Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File: 3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier: NBTG1Ydaa95bkNeqX/LyjRYQllTJYUUqhyNAleeetVk=
Subject key identifier: FE:5B:25:4B:03:67:90:C0:76:2B:45:69:B5:0F:D0:B7:45:71:72:7C
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer: /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial: 01901EC6A609EDCA6B23148C6D87ABF7C428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number: 68
Signing time: Sun 16 Jun 2024 02:00:53 +0000
Manifest this update: Sun 16 Jun 2024 02:00:53 +0000
Manifest next update: Mon 17 Jun 2024 02:00:53 +0000
Files and hashes: 1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: 7fVRchXgUsFjYd9u4gdfSqcFK88lJLAeXOUcJQ3Kuo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:a6:09:ed:ca:6b:23:14:8c:6d:87:ab:f7:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Validity
Not Before: Jun 16 02:00:53 2024 GMT
Not After : Jun 17 02:00:53 2024 GMT
Subject: CN=fe5b254b036790c0762b4569b50fd0b74571727c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:77:62:21:e1:c9:db:ac:11:0f:10:60:22:
29:5c:0d:2d:1d:54:cd:14:0e:67:01:8e:5e:94:92:
ec:e7:85:fb:76:83:e1:cd:4d:d2:d2:e7:73:05:80:
d7:bc:98:da:b4:51:98:f7:a1:49:f8:61:7d:26:5b:
e9:25:40:b4:b2:cd:e9:44:67:86:9d:89:d9:bd:70:
3b:65:6b:42:d1:b6:c5:36:d6:8c:d7:eb:70:6d:73:
cc:57:f5:e7:8f:58:e1:09:65:c6:af:84:31:78:3e:
5a:90:54:2e:e1:bf:48:1c:ea:ab:74:34:b3:65:91:
55:55:20:03:33:f3:8d:38:af:a3:82:9a:4b:4a:2b:
4b:ae:53:42:0c:78:cb:67:99:bb:fa:81:03:82:7f:
90:af:60:29:d7:ab:07:ce:c5:d5:b1:36:b4:24:5b:
43:40:6e:6e:d5:15:be:89:38:95:01:41:59:ef:a5:
e0:47:ca:35:9e:0a:c3:2a:ec:d4:b8:b4:3d:6a:29:
c9:b3:46:c4:8d:c8:74:1d:7b:07:17:3d:e4:4a:0e:
ea:88:0d:6d:de:45:18:1e:8d:fe:07:61:1a:d0:d9:
1d:5a:42:17:0d:13:5c:f3:36:b3:e1:cf:8c:34:ee:
c9:b9:2c:62:62:a0:75:e9:bc:fd:67:1b:d3:cf:98:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:25:4B:03:67:90:C0:76:2B:45:69:B5:0F:D0:B7:45:71:72:7C
X509v3 Authority Key Identifier:
keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:de:52:7d:b9:48:8d:86:ee:da:6d:7e:7a:b6:93:f5:e6:
71:ca:78:7a:22:2b:e3:38:bd:5b:91:42:44:88:8e:55:d2:dd:
99:99:6a:0b:60:3d:c7:10:25:c1:4d:3a:2b:3b:e4:93:f0:b6:
42:5e:b5:38:be:19:de:97:3e:8d:a9:84:bb:27:eb:b5:3e:dd:
2e:9a:56:45:dd:82:17:84:c8:e7:fe:52:90:bd:8e:cc:9c:b5:
43:27:55:b3:49:d6:5c:0d:12:24:93:f1:4e:3a:cf:64:1b:c7:
56:53:bb:66:9a:91:da:98:18:68:da:3e:2a:cc:f7:be:ff:39:
87:e8:89:48:9e:f2:8b:dd:62:62:eb:6f:e9:ec:59:24:f9:40:
58:a9:13:d1:73:b5:8b:d6:03:3a:6d:01:3c:01:62:f4:48:2c:
91:6e:88:ed:4b:ab:09:3a:43:c9:e4:77:4f:b7:23:7f:60:7d:
95:da:89:81:9e:42:29:b0:b3:e6:92:fc:fd:4a:b4:f8:90:d8:
2a:9c:1b:de:38:f4:3f:2d:1d:fe:fe:16:f3:dd:c0:f9:3b:38:
fe:fa:90:83:45:c2:cf:6a:4d:9d:ec:e3:af:30:d0:63:2e:9b:
05:ce:a6:a7:9c:f0:18:4e:99:6d:7a:32:bb:3d:73:4c:0c:7a:
fd:32:7b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexqYJ7cprIxSMbYer98QoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTVjYzc2MzEzMDkyN2E2ZmJjMWViMmZkNzQ0M2ZhY2Zh
MTFhMWYwHhcNMjQwNjE2MDIwMDUzWhcNMjQwNjE3MDIwMDUzWjAzMTEwLwYDVQQD
EyhmZTViMjU0YjAzNjc5MGMwNzYyYjQ1NjliNTBmZDBiNzQ1NzE3MjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18l3YiHhydusEQ8QYCIpXA0tHVTN
FA5nAY5elJLs54X7doPhzU3S0udzBYDXvJjatFGY96FJ+GF9JlvpJUC0ss3pRGeG
nYnZvXA7ZWtC0bbFNtaM1+twbXPMV/Xnj1jhCWXGr4QxeD5akFQu4b9IHOqrdDSz
ZZFVVSADM/ONOK+jgppLSitLrlNCDHjLZ5m7+oEDgn+Qr2Ap16sHzsXVsTa0JFtD
QG5u1RW+iTiVAUFZ76XgR8o1ngrDKuzUuLQ9ainJs0bEjch0HXsHFz3kSg7qiA1t
3kUYHo3+B2Ea0NkdWkIXDRNc8zaz4c+MNO7JuSxiYqB16bz9ZxvTz5gatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5bJUsDZ5DAditFabUP0LdFcXJ8MB8GA1UdIwQY
MBaAFNyVzHYxMJJ6b7wesv10Q/rPoRofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZjBmYzctMTA5OC00MjUzLWEyYWEt
Y2VlYzMzNjBkODE3LzEvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZjBmYzctMTA5OC00MjUzLWEyYWEtY2VlYzMzNjBkODE3
LzEvM0pYTWRqRXdrbnB2dkI2eV9YUkQtcy1oR2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCPeUn25
SI2G7tptfnq2k/Xmccp4eiIr4zi9W5FCRIiOVdLdmZlqC2A9xxAlwU06Kzvkk/C2
Ql61OL4Z3pc+jamEuyfrtT7dLppWRd2CF4TI5/5SkL2OzJy1QydVs0nWXA0SJJPx
TjrPZBvHVlO7ZpqR2pgYaNo+Ksz3vv85h+iJSJ7yi91iYutv6exZJPlAWKkT0XO1
i9YDOm0BPAFi9EgskW6I7UurCTpDyeR3T7cjf2B9ldqJgZ5CKbCz5pL8/Uq0+JDY
Kpwb3jj0Py0d/v4W893A+Ts4/vqQg0XCz2pNnezjrzDQYy6bBc6mp5zwGE6ZbXoy
uz1zTAx6/TJ7AQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:22 2024 by rpki-client on console-ams.rpki-client.org