Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: 1+vSV7CVwxWgfLtuh2KK3BCu1E/raW3ZCZr5/TpeBFs=
Subject key identifier: 2F:0E:C7:93:BD:66:1C:1E:49:C9:F6:2D:BE:92:5D:83:2C:7A:50:06
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0190456625630989CF944F9D62D031AE825A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 0D68
Signing time: Sun 23 Jun 2024 14:00:40 +0000
Manifest this update: Sun 23 Jun 2024 14:00:40 +0000
Manifest next update: Mon 24 Jun 2024 14:00:40 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: gMx7g1i1he7EBnkeZ+RgGgm6hEBdZMZwNQN/dJ03G5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:25:63:09:89:cf:94:4f:9d:62:d0:31:ae:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Jun 23 14:00:40 2024 GMT
Not After : Jun 24 14:00:40 2024 GMT
Subject: CN=2f0ec793bd661c1e49c9f62dbe925d832c7a5006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:5c:c5:1a:f6:54:8f:b2:2a:5b:3a:61:67:
c1:aa:c1:15:b1:5a:d0:ef:b7:58:f1:69:81:2d:fb:
d1:38:b4:bc:aa:50:30:a6:98:19:f4:4e:0c:41:37:
15:be:c6:31:8b:16:b5:46:f2:e6:59:27:59:8a:64:
28:0a:99:64:19:27:2f:29:ff:1c:98:c4:89:8d:89:
05:25:29:c5:e8:73:dc:09:61:40:7a:11:63:e3:5a:
37:e9:ed:a9:f4:b2:7f:c0:b0:d8:a5:b1:72:0c:8f:
13:54:e8:48:21:0a:4f:38:a6:5d:77:b3:61:7c:af:
90:99:8d:09:18:a7:d2:2b:02:f0:9a:5a:ee:2b:ec:
d7:b3:8d:c0:cc:6c:50:85:cf:af:ff:ca:07:06:7c:
a6:39:cb:e2:ef:92:b8:ce:80:fe:e9:f6:34:83:62:
f7:cd:27:31:e1:e9:39:c1:83:67:7c:e0:d8:f9:da:
9e:d2:06:83:d5:71:9e:9d:29:1a:3b:c4:97:f2:38:
68:60:a3:65:f1:54:fa:1e:c9:20:7a:0b:b3:73:24:
7e:19:ac:d7:fa:42:c4:b6:2e:44:c9:8d:1d:c4:7d:
5a:a6:da:43:f3:db:44:9d:61:49:49:ec:f2:70:62:
69:1c:3e:56:3f:0b:22:44:b9:a8:df:87:7d:cc:a2:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:C7:93:BD:66:1C:1E:49:C9:F6:2D:BE:92:5D:83:2C:7A:50:06
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f3:f7:76:fd:a0:b7:42:30:31:23:1b:6d:c8:16:db:a3:b8:
ff:59:05:6d:f7:ba:c1:4f:8f:88:1c:8b:50:53:5c:35:2c:e3:
1a:4e:8e:6c:dd:f1:a2:31:62:40:bd:47:5e:2f:ec:d6:26:8d:
36:b0:bf:96:6a:b5:4c:2a:fd:13:be:95:71:da:1c:64:ab:52:
57:28:3a:46:0f:1d:39:47:6d:7f:5f:fd:0c:89:33:d8:c6:3f:
22:7a:94:c3:b4:a5:5e:f2:d4:b9:cf:33:17:17:99:8a:e1:fc:
0b:90:c2:63:f1:19:2b:00:ce:9d:27:39:90:de:a2:0a:27:91:
ad:fe:a5:a6:80:7f:77:8d:a5:32:5f:62:51:ec:e6:7a:5a:f2:
b2:db:0d:a3:dc:20:60:7b:f9:5e:a9:81:64:65:18:33:b5:82:
b0:0c:04:b3:04:8b:71:db:52:05:ce:8f:41:66:06:7c:f8:c8:
d0:4c:17:d6:b6:ac:30:2c:38:af:ed:1c:da:ac:dd:d1:c0:3b:
99:78:d4:c1:7e:da:0d:90:f4:69:c7:e5:12:64:8c:4e:3c:fd:
94:3a:11:60:f7:82:f7:94:8a:29:da:ba:cd:3b:54:d2:0d:bd:
60:c1:ae:1b:7a:6e:6b:3b:63:26:e6:30:ce:eb:48:75:4c:77:
f4:72:54:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZiVjCYnPlE+dYtAxroJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzdlNDM2OTNhNTMyZDNkNmVmNDExODZkNzBkN2E2YzU1
ZmJhZGUwHhcNMjQwNjIzMTQwMDQwWhcNMjQwNjI0MTQwMDQwWjAzMTEwLwYDVQQD
EygyZjBlYzc5M2JkNjYxYzFlNDljOWY2MmRiZTkyNWQ4MzJjN2E1MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D1cxRr2VI+yKls6YWfBqsEVsVrQ
77dY8WmBLfvROLS8qlAwppgZ9E4MQTcVvsYxixa1RvLmWSdZimQoCplkGScvKf8c
mMSJjYkFJSnF6HPcCWFAehFj41o36e2p9LJ/wLDYpbFyDI8TVOhIIQpPOKZdd7Nh
fK+QmY0JGKfSKwLwmlruK+zXs43AzGxQhc+v/8oHBnymOcvi75K4zoD+6fY0g2L3
zScx4ek5wYNnfODY+dqe0gaD1XGenSkaO8SX8jhoYKNl8VT6HskgeguzcyR+GazX
+kLEti5EyY0dxH1aptpD89tEnWFJSezycGJpHD5WPwsiRLmo34d9zKJMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8Ox5O9ZhweScn2Lb6SXYMselAGMB8GA1UdIwQY
MBaAFMbH5DaTpTLT1u9BGG1w16bFX7reMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGFjZTktMzE5My00MzU4LWI1ZTct
NTRhYjllOTViN2I0LzEveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGFjZTktMzE5My00MzU4LWI1ZTctNTRhYjllOTViN2I0
LzEveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvP3dv2g
t0IwMSMbbcgW26O4/1kFbfe6wU+PiByLUFNcNSzjGk6ObN3xojFiQL1HXi/s1iaN
NrC/lmq1TCr9E76VcdocZKtSVyg6Rg8dOUdtf1/9DIkz2MY/InqUw7SlXvLUuc8z
FxeZiuH8C5DCY/EZKwDOnSc5kN6iCieRrf6lpoB/d42lMl9iUezmelrystsNo9wg
YHv5XqmBZGUYM7WCsAwEswSLcdtSBc6PQWYGfPjI0EwX1rasMCw4r+0c2qzd0cA7
mXjUwX7aDZD0acflEmSMTjz9lDoRYPeC95SKKdq6zTtU0g29YMGuG3puaztjJuYw
zutIdUx39HJUDw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:40 2024 by rpki-client on console-fra.rpki-client.org