Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: DdKvzqN9U14sqnGin6fi07lW8P8JxaPSttDsBSaaC4k=
Subject key identifier: B3:D6:CF:BF:86:B8:CF:39:B3:9F:32:D9:47:52:4A:F1:0A:8E:95:AE
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019357649D242CBD7A834837695844433454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 132F
Signing time: Sat 23 Nov 2024 05:00:31 +0000
Manifest this update: Sat 23 Nov 2024 05:00:31 +0000
Manifest next update: Sun 24 Nov 2024 05:00:31 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: fiGde2jNE8UJe/e8udB3hPCORVIrC7YRyFIz3HJZ4IM=)
2: XsLMgFhH6aIjmRPUYwcy8SA2mM8.roa (hash: LlD5nY0I8JDzIffH9n3rG6LInjdphBh7nqXgX4J8iaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:9d:24:2c:bd:7a:83:48:37:69:58:44:43:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Nov 23 05:00:31 2024 GMT
Not After : Nov 24 05:00:31 2024 GMT
Subject: CN=b3d6cfbf86b8cf39b39f32d947524af10a8e95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:5f:f9:d3:49:9f:e9:6f:0f:83:68:c2:ac:
b8:8d:34:a5:c0:2b:40:dd:57:58:b1:fd:e9:32:79:
f7:74:3e:5b:4d:f3:9d:47:e9:88:52:d7:ff:ce:a1:
98:1b:82:7e:30:f5:83:37:e6:87:6d:ca:80:23:76:
c7:b7:a9:d3:d6:6a:86:04:5c:ce:c7:79:72:35:46:
10:fc:75:19:4e:92:86:ae:ff:8b:0c:34:4e:c9:0a:
51:9e:22:46:e6:cc:6d:80:48:02:01:18:d8:9c:f0:
67:cf:4e:45:2f:4c:88:74:5d:d3:66:f4:d0:e6:c4:
af:0a:50:36:85:cc:c6:53:69:47:c5:85:e4:9e:3f:
e6:e7:99:03:7b:60:29:b4:04:4e:4b:e9:39:d2:9a:
12:96:ce:10:ea:b0:9d:e1:38:5b:40:53:58:0c:2e:
33:d2:01:ea:9f:ab:da:4a:36:9f:32:72:db:b7:f5:
cd:84:f2:5d:24:cd:22:df:e3:f5:1d:63:6c:9b:b6:
70:bf:70:b5:67:b5:b8:73:4b:13:e9:4e:1e:ba:03:
f1:08:e1:b1:5a:ac:b3:0a:ca:90:2a:11:5d:ad:f5:
4f:e3:cc:46:a8:55:26:ad:cd:7f:5b:74:f4:3f:37:
cb:10:fb:be:84:1a:de:ee:17:f9:c7:58:22:54:f7:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:CF:BF:86:B8:CF:39:B3:9F:32:D9:47:52:4A:F1:0A:8E:95:AE
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:c5:b1:14:aa:91:bf:9c:af:54:f0:27:29:45:28:6a:59:
49:37:c8:fe:9a:c5:c0:73:5b:39:3f:04:8a:b2:24:27:06:82:
25:af:fe:72:e0:e4:a7:b9:b6:b9:06:80:13:de:93:77:40:76:
65:c5:aa:d6:28:86:a5:85:e0:78:07:45:ab:f4:b4:bb:64:e4:
9d:4d:e1:b1:82:cb:c7:7a:25:69:fa:df:8a:48:7f:ef:1e:f6:
fc:5d:66:1c:b4:1e:e5:23:b1:3e:da:eb:94:46:2b:36:57:e5:
13:4c:91:a2:a6:b1:d7:ed:e8:6b:4d:ad:ae:c4:2a:61:fd:1a:
e0:24:1f:fa:fc:55:e1:bc:d9:92:41:32:8d:73:50:b7:01:3d:
29:1f:f5:a0:12:a2:c8:23:65:c4:68:d2:a9:52:c8:59:7f:4d:
60:fc:7c:5c:a5:81:ee:fd:9a:31:d3:2d:5f:17:4e:2e:ef:b2:
b6:f6:d5:3a:bf:06:d1:9f:b8:1e:86:0a:fa:ab:c3:dd:ef:3a:
33:f3:2d:01:e0:83:fb:71:fa:a4:57:41:3a:ac:76:55:25:b7:
8e:49:5d:e6:6a:c1:a6:be:eb:88:b9:a7:1e:73:e7:d1:8a:63:
94:c6:d6:79:d9:76:da:40:69:c7:2e:26:c1:3b:f2:2b:43:3a:
41:e6:a9:6b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNXZJ0kLL16g0g3aVhEQzRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjQxMTIzMDUwMDMxWhcNMjQxMTI0MDUwMDMxWjAzMTEwLwYDVQQD
EyhiM2Q2Y2ZiZjg2YjhjZjM5YjM5ZjMyZDk0NzUyNGFmMTBhOGU5NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQpf+dNJn+lvD4Nowqy4jTSlwCtA
3VdYsf3pMnn3dD5bTfOdR+mIUtf/zqGYG4J+MPWDN+aHbcqAI3bHt6nT1mqGBFzO
x3lyNUYQ/HUZTpKGrv+LDDROyQpRniJG5sxtgEgCARjYnPBnz05FL0yIdF3TZvTQ
5sSvClA2hczGU2lHxYXknj/m55kDe2AptAROS+k50poSls4Q6rCd4ThbQFNYDC4z
0gHqn6vaSjafMnLbt/XNhPJdJM0i3+P1HWNsm7Zwv3C1Z7W4c0sT6U4eugPxCOGx
WqyzCsqQKhFdrfVP48xGqFUmrc1/W3T0PzfLEPu+hBre7hf5x1giVPeZ0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLPWz7+GuM85s58y2UdSSvEKjpWuMB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2jF
sRSqkb+cr1TwJylFKGpZSTfI/prFwHNbOT8EirIkJwaCJa/+cuDkp7m2uQaAE96T
d0B2ZcWq1iiGpYXgeAdFq/S0u2TknU3hsYLLx3olafrfikh/7x72/F1mHLQe5SOx
PtrrlEYrNlflE0yRoqax1+3oa02trsQqYf0a4CQf+vxV4bzZkkEyjXNQtwE9KR/1
oBKiyCNlxGjSqVLIWX9NYPx8XKWB7v2aMdMtXxdOLu+ytvbVOr8G0Z+4HoYK+qvD
3e86M/MtAeCD+3H6pFdBOqx2VSW3jkld5mrBpr7riLmnHnPn0YpjlMbWedl22kBp
xy4mwTvyK0M6Qeapaw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:38 2024 by rpki-client on console-ams.rpki-client.org