Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: JXK0FU708r7mlzM/NNzRTkEgHW5yODwmXNIL+PfAcNE=
Subject key identifier: 35:A5:F9:70:8B:51:46:FF:A1:4E:5A:42:08:8D:31:09:B0:A7:F9:F0
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01935207794E3F3FA717E404D46FFB5099AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 011D
Signing time: Fri 22 Nov 2024 04:00:41 +0000
Manifest this update: Fri 22 Nov 2024 04:00:41 +0000
Manifest next update: Sat 23 Nov 2024 04:00:41 +0000
Files and hashes: 1: YtR0PZxBUe0Aw-U5qhwgf09DiPM.roa (hash: TLwH4jlxYkfI2CAC465j7jyEhTMO/92w9lFXybdbEk4=)
2: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: JbaAyYwMGYRjikugeOYCiQNuYgYCPlyhCI4CKwLffhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:79:4e:3f:3f:a7:17:e4:04:d4:6f:fb:50:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Nov 22 04:00:41 2024 GMT
Not After : Nov 23 04:00:41 2024 GMT
Subject: CN=35a5f9708b5146ffa14e5a42088d3109b0a7f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:bd:d3:b7:70:9e:43:da:4e:c3:5f:97:92:
a8:74:81:1b:40:0e:46:1f:92:cc:66:f6:50:e7:b6:
cc:cc:8e:92:73:9f:30:df:3e:bd:4b:96:c2:82:78:
07:82:ba:ae:c8:ff:5f:af:48:86:20:c2:2c:67:81:
c5:18:97:d2:a6:4a:87:11:3f:85:04:34:b5:03:fc:
b9:10:8d:5a:c9:58:46:48:b5:02:7c:21:bb:fd:35:
9e:48:32:ff:c6:f2:8c:93:14:97:9a:06:a3:03:4f:
ec:7b:fd:09:4e:b2:d2:56:42:66:e1:3b:ce:c2:42:
6c:82:ee:7c:8e:11:7a:60:92:cc:5a:86:92:34:ce:
e5:f0:93:67:fa:3a:6d:dd:ea:7b:78:b1:e6:2d:11:
66:08:42:13:6a:66:02:1b:fb:ab:35:25:4f:22:ea:
94:65:e5:fc:45:5d:4f:3a:8d:2b:58:04:93:a8:a6:
0f:a5:2b:87:c8:38:ee:2c:fb:f5:46:4a:0e:20:f6:
63:bc:3b:31:7e:d8:ca:a1:04:09:1f:77:a2:d6:36:
76:2c:01:29:7a:85:fa:0c:d8:99:1d:87:96:d9:7d:
a7:31:7a:61:be:e5:11:4e:05:2b:4f:68:4e:68:36:
6f:3b:38:45:1b:c0:52:72:f7:03:0e:34:ca:8f:0b:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:F9:70:8B:51:46:FF:A1:4E:5A:42:08:8D:31:09:B0:A7:F9:F0
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e8:2f:e0:7d:89:b2:2c:89:a9:e6:72:9d:94:c4:c6:8e:db:
cb:dd:31:21:43:01:0c:42:fb:7a:4b:4e:b0:71:c6:33:f5:e9:
88:b2:ed:dd:37:69:c2:31:c0:df:a2:4c:1e:e4:51:46:d6:fc:
42:d2:53:ee:1d:a2:33:37:fc:65:e6:72:d7:e8:9d:96:92:6f:
52:60:a0:90:e2:55:84:4b:1d:65:f5:68:97:2b:10:0a:56:7e:
2e:7a:aa:7f:00:eb:39:07:d2:c0:97:cc:06:8c:23:b6:30:2e:
2e:b8:de:a0:6a:1e:98:7b:c4:f0:2e:b2:7c:7d:0b:81:5f:f8:
6a:7b:88:ce:c7:54:1f:5c:47:d4:41:7c:52:83:5c:11:81:42:
4c:9a:f0:40:4e:12:dd:e0:65:42:6e:57:cc:38:8d:79:b4:9f:
b4:bf:ab:e0:0b:6f:35:75:52:5f:83:46:38:36:09:44:7d:d9:
9d:b1:09:7d:40:77:17:d3:2f:79:a7:74:4c:61:45:ec:19:a2:
f1:fe:08:0e:47:5f:5e:26:4a:47:f7:e5:5a:27:df:e1:bd:41:
86:f0:a9:d1:aa:d4:d1:71:fe:2f:2a:12:ac:26:f0:23:f9:ee:
8a:99:c5:36:3a:e7:62:fc:00:fe:a3:00:2f:13:7c:ae:b7:02:
8c:ce:fa:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB3lOPz+nF+QE1G/7UJmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjQxMTIyMDQwMDQxWhcNMjQxMTIzMDQwMDQxWjAzMTEwLwYDVQQD
EygzNWE1Zjk3MDhiNTE0NmZmYTE0ZTVhNDIwODhkMzEwOWIwYTdmOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4a907dwnkPaTsNfl5KodIEbQA5G
H5LMZvZQ57bMzI6Sc58w3z69S5bCgngHgrquyP9fr0iGIMIsZ4HFGJfSpkqHET+F
BDS1A/y5EI1ayVhGSLUCfCG7/TWeSDL/xvKMkxSXmgajA0/se/0JTrLSVkJm4TvO
wkJsgu58jhF6YJLMWoaSNM7l8JNn+jpt3ep7eLHmLRFmCEITamYCG/urNSVPIuqU
ZeX8RV1POo0rWASTqKYPpSuHyDjuLPv1RkoOIPZjvDsxftjKoQQJH3ei1jZ2LAEp
eoX6DNiZHYeW2X2nMXphvuURTgUrT2hOaDZvOzhFG8BScvcDDjTKjwtExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWl+XCLUUb/oU5aQgiNMQmwp/nwMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPegv4H2J
siyJqeZynZTExo7by90xIUMBDEL7ektOsHHGM/XpiLLt3TdpwjHA36JMHuRRRtb8
QtJT7h2iMzf8ZeZy1+idlpJvUmCgkOJVhEsdZfVolysQClZ+LnqqfwDrOQfSwJfM
BowjtjAuLrjeoGoemHvE8C6yfH0LgV/4anuIzsdUH1xH1EF8UoNcEYFCTJrwQE4S
3eBlQm5XzDiNebSftL+r4AtvNXVSX4NGODYJRH3ZnbEJfUB3F9Mvead0TGFF7Bmi
8f4IDkdfXiZKR/flWiff4b1BhvCp0arU0XH+LyoSrCbwI/nuipnFNjrnYvwA/qMA
LxN8rrcCjM76BQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:22 2024 by rpki-client on console-fra.rpki-client.org