Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: qY2FIi3idNXQGu0LJZi/U1MhNUJG0+R80N12UdJCyA8=
Subject key identifier: 0D:35:78:07:A2:65:7D:10:B8:52:49:B5:52:A7:76:72:EF:59:9B:47
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 01901D4654597595736F705F82A9760FFDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 19:01:06 +0000
Manifest this update: Sat 15 Jun 2024 19:01:06 +0000
Manifest next update: Sun 16 Jun 2024 19:01:06 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: 2BVDw+Jtnzj2U1DsZLpAnx4WbAO5jt5+P+RoNCyTvrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:54:59:75:95:73:6f:70:5f:82:a9:76:0f:fd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Jun 15 19:01:06 2024 GMT
Not After : Jun 16 19:01:06 2024 GMT
Subject: CN=0d357807a2657d10b85249b552a77672ef599b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:c2:2e:cf:a4:19:6a:f4:c8:90:6f:bc:56:
c9:47:70:d4:38:25:37:93:e5:5e:23:5d:fa:72:c5:
dc:b2:b7:1b:2d:38:dc:50:c9:a9:e5:e0:21:1e:5b:
86:0d:47:9a:d1:10:30:6e:02:0b:40:14:6c:23:b4:
50:d1:83:ac:c5:0d:d8:51:f9:fe:88:88:83:b3:0d:
84:83:53:34:cf:63:3a:fb:b3:82:e9:63:7a:d9:06:
18:45:f7:a4:f5:9e:bd:2e:43:54:c9:b4:5c:31:df:
af:b1:9b:be:1b:60:89:4e:e0:a2:a3:42:43:f0:81:
33:e4:a7:96:84:13:bc:6e:91:83:46:e0:3c:dc:52:
bc:4f:b0:4d:34:c1:8c:8f:6a:a1:f3:01:5d:4a:79:
a0:62:dc:94:6d:d8:83:dc:b8:50:d3:44:5b:a3:94:
b2:63:4c:36:8c:4f:a4:cd:aa:f9:41:f6:fc:3e:4e:
5a:3f:18:92:7e:6b:47:f9:97:9e:5b:c4:bc:3b:c6:
50:9f:d9:cb:02:ab:f6:f1:2d:43:6c:48:92:c7:20:
62:84:8f:7d:b0:4e:6a:4e:3a:92:60:98:05:d1:72:
df:a5:0e:5e:10:de:dd:03:98:e6:4e:c1:3e:e6:bb:
a9:0e:8f:6b:7c:ce:8d:d5:6d:b8:94:90:56:e7:52:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:78:07:A2:65:7D:10:B8:52:49:B5:52:A7:76:72:EF:59:9B:47
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:88:03:f5:c2:f0:e1:eb:ae:16:3d:fd:8e:81:ea:bb:5b:
c7:f1:2d:11:46:c7:55:86:12:31:fb:99:08:17:86:66:e1:8c:
2c:a0:63:9a:f4:68:d0:6b:83:19:1b:1f:eb:be:43:f2:91:76:
19:83:6e:98:57:c3:e1:67:7c:c8:41:aa:16:d7:b1:c5:98:95:
8a:d6:c4:fc:12:6c:31:60:f6:43:a9:47:ac:e9:f9:54:d5:e7:
7e:74:8b:78:aa:d9:19:cf:8c:d6:d5:81:b6:f3:b7:06:a0:83:
e7:4d:cd:93:08:32:b6:54:79:47:2d:28:76:e5:83:1c:87:77:
78:90:99:80:b8:55:38:b7:98:15:55:ee:52:5e:1a:a0:7b:01:
64:99:8e:1b:17:c5:6f:29:40:74:0d:33:ca:63:38:1d:cb:1c:
91:83:01:34:fe:81:9c:95:55:87:87:c1:31:90:ed:c4:38:6a:
8c:11:de:33:af:75:44:77:cf:83:05:42:78:22:4f:5d:16:b2:
f1:ee:3a:83:8c:c1:f0:fd:87:08:3a:92:e2:e8:d6:39:16:12:
aa:8e:c8:e8:a5:69:28:32:14:44:d1:62:66:ec:1f:4a:59:01:
a4:a4:09:d7:7a:fe:60:97:9d:e1:8b:5f:7b:f7:45:82:9c:0a:
a0:ff:bc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRlRZdZVzb3Bfgql2D/20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0
NTkwZWIwHhcNMjQwNjE1MTkwMTA2WhcNMjQwNjE2MTkwMTA2WjAzMTEwLwYDVQQD
EygwZDM1NzgwN2EyNjU3ZDEwYjg1MjQ5YjU1MmE3NzY3MmVmNTk5YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvLCLs+kGWr0yJBvvFbJR3DUOCU3
k+VeI136csXcsrcbLTjcUMmp5eAhHluGDUea0RAwbgILQBRsI7RQ0YOsxQ3YUfn+
iIiDsw2Eg1M0z2M6+7OC6WN62QYYRfek9Z69LkNUybRcMd+vsZu+G2CJTuCio0JD
8IEz5KeWhBO8bpGDRuA83FK8T7BNNMGMj2qh8wFdSnmgYtyUbdiD3LhQ00Rbo5Sy
Y0w2jE+kzar5Qfb8Pk5aPxiSfmtH+ZeeW8S8O8ZQn9nLAqv28S1DbEiSxyBihI99
sE5qTjqSYJgF0XLfpQ5eEN7dA5jmTsE+5rupDo9rfM6N1W24lJBW51IHOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA01eAeiZX0QuFJJtVKndnLvWZtHMB8GA1UdIwQY
MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt
NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw
LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdiIA/XC
8OHrrhY9/Y6B6rtbx/EtEUbHVYYSMfuZCBeGZuGMLKBjmvRo0GuDGRsf675D8pF2
GYNumFfD4Wd8yEGqFtexxZiVitbE/BJsMWD2Q6lHrOn5VNXnfnSLeKrZGc+M1tWB
tvO3BqCD503NkwgytlR5Ry0oduWDHId3eJCZgLhVOLeYFVXuUl4aoHsBZJmOGxfF
bylAdA0zymM4HcsckYMBNP6BnJVVh4fBMZDtxDhqjBHeM691RHfPgwVCeCJPXRay
8e46g4zB8P2HCDqS4ujWORYSqo7I6KVpKDIURNFiZuwfSlkBpKQJ13r+YJed4Ytf
e/dFgpwKoP+8UA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:17:01 2024 by rpki-client on console-ams.rpki-client.org