Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: vHB5nrpbNfyqsN3mV97bpKjVzg7Dm9oS+6rpO3ciPDE=
Subject key identifier: AD:34:6E:8A:5E:A6:A1:7A:76:27:C4:E6:B3:95:7C:8D:00:C8:6A:B9
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 01901C6A5CBCE917B4E4E0E2B625FC89000F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 15:00:50 +0000
Manifest this update: Sat 15 Jun 2024 15:00:50 +0000
Manifest next update: Sun 16 Jun 2024 15:00:50 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: dGHFvxHc7E4ucM3Ze6GD058dqFN5qma7tY+KKntnMQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:5c:bc:e9:17:b4:e4:e0:e2:b6:25:fc:89:00:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Jun 15 15:00:50 2024 GMT
Not After : Jun 16 15:00:50 2024 GMT
Subject: CN=ad346e8a5ea6a17a7627c4e6b3957c8d00c86ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:b8:c1:c2:fb:4b:3b:5b:2c:2f:c7:49:ea:
7d:67:1f:e5:0e:7f:3d:fa:3d:ee:73:d8:08:ed:e0:
41:f5:f9:08:90:c2:ad:82:45:78:6e:e3:e9:43:7c:
d5:a2:45:07:14:33:38:bd:24:cb:1e:ad:07:77:ab:
2d:ce:b5:d0:3a:25:9d:e4:5d:2c:ef:47:14:2c:b9:
e4:01:2a:87:44:88:8c:67:83:05:cb:31:e5:7d:41:
ef:74:0a:0f:54:0f:4e:21:6d:4b:cb:54:4c:f2:1b:
61:61:c9:a5:f7:46:fa:d6:02:83:49:d7:9a:34:6c:
50:72:bf:15:db:7d:f8:50:7c:a8:24:50:48:0b:0a:
07:82:ea:70:c9:6d:a4:22:35:2d:5c:51:5d:71:a5:
b1:c4:86:85:56:e0:79:fe:ef:aa:31:67:99:70:50:
dc:60:f1:14:03:35:e1:5b:05:9e:b9:c0:47:b9:19:
d5:12:e2:2c:de:d3:8f:38:c7:01:31:de:7e:cf:0b:
ab:a9:29:88:ef:9a:06:73:30:de:36:68:ac:20:f2:
4c:ea:d6:9c:40:84:38:2e:86:40:ee:53:9d:4a:92:
a0:20:67:b3:6e:97:96:6b:a7:1d:63:0c:a4:01:52:
99:51:f8:61:74:64:7c:03:c1:7b:48:91:ee:7c:f4:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:6E:8A:5E:A6:A1:7A:76:27:C4:E6:B3:95:7C:8D:00:C8:6A:B9
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:02:b7:b9:98:45:98:3f:55:21:f1:ed:46:af:8a:d8:b6:3a:
01:e3:5b:47:81:d1:df:97:bf:11:db:4f:4f:56:68:b2:2f:c5:
97:bb:51:11:61:87:61:8d:16:94:4d:7f:63:71:e7:ab:ee:29:
44:87:a1:7c:b6:f3:4c:f2:36:56:bf:42:5d:a6:dd:6c:4f:0a:
f2:4a:6d:e9:eb:61:07:35:a9:1b:88:ed:c0:69:98:87:d0:95:
8b:f9:c0:44:d9:f8:35:5c:d6:5e:43:01:07:89:be:87:27:17:
3a:94:4f:2e:e5:4a:2d:5d:5d:7c:4a:82:cc:b2:16:06:21:b1:
ed:a5:da:d0:ed:4a:fd:62:1f:8b:8b:e3:60:65:3a:be:e9:24:
a1:bc:cc:3e:c3:b6:2d:b3:f8:b7:20:88:c8:27:1f:7e:c9:26:
b6:0c:46:0b:d1:36:9b:f5:39:43:67:10:1a:e0:48:3b:74:43:
33:cf:96:2d:b5:2a:de:a7:d9:35:2f:e5:2f:a2:40:e4:b0:fe:
93:b5:42:87:6c:29:02:93:1f:f4:16:00:61:0c:da:1d:6b:3b:
77:e6:55:e9:ef:72:26:23:39:57:cc:2f:2d:63:70:2f:fe:72:
76:a7:cd:c4:47:be:38:6b:fb:34:85:f6:6a:97:37:bb:d9:f9:
2e:a4:d9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcaly86Re05ODitiX8iQAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTRkMjQ3NmIzMTUxZTFlN2YwMzYwZGNlNGYzODUxMjVl
ZWQ1ZmIwHhcNMjQwNjE1MTUwMDUwWhcNMjQwNjE2MTUwMDUwWjAzMTEwLwYDVQQD
EyhhZDM0NmU4YTVlYTZhMTdhNzYyN2M0ZTZiMzk1N2M4ZDAwYzg2YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHi4wcL7SztbLC/HSep9Zx/lDn89
+j3uc9gI7eBB9fkIkMKtgkV4buPpQ3zVokUHFDM4vSTLHq0Hd6stzrXQOiWd5F0s
70cULLnkASqHRIiMZ4MFyzHlfUHvdAoPVA9OIW1Ly1RM8hthYcml90b61gKDSdea
NGxQcr8V2334UHyoJFBICwoHgupwyW2kIjUtXFFdcaWxxIaFVuB5/u+qMWeZcFDc
YPEUAzXhWwWeucBHuRnVEuIs3tOPOMcBMd5+zwurqSmI75oGczDeNmisIPJM6tac
QIQ4LoZA7lOdSpKgIGezbpeWa6cdYwykAVKZUfhhdGR8A8F7SJHufPSgswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK00bopepqF6difE5rOVfI0AyGq5MB8GA1UdIwQY
MBaAFJuU0kdrMVHh5/A2Dc5POFEl7tX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQt
ODIyZWFmMGQyMmIwLzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQtODIyZWFmMGQyMmIw
LzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtgK3uZhF
mD9VIfHtRq+K2LY6AeNbR4HR35e/EdtPT1Zosi/Fl7tREWGHYY0WlE1/Y3Hnq+4p
RIehfLbzTPI2Vr9CXabdbE8K8kpt6ethBzWpG4jtwGmYh9CVi/nARNn4NVzWXkMB
B4m+hycXOpRPLuVKLV1dfEqCzLIWBiGx7aXa0O1K/WIfi4vjYGU6vukkobzMPsO2
LbP4tyCIyCcffskmtgxGC9E2m/U5Q2cQGuBIO3RDM8+WLbUq3qfZNS/lL6JA5LD+
k7VCh2wpApMf9BYAYQzaHWs7d+ZV6e9yJiM5V8wvLWNwL/5ydqfNxEe+OGv7NIX2
apc3u9n5LqTZwg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 16:18:21 2024 by rpki-client on console-fra.rpki-client.org