Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: 0+a+xmC35yTL1GBiLqybTqcWU/f8q4N1+SwES1WICC8=
Subject key identifier: 9B:20:52:8F:41:BE:FD:95:77:C8:80:88:D0:48:8E:7B:53:E0:E7:F1
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019352AE65275B76BDA4BDC6261ABF59371A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 04B0
Signing time: Fri 22 Nov 2024 07:03:00 +0000
Manifest this update: Fri 22 Nov 2024 07:03:00 +0000
Manifest next update: Sat 23 Nov 2024 07:03:00 +0000
Files and hashes: 1: 1-hWKwQ4VmMaTLDs6uF86znL85XM.roa (hash: krBqvBlqM/Uxcg3L+TVuQzMw+XFx+qvjy2ONGjWk3Vo=)
2: VlvHox6eCEruIB8_jSleU2BRQNY.roa (hash: yotlHm1ZoKHXu1SLqxVylVdZlHJ/Gozvd3iQ7pyxEBk=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: 2oPXJqfKkmeyoyEaKFHvJ7MuctVhbMLrhJcFwRXfFV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:65:27:5b:76:bd:a4:bd:c6:26:1a:bf:59:37:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Nov 22 07:03:00 2024 GMT
Not After : Nov 23 07:03:00 2024 GMT
Subject: CN=9b20528f41befd9577c88088d0488e7b53e0e7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:44:ec:15:db:df:fd:4b:83:2e:f1:bd:7c:
15:17:6e:e6:4c:50:32:76:c7:fc:bb:7d:7a:2a:d8:
33:ae:e6:3e:a9:79:89:32:4a:4d:94:41:41:5d:0b:
f8:2c:32:02:3f:3d:d4:a9:f9:d6:82:59:80:61:c6:
19:21:db:59:30:d7:c6:96:bc:72:ed:11:51:1c:01:
53:33:1a:98:fb:07:0a:8a:7d:5d:eb:58:5d:9a:b3:
74:f5:72:64:cd:15:63:29:aa:20:dc:a1:67:b5:6a:
cc:ec:36:8c:42:74:83:2f:32:13:f4:4f:f6:6e:24:
05:5e:42:31:71:24:29:2f:17:fd:c3:2a:8e:86:9d:
c3:d0:e9:9f:5c:5a:d1:23:30:90:79:c9:a2:3d:4d:
23:e7:be:f8:f9:d3:75:ae:8a:27:06:e8:46:30:c1:
3b:bc:8c:ec:c8:d4:6a:23:e2:3d:27:18:bd:04:b3:
7e:3a:e6:88:1a:65:28:28:2f:94:cd:50:d5:2c:bd:
64:a2:93:5f:25:7b:93:67:6e:a2:1a:1a:d5:75:58:
67:9d:64:df:7c:96:53:a9:d6:c3:ae:12:7d:85:02:
b8:9a:01:7c:41:2e:4d:7c:25:5e:36:73:fa:47:45:
6b:4f:ef:5f:ca:b7:47:e4:67:2c:5d:5b:be:d2:f6:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:52:8F:41:BE:FD:95:77:C8:80:88:D0:48:8E:7B:53:E0:E7:F1
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5a:32:4b:4c:20:b3:e6:96:b7:7c:54:72:3e:5c:6e:1c:24:
d9:f1:77:3c:b6:ad:e5:b7:e6:91:5d:de:15:0b:e1:ae:71:6f:
26:ed:83:97:e9:5d:0a:7f:15:42:41:cb:93:04:54:58:be:32:
6e:02:00:5a:2d:aa:f9:0d:85:36:19:2e:43:2a:ac:bf:8e:d9:
32:16:13:a8:bf:2f:60:e0:c5:18:59:02:ec:66:24:a8:2e:f1:
2c:5d:45:23:6d:61:28:e3:90:2e:be:c0:a4:34:fb:aa:b8:f5:
44:fc:3e:94:ac:26:af:ed:e0:31:c2:af:1a:e0:15:40:3b:24:
31:cf:da:5c:66:6f:da:7c:5f:43:dc:af:43:42:18:27:fb:ed:
71:1b:16:3c:26:c3:82:15:40:98:59:78:a8:91:57:22:2d:02:
bf:73:10:3a:85:f8:32:77:09:bb:a3:f4:41:04:88:56:ea:ee:
a9:32:c6:95:09:0f:f2:e6:d8:e0:b0:b5:de:aa:fa:42:56:01:
26:da:3f:69:93:4b:68:a1:35:e7:5a:89:5b:76:22:35:a9:6a:
1b:2a:88:db:4d:74:a6:70:86:98:9c:6a:56:58:af:fd:8b:63:
50:ed:0a:2c:28:c4:83:6e:f9:7d:ed:94:34:ad:c3:1b:b0:69:
15:99:d8:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrmUnW3a9pL3GJhq/WTcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjQxMTIyMDcwMzAwWhcNMjQxMTIzMDcwMzAwWjAzMTEwLwYDVQQD
Eyg5YjIwNTI4ZjQxYmVmZDk1NzdjODgwODhkMDQ4OGU3YjUzZTBlN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHJE7BXb3/1Lgy7xvXwVF27mTFAy
dsf8u316KtgzruY+qXmJMkpNlEFBXQv4LDICPz3UqfnWglmAYcYZIdtZMNfGlrxy
7RFRHAFTMxqY+wcKin1d61hdmrN09XJkzRVjKaog3KFntWrM7DaMQnSDLzIT9E/2
biQFXkIxcSQpLxf9wyqOhp3D0OmfXFrRIzCQecmiPU0j5774+dN1roonBuhGMME7
vIzsyNRqI+I9Jxi9BLN+OuaIGmUoKC+UzVDVLL1kopNfJXuTZ26iGhrVdVhnnWTf
fJZTqdbDrhJ9hQK4mgF8QS5NfCVeNnP6R0VrT+9fyrdH5GcsXVu+0vb/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsgUo9Bvv2Vd8iAiNBIjntT4OfxMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFoyS0wg
s+aWt3xUcj5cbhwk2fF3PLat5bfmkV3eFQvhrnFvJu2Dl+ldCn8VQkHLkwRUWL4y
bgIAWi2q+Q2FNhkuQyqsv47ZMhYTqL8vYODFGFkC7GYkqC7xLF1FI21hKOOQLr7A
pDT7qrj1RPw+lKwmr+3gMcKvGuAVQDskMc/aXGZv2nxfQ9yvQ0IYJ/vtcRsWPCbD
ghVAmFl4qJFXIi0Cv3MQOoX4MncJu6P0QQSIVuruqTLGlQkP8ubY4LC13qr6QlYB
Jto/aZNLaKE151qJW3YiNalqGyqI2010pnCGmJxqVliv/YtjUO0KLCjEg275fe2U
NK3DG7BpFZnYzQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:11 2024 by rpki-client on console-fra.rpki-client.org