Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier: BxsGvYLFrFDXtVgEUFuIYrg0K7oeK+6bpTiZJUZi8dw=
Subject key identifier: 86:07:5D:9E:57:2E:6C:78:C3:5B:DE:33:A6:9E:3F:51:41:FD:D3:14
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial: 01901DEAAD8F053AA44410D3909462DAF410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number: 0A08
Signing time: Sat 15 Jun 2024 22:00:37 +0000
Manifest this update: Sat 15 Jun 2024 22:00:37 +0000
Manifest next update: Sun 16 Jun 2024 22:00:37 +0000
Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: GgjK6ydPlg0v3cMNORF8yZBQYkv14jRSNqLrYXxF3sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:ad:8f:05:3a:a4:44:10:d3:90:94:62:da:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
Validity
Not Before: Jun 15 22:00:37 2024 GMT
Not After : Jun 16 22:00:37 2024 GMT
Subject: CN=86075d9e572e6c78c35bde33a69e3f5141fdd314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:7c:76:02:36:99:fd:94:7d:40:c7:cd:32:
10:19:b1:d5:1d:5b:96:05:ae:2d:62:53:96:39:69:
b5:d0:75:a6:94:cd:4e:8e:b1:72:7c:15:8a:ab:1d:
15:eb:d3:33:38:f8:ed:15:dd:0d:f6:e8:b1:cc:d0:
e0:22:eb:2f:72:da:a2:15:27:0b:a3:e3:44:32:62:
ba:b2:4b:e1:cb:70:f9:2a:00:a5:d2:5f:fc:09:7d:
28:c7:e3:16:30:5d:1d:51:93:5a:a6:cc:ca:6f:c6:
fd:db:0c:46:b2:70:c5:3f:26:e0:99:f8:22:ef:66:
19:b7:40:69:e1:d1:57:96:b5:4a:90:c5:be:4a:60:
60:ad:8d:35:ca:cb:02:88:83:46:0e:2b:53:25:cd:
9e:2a:5f:7e:d3:99:6a:18:ae:76:37:2d:66:c5:a9:
9c:4e:42:85:82:ed:15:7f:88:dc:e7:8d:bb:09:e1:
1a:f8:3a:1c:24:d7:5a:f6:8d:78:1e:bc:d1:cc:23:
eb:72:ca:44:30:ed:4a:55:22:cc:73:5b:59:e7:b0:
d2:9a:96:22:83:59:b3:14:70:21:a8:fc:89:cc:8e:
42:41:33:11:24:73:66:5b:a8:0a:9d:ee:02:11:b6:
73:59:e7:90:a8:fa:02:e6:50:3a:37:b7:ce:35:ab:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:07:5D:9E:57:2E:6C:78:C3:5B:DE:33:A6:9E:3F:51:41:FD:D3:14
X509v3 Authority Key Identifier:
keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:78:6b:6f:48:4c:9d:ac:cd:4a:d6:e2:2d:05:20:a9:b4:
7f:c4:e0:8f:d7:a9:5b:29:7a:94:f8:f1:52:25:c3:ed:30:19:
8b:44:db:2f:00:4e:37:2c:ab:9c:cd:ee:4b:40:69:3a:d9:78:
2c:f6:6d:db:6c:7c:09:37:e2:c7:53:ee:4a:97:1a:f9:e6:3b:
ba:92:ba:e5:b9:ba:fd:ce:a9:ca:b7:bf:d0:9e:1e:dc:52:26:
b4:c0:d4:4a:ae:1a:73:98:5e:9b:3b:ae:d2:8a:f5:5c:37:17:
14:b1:de:16:b0:86:cd:4b:7e:94:fc:44:39:17:8f:1c:7a:d2:
43:56:cb:fe:d3:a9:a4:8a:34:9b:cb:32:2b:0f:37:05:95:44:
2d:9a:c1:1c:4e:6e:f0:9d:e4:1f:34:4b:3d:43:5b:4f:47:a8:
ad:cf:8a:d8:e9:89:8e:d6:6d:5e:82:43:5c:c2:34:f4:b2:d4:
04:00:37:42:eb:20:91:a0:62:a2:c4:f0:59:16:e9:2d:eb:3e:
da:37:ef:46:4f:44:9a:1a:79:29:3f:ab:39:d2:13:ab:0a:eb:
62:ac:76:70:4d:bb:2f:82:58:69:69:53:01:3e:21:11:b5:dd:
87:94:84:7e:24:d3:ff:10:8c:64:2d:94:9e:0d:83:ff:39:d6:
30:37:a3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6q2PBTqkRBDTkJRi2vQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm
N2FhZGEwHhcNMjQwNjE1MjIwMDM3WhcNMjQwNjE2MjIwMDM3WjAzMTEwLwYDVQQD
Eyg4NjA3NWQ5ZTU3MmU2Yzc4YzM1YmRlMzNhNjllM2Y1MTQxZmRkMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq58dgI2mf2UfUDHzTIQGbHVHVuW
Ba4tYlOWOWm10HWmlM1OjrFyfBWKqx0V69MzOPjtFd0N9uixzNDgIusvctqiFScL
o+NEMmK6skvhy3D5KgCl0l/8CX0ox+MWMF0dUZNapszKb8b92wxGsnDFPybgmfgi
72YZt0Bp4dFXlrVKkMW+SmBgrY01yssCiINGDitTJc2eKl9+05lqGK52Ny1mxamc
TkKFgu0Vf4jc5427CeEa+DocJNda9o14HrzRzCPrcspEMO1KVSLMc1tZ57DSmpYi
g1mzFHAhqPyJzI5CQTMRJHNmW6gKne4CEbZzWeeQqPoC5lA6N7fONas0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYHXZ5XLmx4w1veM6aeP1FB/dMUMB8GA1UdIwQY
MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt
ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj
LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYJ4a29I
TJ2szUrW4i0FIKm0f8Tgj9epWyl6lPjxUiXD7TAZi0TbLwBONyyrnM3uS0BpOtl4
LPZt22x8CTfix1PuSpca+eY7upK65bm6/c6pyre/0J4e3FImtMDUSq4ac5hemzuu
0or1XDcXFLHeFrCGzUt+lPxEORePHHrSQ1bL/tOppIo0m8syKw83BZVELZrBHE5u
8J3kHzRLPUNbT0eorc+K2OmJjtZtXoJDXMI09LLUBAA3QusgkaBiosTwWRbpLes+
2jfvRk9Emhp5KT+rOdITqwrrYqx2cE27L4JYaWlTAT4hEbXdh5SEfiTT/xCMZC2U
ng2D/znWMDejGw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:37 2024 by rpki-client on console-ams.rpki-client.org