvDLCWM3QPsnKFr6WfgziUY81E3aov4=)
2: RXTtArR93Rerlpri9PWjeI-8kis.roa (hash: axDvwSJYg/G/W+09aQOKGsgNkaSO2gx0YVarpLt7F74=)
3: TSKXIl3B5M0kt9Mbo14NMbKNVpE.roa (hash: sCpjvm9AdXWMgiVU+ChgT2BrtfrjO9ma14rZIbGSgjM=)
4: V9mKfQuesGhFqG9kLm0TlWxMFNs.roa (hash: kCz/MHD5l+BKBNbCZS/7Pmw0Z5mXIFBiTqK65QEdCJg=)
5: qLX5pl0nHD9CtP61VlWI8P7V0BA.roa (hash: 8xg5DWHnPxE1h3CxQQRtDmjqiAE+sviUoH0K61D7svs=)
6: qpXhWP0ICLdV1tLHc8aqCcOXeVk.roa (hash: clRen8iz5xzf/iGrIAoUFbZTxn/8QK1L7hkXg1OUcVg=)
7: xoOavhKvnH_w5Z_4AOJmbnrvWT8.roa (hash: dPftbMUjcbTQaWcCcKFH7ovJ0ljScdiPpSc3WrYbnOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:ae:26:78:16:b4:5a:84:16:04:55:9d:b4:e9:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Nov 23 11:00:28 2024 GMT
Not After : Nov 24 11:00:28 2024 GMT
Subject: CN=ec40387c173eafc3a9596d34d4ca36a8ebdb558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:78:f8:bb:52:30:00:0c:f2:5f:b1:2c:35:
81:c9:53:1e:b8:2c:9f:4e:24:74:02:11:b2:e1:c6:
c6:12:ba:4d:af:1a:3d:df:83:4a:0b:4f:a0:4a:3d:
09:fd:10:e2:51:66:a8:a6:14:45:da:84:f2:bf:88:
1d:a4:35:af:a6:f8:77:70:be:7b:e8:f5:dc:f1:0a:
09:fd:72:e3:e5:e8:53:5e:98:2c:c7:02:1f:dd:64:
dc:f6:5a:a0:a9:d1:c8:56:25:32:25:59:f7:bf:7a:
95:60:da:b2:1e:4d:83:5e:40:08:32:c8:0c:04:8c:
0d:f2:a2:95:07:1d:90:58:e1:3b:93:0a:1c:e1:30:
35:71:00:9f:9f:65:38:d5:b1:69:e3:f8:fb:66:96:
44:bd:13:9b:97:7d:7c:0a:51:15:85:93:1d:36:37:
d1:c4:c2:df:ee:24:30:4d:29:c5:99:78:33:86:bb:
14:64:d1:17:d9:33:16:6e:40:15:81:c1:e4:f4:35:
6f:a2:7c:0b:33:e1:93:66:c8:92:81:8b:e6:dc:4e:
24:82:0f:39:6b:cc:15:b2:46:56:39:f2:c0:96:13:
64:d9:38:00:8a:19:8a:5a:5e:e2:37:86:c9:ad:b4:
41:6a:41:bd:a9:79:28:f1:4d:44:30:55:6e:c3:66:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:38:7C:17:3E:AF:C3:A9:59:6D:34:D4:CA:36:A8:EB:DB:55:8E
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:26:77:d9:8f:1b:f9:bd:cd:ff:a2:1d:e3:63:5a:ac:66:
ef:f7:eb:f3:54:de:a4:a5:d4:0b:a8:96:b6:2b:ff:7b:ff:c1:
f5:bc:cb:cb:bc:b5:56:1a:01:56:c6:02:f3:28:6b:56:50:7a:
98:80:42:b8:c8:9b:08:c4:cf:4e:55:12:99:f6:00:66:dd:14:
da:75:0e:3b:e2:5b:9f:7f:c1:2f:04:8f:92:da:8f:82:78:8f:
15:5c:64:1b:e4:1e:34:2e:44:f0:9d:ae:9e:fd:ec:21:68:bd:
e6:41:b9:5d:32:f3:5f:51:c2:9f:ec:2d:27:b8:d1:6e:c2:d0:
78:18:42:3b:08:fe:aa:b0:4d:9c:e0:66:7b:db:b5:ad:52:e1:
25:5d:76:d9:24:0e:22:9b:ca:8d:15:bc:0c:42:d1:e2:9c:d2:
81:ca:ea:75:8a:4b:5a:93:81:a8:8d:92:88:4f:07:a5:14:ad:
58:0d:c7:e7:e9:a1:50:f6:23:5b:ba:ce:e7:44:0f:c2:fb:1e:
b9:b5:7a:f5:d8:54:3f:db:d1:33:2e:08:a8:b3:88:a2:ac:9b:
d6:3b:48:25:4e:09:6b:bd:de:43:7e:23:b3:a3:22:81:85:4f:
45:0b:65:49:5f:cd:37:a9:80:ff:0b:50:ca:d3:eb:2c:08:bf:
9a:d6:16:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYriZ4FrRahBYEVZ206ZhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjQxMTIzMTEwMDI4WhcNMjQxMTI0MTEwMDI4WjAzMTEwLwYDVQQD
EyhlYzQwMzg3YzE3M2VhZmMzYTk1OTZkMzRkNGNhMzZhOGViZGI1NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XF4+LtSMAAM8l+xLDWByVMeuCyf
TiR0AhGy4cbGErpNrxo934NKC0+gSj0J/RDiUWaophRF2oTyv4gdpDWvpvh3cL57
6PXc8QoJ/XLj5ehTXpgsxwIf3WTc9lqgqdHIViUyJVn3v3qVYNqyHk2DXkAIMsgM
BIwN8qKVBx2QWOE7kwoc4TA1cQCfn2U41bFp4/j7ZpZEvRObl318ClEVhZMdNjfR
xMLf7iQwTSnFmXgzhrsUZNEX2TMWbkAVgcHk9DVvonwLM+GTZsiSgYvm3E4kgg85
a8wVskZWOfLAlhNk2TgAihmKWl7iN4bJrbRBakG9qXko8U1EMFVuw2ZbLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxAOHwXPq/DqVltNNTKNqjr21WOMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASkmd9mP
G/m9zf+iHeNjWqxm7/fr81TepKXUC6iWtiv/e//B9bzLy7y1VhoBVsYC8yhrVlB6
mIBCuMibCMTPTlUSmfYAZt0U2nUOO+Jbn3/BLwSPktqPgniPFVxkG+QeNC5E8J2u
nv3sIWi95kG5XTLzX1HCn+wtJ7jRbsLQeBhCOwj+qrBNnOBme9u1rVLhJV122SQO
IpvKjRW8DELR4pzSgcrqdYpLWpOBqI2SiE8HpRStWA3H5+mhUPYjW7rO50QPwvse
ubV69dhUP9vRMy4IqLOIoqyb1jtIJU4Ja73eQ34js6MigYVPRQtlSV/NN6mA/wtQ
ytPrLAi/mtYWqA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:08 2024 by rpki-client on console-ams.rpki-client.org