Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: rFNLRyTlLsX1vuLEYkB37v13V+5+7K2EPHFhyPq6G0E=
Subject key identifier: 42:C7:0F:3B:0D:A3:B1:55:E9:A2:FF:EE:DD:00:C6:02:B5:06:13:4E
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 01901DEC3069734228BEC5D1E8881E372E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 22:02:16 +0000
Manifest this update: Sat 15 Jun 2024 22:02:16 +0000
Manifest next update: Sun 16 Jun 2024 22:02:16 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: NrHPuEljokpuEwLT4ufZGgeH2aHdE6cySBevrT9RVAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:30:69:73:42:28:be:c5:d1:e8:88:1e:37:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jun 15 22:02:16 2024 GMT
Not After : Jun 16 22:02:16 2024 GMT
Subject: CN=42c70f3b0da3b155e9a2ffeedd00c602b506134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:11:d4:8c:29:16:09:3d:99:84:39:bf:52:
bd:1a:31:ed:27:ec:01:23:cd:0a:75:a0:59:0c:1a:
e0:7d:f6:d7:05:68:05:cf:ba:04:c2:a4:b8:ba:f8:
a0:e1:46:22:64:53:4a:e9:36:36:76:39:7e:d6:da:
a1:a4:99:77:2f:98:45:3f:ed:fd:36:0b:0e:a3:ce:
a8:75:5b:0e:e2:ec:dc:2a:77:7e:42:94:f9:2b:09:
6e:cd:b9:bf:01:45:c4:d5:e1:6d:0b:21:8d:13:e2:
52:21:62:14:c2:63:a5:50:d5:21:8d:65:4c:95:35:
77:fc:20:6d:29:ad:16:d7:8a:79:a5:99:5a:9d:63:
03:34:91:f5:46:c2:0f:53:d5:51:23:f4:73:b7:67:
f2:0e:bb:b7:9a:69:62:86:e7:f3:d5:20:0c:da:dd:
47:17:eb:80:fb:d0:47:c4:22:59:37:a2:92:45:ec:
99:ae:23:42:a0:c3:07:27:94:d3:fe:3d:28:47:76:
79:cc:da:6c:fe:ba:7e:ac:93:a3:bb:b6:6b:85:e5:
c8:90:84:07:53:54:92:7f:a9:79:c3:4a:53:d2:6b:
07:8d:91:3c:f2:95:8e:e2:5c:ac:73:3e:8b:8b:f7:
39:0c:e2:6b:84:9b:88:98:65:7e:eb:3e:3b:eb:d9:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:0F:3B:0D:A3:B1:55:E9:A2:FF:EE:DD:00:C6:02:B5:06:13:4E
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:ac:e3:41:87:d3:ec:27:5e:57:cc:d7:70:ad:73:f3:ce:
a8:38:7f:78:f1:e4:6e:49:29:f3:ac:2b:1d:d3:44:8b:8d:cb:
75:81:28:bf:4e:79:60:52:9f:56:26:db:2b:83:86:69:06:2c:
9e:ca:51:41:90:5c:49:48:62:2e:99:55:bd:ca:1a:7d:54:3a:
d6:a9:af:5f:0f:7d:d7:6b:d1:00:b0:6e:2b:c9:70:55:b6:79:
45:d5:48:cf:ef:ce:df:b0:a1:8a:37:fb:80:85:6b:a7:82:45:
7c:7d:24:8f:e6:22:f5:b8:4e:ca:9d:b2:f8:fe:97:4b:ff:48:
15:95:5c:31:53:60:c1:26:b2:0e:86:5a:6c:4a:54:00:70:b4:
d3:80:23:6b:59:4c:43:f6:98:2e:a3:ef:06:c8:49:9a:ad:dd:
2b:93:60:ab:be:51:09:38:59:56:35:c0:d1:1d:d4:14:50:15:
38:c6:c8:c3:c6:dd:e6:ce:bf:c4:e9:a7:0f:29:b8:3f:a3:06:
bd:0f:6e:5c:89:71:44:54:6f:3d:4f:b8:43:6b:54:a5:c9:d1:
41:fb:a7:29:57:9c:18:2e:29:d4:ec:5b:e1:1f:71:79:c2:e9:
4e:12:a4:c8:d4:fa:1e:98:87:10:7e:a4:5a:75:5d:5c:9e:ec:
c9:a1:51:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7DBpc0IovsXR6IgeNy51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWVjMGIzNzU2NGJhNzRkNjE2OTFiOGIyYWQ0MzZiOWRh
YWIyMTMwHhcNMjQwNjE1MjIwMjE2WhcNMjQwNjE2MjIwMjE2WjAzMTEwLwYDVQQD
Eyg0MmM3MGYzYjBkYTNiMTU1ZTlhMmZmZWVkZDAwYzYwMmI1MDYxMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsER1IwpFgk9mYQ5v1K9GjHtJ+wB
I80KdaBZDBrgffbXBWgFz7oEwqS4uvig4UYiZFNK6TY2djl+1tqhpJl3L5hFP+39
NgsOo86odVsO4uzcKnd+QpT5Kwluzbm/AUXE1eFtCyGNE+JSIWIUwmOlUNUhjWVM
lTV3/CBtKa0W14p5pZlanWMDNJH1RsIPU9VRI/Rzt2fyDru3mmlihufz1SAM2t1H
F+uA+9BHxCJZN6KSReyZriNCoMMHJ5TT/j0oR3Z5zNps/rp+rJOju7ZrheXIkIQH
U1SSf6l5w0pT0msHjZE88pWO4lyscz6Li/c5DOJrhJuImGV+6z4769mf8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELHDzsNo7FV6aL/7t0AxgK1BhNOMB8GA1UdIwQY
MBaAFIIewLN1ZLp01haRuLKtQ2udqrITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgt
OWY5MmYzODU1Zjg2LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgtOWY5MmYzODU1Zjg2
LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMas40GH
0+wnXlfM13Ctc/POqDh/ePHkbkkp86wrHdNEi43LdYEov055YFKfVibbK4OGaQYs
nspRQZBcSUhiLplVvcoafVQ61qmvXw9912vRALBuK8lwVbZ5RdVIz+/O37Chijf7
gIVrp4JFfH0kj+Yi9bhOyp2y+P6XS/9IFZVcMVNgwSayDoZabEpUAHC004Aja1lM
Q/aYLqPvBshJmq3dK5Ngq75RCThZVjXA0R3UFFAVOMbIw8bd5s6/xOmnDym4P6MG
vQ9uXIlxRFRvPU+4Q2tUpcnRQfunKVecGC4p1Oxb4R9xecLpThKkyNT6HpiHEH6k
WnVdXJ7syaFRbw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:17 2024 by rpki-client on console-ams.rpki-client.org