Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: PQP29/p2XvOJxR3+QxjMy6ECCkSFCWGcJuYZiDgQ7os=
Subject key identifier: AF:66:C6:CA:7F:79:C8:49:56:9E:2D:70:F3:BE:B5:0C:7A:35:BF:42
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 0193591BDBB62C4F08981FAD20C2E89BB017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 070B
Signing time: Sat 23 Nov 2024 13:00:18 +0000
Manifest this update: Sat 23 Nov 2024 13:00:18 +0000
Manifest next update: Sun 24 Nov 2024 13:00:18 +0000
Files and hashes: 1: Jj-HlKAdwX8Rqd39yN366lk7ugs.roa (hash: rW6rh9puwjEdTcyAZdqOLnerYu65S/bSJw/xJXOXNNc=)
2: R9SHoybjRZLiS3RciqmBp2hyyxg.roa (hash: 49KPRI7lXrR/YoufrUp3Ace99OEdjaygDG1i/DtQ+fM=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: 5y8ogn40r/QWpDZQ1glyTTVf9MM4Xs0YFZkBujWXC1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1b:db:b6:2c:4f:08:98:1f:ad:20:c2:e8:9b:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Nov 23 13:00:18 2024 GMT
Not After : Nov 24 13:00:18 2024 GMT
Subject: CN=af66c6ca7f79c849569e2d70f3beb50c7a35bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:ea:21:b7:3f:b1:49:b8:cb:e8:78:6e:1f:
43:22:96:ea:b9:1a:f6:01:4a:23:e3:21:8a:c8:fb:
ec:5d:c8:28:8e:b9:34:7a:5e:54:ee:b9:f0:35:c1:
64:58:91:65:fb:8e:7c:1a:11:50:ae:f8:93:2b:ad:
23:7e:fd:4d:3f:a6:bd:16:e6:5c:80:21:35:2f:31:
47:cf:93:a8:d8:87:83:7c:44:ef:33:56:46:ab:fb:
12:3d:9d:89:03:59:ee:35:ae:ef:fc:b0:bf:40:dc:
75:e6:7c:48:ac:cd:bd:4d:14:14:b6:ba:16:7a:96:
84:5b:28:48:f9:31:2c:e4:8d:38:de:64:a0:16:dd:
bf:9d:66:f6:f6:cc:46:b5:16:41:36:93:11:5c:a9:
df:4d:1f:0b:3c:96:91:ad:b7:71:7d:eb:16:3a:c7:
f9:43:27:37:c4:7c:7c:19:59:53:7f:2a:2d:a0:7d:
bf:d3:c1:3d:59:09:67:72:58:6a:a6:74:78:dc:a4:
85:11:ed:9c:6e:cb:f0:82:c1:7e:cc:6b:b2:3f:b7:
ac:f3:9b:cc:f6:a7:a3:ee:96:9d:47:d5:fe:f0:e2:
9e:7e:db:13:f2:34:f5:01:4e:06:66:4a:7d:c7:6c:
cd:f8:49:0e:d4:da:55:ab:32:27:ff:1c:68:b9:41:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:C6:CA:7F:79:C8:49:56:9E:2D:70:F3:BE:B5:0C:7A:35:BF:42
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:c1:c8:eb:2a:0e:de:94:e2:99:36:85:c7:d2:c9:dc:15:
29:21:b5:48:f7:7a:03:e4:92:2d:b9:17:c6:51:d1:37:71:45:
72:7a:a9:f2:0c:83:f8:89:38:aa:26:b2:15:6c:23:59:41:13:
01:3f:df:e8:0c:1e:61:ff:7f:51:4e:14:af:98:fe:77:11:48:
7a:ec:be:6c:84:99:dc:05:83:8e:0f:64:c1:1d:39:92:d2:e5:
c7:2b:fb:e1:40:85:38:b0:6a:4b:78:d0:bd:d0:be:55:44:ab:
5c:ab:3a:1e:97:64:a6:15:fd:dd:92:8d:03:e9:b1:db:11:28:
9c:9f:1c:6e:67:81:fb:f3:a0:81:2e:8e:94:da:a0:b2:64:96:
c0:0e:06:f6:a6:4e:b9:41:99:ff:6e:38:ed:fb:8f:eb:8d:6e:
96:1a:5d:19:ed:f8:a8:14:e3:30:c0:0a:1c:03:21:85:24:38:
e2:16:99:58:c2:be:26:98:bb:8b:15:c9:11:b9:1a:82:f3:19:
40:77:64:79:41:a9:36:18:21:a6:13:ef:8c:53:ab:b6:10:1f:
bb:72:ff:a5:2d:20:e9:f6:12:a4:3c:0a:91:07:ce:74:08:2b:
8b:c3:55:04:ce:97:72:c0:bd:3d:9b:40:ca:be:db:71:0e:18:
41:f2:c0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZG9u2LE8ImB+tIMLom7AXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5
Y2NmYjcwHhcNMjQxMTIzMTMwMDE4WhcNMjQxMTI0MTMwMDE4WjAzMTEwLwYDVQQD
EyhhZjY2YzZjYTdmNzljODQ5NTY5ZTJkNzBmM2JlYjUwYzdhMzViZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4jqIbc/sUm4y+h4bh9DIpbquRr2
AUoj4yGKyPvsXcgojrk0el5U7rnwNcFkWJFl+458GhFQrviTK60jfv1NP6a9FuZc
gCE1LzFHz5Oo2IeDfETvM1ZGq/sSPZ2JA1nuNa7v/LC/QNx15nxIrM29TRQUtroW
epaEWyhI+TEs5I043mSgFt2/nWb29sxGtRZBNpMRXKnfTR8LPJaRrbdxfesWOsf5
Qyc3xHx8GVlTfyotoH2/08E9WQlnclhqpnR43KSFEe2cbsvwgsF+zGuyP7es85vM
9qej7padR9X+8OKeftsT8jT1AU4GZkp9x2zN+EkO1NpVqzIn/xxouUHM1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9mxsp/echJVp4tcPO+tQx6Nb9CMB8GA1UdIwQY
MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt
MjUwN2RiMzJjMWM0LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0
LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASofByOsq
Dt6U4pk2hcfSydwVKSG1SPd6A+SSLbkXxlHRN3FFcnqp8gyD+Ik4qiayFWwjWUET
AT/f6AweYf9/UU4Ur5j+dxFIeuy+bISZ3AWDjg9kwR05ktLlxyv74UCFOLBqS3jQ
vdC+VUSrXKs6HpdkphX93ZKNA+mx2xEonJ8cbmeB+/OggS6OlNqgsmSWwA4G9qZO
uUGZ/2447fuP641ulhpdGe34qBTjMMAKHAMhhSQ44haZWMK+Jpi7ixXJEbkagvMZ
QHdkeUGpNhghphPvjFOrthAfu3L/pS0g6fYSpDwKkQfOdAgri8NVBM6XcsC9PZtA
yr7bcQ4YQfLASg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:39 2024 by rpki-client on console-fra.rpki-client.org