Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File: KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier: kLgIj7+aA3PxmZcRHDxh5ufaq9iALUaAxXIvpusFthM=
Subject key identifier: 9C:8B:1D:DA:0C:97:AB:74:F9:10:63:B3:01:77:B1:21:A2:05:62:2F
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer: /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial: 01901E5954C164B31A331CC40659D9A220C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number: 0297
Signing time: Sun 16 Jun 2024 00:01:29 +0000
Manifest this update: Sun 16 Jun 2024 00:01:29 +0000
Manifest next update: Mon 17 Jun 2024 00:01:29 +0000
Files and hashes: 1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: Nf6jVznIWOWHHkQ/NL4UNE+M0KHufnTCw4E/GdQqyx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:54:c1:64:b3:1a:33:1c:c4:06:59:d9:a2:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
Validity
Not Before: Jun 16 00:01:29 2024 GMT
Not After : Jun 17 00:01:29 2024 GMT
Subject: CN=9c8b1dda0c97ab74f91063b30177b121a205622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:5f:9d:fa:62:1e:be:a8:ad:38:0f:5f:08:
8f:33:8a:b7:c1:3a:5f:99:b6:b9:09:db:50:37:f1:
71:91:f9:51:aa:52:c0:14:a3:56:22:f8:21:80:1f:
88:04:39:d9:ce:25:82:25:20:22:6a:2d:f2:bf:57:
67:cb:76:a6:83:ea:4d:d6:70:03:1f:3c:ad:c8:03:
a6:a6:1e:e0:81:75:60:04:42:7a:8f:d4:ac:4d:c8:
79:af:b2:93:40:bd:d0:2c:dc:1b:35:28:98:a5:95:
7f:18:1f:2e:71:30:71:01:cf:16:be:d9:32:43:8d:
46:4e:72:c3:bc:6d:09:a3:f8:c1:1f:c8:4c:ad:a6:
77:86:95:4b:66:e8:53:35:5a:a7:bd:c4:4d:5a:6f:
42:29:63:8c:60:86:e9:72:77:41:67:23:07:69:5d:
6f:3c:ae:c0:7b:5b:48:07:9e:32:78:e5:de:94:4d:
4d:3b:10:f7:a6:60:32:9a:57:c4:39:4a:55:a6:27:
12:1a:9d:a4:8b:55:88:7b:c7:a8:a9:75:76:77:f0:
b1:51:f3:cf:c2:e3:24:7f:de:0e:a9:85:1d:4b:05:
14:4d:46:d5:3a:ca:dd:1e:49:81:f4:1c:31:c9:86:
d8:0f:ad:80:73:32:e0:61:69:14:3e:77:96:bc:a3:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:1D:DA:0C:97:AB:74:F9:10:63:B3:01:77:B1:21:A2:05:62:2F
X509v3 Authority Key Identifier:
keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:16:b7:75:c5:30:a2:33:03:75:ee:f4:3c:5a:62:c6:62:0d:
f2:91:46:34:a5:db:1e:3f:34:77:6b:e4:45:25:94:8f:8e:94:
22:78:c0:0d:35:23:6f:77:14:de:7f:d8:30:12:5d:1b:9b:82:
57:de:e2:e9:72:aa:4a:01:b8:38:81:dc:d5:9d:9d:82:a9:05:
52:5e:b4:a8:29:79:01:54:a1:5c:97:24:ed:55:22:3b:14:7e:
a8:59:40:e8:0a:6e:99:af:33:eb:57:d5:13:ab:13:93:4c:69:
6f:26:bd:a3:54:2e:33:94:57:9a:0a:d1:87:68:cc:68:06:04:
40:fe:fe:f1:ac:f3:dd:5a:2f:7e:b2:0a:ef:13:24:7d:2e:42:
8a:02:f6:95:b1:68:b9:52:90:06:6a:07:79:05:ab:3b:86:3b:
7e:b1:db:85:fe:61:ab:30:45:43:ab:fb:76:cf:70:36:0d:e1:
b8:4c:91:57:2e:5a:d2:55:53:79:b7:e3:db:ca:bd:15:8a:ae:
03:61:b5:51:50:f4:a5:37:3f:74:c3:0e:03:f3:18:74:c9:16:
c7:83:97:3b:07:bb:09:6a:79:71:19:35:e4:89:4f:18:51:cb:
a9:3d:8a:ab:1a:bd:2e:09:93:7e:ac:70:ff:5c:15:18:c1:84:
18:e8:e8:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWVTBZLMaMxzEBlnZoiDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGEzNWM0NWY3NzRmYWZmODQyNDVjZTEyNGJkYzY1NWM3
NDUyOGIwHhcNMjQwNjE2MDAwMTI5WhcNMjQwNjE3MDAwMTI5WjAzMTEwLwYDVQQD
Eyg5YzhiMWRkYTBjOTdhYjc0ZjkxMDYzYjMwMTc3YjEyMWEyMDU2MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9dfnfpiHr6orTgPXwiPM4q3wTpf
mba5CdtQN/FxkflRqlLAFKNWIvghgB+IBDnZziWCJSAiai3yv1dny3amg+pN1nAD
HzytyAOmph7ggXVgBEJ6j9SsTch5r7KTQL3QLNwbNSiYpZV/GB8ucTBxAc8Wvtky
Q41GTnLDvG0Jo/jBH8hMraZ3hpVLZuhTNVqnvcRNWm9CKWOMYIbpcndBZyMHaV1v
PK7Ae1tIB54yeOXelE1NOxD3pmAymlfEOUpVpicSGp2ki1WIe8eoqXV2d/CxUfPP
wuMkf94OqYUdSwUUTUbVOsrdHkmB9BwxyYbYD62AczLgYWkUPneWvKOXSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyLHdoMl6t0+RBjswF3sSGiBWIvMB8GA1UdIwQY
MBaAFChKNcRfd0+v+EJFzhJL3GVcdFKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MjAzMDEtNWNhZS00ZGExLWEzYzIt
YWYwMGQ3MWQzNDA3LzEvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MjAzMDEtNWNhZS00ZGExLWEzYzItYWYwMGQ3MWQzNDA3
LzEvS0VvMXhGOTNUNl80UWtYT0VrdmNaVngwVW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBa3dcUw
ojMDde70PFpixmIN8pFGNKXbHj80d2vkRSWUj46UInjADTUjb3cU3n/YMBJdG5uC
V97i6XKqSgG4OIHc1Z2dgqkFUl60qCl5AVShXJck7VUiOxR+qFlA6Apuma8z61fV
E6sTk0xpbya9o1QuM5RXmgrRh2jMaAYEQP7+8azz3VovfrIK7xMkfS5CigL2lbFo
uVKQBmoHeQWrO4Y7frHbhf5hqzBFQ6v7ds9wNg3huEyRVy5a0lVTebfj28q9FYqu
A2G1UVD0pTc/dMMOA/MYdMkWx4OXOwe7CWp5cRk15IlPGFHLqT2Kqxq9LgmTfqxw
/1wVGMGEGOjoAQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:49 2024 by rpki-client on console-fra.rpki-client.org