Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: kyyg9o2IVicTVOIUJ7SELSpDWWPgK1xnKeTJKyxqs9A=
Subject key identifier: 00:EE:8B:5C:9C:F9:CD:3B:B8:C3:08:53:99:E7:50:DE:B6:54:3C:88
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 0190411C421CA712CF4F8A0A8C8481311BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 11D5
Signing time: Sat 22 Jun 2024 18:01:29 +0000
Manifest this update: Sat 22 Jun 2024 18:01:29 +0000
Manifest next update: Sun 23 Jun 2024 18:01:29 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: VDVKN1ta+zSgSIn8tG4G7VDZypj+HieMZVAjlY5ldtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:1c:42:1c:a7:12:cf:4f:8a:0a:8c:84:81:31:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Jun 22 18:01:29 2024 GMT
Not After : Jun 23 18:01:29 2024 GMT
Subject: CN=00ee8b5c9cf9cd3bb8c3085399e750deb6543c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:ae:e3:7c:9e:7f:e1:45:53:9e:0f:52:6f:
71:0e:8d:5f:d5:a5:0f:a3:60:d8:22:da:06:31:a5:
d5:c1:7a:7b:25:ed:c6:0c:3b:14:ba:67:51:44:a0:
ca:29:59:c4:26:b7:d6:c1:ee:34:87:1f:a9:32:18:
de:18:d8:f6:b9:59:29:d5:5f:eb:e3:9a:6c:65:a0:
29:ca:01:eb:86:cf:6b:d3:46:6c:da:ca:10:fd:f2:
64:79:31:73:06:69:f3:b8:8c:07:ea:32:9a:e3:b8:
56:8b:8d:32:d7:f1:ce:88:90:63:f8:e2:b1:80:50:
a9:5e:c4:d3:e1:eb:81:78:be:5e:71:d0:62:cc:e4:
c8:32:dd:30:9d:f2:b4:bf:95:19:d7:70:97:76:dc:
2b:78:91:d2:b9:2e:ef:6e:60:dc:0b:27:07:40:8b:
23:e2:24:42:49:5a:eb:3e:6f:be:01:61:e1:fb:b1:
bf:c9:3b:8b:ad:6c:cd:e3:6d:92:86:a2:08:ff:f3:
fc:0b:e2:ac:58:16:34:29:2e:1a:d0:b1:ed:a0:9e:
23:41:bc:75:43:49:9e:f9:15:17:5a:a1:2f:54:49:
f1:1b:18:16:89:a8:98:0e:9b:2d:a6:b0:5d:fb:8b:
5c:8f:21:be:b3:77:d8:e1:22:7f:b5:3e:14:23:e9:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:8B:5C:9C:F9:CD:3B:B8:C3:08:53:99:E7:50:DE:B6:54:3C:88
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:3a:5a:47:24:ca:ae:d3:3a:5b:c1:ea:b5:c8:8d:70:73:
95:88:ca:48:15:17:ab:0c:47:5a:82:9f:61:0e:9b:1e:2c:70:
fb:34:33:eb:22:83:0f:c8:a9:95:84:75:a0:7e:6c:72:85:65:
a9:3a:aa:26:71:80:7c:ba:23:f4:ea:9c:fc:4d:70:75:09:d1:
7e:70:9b:1e:91:1e:3c:8b:7e:a9:af:d4:d8:ac:43:f3:22:7e:
16:0f:15:39:a0:fc:f7:46:36:5f:2f:30:e4:a4:fa:86:b0:ba:
a2:fc:78:a6:a3:d2:3e:1f:ec:92:94:c0:4c:c3:31:f1:8c:e6:
22:15:e4:06:12:dd:ac:cf:ca:93:d8:45:dd:ba:b5:96:45:b2:
f2:cc:de:88:bc:be:d5:dd:c9:c7:11:b1:f4:29:a0:28:1c:c3:
4a:ea:55:ab:1b:c0:e1:e7:6e:70:27:f5:4b:80:9b:c5:8c:67:
bc:a0:db:e7:a9:8a:1d:8e:4d:fc:09:84:e9:6a:a3:e7:8a:da:
38:bf:b8:aa:ab:68:aa:9a:ea:cb:77:f7:66:76:fb:56:c1:a2:
71:39:cf:2a:af:96:a7:b8:57:9f:e5:de:7a:0e:3d:4d:88:9f:
c8:fa:13:24:23:27:dd:09:0e:69:c8:86:71:28:e4:28:6e:57:
ee:ee:40:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBHEIcpxLPT4oKjISBMRulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZDU2NjdjNDEyODE0MTEzOWNjYTdjNTA0N2ZjMTcyNTBi
ZjYzYWYwHhcNMjQwNjIyMTgwMTI5WhcNMjQwNjIzMTgwMTI5WjAzMTEwLwYDVQQD
EygwMGVlOGI1YzljZjljZDNiYjhjMzA4NTM5OWU3NTBkZWI2NTQzYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6eu43yef+FFU54PUm9xDo1f1aUP
o2DYItoGMaXVwXp7Je3GDDsUumdRRKDKKVnEJrfWwe40hx+pMhjeGNj2uVkp1V/r
45psZaApygHrhs9r00Zs2soQ/fJkeTFzBmnzuIwH6jKa47hWi40y1/HOiJBj+OKx
gFCpXsTT4euBeL5ecdBizOTIMt0wnfK0v5UZ13CXdtwreJHSuS7vbmDcCycHQIsj
4iRCSVrrPm++AWHh+7G/yTuLrWzN422ShqII//P8C+KsWBY0KS4a0LHtoJ4jQbx1
Q0me+RUXWqEvVEnxGxgWiaiYDpstprBd+4tcjyG+s3fY4SJ/tT4UI+ntbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADui1yc+c07uMMIU5nnUN62VDyIMB8GA1UdIwQY
MBaAFJrVZnxBKBQROcynxQR/wXJQv2OvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NzlmMGYtMDcwZS00NDNkLThlY2Qt
Njg3MjM1NTgzOGEyLzEvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NzlmMGYtMDcwZS00NDNkLThlY2QtNjg3MjM1NTgzOGEy
LzEvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLU6Wkck
yq7TOlvB6rXIjXBzlYjKSBUXqwxHWoKfYQ6bHixw+zQz6yKDD8iplYR1oH5scoVl
qTqqJnGAfLoj9Oqc/E1wdQnRfnCbHpEePIt+qa/U2KxD8yJ+Fg8VOaD890Y2Xy8w
5KT6hrC6ovx4pqPSPh/skpTATMMx8YzmIhXkBhLdrM/Kk9hF3bq1lkWy8szeiLy+
1d3JxxGx9CmgKBzDSupVqxvA4educCf1S4CbxYxnvKDb56mKHY5N/AmE6Wqj54ra
OL+4qqtoqprqy3f3Znb7VsGicTnPKq+Wp7hXn+Xeeg49TYifyPoTJCMn3QkOaciG
cSjkKG5X7u5A2g==
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:43:22 2024 by rpki-client on console-fra.rpki-client.org