Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: Oqh9jeDOqtUhnI47F6PtwUNwzzAMqBJ+3CZ01LaG9Pg=
Subject key identifier: BE:48:8E:09:3F:E9:92:F1:4D:77:A9:20:F4:D9:9B:D1:C4:F4:26:DE
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0192395DB824DFCA9EA15DCF264F990B4496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 10A9
Signing time: Sat 28 Sep 2024 16:01:36 +0000
Manifest this update: Sat 28 Sep 2024 16:01:36 +0000
Manifest next update: Sun 29 Sep 2024 16:01:36 +0000
Files and hashes: 1: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 7piUg+O8WNbmbuo0Jk3UWca5dsTaCjfx4DigvFMli4s=)
2: wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa (hash: ZKLu6UiMMmyZXer45QHDVSJWJYLolaDxwNV7YeOcoNc=)
3: xztdvHZdEwmJOpL7Zwdew4htxe8.roa (hash: ueSQpVHIPNpaqo1C9GS5kjreXxSFOetnCH2ivICAdwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:5d:b8:24:df:ca:9e:a1:5d:cf:26:4f:99:0b:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Sep 28 16:01:36 2024 GMT
Not After : Sep 29 16:01:36 2024 GMT
Subject: CN=be488e093fe992f14d77a920f4d99bd1c4f426de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:96:dd:81:49:f5:5d:b3:be:58:a1:03:57:
7b:c2:e3:ad:0a:12:74:1e:fa:04:27:a4:a0:de:7d:
4d:25:8f:0d:9e:2d:9e:32:51:06:0f:d6:ff:3a:5c:
50:26:6c:bc:d4:7b:e6:b4:cb:21:b4:21:7a:a6:e0:
3a:6f:67:d1:82:a9:42:ff:bc:02:c3:bb:a7:03:d4:
0b:23:89:f0:47:67:c2:d2:20:9a:1a:b1:63:0e:00:
bb:e9:09:6a:f0:82:69:7e:8f:51:69:b6:0f:a8:33:
13:dd:27:6d:d3:c0:17:d5:e2:88:1f:cc:81:91:d7:
c5:cd:8f:71:67:dd:f1:21:d4:cd:4f:a5:97:20:48:
80:dc:ca:fc:92:83:7d:3e:06:75:be:73:a0:02:cf:
43:6f:25:93:8f:b9:af:87:76:e9:a1:f8:7d:63:8c:
cd:35:c2:96:58:6b:4f:38:c5:9e:f9:8f:5f:b2:2f:
5f:50:88:30:82:21:d1:ba:c5:69:ee:e7:f7:f3:1d:
48:b7:b8:cf:84:2c:80:a4:62:4f:38:33:1d:a1:e7:
4f:f3:fd:12:b2:31:0d:b3:fa:58:be:20:a0:07:86:
d7:89:3d:ff:73:7d:6c:cc:79:6c:e2:3e:09:fa:2a:
a9:73:8b:da:60:22:56:91:43:a3:13:af:30:59:13:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:8E:09:3F:E9:92:F1:4D:77:A9:20:F4:D9:9B:D1:C4:F4:26:DE
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:01:57:44:04:71:39:62:2b:cf:36:59:b0:cd:26:ac:92:
e3:af:6b:df:8d:35:24:57:b4:86:43:b6:44:2b:26:7b:9b:34:
9d:85:11:cf:4a:67:da:23:d6:ea:1d:48:ec:24:39:c5:64:e7:
f3:88:b4:0e:1d:bb:90:31:6a:cf:79:96:67:ce:00:a6:4f:9a:
db:b0:dd:4d:d6:c4:cd:b4:26:f5:8c:e5:68:cf:84:1f:3e:fe:
5d:f3:1f:61:26:2c:b1:ab:ce:14:ee:e9:39:7c:a0:8d:bb:a0:
23:35:0b:31:3e:19:46:de:e4:bd:a3:1b:a8:a9:f6:fd:b8:06:
bb:3b:73:5e:15:06:da:b7:10:c3:5d:63:80:7f:ec:57:2a:9e:
c6:79:13:cb:79:e5:91:77:c4:b5:80:b8:a4:f6:9b:59:08:b0:
7e:0e:54:9f:70:3b:40:ff:17:4a:98:18:0f:7d:4f:2e:4a:6c:
f4:b7:32:79:e0:34:21:b7:fd:b9:83:33:0c:47:76:89:6e:bb:
21:a4:f1:cd:ac:e1:84:fb:6c:06:dc:f7:f5:50:c8:62:32:79:
4b:30:f3:00:3c:65:64:70:87:35:d1:54:47:21:61:5f:4d:a2:
76:78:89:7c:62:3a:e0:14:8b:d9:cb:5a:7a:e8:a3:87:1b:9c:
ca:8e:15:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5Xbgk38qeoV3PJk+ZC0SWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjQwOTI4MTYwMTM2WhcNMjQwOTI5MTYwMTM2WjAzMTEwLwYDVQQD
EyhiZTQ4OGUwOTNmZTk5MmYxNGQ3N2E5MjBmNGQ5OWJkMWM0ZjQyNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHOW3YFJ9V2zvlihA1d7wuOtChJ0
HvoEJ6Sg3n1NJY8Nni2eMlEGD9b/OlxQJmy81HvmtMshtCF6puA6b2fRgqlC/7wC
w7unA9QLI4nwR2fC0iCaGrFjDgC76Qlq8IJpfo9RabYPqDMT3Sdt08AX1eKIH8yB
kdfFzY9xZ93xIdTNT6WXIEiA3Mr8koN9PgZ1vnOgAs9DbyWTj7mvh3bpofh9Y4zN
NcKWWGtPOMWe+Y9fsi9fUIgwgiHRusVp7uf38x1It7jPhCyApGJPODMdoedP8/0S
sjENs/pYviCgB4bXiT3/c31szHls4j4J+iqpc4vaYCJWkUOjE68wWRPU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5Ijgk/6ZLxTXepIPTZm9HE9CbeMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDUBV0QE
cTliK882WbDNJqyS469r3401JFe0hkO2RCsme5s0nYURz0pn2iPW6h1I7CQ5xWTn
84i0Dh27kDFqz3mWZ84Apk+a27DdTdbEzbQm9YzlaM+EHz7+XfMfYSYssavOFO7p
OXygjbugIzULMT4ZRt7kvaMbqKn2/bgGuztzXhUG2rcQw11jgH/sVyqexnkTy3nl
kXfEtYC4pPabWQiwfg5Un3A7QP8XSpgYD31PLkps9LcyeeA0Ibf9uYMzDEd2iW67
IaTxzazhhPtsBtz39VDIYjJ5SzDzADxlZHCHNdFURyFhX02idniJfGI64BSL2cta
euijhxucyo4Vlw==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:30:38 2024 by rpki-client on console-fra.rpki-client.org