Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: iWx5ICMxm9F9b0qzbjj7BiskfuIl/s56S/PIndkunT0=
Subject key identifier: C8:2E:9A:1F:5E:35:77:FE:29:DE:4B:8B:93:55:3A:C7:97:DD:45:B0
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019048D58F7B317D4EEFF872CBFAEB51A0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 11D8
Signing time: Mon 24 Jun 2024 06:01:13 +0000
Manifest this update: Mon 24 Jun 2024 06:01:13 +0000
Manifest next update: Tue 25 Jun 2024 06:01:13 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: 1XXr6miw4lD/efhaqOArt2Ck2k0xOd0NVQTktsODKk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:d5:8f:7b:31:7d:4e:ef:f8:72:cb:fa:eb:51:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Jun 24 06:01:13 2024 GMT
Not After : Jun 25 06:01:13 2024 GMT
Subject: CN=c82e9a1f5e3577fe29de4b8b93553ac797dd45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:a3:7e:a4:62:1b:d0:ed:71:12:d9:03:75:
40:ea:0b:57:a6:a3:8e:a6:a8:7a:25:0e:88:b6:26:
b7:d1:98:a0:2b:ec:b1:78:a2:7e:54:72:11:a7:10:
14:16:b8:3c:71:38:93:eb:a7:e6:3b:fa:bd:6f:40:
dd:35:83:ff:d0:51:e7:f6:ac:f0:3e:57:25:a0:b0:
9e:8d:a7:ea:92:c5:22:6c:08:f6:34:2f:95:0e:f3:
6b:0b:3b:52:83:bb:73:63:20:ed:4b:b1:16:55:10:
61:b4:af:1b:49:21:42:c8:d4:36:36:1f:9d:af:a9:
b6:ae:9e:5f:c7:f2:9b:b6:82:2f:a3:ef:c9:12:c7:
8d:41:1b:20:3b:8e:fb:f9:c5:c1:18:85:4e:47:41:
02:08:82:94:d0:67:5c:4f:ff:29:73:33:8d:fd:33:
a2:25:38:10:91:42:e7:ae:5d:7f:8b:50:83:98:25:
8e:67:5a:2a:c6:5e:88:74:65:b0:aa:16:5e:5a:4f:
90:7c:76:16:71:31:99:6d:b0:90:c4:b7:e3:b9:ee:
a8:c8:af:d5:18:19:4c:ed:d6:9c:87:14:73:a6:38:
ce:17:e1:dd:62:e6:e9:a7:50:09:c0:22:09:b2:49:
54:af:b0:1c:c8:46:b6:48:8c:11:69:88:d0:8d:f3:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:9A:1F:5E:35:77:FE:29:DE:4B:8B:93:55:3A:C7:97:DD:45:B0
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:bf:9f:b2:01:fd:7b:0f:90:d8:68:71:c5:3e:a3:58:36:
02:37:cd:ea:57:b5:cb:cf:88:bd:c5:cc:8b:a0:d1:14:8a:f9:
a8:3d:a0:37:c2:92:02:4c:93:a3:7b:f0:41:c8:ac:01:25:8a:
c2:95:77:b7:22:fb:fd:1a:ae:be:4d:40:fd:bd:2d:fa:e6:d0:
55:ed:7a:8a:9c:9e:dd:5f:a7:3f:29:92:ca:ae:69:da:88:24:
02:bb:14:29:9c:b2:52:52:80:d1:22:7e:ce:da:39:97:91:bb:
b4:f1:87:e5:f2:cb:2c:de:18:14:ef:9b:95:c6:70:8a:57:55:
e2:fa:b3:56:68:01:4e:e2:4e:17:c2:25:0f:26:6f:0a:df:14:
2b:a4:79:5f:bd:64:19:06:b7:14:f7:f7:01:3b:a8:f5:9f:88:
8d:8a:cd:ee:5b:b4:d7:e9:ad:3c:5e:f1:58:38:14:9a:f4:cb:
96:95:52:e3:5f:32:38:51:e4:bb:b5:3a:69:89:b9:12:95:46:
f5:39:df:49:07:16:4c:a4:59:25:ff:f5:c9:13:30:8e:2a:5c:
5b:1c:0e:71:d0:98:b5:77:02:ce:65:11:c4:c4:3d:a5:10:a1:
46:16:04:f1:05:f6:85:b8:be:8e:4d:e8:fc:0d:e2:67:ed:78:
b2:0c:02:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBI1Y97MX1O7/hyy/rrUaCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5
MTVkYjgwHhcNMjQwNjI0MDYwMTEzWhcNMjQwNjI1MDYwMTEzWjAzMTEwLwYDVQQD
EyhjODJlOWExZjVlMzU3N2ZlMjlkZTRiOGI5MzU1M2FjNzk3ZGQ0NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTyjfqRiG9DtcRLZA3VA6gtXpqOO
pqh6JQ6Itia30ZigK+yxeKJ+VHIRpxAUFrg8cTiT66fmO/q9b0DdNYP/0FHn9qzw
PlcloLCejafqksUibAj2NC+VDvNrCztSg7tzYyDtS7EWVRBhtK8bSSFCyNQ2Nh+d
r6m2rp5fx/KbtoIvo+/JEseNQRsgO477+cXBGIVOR0ECCIKU0GdcT/8pczON/TOi
JTgQkULnrl1/i1CDmCWOZ1oqxl6IdGWwqhZeWk+QfHYWcTGZbbCQxLfjue6oyK/V
GBlM7dachxRzpjjOF+HdYubpp1AJwCIJsklUr7AcyEa2SIwRaYjQjfPHEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgumh9eNXf+Kd5Li5NVOseX3UWwMB8GA1UdIwQY
MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt
MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh
LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREm/n7IB
/XsPkNhoccU+o1g2AjfN6le1y8+IvcXMi6DRFIr5qD2gN8KSAkyTo3vwQcisASWK
wpV3tyL7/Rquvk1A/b0t+ubQVe16ipye3V+nPymSyq5p2ogkArsUKZyyUlKA0SJ+
zto5l5G7tPGH5fLLLN4YFO+blcZwildV4vqzVmgBTuJOF8IlDyZvCt8UK6R5X71k
GQa3FPf3ATuo9Z+IjYrN7lu01+mtPF7xWDgUmvTLlpVS418yOFHku7U6aYm5EpVG
9TnfSQcWTKRZJf/1yRMwjipcWxwOcdCYtXcCzmURxMQ9pRChRhYE8QX2hbi+jk3o
/A3iZ+14sgwC2Q==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:25:39 2024 by rpki-client on console-fra.rpki-client.org