Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: ygnlFRRIrbNGw65UxCxWXpT7eGzqsc6OfptnBugw7xw=
Subject key identifier: 04:6C:7D:62:E4:EB:8C:B9:44:89:E8:8F:B7:F0:69:BE:FA:52:63:FA
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 01935688E5BC1C1987195D35825BACFBD58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:00:32 +0000
Manifest this update: Sat 23 Nov 2024 01:00:32 +0000
Manifest next update: Sun 24 Nov 2024 01:00:32 +0000
Files and hashes: 1: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: NFyE+Z//fsHFtxxHmWEAEwwxVJTKFSG4ypvdeTheCdM=)
2: jik0t1c_-sdaE45PKQ3ds2YCheA.roa (hash: /ga48SoHEdEhXyu02riTSNQ+aD2VmIoj46jPuPzBkJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:e5:bc:1c:19:87:19:5d:35:82:5b:ac:fb:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Nov 23 01:00:32 2024 GMT
Not After : Nov 24 01:00:32 2024 GMT
Subject: CN=046c7d62e4eb8cb94489e88fb7f069befa5263fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:17:50:e5:71:83:31:c5:dd:3d:c8:4e:0d:
3c:f0:04:df:0e:1f:25:9e:39:c9:63:7e:69:c0:ae:
63:2d:95:fc:f9:78:e5:31:39:1b:49:33:e0:8a:c1:
02:9a:e3:26:18:c5:d0:60:6d:14:bb:b3:79:46:e8:
52:b8:ba:06:84:8d:bf:35:61:80:fa:42:95:39:a2:
80:09:0c:80:37:95:95:c7:5c:43:f5:ec:63:1e:48:
3d:4c:1d:89:c8:c1:f1:f3:78:85:a8:d2:e0:bc:2e:
69:2d:0a:f6:6b:45:7e:8e:46:61:97:ca:6b:71:d8:
c1:22:f5:bf:82:32:f4:9b:e8:a6:be:02:a4:83:c8:
26:a2:f5:44:18:0b:bf:a9:7b:c7:81:00:5a:5d:79:
94:92:55:2c:45:c8:73:49:be:c8:8f:01:4e:f7:4d:
0b:6b:62:bf:2b:57:80:67:f7:20:0c:97:33:f8:c5:
83:27:68:04:1c:e8:f1:f3:1a:21:47:dc:58:20:72:
53:b8:85:a2:72:9c:19:50:0e:ac:ce:aa:f6:ee:77:
3a:e4:af:14:77:e6:f3:a7:e0:2e:5e:c7:38:cc:b5:
ed:ff:1d:83:13:ad:12:96:9d:10:51:be:3f:c8:29:
37:3c:96:0a:b5:c9:d0:5a:a9:fb:70:4e:ea:8e:b5:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:7D:62:E4:EB:8C:B9:44:89:E8:8F:B7:F0:69:BE:FA:52:63:FA
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:a9:db:9b:6d:05:a3:87:aa:42:74:e2:a2:ea:18:91:b6:
76:d4:80:c1:c5:00:f7:d4:03:d1:30:52:37:93:02:c1:af:2b:
2b:70:e4:0f:3a:7f:d9:06:31:96:5c:61:20:ed:8b:f8:24:0a:
e8:b6:ec:a0:01:7a:2b:ff:a0:39:9d:ec:b8:ad:22:d4:1b:dd:
73:e0:21:17:b1:b2:e7:51:9b:54:fe:6f:e6:09:a6:5c:95:8a:
ab:da:36:95:8d:10:09:94:42:a4:12:28:56:a9:63:bb:f3:91:
60:c2:70:db:2d:3a:50:65:5b:a9:d0:dd:23:5f:31:1a:75:29:
af:35:e3:8b:8c:7b:cb:48:43:88:d3:51:d7:4b:47:c7:dd:a2:
ff:d6:e2:bd:10:56:a2:e9:c7:c0:54:db:c6:af:bd:98:f0:59:
2f:2c:26:f8:d8:fc:0b:fd:fd:50:52:5b:ca:ee:ba:47:c5:93:
8b:8e:52:08:06:4e:aa:5b:59:75:40:5c:3b:5e:39:39:47:d2:
fc:a4:1b:24:79:8f:5b:7d:f9:dd:6e:e7:8c:37:d1:d3:15:7f:
ff:4a:8b:3e:3f:8d:05:94:a6:b2:fc:a6:08:a2:e0:f4:58:22:
88:b8:d7:6a:f1:b0:a2:d2:d5:20:26:ae:fa:a1:40:f5:5c:db:
36:e4:1a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOW8HBmHGV01glus+9WPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDI5YjFlYjUxY2Q0ZjRiYzRkZDk4NWEwZWM2NTNhNzVl
Y2E0MGMwHhcNMjQxMTIzMDEwMDMyWhcNMjQxMTI0MDEwMDMyWjAzMTEwLwYDVQQD
EygwNDZjN2Q2MmU0ZWI4Y2I5NDQ4OWU4OGZiN2YwNjliZWZhNTI2M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yAXUOVxgzHF3T3ITg088ATfDh8l
njnJY35pwK5jLZX8+XjlMTkbSTPgisECmuMmGMXQYG0Uu7N5RuhSuLoGhI2/NWGA
+kKVOaKACQyAN5WVx1xD9exjHkg9TB2JyMHx83iFqNLgvC5pLQr2a0V+jkZhl8pr
cdjBIvW/gjL0m+imvgKkg8gmovVEGAu/qXvHgQBaXXmUklUsRchzSb7IjwFO900L
a2K/K1eAZ/cgDJcz+MWDJ2gEHOjx8xohR9xYIHJTuIWicpwZUA6szqr27nc65K8U
d+bzp+AuXsc4zLXt/x2DE60Slp0QUb4/yCk3PJYKtcnQWqn7cE7qjrVZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARsfWLk64y5RInoj7fwab76UmP6MB8GA1UdIwQY
MBaAFIoCmx61HNT0vE3ZhaDsZTp17KQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgt
MzgyNjljZWY1ZTAxLzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgtMzgyNjljZWY1ZTAx
LzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZap25tt
BaOHqkJ04qLqGJG2dtSAwcUA99QD0TBSN5MCwa8rK3DkDzp/2QYxllxhIO2L+CQK
6LbsoAF6K/+gOZ3suK0i1Bvdc+AhF7Gy51GbVP5v5gmmXJWKq9o2lY0QCZRCpBIo
Vqlju/ORYMJw2y06UGVbqdDdI18xGnUprzXji4x7y0hDiNNR10tHx92i/9bivRBW
ounHwFTbxq+9mPBZLywm+Nj8C/39UFJbyu66R8WTi45SCAZOqltZdUBcO145OUfS
/KQbJHmPW3353W7njDfR0xV//0qLPj+NBZSmsvymCKLg9FgiiLjXavGwotLVICau
+qFA9VzbNuQa4Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:34 2024 by rpki-client on console-fra.rpki-client.org