Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
File: IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft (raw, json)
Hash identifier: Nl8K6TXVugbke5LGJGZGNmLPsIE1+0wGetSInaJHr1s=
Subject key identifier: C1:03:00:45:28:CE:2D:8B:D6:27:AC:51:CB:60:E9:10:9F:87:B9:79
Authority key identifier: 21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
Certificate issuer: /CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Certificate serial: 019356F66BE11DACB03D2B037B5BB5BE3563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
Manifest number: 0ABF
Signing time: Sat 23 Nov 2024 03:00:10 +0000
Manifest this update: Sat 23 Nov 2024 03:00:10 +0000
Manifest next update: Sun 24 Nov 2024 03:00:10 +0000
Files and hashes: 1: IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl (hash: nZopWLPlJdW3gi5cuRd1cV4cDPTDLcCe9TuVdgHW2Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:6b:e1:1d:ac:b0:3d:2b:03:7b:5b:b5:be:35:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Validity
Not Before: Nov 23 03:00:10 2024 GMT
Not After : Nov 24 03:00:10 2024 GMT
Subject: CN=c103004528ce2d8bd627ac51cb60e9109f87b979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:ec:b1:b7:0c:e8:30:bf:de:d4:eb:92:a3:
94:02:fe:75:ae:8f:4f:e9:bb:51:0b:c8:68:ca:91:
1c:6a:b8:a6:d3:ca:2e:e4:0b:74:94:03:69:61:e6:
9a:b6:ad:d5:db:e0:50:30:44:58:0d:2a:50:0e:a4:
2b:0c:4f:c5:8e:f5:c6:87:f2:55:4a:f4:6c:53:09:
b1:1d:29:e4:be:73:11:8d:c9:89:14:a2:c6:81:a4:
50:f2:aa:80:03:94:34:1f:02:ae:40:c4:52:8f:eb:
90:84:75:57:b2:cb:c4:c5:ce:4c:fd:66:78:f5:d2:
ff:d5:21:46:cf:65:aa:28:4c:9f:5a:f3:a5:4c:80:
26:31:32:1c:21:94:9a:c4:3a:39:fd:e9:70:2c:47:
f7:a6:8f:42:68:8f:1d:f4:4e:c4:f5:0d:28:ea:58:
12:6b:e9:63:3b:f2:fc:4e:86:52:13:55:53:84:2b:
4b:dc:f5:46:69:31:4b:18:09:61:59:ed:f7:18:bd:
f3:4a:9c:2b:c5:d5:50:6c:58:4d:99:99:10:51:6b:
fe:30:bb:b9:3a:25:76:0e:d6:37:9e:2b:14:5a:db:
25:d2:17:e8:cc:71:13:2d:5e:ce:55:e0:1d:cb:35:
a1:00:d1:51:3c:1d:42:83:0f:b2:61:cb:32:66:87:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:00:45:28:CE:2D:8B:D6:27:AC:51:CB:60:E9:10:9F:87:B9:79
X509v3 Authority Key Identifier:
keyid:21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d4:3b:25:51:65:c8:ed:cf:25:7b:92:0f:45:63:43:13:e3:
c5:6a:9b:72:f6:a4:aa:f4:8e:e8:83:99:92:78:df:42:18:c6:
97:7b:1c:39:25:3b:57:47:30:f9:68:ed:61:8b:f6:42:1c:88:
a2:3f:55:a5:18:9d:54:7e:76:2b:33:a5:ee:a8:39:4d:81:c1:
02:d6:f7:43:e8:54:09:dd:f6:1f:e4:3f:e2:5c:e6:d6:df:d7:
13:61:e5:55:04:13:c7:8d:d6:9c:59:b4:60:b2:a2:38:de:79:
e3:65:2b:82:9e:73:61:da:95:cc:1d:47:1e:0d:77:ca:69:39:
46:a7:a0:de:df:0b:4b:10:cd:a5:dc:5b:b7:19:8c:74:7c:a1:
2d:b0:69:98:58:0a:ab:a9:d3:d4:c3:38:5c:ce:87:d3:08:ab:
7f:9f:5f:89:68:fc:6d:5a:b1:74:5c:f5:dc:23:ea:84:88:b3:
80:49:1b:dd:48:fc:dd:eb:e1:bf:69:33:e7:fa:34:72:68:3e:
08:4d:e4:a4:69:26:f1:7a:d6:6a:80:ae:b4:b7:aa:78:6b:ca:
d3:c5:ca:f4:02:24:52:76:34:a0:c6:25:c2:11:56:6f:17:06:
ba:89:a1:94:3d:53:36:65:b8:94:aa:3a:f5:7f:33:f4:24:56:
ee:37:65:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9mvhHaywPSsDe1u1vjVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNThjY2YyNjc0NTVlY2IwOWVlODRjOWFkOWFlYjAwN2Rk
MWVhOWIwHhcNMjQxMTIzMDMwMDEwWhcNMjQxMTI0MDMwMDEwWjAzMTEwLwYDVQQD
EyhjMTAzMDA0NTI4Y2UyZDhiZDYyN2FjNTFjYjYwZTkxMDlmODdiOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+nssbcM6DC/3tTrkqOUAv51ro9P
6btRC8hoypEcarim08ou5At0lANpYeaatq3V2+BQMERYDSpQDqQrDE/FjvXGh/JV
SvRsUwmxHSnkvnMRjcmJFKLGgaRQ8qqAA5Q0HwKuQMRSj+uQhHVXssvExc5M/WZ4
9dL/1SFGz2WqKEyfWvOlTIAmMTIcIZSaxDo5/elwLEf3po9CaI8d9E7E9Q0o6lgS
a+ljO/L8ToZSE1VThCtL3PVGaTFLGAlhWe33GL3zSpwrxdVQbFhNmZkQUWv+MLu5
OiV2DtY3nisUWtsl0hfozHETLV7OVeAdyzWhANFRPB1Cgw+yYcsyZocWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEDAEUozi2L1iesUctg6RCfh7l5MB8GA1UdIwQY
MBaAFCFYzPJnRV7LCe6Eya2a6wB90eqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZqTThtZEZYc3NKN29USnJacnJBSDNSNnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mMTBlYjEtNGU4Zi00MzllLTk2ODMt
ZjUzMzI1NzY3YjU3LzEvSVZqTThtZEZYc3NKN29USnJacnJBSDNSNnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mMTBlYjEtNGU4Zi00MzllLTk2ODMtZjUzMzI1NzY3YjU3
LzEvSVZqTThtZEZYc3NKN29USnJacnJBSDNSNnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNQ7JVFl
yO3PJXuSD0VjQxPjxWqbcvakqvSO6IOZknjfQhjGl3scOSU7V0cw+WjtYYv2QhyI
oj9VpRidVH52KzOl7qg5TYHBAtb3Q+hUCd32H+Q/4lzm1t/XE2HlVQQTx43WnFm0
YLKiON5542Urgp5zYdqVzB1HHg13ymk5Rqeg3t8LSxDNpdxbtxmMdHyhLbBpmFgK
q6nT1MM4XM6H0wirf59fiWj8bVqxdFz13CPqhIizgEkb3Uj83evhv2kz5/o0cmg+
CE3kpGkm8XrWaoCutLeqeGvK08XK9AIkUnY0oMYlwhFWbxcGuomhlD1TNmW4lKo6
9X8z9CRW7jdlNw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:43 2024 by rpki-client on console-fra.rpki-client.org