Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: 3LfWIqiFFH1ipds3qLOOLWkWCGi5bMapc5hc1dV07fw=
Subject key identifier: AA:48:4E:76:A9:4E:12:B2:6F:DE:93:A4:0A:81:2D:64:76:EB:AB:03
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 0190448B4D67636C987CAC07C9E5DCC2CD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 09B7
Signing time: Sun 23 Jun 2024 10:01:38 +0000
Manifest this update: Sun 23 Jun 2024 10:01:38 +0000
Manifest next update: Mon 24 Jun 2024 10:01:38 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: 38J3l8l0PUTzMQ9XNsYVKPkJBnQNXIUvL9lnOZ8I/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:4d:67:63:6c:98:7c:ac:07:c9:e5:dc:c2:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Jun 23 10:01:38 2024 GMT
Not After : Jun 24 10:01:38 2024 GMT
Subject: CN=aa484e76a94e12b26fde93a40a812d6476ebab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:91:d0:a6:04:e8:71:eb:8d:d6:f8:da:05:
6a:78:38:d0:36:03:cb:d9:7a:d7:fb:6d:88:98:e1:
d6:f9:4d:75:32:c2:88:fb:c7:93:08:ef:9c:51:bf:
ab:0a:ba:95:23:0c:35:fb:af:5e:1c:29:7f:b9:97:
17:a0:7b:f9:5b:81:a6:ed:5f:7a:10:7f:da:02:09:
ca:9e:f2:83:9c:85:91:1b:ac:40:d9:94:89:ff:fd:
d8:3a:d7:f7:dc:39:07:54:c5:2d:6d:b7:28:f0:0c:
48:81:5f:4b:04:5b:e1:93:c0:ab:94:05:4e:c6:b9:
bc:16:d7:df:c4:da:46:a3:3d:be:f1:24:0d:bc:da:
7d:0f:98:a4:a8:6f:66:3f:4b:f1:fe:c2:5a:d0:fe:
ec:0a:d6:d3:ea:b9:ec:e4:85:98:cb:d2:65:2a:cb:
d9:c7:17:58:e5:10:0d:f5:0f:74:eb:93:ca:54:3d:
d0:d9:76:1d:2f:28:38:9b:93:08:30:a1:92:64:24:
1f:7e:be:2f:95:b8:bf:85:57:5b:4a:37:bb:92:dc:
0a:c0:4d:dd:b4:8e:e3:14:b6:db:b9:bd:72:bf:a4:
00:6b:5a:13:55:af:c6:48:3a:3c:68:57:df:6d:d1:
ab:5c:69:6f:d1:ee:a2:23:33:f9:87:e8:2a:b3:b5:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:4E:76:A9:4E:12:B2:6F:DE:93:A4:0A:81:2D:64:76:EB:AB:03
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0d:ce:bc:0e:6f:f7:1a:f7:db:7b:b0:12:35:67:d6:91:bd:
d4:11:e9:ee:58:65:19:bf:d4:60:a0:5b:0e:57:f9:11:9c:3e:
06:44:f8:d5:06:df:9f:ec:e2:46:44:39:c0:10:21:56:9f:3b:
a8:65:35:89:bb:9c:ba:ca:e7:d2:59:02:ca:47:fa:96:7d:d3:
33:88:71:9c:1e:d7:50:57:b4:26:8c:70:fe:10:38:70:0c:f0:
19:f4:37:e8:ce:42:e1:81:a4:3b:a2:43:fc:ba:95:d6:33:1f:
4d:16:8e:ce:91:d9:37:71:71:a7:ee:ee:5b:51:6f:59:18:f0:
a4:ba:62:6e:e4:55:f7:73:40:12:e8:0f:04:46:e4:6e:2a:25:
53:7c:c0:c5:69:46:46:21:a5:2a:67:36:b3:5b:38:cd:79:f6:
60:cb:e7:b0:02:2d:3b:76:2e:5e:c1:11:3c:5d:51:02:6a:c3:
47:d4:cb:1b:09:cf:49:e4:f4:fb:c5:44:a4:08:d7:33:c6:8c:
02:1c:e0:a7:05:af:66:ed:82:6f:68:87:ae:76:50:02:3b:20:
11:fe:b5:3f:e4:3d:5d:54:8d:81:3b:d6:a1:68:ce:17:97:85:
c0:96:6b:06:b9:74:c3:1d:1e:d6:aa:1a:aa:47:f9:69:96:0c:
de:0a:68:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi01nY2yYfKwHyeXcws0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzI5N2VmMTg1OWNhMzM3NTk3MDZiZGM2ZWU3OTI1Y2Zh
NTE0MWQwHhcNMjQwNjIzMTAwMTM4WhcNMjQwNjI0MTAwMTM4WjAzMTEwLwYDVQQD
EyhhYTQ4NGU3NmE5NGUxMmIyNmZkZTkzYTQwYTgxMmQ2NDc2ZWJhYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6R0KYE6HHrjdb42gVqeDjQNgPL
2XrX+22ImOHW+U11MsKI+8eTCO+cUb+rCrqVIww1+69eHCl/uZcXoHv5W4Gm7V96
EH/aAgnKnvKDnIWRG6xA2ZSJ//3YOtf33DkHVMUtbbco8AxIgV9LBFvhk8CrlAVO
xrm8FtffxNpGoz2+8SQNvNp9D5ikqG9mP0vx/sJa0P7sCtbT6rns5IWYy9JlKsvZ
xxdY5RAN9Q9065PKVD3Q2XYdLyg4m5MIMKGSZCQffr4vlbi/hVdbSje7ktwKwE3d
tI7jFLbbub1yv6QAa1oTVa/GSDo8aFffbdGrXGlv0e6iIzP5h+gqs7U6DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpITnapThKyb96TpAqBLWR266sDMB8GA1UdIwQY
MBaAFI3Cl+8YWcozdZcGvcbueSXPpRQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNLWDd4aFp5ak4xbHdhOXh1NTVKYy1sRkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hYWFmOTktYjFjNS00YmI1LTg5Mjgt
YjViYzc0Y2FhNDAyLzEvamNLWDd4aFp5ak4xbHdhOXh1NTVKYy1sRkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hYWFmOTktYjFjNS00YmI1LTg5MjgtYjViYzc0Y2FhNDAy
LzEvamNLWDd4aFp5ak4xbHdhOXh1NTVKYy1sRkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQ3OvA5v
9xr323uwEjVn1pG91BHp7lhlGb/UYKBbDlf5EZw+BkT41Qbfn+ziRkQ5wBAhVp87
qGU1ibucusrn0lkCykf6ln3TM4hxnB7XUFe0Joxw/hA4cAzwGfQ36M5C4YGkO6JD
/LqV1jMfTRaOzpHZN3Fxp+7uW1FvWRjwpLpibuRV93NAEugPBEbkbiolU3zAxWlG
RiGlKmc2s1s4zXn2YMvnsAItO3YuXsERPF1RAmrDR9TLGwnPSeT0+8VEpAjXM8aM
AhzgpwWvZu2Cb2iHrnZQAjsgEf61P+Q9XVSNgTvWoWjOF5eFwJZrBrl0wx0e1qoa
qkf5aZYM3gporg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:58:01 2024 by rpki-client on console-fra.rpki-client.org