Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: DVEqtmgb7G9F/PXoxuGrBatLjh8buS6qJtr+9LuMT7w=
Subject key identifier: C4:7A:F2:D9:00:81:EA:7C:AE:6D:33:4A:70:AC:94:A6:F0:69:E8:DA
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 01901E8FE19DB8F00DF767CC5715C443D912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 01:01:04 +0000
Manifest this update: Sun 16 Jun 2024 01:01:04 +0000
Manifest next update: Mon 17 Jun 2024 01:01:04 +0000
Files and hashes: 1: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: QtcaLhGtEmYETyxgLLiYScuLWWwcluS+B+bIOuJY7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:e1:9d:b8:f0:0d:f7:67:cc:57:15:c4:43:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Jun 16 01:01:04 2024 GMT
Not After : Jun 17 01:01:04 2024 GMT
Subject: CN=c47af2d90081ea7cae6d334a70ac94a6f069e8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:c8:5a:ab:f3:ab:bb:18:ad:58:28:9b:a0:
18:6d:3a:61:86:fa:b6:45:10:32:7a:64:0a:4a:3d:
a2:bb:21:79:52:f6:40:5d:51:b2:9e:70:bd:36:87:
33:37:92:8a:ae:da:ee:c2:32:d2:f2:b5:73:08:00:
ed:a2:d2:c5:9e:4e:47:5c:9f:d4:6b:ab:23:e9:ac:
0d:bd:c5:7b:d1:fa:26:29:75:b8:f3:c1:e7:31:9c:
fc:c2:af:60:bc:51:a6:4b:9b:8c:f9:8a:0b:e0:95:
e8:d5:de:94:bc:6a:54:9b:94:39:2e:ad:28:3c:1a:
66:ae:50:2b:ba:f0:0f:6a:71:59:24:c3:2c:1b:a0:
52:a6:9d:6e:c6:3d:6b:d7:10:2e:85:77:ee:4b:12:
1b:31:7a:56:2f:43:79:9a:86:cd:95:d6:86:40:28:
f6:71:5e:dd:e5:8a:c4:3f:01:dc:ab:12:13:7f:69:
4b:ab:f0:5b:38:fc:d5:80:93:10:08:f0:49:75:38:
a2:03:0a:8f:0f:4d:be:3b:a2:ce:a8:73:c0:ce:0b:
c8:29:b0:6c:94:d1:2e:50:a2:b3:5a:d8:34:a4:8d:
89:f7:f8:b1:9e:e1:49:2f:ce:41:e1:ee:b3:c1:e7:
17:6c:8c:c8:84:c0:2a:dc:f1:9a:15:e6:bd:9d:eb:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:F2:D9:00:81:EA:7C:AE:6D:33:4A:70:AC:94:A6:F0:69:E8:DA
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:19:83:ba:95:2f:16:7a:68:db:7c:4b:85:b5:43:6d:b7:
12:01:1f:f8:e0:ac:6a:a8:50:87:45:22:34:fb:2b:6f:e2:f7:
54:2a:9f:98:81:e5:35:54:8c:49:dc:7d:b0:0d:73:b3:62:0f:
2a:6e:95:86:56:cb:a0:4f:0b:27:36:7c:f5:2e:4c:24:b0:f9:
32:f3:81:5c:dd:5c:f8:e8:64:7d:8e:b1:69:ae:4b:fe:0d:11:
5c:ab:17:2c:28:62:f3:76:44:25:c5:83:59:7e:3c:80:70:06:
73:cf:b0:bd:a4:42:8b:3f:bb:3c:d3:0f:bc:59:13:49:05:f9:
d4:a0:8b:6e:80:c3:1e:97:ab:ea:93:89:e3:21:03:56:85:5f:
cc:85:f2:6c:d5:d0:d8:98:38:24:36:77:4c:82:89:7e:f3:39:
d6:c2:1c:bf:dc:44:3b:f7:ad:4d:e3:30:bd:00:4a:b2:ed:3f:
b2:82:a2:c1:2e:7d:58:b0:fe:96:79:a1:1a:41:15:33:a5:a8:
04:7e:c8:2e:bb:cd:c8:2b:a8:77:2b:d8:d6:70:bd:74:f6:7a:
0e:a6:86:a0:92:c0:ef:39:40:59:6e:e2:7a:82:ab:d3:a8:f2:
65:68:b6:e2:ab:fa:49:4d:eb:af:fb:dc:6c:2f:ee:4c:61:3f:
3b:3d:51:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej+GduPAN92fMVxXEQ9kSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjQwNjE2MDEwMTA0WhcNMjQwNjE3MDEwMTA0WjAzMTEwLwYDVQQD
EyhjNDdhZjJkOTAwODFlYTdjYWU2ZDMzNGE3MGFjOTRhNmYwNjllOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEfIWqvzq7sYrVgom6AYbTphhvq2
RRAyemQKSj2iuyF5UvZAXVGynnC9NoczN5KKrtruwjLS8rVzCADtotLFnk5HXJ/U
a6sj6awNvcV70fomKXW488HnMZz8wq9gvFGmS5uM+YoL4JXo1d6UvGpUm5Q5Lq0o
PBpmrlAruvAPanFZJMMsG6BSpp1uxj1r1xAuhXfuSxIbMXpWL0N5mobNldaGQCj2
cV7d5YrEPwHcqxITf2lLq/BbOPzVgJMQCPBJdTiiAwqPD02+O6LOqHPAzgvIKbBs
lNEuUKKzWtg0pI2J9/ixnuFJL85B4e6zwecXbIzIhMAq3PGaFea9netg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR68tkAgep8rm0zSnCslKbwaejaMB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7oZg7qV
LxZ6aNt8S4W1Q223EgEf+OCsaqhQh0UiNPsrb+L3VCqfmIHlNVSMSdx9sA1zs2IP
Km6VhlbLoE8LJzZ89S5MJLD5MvOBXN1c+OhkfY6xaa5L/g0RXKsXLChi83ZEJcWD
WX48gHAGc8+wvaRCiz+7PNMPvFkTSQX51KCLboDDHper6pOJ4yEDVoVfzIXybNXQ
2Jg4JDZ3TIKJfvM51sIcv9xEO/etTeMwvQBKsu0/soKiwS59WLD+lnmhGkEVM6Wo
BH7ILrvNyCuodyvY1nC9dPZ6DqaGoJLA7zlAWW7ieoKr06jyZWi24qv6SU3rr/vc
bC/uTGE/Oz1R0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:54:21 2024 by rpki-client on console-ams.rpki-client.org