Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: DbuGeRt50exg74Udy9pZpzmtMvAk9+Zj2ElBrcasUJM=
Subject key identifier: E0:8C:C2:EF:CE:36:A5:8F:E2:E8:C5:71:86:1E:5C:5E:6F:6C:DB:D6
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019359C1326E5A0F4BAB5EE425E562B4101E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 16:00:53 +0000
Manifest this update: Sat 23 Nov 2024 16:00:53 +0000
Manifest next update: Sun 24 Nov 2024 16:00:53 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: QqLTNowAKQkFszHxccRcrxY0YIdWLFpqpzJ3QFDVrYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c1:32:6e:5a:0f:4b:ab:5e:e4:25:e5:62:b4:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Nov 23 16:00:53 2024 GMT
Not After : Nov 24 16:00:53 2024 GMT
Subject: CN=e08cc2efce36a58fe2e8c571861e5c5e6f6cdbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:10:f8:68:52:36:71:8e:6e:9c:48:c3:9b:
77:af:c6:b9:9c:d5:e5:e7:80:c5:59:4c:ac:65:a3:
bd:2f:8e:88:d3:74:e5:07:8b:6a:9f:c7:a8:2b:e2:
e4:8b:30:22:c6:23:2c:c8:b8:59:e2:4a:c8:23:6c:
10:29:15:06:73:03:9f:3e:41:fa:fa:ea:31:2d:14:
49:27:7e:2c:a9:23:c0:4d:e9:80:74:05:14:06:e6:
fb:bb:cb:ec:7c:53:0b:af:49:38:46:2f:c1:64:56:
61:b1:ff:dc:92:c5:12:7f:d6:3d:fb:49:5a:68:f9:
dd:cb:27:b0:cd:45:0a:3d:92:14:10:17:0a:ae:ba:
e2:7e:9f:b8:fd:46:96:29:1a:a2:a0:4a:36:a5:51:
71:28:4d:c2:3d:50:e7:75:78:99:61:a0:a8:fc:60:
8d:e2:3e:c2:39:ab:01:88:c5:74:f6:e3:7e:0e:cb:
a4:a9:b0:20:b0:55:3d:6c:0e:b1:36:c3:6b:ae:73:
c3:10:45:ff:81:86:09:47:d5:32:ca:35:7a:7b:aa:
71:d6:e2:bb:e9:2c:4b:64:f1:e7:85:70:89:8c:d5:
78:f3:22:47:5a:a1:84:4c:05:5b:af:2e:28:a2:a5:
ff:09:24:77:96:36:d0:01:71:1d:b6:4c:58:c3:a1:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:C2:EF:CE:36:A5:8F:E2:E8:C5:71:86:1E:5C:5E:6F:6C:DB:D6
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:31:b7:1a:d3:37:a9:4d:e7:f5:4f:20:1c:f8:48:ab:e8:
2b:8a:e3:80:10:3a:0c:d5:24:cb:03:2a:96:7c:06:c2:80:14:
95:46:56:df:10:85:37:85:12:6a:83:9c:7c:5b:95:8c:ca:7c:
c7:bf:f5:3b:a0:d0:12:d8:47:c1:7a:2a:67:24:75:c4:19:a5:
3b:02:7a:9e:08:9f:9a:2c:92:35:94:7f:6c:c7:b5:bc:65:e1:
cf:17:e1:dd:c0:8f:ac:a6:64:3d:ca:d8:6e:e3:69:e7:20:f8:
ff:b0:9d:f2:be:27:93:ae:ce:b7:1c:af:18:1f:7d:a3:a5:6e:
e3:b1:82:c7:19:8d:ca:77:9a:37:5e:c9:af:be:bd:1d:30:2d:
74:66:75:ae:7a:f7:dd:20:97:1b:66:93:53:b0:20:bf:c9:38:
96:87:df:a9:cd:0d:96:d9:e1:6d:02:3a:c1:2b:a2:a1:8e:72:
5a:72:eb:a4:80:4f:d7:b3:d8:6a:de:ac:ac:8e:bb:b5:af:aa:
2d:ae:74:f6:29:f5:93:da:c6:8a:25:a9:0f:b6:09:93:66:e9:
2c:86:0c:92:80:ab:5b:6a:43:b5:36:54:c2:ef:82:36:3a:57:
a7:6d:98:fa:59:73:dc:2b:a3:f6:ef:44:bd:75:a1:bb:1d:5f:
82:0c:9e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZwTJuWg9Lq17kJeVitBAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0
NTkwZWIwHhcNMjQxMTIzMTYwMDUzWhcNMjQxMTI0MTYwMDUzWjAzMTEwLwYDVQQD
EyhlMDhjYzJlZmNlMzZhNThmZTJlOGM1NzE4NjFlNWM1ZTZmNmNkYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GsQ+GhSNnGObpxIw5t3r8a5nNXl
54DFWUysZaO9L46I03TlB4tqn8eoK+LkizAixiMsyLhZ4krII2wQKRUGcwOfPkH6
+uoxLRRJJ34sqSPATemAdAUUBub7u8vsfFMLr0k4Ri/BZFZhsf/cksUSf9Y9+0la
aPndyyewzUUKPZIUEBcKrrrifp+4/UaWKRqioEo2pVFxKE3CPVDndXiZYaCo/GCN
4j7COasBiMV09uN+DsukqbAgsFU9bA6xNsNrrnPDEEX/gYYJR9UyyjV6e6px1uK7
6SxLZPHnhXCJjNV48yJHWqGETAVbry4ooqX/CSR3ljbQAXEdtkxYw6EylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCMwu/ONqWP4ujFcYYeXF5vbNvWMB8GA1UdIwQY
MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt
NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw
LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJoxtxrT
N6lN5/VPIBz4SKvoK4rjgBA6DNUkywMqlnwGwoAUlUZW3xCFN4USaoOcfFuVjMp8
x7/1O6DQEthHwXoqZyR1xBmlOwJ6ngifmiySNZR/bMe1vGXhzxfh3cCPrKZkPcrY
buNp5yD4/7Cd8r4nk67OtxyvGB99o6Vu47GCxxmNyneaN17Jr769HTAtdGZ1rnr3
3SCXG2aTU7Agv8k4loffqc0NltnhbQI6wSuioY5yWnLrpIBP17PYat6srI67ta+q
La509in1k9rGiiWpD7YJk2bpLIYMkoCrW2pDtTZUwu+CNjpXp22Y+llz3Cuj9u9E
vXWhux1fggyeRw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:35 2024 by rpki-client on console-fra.rpki-client.org