Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: w9WZI8/WFY2uIG0RSil1VzesfGeRALsqoiCO/1W2TsY=
Subject key identifier: 29:5C:2E:1E:A4:CF:17:FA:10:E2:E2:69:B0:EE:84:02:2D:3C:A0:22
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01923813AB15B375D455920D4BC959ABA4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 10AA
Signing time: Sat 28 Sep 2024 10:01:05 +0000
Manifest this update: Sat 28 Sep 2024 10:01:05 +0000
Manifest next update: Sun 29 Sep 2024 10:01:05 +0000
Files and hashes: 1: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: 7MDSq3kIcHF1kDuHE5dX6CPwDk4ZRQe80iRLoruAeT4=)
2: xOU8WGeaKCTIaagVVJXs8IbZKek.roa (hash: DMu+9VZ9vA2R5n5W/jVrNGIuCE6BO6SAJI0hZimAk4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:13:ab:15:b3:75:d4:55:92:0d:4b:c9:59:ab:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Sep 28 10:01:05 2024 GMT
Not After : Sep 29 10:01:05 2024 GMT
Subject: CN=295c2e1ea4cf17fa10e2e269b0ee84022d3ca022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:04:f0:73:93:97:e4:28:aa:19:73:e9:90:
d1:07:04:3f:06:f2:2a:e7:8a:81:03:6e:28:5a:6b:
65:3b:f4:02:2e:29:f8:ed:e9:ba:e2:3d:1e:fb:97:
34:38:4e:e6:28:cf:49:f4:7e:04:5e:3a:84:a0:23:
04:5d:8d:2b:98:4a:b5:2d:4b:52:62:e7:56:29:25:
e0:40:3e:7c:4f:2e:df:17:3c:b1:72:47:63:c1:2c:
67:c6:8f:1c:03:3a:9a:62:36:3f:79:38:eb:2e:b6:
4a:01:71:55:23:43:31:12:fc:68:57:02:eb:ca:e6:
aa:a2:d0:48:26:77:a8:09:93:27:95:c4:b7:8d:21:
c8:e4:ca:84:c4:51:24:20:a6:ff:57:13:0f:e7:63:
56:5c:e9:b0:26:77:ca:04:c8:f8:1d:7d:be:57:b7:
5f:62:f7:16:df:87:a8:1d:00:bf:7c:06:96:40:b5:
5b:19:5e:2b:15:38:07:14:29:ba:1c:7e:d5:cd:87:
17:b0:95:13:bb:df:67:ef:19:c0:e4:9d:19:79:60:
5b:e0:34:a1:8a:dc:3d:47:7c:09:19:c6:d3:81:40:
f2:4a:75:2c:2d:4a:61:57:43:86:fc:0b:dc:a6:a4:
c2:62:d9:33:40:37:cb:0f:55:6f:7f:3b:cc:87:93:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:2E:1E:A4:CF:17:FA:10:E2:E2:69:B0:EE:84:02:2D:3C:A0:22
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ac:cc:d0:8b:06:68:15:05:af:ba:bf:68:44:0b:4c:3b:f4:
75:43:31:b1:b2:63:70:97:60:1a:0f:dd:1e:68:36:19:e9:9d:
4d:5e:e9:56:88:22:17:66:fd:30:43:6b:03:4a:e7:94:9c:1f:
4d:4c:9b:67:8e:a9:fe:c3:ee:95:35:cb:c9:4e:eb:03:24:ea:
29:ce:34:23:31:14:86:24:9a:2f:cb:38:d2:1e:81:3a:e7:9e:
16:fc:e8:9c:c8:94:15:f0:12:21:c0:a8:0c:2d:68:60:34:61:
88:cf:dd:88:8a:13:27:e3:b7:8a:8d:77:7d:2f:19:02:23:eb:
fb:cf:9b:b1:1d:da:d9:75:84:c4:46:ed:a0:72:62:ad:6c:99:
8d:32:51:89:34:49:5c:b8:48:46:de:66:63:55:7a:21:0e:44:
a1:44:e9:4d:da:d7:21:3b:af:4c:71:31:f9:54:df:69:5e:2e:
4d:d1:94:31:6c:a1:0b:23:74:fa:3f:76:84:ae:a6:f1:bd:a9:
5e:ac:4e:78:1e:e2:70:0f:2a:26:12:87:9d:70:4d:36:60:f8:
e8:86:44:ad:75:fb:a0:d3:51:a8:fe:19:ce:bb:d4:7c:d4:09:
87:ee:c9:6e:fb:0e:da:7d:dc:11:98:e9:63:02:d4:7f:f1:ea:
70:b6:2f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4E6sVs3XUVZINS8lZq6TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjQwOTI4MTAwMTA1WhcNMjQwOTI5MTAwMTA1WjAzMTEwLwYDVQQD
EygyOTVjMmUxZWE0Y2YxN2ZhMTBlMmUyNjliMGVlODQwMjJkM2NhMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VUE8HOTl+Qoqhlz6ZDRBwQ/BvIq
54qBA24oWmtlO/QCLin47em64j0e+5c0OE7mKM9J9H4EXjqEoCMEXY0rmEq1LUtS
YudWKSXgQD58Ty7fFzyxckdjwSxnxo8cAzqaYjY/eTjrLrZKAXFVI0MxEvxoVwLr
yuaqotBIJneoCZMnlcS3jSHI5MqExFEkIKb/VxMP52NWXOmwJnfKBMj4HX2+V7df
YvcW34eoHQC/fAaWQLVbGV4rFTgHFCm6HH7VzYcXsJUTu99n7xnA5J0ZeWBb4DSh
itw9R3wJGcbTgUDySnUsLUphV0OG/AvcpqTCYtkzQDfLD1VvfzvMh5OAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClcLh6kzxf6EOLiabDuhAItPKAiMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6zM0IsG
aBUFr7q/aEQLTDv0dUMxsbJjcJdgGg/dHmg2GemdTV7pVogiF2b9MENrA0rnlJwf
TUybZ46p/sPulTXLyU7rAyTqKc40IzEUhiSaL8s40h6BOueeFvzonMiUFfASIcCo
DC1oYDRhiM/diIoTJ+O3io13fS8ZAiPr+8+bsR3a2XWExEbtoHJirWyZjTJRiTRJ
XLhIRt5mY1V6IQ5EoUTpTdrXITuvTHEx+VTfaV4uTdGUMWyhCyN0+j92hK6m8b2p
XqxOeB7icA8qJhKHnXBNNmD46IZErXX7oNNRqP4ZzrvUfNQJh+7JbvsO2n3cEZjp
YwLUf/HqcLYvxg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:33 2024 by rpki-client on console-ams.rpki-client.org