Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: kSDtPHuACKZlPkurwJ8f7NW3dc7TR8DBWdcem3XBISA=
Subject key identifier: BE:A2:1C:27:76:24:85:C8:EE:4A:64:7C:F7:42:B8:9E:C5:56:9D:F1
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 0190448A6DAF47384FE2D89CCC0C31A7E2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 11D6
Signing time: Sun 23 Jun 2024 10:00:40 +0000
Manifest this update: Sun 23 Jun 2024 10:00:40 +0000
Manifest next update: Mon 24 Jun 2024 10:00:40 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: geDuQVOjWpwHsUX2uWp4Mm/Z31Bd2vR4zAz+WORa1E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:6d:af:47:38:4f:e2:d8:9c:cc:0c:31:a7:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Jun 23 10:00:40 2024 GMT
Not After : Jun 24 10:00:40 2024 GMT
Subject: CN=bea21c27762485c8ee4a647cf742b89ec5569df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:dc:ac:f7:da:3b:d7:3b:e4:c1:d6:37:60:
5d:5f:bc:62:f1:b5:7e:10:9a:6c:8b:05:3a:da:62:
23:03:a6:ab:95:f3:ee:89:15:14:d2:dd:83:6a:38:
49:31:d9:16:22:61:f1:21:98:e7:e8:25:1b:0c:77:
90:4b:76:95:b7:1d:8b:0c:23:91:73:d4:eb:2d:11:
a1:b1:62:16:97:79:9e:3a:cc:ec:df:ac:79:db:b6:
44:3c:40:da:f8:3a:81:5d:7f:c4:b0:6e:9c:70:37:
99:90:ed:74:63:b6:0e:d9:28:24:30:ac:5a:ce:e6:
4c:10:1c:2c:42:0b:a9:9b:ea:6c:4e:af:90:82:96:
86:a4:24:fa:c9:a6:21:5c:d1:5d:b0:4e:e8:fc:36:
ce:be:0c:32:82:73:67:63:94:14:16:15:f1:e2:25:
aa:fc:78:81:ca:02:e1:59:7a:55:be:24:47:31:97:
2d:04:ae:1a:7a:65:80:b4:d3:a5:cd:b8:68:61:5a:
c6:21:9e:6a:25:11:2c:63:05:9e:ba:33:f2:19:d9:
ab:6a:56:69:7c:7b:8c:9e:fe:30:39:8b:4b:cf:26:
05:29:e5:62:8a:db:1f:6d:0a:e5:f8:e2:94:9d:d1:
61:d8:a9:55:a1:d3:a4:ae:09:c6:67:08:69:0d:93:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:1C:27:76:24:85:C8:EE:4A:64:7C:F7:42:B8:9E:C5:56:9D:F1
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3a:43:00:e9:b8:3c:6c:fa:1c:22:20:f1:b0:5e:04:c0:c9:
41:be:1f:80:f1:12:02:dc:ca:36:71:28:6e:b5:7d:58:f8:95:
f0:4f:32:4b:63:ea:ae:4b:3c:1e:21:10:a1:44:6f:31:c5:b4:
7e:5f:7d:c0:99:0b:28:c4:e9:0a:a0:40:d8:d5:28:21:f3:3e:
6e:a7:cb:03:46:f7:a9:0f:3f:1a:20:45:3b:d8:ae:d6:4d:94:
73:5a:dc:d2:59:dd:f3:6b:db:fc:12:51:db:de:03:33:1d:59:
9d:0a:55:cb:62:d6:c0:9f:0d:2e:db:21:8b:f8:96:f7:9f:3b:
7c:b1:88:40:9b:b1:a2:40:64:e6:db:3f:e6:ef:b6:94:5a:6a:
66:56:cb:03:a9:87:59:89:65:65:31:df:70:86:eb:18:65:7d:
cc:86:79:df:0f:88:82:0c:7a:08:a6:f8:fa:8a:a5:82:e8:8d:
8c:49:a6:d8:16:4d:27:69:8d:4c:ec:b2:0b:ec:99:89:23:bf:
f5:c5:2d:f9:9e:a3:a2:71:3a:db:3d:2d:2c:1e:0c:47:da:7a:
c9:2d:ad:89:a8:a6:c4:ce:2f:d8:59:dd:cf:f8:10:fc:13:44:
96:ac:dd:e3:6a:a8:87:37:96:bd:32:23:cb:02:82:a1:74:0e:
79:91:7a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEim2vRzhP4ticzAwxp+K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTk1Y2UxODViNjBlNzg2MDQ5ZGY1NWYxNWM5ZDJlYzA1
ZDRmNmIwHhcNMjQwNjIzMTAwMDQwWhcNMjQwNjI0MTAwMDQwWjAzMTEwLwYDVQQD
EyhiZWEyMWMyNzc2MjQ4NWM4ZWU0YTY0N2NmNzQyYjg5ZWM1NTY5ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsajcrPfaO9c75MHWN2BdX7xi8bV+
EJpsiwU62mIjA6arlfPuiRUU0t2DajhJMdkWImHxIZjn6CUbDHeQS3aVtx2LDCOR
c9TrLRGhsWIWl3meOszs36x527ZEPEDa+DqBXX/EsG6ccDeZkO10Y7YO2SgkMKxa
zuZMEBwsQgupm+psTq+QgpaGpCT6yaYhXNFdsE7o/DbOvgwygnNnY5QUFhXx4iWq
/HiBygLhWXpVviRHMZctBK4aemWAtNOlzbhoYVrGIZ5qJREsYwWeujPyGdmralZp
fHuMnv4wOYtLzyYFKeViitsfbQrl+OKUndFh2KlVodOkrgnGZwhpDZNDNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6iHCd2JIXI7kpkfPdCuJ7FVp3xMB8GA1UdIwQY
MBaAFGmZXOGFtg54YEnfVfFcnS7AXU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEt
YjdjOTllYjE4ODM0LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEtYjdjOTllYjE4ODM0
LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjpDAOm4
PGz6HCIg8bBeBMDJQb4fgPESAtzKNnEobrV9WPiV8E8yS2Pqrks8HiEQoURvMcW0
fl99wJkLKMTpCqBA2NUoIfM+bqfLA0b3qQ8/GiBFO9iu1k2Uc1rc0lnd82vb/BJR
294DMx1ZnQpVy2LWwJ8NLtshi/iW9587fLGIQJuxokBk5ts/5u+2lFpqZlbLA6mH
WYllZTHfcIbrGGV9zIZ53w+Iggx6CKb4+oqlguiNjEmm2BZNJ2mNTOyyC+yZiSO/
9cUt+Z6jonE62z0tLB4MR9p6yS2tiaimxM4v2Fndz/gQ/BNElqzd42qohzeWvTIj
ywKCoXQOeZF6Aw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:58:08 2024 by rpki-client on console-fra.rpki-client.org