Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: V/jTvq14qfTJeT7A9D0RGxwtG9FY+oVLyJ9oFuQJzg8=
Subject key identifier: F0:42:DD:56:85:4B:3E:D6:9F:8C:20:61:06:BE:1C:80:53:B8:AE:05
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 01938B51EA042BE1EC51B3823C2548831CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 138D
Signing time: Tue 03 Dec 2024 07:00:21 +0000
Manifest this update: Tue 03 Dec 2024 07:00:21 +0000
Manifest next update: Wed 04 Dec 2024 07:00:21 +0000
Files and hashes: 1: L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa (hash: jVNITNkvHVGp/GCaoGOwq3zLDOaNiCIsOWaaxtwNGZY=)
2: b0nIRToXgBPb0YIHM6WWl5OeP20.roa (hash: EdheXZF1H7vIdx/QmejPVNWQI+ipQ3+6twnXn8IkeUY=)
3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: ELYvEsPBBmIPih49PVmjCQOmezlML/e84jNMRJ+uLag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:51:ea:04:2b:e1:ec:51:b3:82:3c:25:48:83:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Dec 3 07:00:21 2024 GMT
Not After : Dec 4 07:00:21 2024 GMT
Subject: CN=f042dd56854b3ed69f8c206106be1c8053b8ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:af:76:61:68:ba:f0:89:a9:46:4e:bb:db:
f7:06:9e:97:ea:48:dc:d3:b4:03:92:05:2b:ad:99:
77:9e:7f:c4:7a:8d:66:84:62:06:5e:04:a0:43:76:
9d:96:fc:65:26:b6:76:9f:96:85:6f:d1:94:3d:72:
32:0e:49:6e:17:54:1b:81:05:98:d6:3d:e2:db:fe:
c5:f1:72:b0:11:22:b2:67:d4:98:20:60:99:12:f6:
02:bb:fd:ec:4f:41:d5:e5:8e:60:53:ee:be:2a:2f:
4c:bf:67:37:69:24:07:0f:5f:6b:3c:40:64:cb:8d:
e3:15:cb:6e:5f:38:8e:f2:73:eb:60:43:12:b6:d2:
f3:a3:02:04:1c:1d:79:f1:93:b9:66:a7:1b:18:f6:
47:0e:b6:86:94:9c:5b:59:c9:95:f8:9b:95:24:b1:
cf:8b:2f:7a:ca:46:d2:b7:72:4c:6e:28:67:51:0a:
70:b4:ee:82:a8:46:fe:12:e7:ca:bd:8b:cd:4f:a9:
89:8f:5f:a7:a8:1a:bb:9a:cc:a9:be:71:cb:ff:b1:
56:c4:91:64:10:79:76:40:44:c0:37:e1:94:2e:1f:
ab:a2:f2:02:cc:62:f7:56:67:02:1f:c7:37:71:2b:
f5:dc:cb:cc:2e:6b:c3:00:10:c1:df:fc:62:35:f6:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:DD:56:85:4B:3E:D6:9F:8C:20:61:06:BE:1C:80:53:B8:AE:05
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0e:53:28:6e:ea:4d:03:15:d2:6c:44:1a:9c:ff:cf:75:c5:
c7:f9:0e:c5:63:84:fa:a6:97:98:6d:0a:3f:7b:61:45:a7:27:
fa:15:2e:1e:c6:3b:13:94:ed:63:d5:d4:3b:a8:57:77:e2:62:
2b:44:6e:b4:f2:17:7e:14:2c:c5:af:71:0f:dd:47:71:f3:73:
20:28:e8:66:c0:62:33:6b:01:0f:7a:3c:2c:1b:1f:f5:19:8b:
1e:b8:26:a6:63:b2:71:c4:8e:10:3b:e9:f7:a1:b3:89:5e:1e:
28:5b:1f:3f:86:ac:2d:da:2b:55:24:44:9d:6e:c4:a8:51:ff:
d4:20:9d:15:57:e6:46:80:41:93:80:df:7d:20:1d:d1:2d:23:
ff:32:4d:50:a9:14:d7:6c:6f:27:eb:a7:aa:f7:2c:99:89:d3:
8b:f9:99:90:2e:8e:5d:d6:43:e7:34:36:df:c3:31:05:c0:39:
82:43:61:0b:26:d6:ac:4c:cd:e0:58:d3:67:53:86:49:79:3b:
3f:0c:f9:8e:55:70:8e:a5:1d:02:93:17:55:9e:8a:92:9f:bb:
1f:6e:d3:52:03:92:ac:35:77:e8:a9:8b:3d:9b:4b:af:fd:8d:
eb:c4:d0:18:18:95:e7:e6:4e:8e:2c:ea:44:92:39:62:20:67:
01:38:82:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLUeoEK+HsUbOCPCVIgxy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGM1NzNjMmQ4M2M3ZDhmZDJhM2NmOWE3ZjUzNmY5Mjky
NWEzYmQwHhcNMjQxMjAzMDcwMDIxWhcNMjQxMjA0MDcwMDIxWjAzMTEwLwYDVQQD
EyhmMDQyZGQ1Njg1NGIzZWQ2OWY4YzIwNjEwNmJlMWM4MDUzYjhhZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tGvdmFouvCJqUZOu9v3Bp6X6kjc
07QDkgUrrZl3nn/Eeo1mhGIGXgSgQ3adlvxlJrZ2n5aFb9GUPXIyDkluF1QbgQWY
1j3i2/7F8XKwESKyZ9SYIGCZEvYCu/3sT0HV5Y5gU+6+Ki9Mv2c3aSQHD19rPEBk
y43jFctuXziO8nPrYEMSttLzowIEHB158ZO5ZqcbGPZHDraGlJxbWcmV+JuVJLHP
iy96ykbSt3JMbihnUQpwtO6CqEb+EufKvYvNT6mJj1+nqBq7msypvnHL/7FWxJFk
EHl2QETAN+GULh+rovICzGL3VmcCH8c3cSv13MvMLmvDABDB3/xiNfbMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBC3VaFSz7Wn4wgYQa+HIBTuK4FMB8GA1UdIwQY
MBaAFJCMVzwtg8fY/So8+af1NvkpJaO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEt
NGU4NWJmZDdkMDU4LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEtNGU4NWJmZDdkMDU4
LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATg5TKG7q
TQMV0mxEGpz/z3XFx/kOxWOE+qaXmG0KP3thRacn+hUuHsY7E5TtY9XUO6hXd+Ji
K0RutPIXfhQsxa9xD91HcfNzICjoZsBiM2sBD3o8LBsf9RmLHrgmpmOyccSOEDvp
96GziV4eKFsfP4asLdorVSREnW7EqFH/1CCdFVfmRoBBk4DffSAd0S0j/zJNUKkU
12xvJ+unqvcsmYnTi/mZkC6OXdZD5zQ238MxBcA5gkNhCybWrEzN4FjTZ1OGSXk7
Pwz5jlVwjqUdApMXVZ6Kkp+7H27TUgOSrDV36KmLPZtLr/2N68TQGBiV5+ZOjizq
RJI5YiBnATiCOw==
-----END CERTIFICATE-----
Generated at Tue Dec 3 18:15:59 2024 by rpki-client on console-fra.rpki-client.org