Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: cbaoiKmr3T5BRGQ10+ldHYdfZ19gRKL4IzEBq32nCVI=
Subject key identifier: 9D:0E:F6:96:96:D7:9A:CC:8D:AE:BD:10:5B:96:54:BC:27:A0:3A:D6
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 0193568A856F1FB81FABEB2F9FCD4663A12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 08A2
Signing time: Sat 23 Nov 2024 01:02:18 +0000
Manifest this update: Sat 23 Nov 2024 01:02:18 +0000
Manifest next update: Sun 24 Nov 2024 01:02:18 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: AbByR9nvg2bAe63M+sBq7R/d68E9EM3Yk9NBI2Aet4g=)
2: HHaXoKH7wYsF30YtP87twrZVrF8.roa (hash: FcVMEDmC0YfDGGh9SzRtXagr8H01r12Z6sqj1kvVws0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:85:6f:1f:b8:1f:ab:eb:2f:9f:cd:46:63:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Nov 23 01:02:18 2024 GMT
Not After : Nov 24 01:02:18 2024 GMT
Subject: CN=9d0ef69696d79acc8daebd105b9654bc27a03ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:cf:2e:2a:32:f3:41:4b:02:e7:5d:4c:23:
d9:56:9f:a7:bf:9d:6b:7d:e7:d9:fd:2d:1c:5a:48:
d6:31:1c:32:d6:89:2d:80:2c:e6:79:85:d7:7e:72:
be:70:b6:63:e1:31:23:71:35:e1:b9:fb:e1:83:c9:
1c:06:12:c9:af:f8:f6:ce:38:ce:0f:a3:aa:74:fe:
7f:70:c7:04:ce:96:a0:7e:59:2f:87:78:55:af:d1:
35:4a:80:96:bc:06:db:b1:90:92:76:fb:4e:b5:7b:
fb:58:0a:e8:71:b6:14:79:d1:5b:b2:bb:82:eb:74:
1a:bb:e9:dd:dd:eb:cc:7a:54:9c:ea:d0:9f:6c:96:
0c:3f:72:16:ff:e2:83:da:c4:75:57:d8:2b:15:0f:
ce:cf:a0:7c:f1:f5:c8:68:59:72:76:84:04:c4:6e:
cd:2f:a2:58:bb:cf:f8:e7:ec:d3:3c:07:f0:b2:8a:
5b:81:3c:d0:a3:11:c4:b8:e8:24:21:6b:30:6a:79:
f3:1c:69:a0:65:01:70:e5:6f:b4:20:68:70:03:77:
a1:3f:58:a8:6a:ec:d9:82:e8:30:f1:4a:f8:af:19:
2d:6c:93:7a:98:c2:9e:3c:e2:5d:9c:92:7a:b6:b8:
f3:50:9d:bc:8b:1c:d8:0a:b0:61:5b:c5:fe:1e:4b:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:F6:96:96:D7:9A:CC:8D:AE:BD:10:5B:96:54:BC:27:A0:3A:D6
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:33:a7:47:7b:7e:bb:ac:0d:1e:1d:ea:f0:bb:02:e9:7d:
30:3b:70:f0:cd:9a:a2:72:df:72:74:3b:ce:fb:c6:87:99:0b:
23:8f:f3:37:f5:ed:87:a1:80:73:9f:28:5b:61:4f:f1:7b:81:
c5:64:64:17:81:bf:74:16:65:1a:f5:8f:be:77:f2:8d:f2:ad:
f1:de:bd:14:d4:84:c3:96:e1:8a:37:ab:b4:d1:e4:64:4e:b1:
be:82:8e:18:68:8a:77:1d:20:07:99:b6:78:35:00:df:66:34:
6b:f8:ce:58:bd:30:b0:6f:1f:90:cf:8e:a4:a3:dd:4e:0c:15:
14:51:46:12:11:b9:bf:8b:10:ee:df:c5:f5:35:b9:d3:b5:02:
05:9e:bd:8d:ba:ca:4b:2a:07:05:83:89:41:36:a5:ad:e6:bb:
3e:a3:d5:29:df:d1:23:52:54:f6:da:80:cd:73:de:b4:9e:81:
b8:49:8e:38:92:95:18:0a:31:e7:40:03:db:44:16:c5:cb:54:
25:d2:d2:07:fe:f9:68:8d:b2:56:bc:22:87:a2:42:61:77:da:
cc:5f:da:bf:da:f5:83:41:aa:66:17:93:50:c6:5c:69:4d:27:
84:08:98:70:b4:80:d5:8a:e6:8b:ea:0d:38:73:11:ec:6e:f5:
d7:40:cf:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioVvH7gfq+svn81GY6EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjQxMTIzMDEwMjE4WhcNMjQxMTI0MDEwMjE4WjAzMTEwLwYDVQQD
Eyg5ZDBlZjY5Njk2ZDc5YWNjOGRhZWJkMTA1Yjk2NTRiYzI3YTAzYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfjPLioy80FLAuddTCPZVp+nv51r
fefZ/S0cWkjWMRwy1oktgCzmeYXXfnK+cLZj4TEjcTXhufvhg8kcBhLJr/j2zjjO
D6OqdP5/cMcEzpagflkvh3hVr9E1SoCWvAbbsZCSdvtOtXv7WArocbYUedFbsruC
63Qau+nd3evMelSc6tCfbJYMP3IW/+KD2sR1V9grFQ/Oz6B88fXIaFlydoQExG7N
L6JYu8/45+zTPAfwsopbgTzQoxHEuOgkIWswannzHGmgZQFw5W+0IGhwA3ehP1io
auzZgugw8Ur4rxktbJN6mMKePOJdnJJ6trjzUJ28ixzYCrBhW8X+HktPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0O9paW15rMja69EFuWVLwnoDrWMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVwzp0d7
frusDR4d6vC7Aul9MDtw8M2aonLfcnQ7zvvGh5kLI4/zN/Xth6GAc58oW2FP8XuB
xWRkF4G/dBZlGvWPvnfyjfKt8d69FNSEw5bhijertNHkZE6xvoKOGGiKdx0gB5m2
eDUA32Y0a/jOWL0wsG8fkM+OpKPdTgwVFFFGEhG5v4sQ7t/F9TW507UCBZ69jbrK
SyoHBYOJQTalrea7PqPVKd/RI1JU9tqAzXPetJ6BuEmOOJKVGAox50AD20QWxctU
JdLSB/75aI2yVrwih6JCYXfazF/av9r1g0GqZheTUMZcaU0nhAiYcLSA1Yrmi+oN
OHMR7G7110DPGQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:00 2024 by rpki-client on console-ams.rpki-client.org