Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
File: Nir0h5VMm5am51wljQQ3o4RJupA.mft (raw, json)
Hash identifier: tWSNQLlbIa1xgH/bo98dc8nCuxiuj0IPsO51n8DzKRI=
Subject key identifier: 7C:86:C2:5F:4A:39:69:CC:63:A3:89:7A:AA:58:04:35:CA:3D:3E:E1
Authority key identifier: 36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90
Certificate issuer: /CN=362af487954c9b96a6e75c258d0437a38449ba90
Certificate serial: 019044F8A96E9D22E2728FFD5DB387A08325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
Manifest number: 1086
Signing time: Sun 23 Jun 2024 12:01:05 +0000
Manifest this update: Sun 23 Jun 2024 12:01:05 +0000
Manifest next update: Mon 24 Jun 2024 12:01:05 +0000
Files and hashes: 1: Nir0h5VMm5am51wljQQ3o4RJupA.crl (hash: P6Nf4dPnl9dBPeDIO0mtMKA00lsZWuLZPow0YYRJzTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:a9:6e:9d:22:e2:72:8f:fd:5d:b3:87:a0:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=362af487954c9b96a6e75c258d0437a38449ba90
Validity
Not Before: Jun 23 12:01:05 2024 GMT
Not After : Jun 24 12:01:05 2024 GMT
Subject: CN=7c86c25f4a3969cc63a3897aaa580435ca3d3ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:27:73:3c:e6:a7:d6:73:3d:54:b4:8a:de:
46:95:cc:fd:55:e6:c2:2b:e0:ee:b7:cf:66:f4:ba:
36:e0:6a:cd:7e:a8:d1:7a:c2:36:1f:f4:da:ef:fc:
8c:aa:16:98:c3:fd:ce:d8:30:7a:60:1f:c8:19:2e:
d2:43:84:4b:ab:84:85:b5:74:87:ab:55:32:e5:b4:
ee:62:32:cb:64:6c:70:0f:a1:a7:cb:1e:42:bb:b1:
61:ac:e6:c6:1e:88:89:b7:89:2f:cc:29:f0:a6:b7:
74:28:1b:5f:81:0d:c2:39:d6:3c:74:f3:ac:7c:4a:
8d:c6:14:0d:a3:ac:c2:c7:b8:2f:77:2a:02:fa:f6:
51:a7:3c:fd:aa:a0:52:25:0e:b9:43:5b:a6:c7:fb:
7d:a6:9f:f9:7a:e7:46:31:50:3e:56:93:ed:32:63:
c1:db:37:33:50:4e:e7:7f:df:bc:27:ac:4d:2f:8a:
42:7c:24:a2:69:c3:e5:1b:53:d2:a5:79:60:67:93:
e7:12:24:da:37:2d:bd:e3:a0:dd:24:4c:6a:ba:96:
23:80:62:23:a7:00:09:d7:0f:e8:9e:64:50:3d:e3:
52:c5:0a:d8:6b:e4:e3:45:b8:97:7d:af:3f:21:77:
4b:ed:cf:f0:4d:f7:bf:ad:47:cc:8b:10:c1:96:b9:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:C2:5F:4A:39:69:CC:63:A3:89:7A:AA:58:04:35:CA:3D:3E:E1
X509v3 Authority Key Identifier:
keyid:36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:55:7d:85:53:be:f6:a1:33:fe:88:fe:dd:97:1e:c2:40:
da:29:81:46:11:ed:b1:53:d9:3d:aa:38:67:f4:8b:cc:64:9f:
89:ce:72:89:6e:ba:30:19:45:24:91:ad:c2:ca:da:67:96:7b:
7e:8f:9c:39:11:c3:e2:3c:db:c8:0a:7e:3b:cd:62:ef:2c:50:
8b:f2:59:40:7f:60:30:2d:9a:4f:b2:3a:d3:4a:95:58:b7:1e:
ed:4e:48:f1:d8:19:8a:bb:2c:8a:6e:31:41:3b:63:8d:2e:7c:
7b:74:15:bd:3e:57:c8:2f:3e:6d:84:88:87:c3:09:67:82:d1:
57:f6:83:7d:49:1a:92:4d:3f:06:45:36:96:15:80:e3:a0:88:
64:c7:06:f6:0f:cf:d4:9a:3b:77:0c:fa:9c:ad:c4:23:48:3b:
25:ff:71:c8:e3:73:87:6a:2f:68:95:12:b0:32:7b:98:0a:77:
7d:44:9e:f9:9a:e2:01:b0:5f:f0:1b:c5:a2:cb:1b:eb:a2:da:
09:e1:5e:af:c7:a7:ff:72:57:f1:1f:25:92:14:5f:45:a1:c7:
e8:6c:63:3d:38:3b:e3:c9:88:75:e1:89:85:35:22:3e:c5:6c:
e8:30:21:ae:40:e1:9c:76:df:31:bf:07:c9:74:d3:35:17:ef:
68:04:48:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+KlunSLico/9XbOHoIMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MmFmNDg3OTU0YzliOTZhNmU3NWMyNThkMDQzN2EzODQ0
OWJhOTAwHhcNMjQwNjIzMTIwMTA1WhcNMjQwNjI0MTIwMTA1WjAzMTEwLwYDVQQD
Eyg3Yzg2YzI1ZjRhMzk2OWNjNjNhMzg5N2FhYTU4MDQzNWNhM2QzZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6gnczzmp9ZzPVS0it5Glcz9VebC
K+Dut89m9Lo24GrNfqjResI2H/Ta7/yMqhaYw/3O2DB6YB/IGS7SQ4RLq4SFtXSH
q1Uy5bTuYjLLZGxwD6Gnyx5Cu7FhrObGHoiJt4kvzCnwprd0KBtfgQ3COdY8dPOs
fEqNxhQNo6zCx7gvdyoC+vZRpzz9qqBSJQ65Q1umx/t9pp/5eudGMVA+VpPtMmPB
2zczUE7nf9+8J6xNL4pCfCSiacPlG1PSpXlgZ5PnEiTaNy2946DdJExqupYjgGIj
pwAJ1w/onmRQPeNSxQrYa+TjRbiXfa8/IXdL7c/wTfe/rUfMixDBlrlwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyGwl9KOWnMY6OJeqpYBDXKPT7hMB8GA1UdIwQY
MBaAFDYq9IeVTJuWpudcJY0EN6OESbqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iYTIwZWQtZTcwZi00NzMzLTk1NDUt
NTExM2I3NDI5Zjg2LzEvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iYTIwZWQtZTcwZi00NzMzLTk1NDUtNTExM2I3NDI5Zjg2
LzEvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJRVfYVT
vvahM/6I/t2XHsJA2imBRhHtsVPZPao4Z/SLzGSfic5yiW66MBlFJJGtwsraZ5Z7
fo+cORHD4jzbyAp+O81i7yxQi/JZQH9gMC2aT7I600qVWLce7U5I8dgZirssim4x
QTtjjS58e3QVvT5XyC8+bYSIh8MJZ4LRV/aDfUkakk0/BkU2lhWA46CIZMcG9g/P
1Jo7dwz6nK3EI0g7Jf9xyONzh2ovaJUSsDJ7mAp3fUSe+ZriAbBf8BvFossb66La
CeFer8en/3JX8R8lkhRfRaHH6GxjPTg748mIdeGJhTUiPsVs6DAhrkDhnHbfMb8H
yXTTNRfvaARIUw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:02:36 2024 by rpki-client on console-ams.rpki-client.org