Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: QXiVdyyVVdNhawernCVn6l+5iRFrrAeQRQlJdL2rG/8=
Subject key identifier: 57:A3:C6:63:34:93:BC:F6:43:8D:E8:F9:D0:DE:0B:A1:0F:40:18:D6
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 01936A466CBA83DCE66BB571B026CF73025B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 21:00:20 +0000
Manifest this update: Tue 26 Nov 2024 21:00:20 +0000
Manifest next update: Wed 27 Nov 2024 21:00:20 +0000
Files and hashes: 1: F7FEj2CinHEr6ELU3YDPe-hpCDQ.roa (hash: gyCJAb60LOtSLHYgddWWE5zxjOdPvzx3Frcb9nOFEQU=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: +J6QiEclEffc1CviSWHuZaN2NvLMRCpgbljh4kMSfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:6c:ba:83:dc:e6:6b:b5:71:b0:26:cf:73:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Nov 26 21:00:20 2024 GMT
Not After : Nov 27 21:00:20 2024 GMT
Subject: CN=57a3c6633493bcf6438de8f9d0de0ba10f4018d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:f7:1a:28:fe:d2:48:24:14:0b:bb:0c:ac:
98:26:36:f7:d5:21:61:6c:61:9d:83:f6:71:42:96:
be:71:93:ef:b0:ad:31:d0:c9:6b:93:73:6a:ac:dd:
18:9f:ab:c0:76:18:91:02:c8:e2:77:51:9a:b9:4c:
c6:78:9d:91:a2:5c:e9:cb:1e:e5:fa:fa:70:7b:12:
c7:3a:63:e4:6a:7d:fa:5d:d8:8b:18:78:77:a7:b0:
e1:07:e2:bf:39:5c:cb:c7:fe:b9:ae:38:df:9b:54:
09:35:b3:35:2d:7d:a5:bb:b5:66:ba:a0:9a:7d:3a:
e6:84:9a:b1:5a:28:81:7d:a3:fc:e7:5a:5e:a5:b1:
b1:7f:af:1c:1f:33:7b:0b:bc:b6:ce:cc:29:fc:15:
2c:75:50:d7:90:3b:93:b4:15:d1:78:48:a7:7c:8b:
cd:be:97:5c:99:03:f8:36:0d:6c:33:c9:39:83:95:
c4:b2:90:24:90:92:2e:5f:2d:16:5d:38:22:7e:42:
56:93:22:7f:48:1f:1c:e2:71:a1:d2:41:9d:df:13:
75:f9:ae:66:92:dc:4b:c8:20:7a:74:a7:5e:ae:64:
36:9f:6c:65:57:2f:66:6a:76:07:48:aa:15:72:ff:
64:ce:12:20:b2:d7:bb:27:9f:70:e1:e2:3b:26:62:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:C6:63:34:93:BC:F6:43:8D:E8:F9:D0:DE:0B:A1:0F:40:18:D6
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:fa:9d:46:fa:a8:f2:b1:4a:70:c1:a9:9e:0f:11:1a:8d:
df:c8:1d:59:41:f0:dc:eb:bf:a1:58:b0:1d:24:7c:71:e4:09:
6f:34:0f:74:a3:e3:8d:65:5c:f7:0b:82:08:81:2f:b7:e6:e2:
12:35:eb:ab:ee:6b:66:28:de:31:d1:dc:45:11:9e:56:74:a8:
89:f3:8e:fe:5e:37:ea:22:01:f1:76:d3:08:5c:09:13:25:bb:
22:6d:d5:b5:99:95:1b:a7:36:a2:bb:75:5f:b8:48:bb:c1:b7:
9f:0b:db:a6:50:ab:1d:40:b4:c9:e1:00:27:ea:dc:94:86:28:
19:c3:1f:9a:90:d5:96:c6:d9:61:81:d2:ef:1a:a9:c3:36:f5:
9c:21:8c:e4:c4:37:fa:56:20:6f:67:b0:28:7d:c6:5a:77:79:
ea:3c:27:f2:0d:78:05:9b:2f:d9:f9:6a:85:9e:12:8d:b4:2f:
51:0c:f9:f2:8c:0c:8a:37:61:8a:86:9c:d9:af:70:9e:49:35:
03:92:c8:aa:31:17:ba:ce:c8:75:81:0d:3d:ae:c3:46:cd:ce:
93:df:f5:3f:89:62:04:ae:ca:43:9a:9c:b1:7d:5d:12:eb:ef:
98:4d:45:26:ec:1b:3c:55:98:96:c3:09:1d:4b:4c:e0:5b:79:
32:36:ae:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRmy6g9zma7VxsCbPcwJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxMGJjMTUzNGJhZGMwOGZmOTQ3ZDk5MzUwNDcxMTkz
NTMxYjMwHhcNMjQxMTI2MjEwMDIwWhcNMjQxMTI3MjEwMDIwWjAzMTEwLwYDVQQD
Eyg1N2EzYzY2MzM0OTNiY2Y2NDM4ZGU4ZjlkMGRlMGJhMTBmNDAxOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1533Gij+0kgkFAu7DKyYJjb31SFh
bGGdg/ZxQpa+cZPvsK0x0Mlrk3NqrN0Yn6vAdhiRAsjid1GauUzGeJ2Rolzpyx7l
+vpwexLHOmPkan36XdiLGHh3p7DhB+K/OVzLx/65rjjfm1QJNbM1LX2lu7VmuqCa
fTrmhJqxWiiBfaP851pepbGxf68cHzN7C7y2zswp/BUsdVDXkDuTtBXReEinfIvN
vpdcmQP4Ng1sM8k5g5XEspAkkJIuXy0WXTgifkJWkyJ/SB8c4nGh0kGd3xN1+a5m
ktxLyCB6dKdermQ2n2xlVy9manYHSKoVcv9kzhIgste7J59w4eI7JmIjswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFejxmM0k7z2Q43o+dDeC6EPQBjWMB8GA1UdIwQY
MBaAFCPyELwVNLrcCP+UfZk1BHEZNTGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYt
MTEzNjNhMmJjZmFiLzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYtMTEzNjNhMmJjZmFi
LzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTb6nUb6
qPKxSnDBqZ4PERqN38gdWUHw3Ou/oViwHSR8ceQJbzQPdKPjjWVc9wuCCIEvt+bi
EjXrq+5rZijeMdHcRRGeVnSoifOO/l436iIB8XbTCFwJEyW7Im3VtZmVG6c2ort1
X7hIu8G3nwvbplCrHUC0yeEAJ+rclIYoGcMfmpDVlsbZYYHS7xqpwzb1nCGM5MQ3
+lYgb2ewKH3GWnd56jwn8g14BZsv2flqhZ4SjbQvUQz58owMijdhioac2a9wnkk1
A5LIqjEXus7IdYENPa7DRs3Ok9/1P4liBK7KQ5qcsX1dEuvvmE1FJuwbPFWYlsMJ
HUtM4Ft5MjauHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:20 2024 by rpki-client on console-ams.rpki-client.org