Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: N3Nuu2k7fvpX3w8cEyjrYZCTIcVZB06ncV9Ruks9uEk=
Subject key identifier: 0D:3C:91:5C:4E:63:B3:ED:A8:60:C8:B8:CC:D4:19:32:BD:59:B0:E7
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01901E58B3C5725AB27B419F621379DE5E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 00:00:47 +0000
Manifest this update: Sun 16 Jun 2024 00:00:47 +0000
Manifest next update: Mon 17 Jun 2024 00:00:47 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: Rs0pihMp0tLJqhz1q7GR/biOkecdKCRudUBD+hTM72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:b3:c5:72:5a:b2:7b:41:9f:62:13:79:de:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jun 16 00:00:47 2024 GMT
Not After : Jun 17 00:00:47 2024 GMT
Subject: CN=0d3c915c4e63b3eda860c8b8ccd41932bd59b0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:02:51:01:2a:1e:0c:62:c0:5c:20:69:c8:
30:7d:34:0c:e4:a4:34:8a:56:54:9c:09:67:8b:a3:
76:53:37:fb:4b:38:97:50:67:a2:7b:ed:ca:a0:a9:
f9:fd:1a:a7:48:9e:a3:8f:1d:f5:d1:b6:bd:f6:b1:
47:3b:2b:b6:a6:db:d9:ab:03:6f:88:39:6e:a0:9f:
79:79:51:2b:91:5a:08:4b:76:fa:d2:99:81:2a:e6:
5c:61:a3:86:fb:f2:10:f9:e8:52:cf:a3:45:b1:3c:
4f:f1:f8:83:d5:c4:19:ea:2a:61:e2:d2:de:0d:28:
6d:43:c7:6b:50:2c:da:ae:a8:6c:98:bc:64:01:7c:
de:ee:29:1f:77:33:c6:24:29:5d:a3:d8:0b:bf:5f:
31:79:53:01:9f:d7:d8:42:c9:37:62:9f:41:19:3d:
4d:6c:4c:5a:ee:f5:bf:93:36:96:f8:e4:ea:bd:a2:
bc:c1:9f:8b:96:b0:5e:41:96:f9:15:15:bd:c1:c3:
49:20:0a:8f:07:82:81:1a:23:f5:81:c2:9c:59:83:
a9:35:c9:d0:81:58:6d:5e:60:87:e5:c7:51:08:76:
68:c9:69:24:7b:29:a7:ac:91:ff:a6:8a:da:92:69:
1a:43:47:0d:e5:b3:37:3e:51:02:25:a7:a2:9d:4f:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:91:5C:4E:63:B3:ED:A8:60:C8:B8:CC:D4:19:32:BD:59:B0:E7
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:00:5f:e3:8e:66:67:87:1d:5f:d6:2d:5c:2d:52:3c:40:8c:
98:72:33:01:45:40:7e:a2:14:17:6c:ee:16:a4:7a:53:3c:6d:
95:d4:8e:a0:d0:3a:e0:f0:56:b4:70:e6:7c:42:11:d9:b5:5e:
9c:98:1c:30:f7:6c:f3:b0:0c:fe:94:4f:38:25:bf:83:44:ff:
7c:c4:18:28:46:ef:07:35:50:04:22:b3:d0:db:74:4b:de:f1:
07:f4:e5:cb:fc:3c:fb:98:b8:20:1f:0b:92:40:01:28:0e:d5:
16:d9:35:46:d9:c0:49:fb:df:93:ba:2c:b0:35:e3:cf:da:6c:
09:c2:16:6a:62:c2:90:46:c6:70:71:5e:0c:ef:76:27:c0:99:
61:7f:2a:26:fb:96:d0:91:46:07:1e:68:49:3f:ed:42:39:20:
dd:5c:5b:6f:37:97:e8:40:9e:2c:3f:e2:8d:1d:02:6a:00:1c:
33:42:84:0a:ae:ed:aa:bc:70:3c:0d:42:8d:b1:d5:e5:4f:f3:
31:7d:b2:7e:f3:4a:cf:76:19:1c:c5:79:aa:4a:ef:c4:ec:b5:
65:6f:d7:ca:e7:1e:c1:8d:77:59:3d:96:8c:af:ea:4e:e0:67:
b9:f3:13:f3:1a:a2:af:56:05:be:30:dd:82:19:31:62:42:14:
ad:2b:65:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWLPFclqye0GfYhN53l4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjYxYThkZjUzMjkyYzczMGUyYWUxZGZjZmM0ZmUzZmY3
NmIxZDAwHhcNMjQwNjE2MDAwMDQ3WhcNMjQwNjE3MDAwMDQ3WjAzMTEwLwYDVQQD
EygwZDNjOTE1YzRlNjNiM2VkYTg2MGM4YjhjY2Q0MTkzMmJkNTliMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TwCUQEqHgxiwFwgacgwfTQM5KQ0
ilZUnAlni6N2Uzf7SziXUGeie+3KoKn5/RqnSJ6jjx310ba99rFHOyu2ptvZqwNv
iDluoJ95eVErkVoIS3b60pmBKuZcYaOG+/IQ+ehSz6NFsTxP8fiD1cQZ6iph4tLe
DShtQ8drUCzarqhsmLxkAXze7ikfdzPGJCldo9gLv18xeVMBn9fYQsk3Yp9BGT1N
bExa7vW/kzaW+OTqvaK8wZ+LlrBeQZb5FRW9wcNJIAqPB4KBGiP1gcKcWYOpNcnQ
gVhtXmCH5cdRCHZoyWkkeymnrJH/porakmkaQ0cN5bM3PlECJaeinU+fKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA08kVxOY7PtqGDIuMzUGTK9WbDnMB8GA1UdIwQY
MBaAFK4mGo31MpLHMOKuHfz8T+P/drHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQt
NTY5NWQ4OWQ3YjM2LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQtNTY5NWQ4OWQ3YjM2
LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwBf445m
Z4cdX9YtXC1SPECMmHIzAUVAfqIUF2zuFqR6UzxtldSOoNA64PBWtHDmfEIR2bVe
nJgcMPds87AM/pRPOCW/g0T/fMQYKEbvBzVQBCKz0Nt0S97xB/Tly/w8+5i4IB8L
kkABKA7VFtk1RtnASfvfk7ossDXjz9psCcIWamLCkEbGcHFeDO92J8CZYX8qJvuW
0JFGBx5oST/tQjkg3VxbbzeX6ECeLD/ijR0CagAcM0KECq7tqrxwPA1CjbHV5U/z
MX2yfvNKz3YZHMV5qkrvxOy1ZW/XyucewY13WT2WjK/qTuBnufMT8xqir1YFvjDd
ghkxYkIUrStlJg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:19 2024 by rpki-client on console-ams.rpki-client.org