Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: +zkmu5VXouZaGN78OCPdKSjhuai9VZqNr7j1YbcfoiQ=
Subject key identifier: 4A:AB:59:ED:AC:63:66:3A:B5:F1:BF:D4:23:7C:E8:3C:E5:1F:23:2D
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 0193579BB2FAEF30E4713AE83649E16269AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 038B
Signing time: Sat 23 Nov 2024 06:00:41 +0000
Manifest this update: Sat 23 Nov 2024 06:00:41 +0000
Manifest next update: Sun 24 Nov 2024 06:00:41 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: Gl79ALAPXt59BT3o7kNGxdDOyyOmy0lW63SHbtGvHKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b2:fa:ef:30:e4:71:3a:e8:36:49:e1:62:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Nov 23 06:00:41 2024 GMT
Not After : Nov 24 06:00:41 2024 GMT
Subject: CN=4aab59edac63663ab5f1bfd4237ce83ce51f232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:67:db:46:4c:da:94:ed:6f:30:8c:70:6f:
cb:38:9d:ca:bc:e3:54:88:fa:55:3d:b3:af:2b:c6:
7b:cb:4a:b0:14:1e:92:32:6b:8f:33:42:cb:b6:2c:
9f:2b:6e:36:1b:08:b4:8e:ad:e9:39:37:1a:4b:ac:
b6:b6:6d:71:93:f3:16:39:2f:41:ff:1d:a5:de:8f:
03:fd:34:c6:16:9c:80:1f:82:fb:5a:59:22:c4:b6:
37:e0:2a:e5:69:7a:b9:23:bb:44:25:b1:f7:7a:ab:
27:8f:c9:47:19:36:b4:df:bb:a7:b9:84:5c:4b:77:
df:ee:92:e3:d2:32:b1:8d:75:14:96:b2:02:56:50:
b7:87:b6:3d:c5:66:be:e0:65:b6:27:f5:8e:26:79:
ec:1b:b9:e0:3b:2f:d4:11:58:1f:61:0d:23:fb:a5:
d3:88:c6:7f:94:06:81:b2:75:8b:c7:5b:e5:8d:77:
cf:9f:76:3a:17:7c:8c:5b:8d:c0:d4:59:b8:60:e7:
ca:63:c3:b6:24:26:36:c5:d8:02:57:ba:ed:ac:bc:
c5:9e:59:40:f2:59:9e:94:a7:f5:d1:73:da:b4:13:
a9:df:91:df:ec:ae:8a:76:51:7e:29:b8:26:2c:3a:
08:34:a5:59:33:87:00:e2:d8:2a:b0:a6:8d:e6:ec:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:59:ED:AC:63:66:3A:B5:F1:BF:D4:23:7C:E8:3C:E5:1F:23:2D
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:35:00:a7:a4:fe:1c:9a:94:52:ba:f1:89:c6:80:82:f2:
26:87:67:fc:6f:1c:5e:b2:47:bd:06:3d:73:5b:5f:23:2d:2f:
a8:f0:c6:5d:f8:88:06:53:97:6f:ae:02:37:a0:6e:a1:c5:24:
f0:0b:2c:34:bf:62:c1:8f:dc:b8:ce:5c:a0:fc:95:69:37:e5:
35:88:ff:87:45:51:19:11:0f:58:25:c4:7b:42:61:25:cb:c7:
bc:c1:94:0d:3e:59:2b:dc:58:8c:74:70:5a:c2:6f:dd:ce:1e:
00:0c:b2:da:7f:bf:23:b3:5a:e8:15:e8:69:30:b2:c9:45:cc:
f3:3c:3e:3d:2d:f2:5e:aa:7f:06:22:af:35:1f:8d:ec:be:45:
2b:45:35:61:86:47:1f:50:53:4f:71:28:d4:b5:18:96:9f:09:
ab:6f:0f:d8:9a:1c:83:b0:68:3c:27:2f:56:df:fe:6a:1f:fa:
02:bb:9e:cc:98:85:65:b4:62:e4:a7:26:65:3e:dd:04:3e:d5:
86:ee:f1:aa:e1:d1:41:b6:a7:8f:a9:54:11:db:17:6f:55:3a:
7c:d9:41:0d:75:3d:37:6e:ec:a1:68:0e:f3:20:60:c4:ae:e5:
bd:f4:78:de:9f:28:86:0e:77:3e:5e:fa:6b:57:c1:32:b9:1b:
7f:2d:6b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm7L67zDkcTroNknhYmmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzhmOGM5YzcwNzJiNzMwNDg4ZjllMzIxMjhkZDg5NWJk
ZTMyZDMwHhcNMjQxMTIzMDYwMDQxWhcNMjQxMTI0MDYwMDQxWjAzMTEwLwYDVQQD
Eyg0YWFiNTllZGFjNjM2NjNhYjVmMWJmZDQyMzdjZTgzY2U1MWYyMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftn20ZM2pTtbzCMcG/LOJ3KvONU
iPpVPbOvK8Z7y0qwFB6SMmuPM0LLtiyfK242Gwi0jq3pOTcaS6y2tm1xk/MWOS9B
/x2l3o8D/TTGFpyAH4L7WlkixLY34CrlaXq5I7tEJbH3eqsnj8lHGTa037unuYRc
S3ff7pLj0jKxjXUUlrICVlC3h7Y9xWa+4GW2J/WOJnnsG7ngOy/UEVgfYQ0j+6XT
iMZ/lAaBsnWLx1vljXfPn3Y6F3yMW43A1Fm4YOfKY8O2JCY2xdgCV7rtrLzFnllA
8lmelKf10XPatBOp35Hf7K6KdlF+KbgmLDoINKVZM4cA4tgqsKaN5uzlOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqrWe2sY2Y6tfG/1CN86DzlHyMtMB8GA1UdIwQY
MBaAFNd4+MnHBytzBIj54yEo3Ylb3jLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAt
NThiZTkyN2Y0MmU5LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAtNThiZTkyN2Y0MmU5
LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd01AKek
/hyalFK68YnGgILyJodn/G8cXrJHvQY9c1tfIy0vqPDGXfiIBlOXb64CN6BuocUk
8AssNL9iwY/cuM5coPyVaTflNYj/h0VRGREPWCXEe0JhJcvHvMGUDT5ZK9xYjHRw
WsJv3c4eAAyy2n+/I7Na6BXoaTCyyUXM8zw+PS3yXqp/BiKvNR+N7L5FK0U1YYZH
H1BTT3Eo1LUYlp8Jq28P2Jocg7BoPCcvVt/+ah/6AruezJiFZbRi5KcmZT7dBD7V
hu7xquHRQbanj6lUEdsXb1U6fNlBDXU9N27soWgO8yBgxK7lvfR43p8ohg53Pl76
a1fBMrkbfy1rfg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:34 2024 by rpki-client on console-fra.rpki-client.org