Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: 1HkSfHj1bUt1PkG+tp6eIAa3dePad0SUtQlXu3yZcQA=
Subject key identifier: 25:2A:EE:C9:1A:1A:5F:92:2B:36:32:85:31:3E:E6:39:B6:6F:CF:E3
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01936AB4C2E97972187ACEFF2E44420BD0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 11A8
Signing time: Tue 26 Nov 2024 23:00:51 +0000
Manifest this update: Tue 26 Nov 2024 23:00:51 +0000
Manifest next update: Wed 27 Nov 2024 23:00:51 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: mBjiH5Oqnsd3r5H7iJ3ofricnLNemjEUoGhLhMUjVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:c2:e9:79:72:18:7a:ce:ff:2e:44:42:0b:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Nov 26 23:00:51 2024 GMT
Not After : Nov 27 23:00:51 2024 GMT
Subject: CN=252aeec91a1a5f922b363285313ee639b66fcfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:aa:f8:03:f2:1c:31:14:75:fc:aa:f2:bb:
5f:67:cb:df:42:d6:e4:70:15:57:51:e0:c7:71:ea:
6d:fd:f5:18:ba:f8:9a:ca:a0:68:bb:af:3a:2f:04:
88:f8:74:6c:77:40:6e:ef:91:aa:b2:d3:98:b5:13:
7b:a9:e5:c3:5b:87:31:1a:b6:a1:e2:50:40:c9:ef:
4e:6a:3f:f9:e8:82:bf:71:d0:7f:16:15:fe:85:84:
4a:6b:57:7b:be:72:84:90:de:46:5f:f1:ce:d3:59:
a4:75:6b:0a:2e:fe:d3:9a:50:b3:76:16:22:ba:60:
38:5c:0c:44:72:f6:c3:8f:0a:d3:11:33:a4:e1:5a:
66:60:70:ea:06:0b:21:b7:da:2c:d7:c9:95:9f:25:
e1:88:12:e2:49:a6:9c:2b:e2:5f:e7:7d:a1:29:02:
87:a2:0c:a4:80:9d:f5:1b:e2:97:07:3d:ed:a0:a2:
cf:18:47:7f:b3:b0:20:56:1d:20:7a:0a:65:a4:aa:
31:c2:27:fa:84:f1:13:04:b1:f1:02:bc:e2:4d:5a:
9b:d1:40:84:00:83:b5:03:a2:92:ed:72:26:e0:f2:
cb:d7:f5:17:1f:6e:a7:d1:8e:31:bb:c7:a5:ea:90:
a8:01:48:42:0f:be:d4:df:9a:63:dc:ae:cf:e1:f0:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2A:EE:C9:1A:1A:5F:92:2B:36:32:85:31:3E:E6:39:B6:6F:CF:E3
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:c5:a6:c9:3a:8e:88:bb:a4:c7:28:e4:bc:e5:74:2e:97:
3a:e0:50:58:11:ce:90:b6:1f:02:1b:25:29:f2:e2:1d:e8:18:
49:78:4e:11:43:8f:71:b2:b7:0c:f9:e6:ed:10:bc:02:f6:eb:
54:59:33:e5:76:d9:e3:72:12:91:36:65:3d:a2:7f:4f:25:dc:
f7:c9:b9:55:99:14:de:55:07:69:4f:a7:a1:f1:28:29:f1:ab:
ed:00:0b:e7:95:01:0e:f4:af:f7:cb:c5:7b:7e:3c:5a:45:fb:
3f:9c:08:7a:3d:5c:a6:51:ea:fd:c4:a1:b7:df:a7:6a:b4:9a:
b6:51:2e:bf:b3:69:1b:9e:56:5a:59:05:4f:28:4e:28:69:ea:
d4:e5:a0:68:e2:0f:2e:f1:17:41:56:f9:b6:53:a4:9d:06:06:
5e:86:39:55:02:82:2f:af:45:19:1d:85:17:43:b0:f9:8f:64:
68:b9:f1:6f:6c:77:94:ca:67:ec:c7:f7:45:4e:bb:de:28:a1:
24:8a:60:ce:e4:b4:74:a4:f4:17:b1:64:3a:8e:4c:9b:31:24:
e4:8a:51:37:1e:1c:49:86:20:3f:d7:4d:d3:41:7f:00:67:50:
27:fc:00:84:ba:0f:d6:0d:17:d6:be:3c:88:cd:ad:20:9d:5a:
b8:0a:4a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtMLpeXIYes7/LkRCC9CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy
Mjg3ZmUwHhcNMjQxMTI2MjMwMDUxWhcNMjQxMTI3MjMwMDUxWjAzMTEwLwYDVQQD
EygyNTJhZWVjOTFhMWE1ZjkyMmIzNjMyODUzMTNlZTYzOWI2NmZjZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB6q+APyHDEUdfyq8rtfZ8vfQtbk
cBVXUeDHcept/fUYuviayqBou686LwSI+HRsd0Bu75GqstOYtRN7qeXDW4cxGrah
4lBAye9Oaj/56IK/cdB/FhX+hYRKa1d7vnKEkN5GX/HO01mkdWsKLv7TmlCzdhYi
umA4XAxEcvbDjwrTETOk4VpmYHDqBgsht9os18mVnyXhiBLiSaacK+Jf532hKQKH
ogykgJ31G+KXBz3toKLPGEd/s7AgVh0gegplpKoxwif6hPETBLHxArziTVqb0UCE
AIO1A6KS7XIm4PLL1/UXH26n0Y4xu8el6pCoAUhCD77U35pj3K7P4fA6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUq7skaGl+SKzYyhTE+5jm2b8/jMB8GA1UdIwQY
MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt
YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw
LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiLFpsk6
joi7pMco5LzldC6XOuBQWBHOkLYfAhslKfLiHegYSXhOEUOPcbK3DPnm7RC8Avbr
VFkz5XbZ43ISkTZlPaJ/TyXc98m5VZkU3lUHaU+nofEoKfGr7QAL55UBDvSv98vF
e348WkX7P5wIej1cplHq/cSht9+narSatlEuv7NpG55WWlkFTyhOKGnq1OWgaOIP
LvEXQVb5tlOknQYGXoY5VQKCL69FGR2FF0Ow+Y9kaLnxb2x3lMpn7Mf3RU673iih
JIpgzuS0dKT0F7FkOo5MmzEk5IpRNx4cSYYgP9dN00F/AGdQJ/wAhLoP1g0X1r48
iM2tIJ1auApKkA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:00 2024 by rpki-client on console-fra.rpki-client.org