Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
File: 5xst61Y64jNpHLssPKwjR5ydsRQ.mft (raw, json)
Hash identifier: dimXgagxVgOsqdLAmcR6LBJGjUWH/3wvFftcngPOoeo=
Subject key identifier: 6F:5E:48:A0:E1:AA:3D:F2:E1:CE:9F:54:DE:7E:4D:B6:0F:50:05:4F
Authority key identifier: E7:1B:2D:EB:56:3A:E2:33:69:1C:BB:2C:3C:AC:23:47:9C:9D:B1:14
Certificate issuer: /CN=e71b2deb563ae233691cbb2c3cac23479c9db114
Certificate serial: 019041F763999DE0AA38DDD4311CD4E7DC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xst61Y64jNpHLssPKwjR5ydsRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
Manifest number: 8C
Signing time: Sat 22 Jun 2024 22:00:50 +0000
Manifest this update: Sat 22 Jun 2024 22:00:50 +0000
Manifest next update: Sun 23 Jun 2024 22:00:50 +0000
Files and hashes: 1: 5xst61Y64jNpHLssPKwjR5ydsRQ.crl (hash: 7ron6FMok9W18dngEHs323QtsQNqDbFgk5oFwlCI5gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xst61Y64jNpHLssPKwjR5ydsRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:f7:63:99:9d:e0:aa:38:dd:d4:31:1c:d4:e7:dc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71b2deb563ae233691cbb2c3cac23479c9db114
Validity
Not Before: Jun 22 22:00:50 2024 GMT
Not After : Jun 23 22:00:50 2024 GMT
Subject: CN=6f5e48a0e1aa3df2e1ce9f54de7e4db60f50054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:1a:ee:c9:22:5b:6b:0c:e3:4b:5c:97:3a:
35:f1:99:93:15:11:43:5a:af:13:15:f6:5b:88:b6:
6b:d8:e9:e6:87:2f:0d:0c:91:e8:7b:bc:dd:3a:45:
0c:e7:ae:ed:f9:73:20:c7:07:0a:4f:09:97:db:a8:
61:5f:a8:2d:dc:48:ce:e2:e8:e2:ae:47:60:69:ef:
7d:cf:2f:db:70:f1:68:f0:da:84:b4:0f:0b:93:48:
17:61:ea:dc:b9:a9:38:dc:12:54:8b:27:cd:ea:f2:
d1:1f:df:e8:40:a7:49:4a:f7:d9:34:42:16:b9:2e:
1f:6e:64:38:54:b2:14:b1:2f:02:b2:a6:4c:30:cb:
6e:57:92:7b:1f:e6:91:e8:e2:e2:c3:88:6c:b7:c1:
3c:c1:46:00:1a:55:5f:3f:30:70:ee:e1:be:c5:e2:
fc:b2:b2:6c:cd:58:9d:46:ca:49:54:d2:a0:6c:91:
46:28:cb:f6:5f:46:ec:d9:4b:78:24:45:7b:75:a2:
3c:b7:4a:0d:aa:a3:92:d9:99:c7:fe:5f:67:39:8e:
47:a9:65:32:58:f2:a6:6b:4d:19:e4:3f:f2:e3:f5:
06:f0:08:34:c2:14:8c:c4:ec:62:b9:ba:e2:d5:9e:
4e:2f:c0:46:9b:ef:9f:9c:09:1d:9b:e1:81:73:8a:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:48:A0:E1:AA:3D:F2:E1:CE:9F:54:DE:7E:4D:B6:0F:50:05:4F
X509v3 Authority Key Identifier:
keyid:E7:1B:2D:EB:56:3A:E2:33:69:1C:BB:2C:3C:AC:23:47:9C:9D:B1:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xst61Y64jNpHLssPKwjR5ydsRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a77d5-cd9a-436f-9445-5ad120f21477/1/5xst61Y64jNpHLssPKwjR5ydsRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:ae:f5:c6:2c:d3:7a:d0:c7:39:5b:0f:7c:2d:eb:ee:85:
83:9f:2c:20:fc:a9:15:3e:f0:a8:38:55:b1:84:17:8f:99:ae:
0e:9f:a4:3a:e5:38:e0:c6:69:a5:fd:e8:18:9f:d2:22:e9:c0:
47:d4:cc:3e:07:f5:ac:b4:74:5c:e9:8c:73:5e:b3:ac:dc:d1:
e0:da:49:4f:12:c7:ce:b1:7f:5b:92:3c:fc:8f:09:7d:0e:86:
11:c7:2d:4c:22:74:e3:c2:b1:13:41:08:ac:f3:24:49:ef:6c:
ec:c9:d9:8e:2c:ed:60:3b:75:f3:8e:a7:c8:75:2b:61:05:1a:
ec:5d:fd:d3:08:9e:67:a3:2e:b1:1e:41:d3:7a:39:39:c8:18:
9e:d6:33:b5:31:d6:c6:fe:3b:fb:a7:ae:ae:1a:ff:29:16:31:
28:64:36:5a:36:34:ad:e8:86:da:66:03:e4:a8:99:57:1d:95:
e1:31:ec:7b:1a:45:48:8b:9c:80:c0:a4:b4:1d:cf:4f:08:9a:
28:c0:ea:76:e4:61:a4:ba:26:f6:d2:68:0a:58:86:c7:6a:5c:
9e:b4:3f:f9:34:5f:7b:bf:cb:70:b4:78:21:c7:b2:e3:1f:f0:
30:88:07:e0:de:20:a4:0a:57:8f:42:06:73:c5:8b:b0:84:3f:
6c:d1:7a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBB92OZneCqON3UMRzU59xtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MWIyZGViNTYzYWUyMzM2OTFjYmIyYzNjYWMyMzQ3OWM5
ZGIxMTQwHhcNMjQwNjIyMjIwMDUwWhcNMjQwNjIzMjIwMDUwWjAzMTEwLwYDVQQD
Eyg2ZjVlNDhhMGUxYWEzZGYyZTFjZTlmNTRkZTdlNGRiNjBmNTAwNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Ya7skiW2sM40tclzo18ZmTFRFD
Wq8TFfZbiLZr2Onmhy8NDJHoe7zdOkUM567t+XMgxwcKTwmX26hhX6gt3EjO4uji
rkdgae99zy/bcPFo8NqEtA8Lk0gXYercuak43BJUiyfN6vLRH9/oQKdJSvfZNEIW
uS4fbmQ4VLIUsS8CsqZMMMtuV5J7H+aR6OLiw4hst8E8wUYAGlVfPzBw7uG+xeL8
srJszVidRspJVNKgbJFGKMv2X0bs2Ut4JEV7daI8t0oNqqOS2ZnH/l9nOY5HqWUy
WPKma00Z5D/y4/UG8Ag0whSMxOxiubri1Z5OL8BGm++fnAkdm+GBc4rqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9eSKDhqj3y4c6fVN5+TbYPUAVPMB8GA1UdIwQY
MBaAFOcbLetWOuIzaRy7LDysI0ecnbEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhzdDYxWTY0ak5wSExzc1BLd2pSNXlkc1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yYTc3ZDUtY2Q5YS00MzZmLTk0NDUt
NWFkMTIwZjIxNDc3LzEvNXhzdDYxWTY0ak5wSExzc1BLd2pSNXlkc1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yYTc3ZDUtY2Q5YS00MzZmLTk0NDUtNWFkMTIwZjIxNDc3
LzEvNXhzdDYxWTY0ak5wSExzc1BLd2pSNXlkc1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr2u9cYs
03rQxzlbD3wt6+6Fg58sIPypFT7wqDhVsYQXj5muDp+kOuU44MZppf3oGJ/SIunA
R9TMPgf1rLR0XOmMc16zrNzR4NpJTxLHzrF/W5I8/I8JfQ6GEcctTCJ048KxE0EI
rPMkSe9s7MnZjiztYDt1846nyHUrYQUa7F390wieZ6MusR5B03o5OcgYntYztTHW
xv47+6eurhr/KRYxKGQ2WjY0reiG2mYD5KiZVx2V4THsexpFSIucgMCktB3PTwia
KMDqduRhpLom9tJoCliGx2pcnrQ/+TRfe7/LcLR4Icey4x/wMIgH4N4gpApXj0IG
c8WLsIQ/bNF6LA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:24:51 2024 by rpki-client on console-ams.rpki-client.org