Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.mft
File: NFbthoHLYfSZtAaF0H0TCuhQOqY.mft (raw, json)
Hash identifier: 9+9tqmXod9IDY9yHMbU6w0I7jwb0IdqOfxqAd5Wkywg=
Subject key identifier: 22:32:0A:90:F8:EF:B1:C6:C5:94:7F:86:67:DE:50:A4:1D:0D:FE:A9
Authority key identifier: 34:56:ED:86:81:CB:61:F4:99:B4:06:85:D0:7D:13:0A:E8:50:3A:A6
Certificate issuer: /CN=3456ed8681cb61f499b40685d07d130ae8503aa6
Certificate serial: 01901E5930A6A520999EF80D2C4D1F9E47BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFbthoHLYfSZtAaF0H0TCuhQOqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 00:01:19 +0000
Manifest this update: Sun 16 Jun 2024 00:01:19 +0000
Manifest next update: Mon 17 Jun 2024 00:01:19 +0000
Files and hashes: 1: NFbthoHLYfSZtAaF0H0TCuhQOqY.crl (hash: xuGlMxqcflfGU2J6LnJJ3YSLbH4LUV1PTVHomHAK4uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFbthoHLYfSZtAaF0H0TCuhQOqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:30:a6:a5:20:99:9e:f8:0d:2c:4d:1f:9e:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3456ed8681cb61f499b40685d07d130ae8503aa6
Validity
Not Before: Jun 16 00:01:19 2024 GMT
Not After : Jun 17 00:01:19 2024 GMT
Subject: CN=22320a90f8efb1c6c5947f8667de50a41d0dfea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:f0:23:1f:e6:11:ac:13:72:c3:20:71:d8:
a5:14:3b:13:84:58:13:8e:c6:f3:63:cb:d0:d2:d4:
67:55:e6:e8:ef:5c:c5:f4:76:81:60:c0:0f:ee:59:
a9:d8:4e:e8:a8:c8:4f:0c:71:35:3c:38:30:b9:b2:
99:56:3f:44:67:2e:5f:85:6e:7f:f2:bb:95:3c:5d:
31:81:72:cf:48:07:6e:92:db:c4:21:0a:9c:a5:a5:
16:65:de:54:e5:56:12:29:56:56:6f:75:dc:32:9e:
a4:b7:c9:5a:a3:54:fb:98:96:48:03:17:8c:62:6b:
8e:77:71:44:3d:0a:2d:70:50:86:97:e8:f3:15:fa:
b6:3f:c7:ce:83:9c:c6:10:c5:2b:26:01:dc:ce:05:
d4:ba:03:23:9d:c0:48:6b:54:b0:c7:b9:09:32:0e:
1c:8a:92:33:19:6c:e4:f3:4d:74:09:da:f1:d1:6c:
0a:33:d5:6e:5a:10:42:69:db:7f:c3:cd:e7:7a:cc:
d9:b8:a5:1d:79:83:a6:02:a3:5e:93:6b:05:73:c9:
fd:b5:28:e3:1f:da:64:1a:c2:5a:66:1b:db:9f:77:
3f:1f:94:37:0e:7b:7d:7a:be:34:2a:27:1c:84:f5:
a1:58:8c:46:44:e3:ac:f1:4c:a9:50:ac:11:29:56:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:0A:90:F8:EF:B1:C6:C5:94:7F:86:67:DE:50:A4:1D:0D:FE:A9
X509v3 Authority Key Identifier:
keyid:34:56:ED:86:81:CB:61:F4:99:B4:06:85:D0:7D:13:0A:E8:50:3A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFbthoHLYfSZtAaF0H0TCuhQOqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:6e:d9:ca:74:36:43:9c:b3:34:b0:08:89:8c:b8:4e:58:
a3:43:c6:83:b2:c8:c2:8e:76:9c:4a:f4:0b:57:c5:eb:3b:b2:
2c:70:13:de:68:c6:a7:16:26:eb:ad:20:08:8e:73:45:9d:0d:
31:3b:39:fd:ae:7d:be:ca:db:0c:ff:a0:59:7c:cc:dc:90:a5:
58:ad:50:f1:7d:b7:bc:ca:21:77:2c:56:2f:59:79:63:0c:dc:
1d:02:6d:7c:98:2e:13:a7:49:57:7e:39:bc:ef:97:79:87:a3:
a2:5a:e1:11:71:e6:26:d9:b3:90:d2:54:e5:5d:11:0f:5b:56:
db:23:00:6f:09:c5:4c:b3:ea:a9:0a:cb:69:1e:51:42:37:6f:
7d:ec:d4:7e:ac:99:b2:cf:d7:6f:e1:c4:6c:fb:f2:66:0a:7f:
98:e1:78:93:74:d2:bc:aa:5c:eb:26:64:05:a9:58:e4:ad:27:
c3:58:70:cf:ca:e3:31:11:ec:d1:f2:cb:cb:f4:45:ed:89:59:
7a:c1:1e:d2:fe:67:af:c0:54:05:59:80:f0:19:d0:49:08:38:
5a:79:86:0b:fe:2c:c2:87:54:81:a7:20:12:c8:5d:0f:2c:de:
b7:ee:f4:2a:78:ec:f1:29:a4:43:92:b0:57:bc:f0:3e:92:72:
bf:11:66:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWTCmpSCZnvgNLE0fnke9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NTZlZDg2ODFjYjYxZjQ5OWI0MDY4NWQwN2QxMzBhZTg1
MDNhYTYwHhcNMjQwNjE2MDAwMTE5WhcNMjQwNjE3MDAwMTE5WjAzMTEwLwYDVQQD
EygyMjMyMGE5MGY4ZWZiMWM2YzU5NDdmODY2N2RlNTBhNDFkMGRmZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUPwIx/mEawTcsMgcdilFDsThFgT
jsbzY8vQ0tRnVebo71zF9HaBYMAP7lmp2E7oqMhPDHE1PDgwubKZVj9EZy5fhW5/
8ruVPF0xgXLPSAduktvEIQqcpaUWZd5U5VYSKVZWb3XcMp6kt8lao1T7mJZIAxeM
YmuOd3FEPQotcFCGl+jzFfq2P8fOg5zGEMUrJgHczgXUugMjncBIa1Swx7kJMg4c
ipIzGWzk8010Cdrx0WwKM9VuWhBCadt/w83neszZuKUdeYOmAqNek2sFc8n9tSjj
H9pkGsJaZhvbn3c/H5Q3Dnt9er40KicchPWhWIxGROOs8UypUKwRKVZtjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIyCpD477HGxZR/hmfeUKQdDf6pMB8GA1UdIwQY
MBaAFDRW7YaBy2H0mbQGhdB9EwroUDqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZidGhvSExZZlNadEFhRjBIMFRDdWhRT3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZmFlOGEtNTU4MS00M2ZiLTg1YWIt
Mjg3ZWY0ZDNiY2RiLzEvTkZidGhvSExZZlNadEFhRjBIMFRDdWhRT3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82ZmFlOGEtNTU4MS00M2ZiLTg1YWItMjg3ZWY0ZDNiY2Ri
LzEvTkZidGhvSExZZlNadEFhRjBIMFRDdWhRT3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuZu2cp0
NkOcszSwCImMuE5Yo0PGg7LIwo52nEr0C1fF6zuyLHAT3mjGpxYm660gCI5zRZ0N
MTs5/a59vsrbDP+gWXzM3JClWK1Q8X23vMohdyxWL1l5YwzcHQJtfJguE6dJV345
vO+XeYejolrhEXHmJtmzkNJU5V0RD1tW2yMAbwnFTLPqqQrLaR5RQjdvfezUfqyZ
ss/Xb+HEbPvyZgp/mOF4k3TSvKpc6yZkBalY5K0nw1hwz8rjMRHs0fLLy/RF7YlZ
esEe0v5nr8BUBVmA8BnQSQg4WnmGC/4swodUgacgEshdDyzet+70Knjs8SmkQ5Kw
V7zwPpJyvxFmwg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:27 2024 by rpki-client on console-ams.rpki-client.org