Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
File: F1aQfnINPe6fr34YLz2ejmIe3II.mft (raw, json)
Hash identifier: ZPrOxOlCEY+b4S0YY07pltXEBruzolLSx2LFMvpOgk8=
Subject key identifier: 85:7C:D7:A8:27:18:7F:89:42:87:5D:BB:A9:8D:B7:D7:D8:8B:9E:3E
Authority key identifier: 17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82
Certificate issuer: /CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
Certificate serial: 018F460DEE526AF2D32722C744513C67E576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
Manifest number: 0DC3
Signing time: Sun 05 May 2024 00:01:08 +0000
Manifest this update: Sun 05 May 2024 00:01:08 +0000
Manifest next update: Mon 06 May 2024 00:01:08 +0000
Files and hashes: 1: F1aQfnINPe6fr34YLz2ejmIe3II.crl (hash: f4G/i5Rsa/MkCL44Yu4BopYJRZu+hrXBBY2IoZ3KBsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:0d:ee:52:6a:f2:d3:27:22:c7:44:51:3c:67:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
Validity
Not Before: May 5 00:01:08 2024 GMT
Not After : May 6 00:01:08 2024 GMT
Subject: CN=857cd7a827187f8942875dbba98db7d7d88b9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:0e:1c:5a:a7:b3:cc:36:c8:af:22:55:b0:
8d:80:00:eb:df:09:f9:ec:9e:ce:52:39:f9:9a:f9:
a1:c5:76:5f:00:8b:0a:a8:61:3b:8e:50:0a:1c:43:
8c:c0:47:5d:db:25:25:f5:60:3b:54:d4:70:f8:5a:
3f:76:df:37:d5:6b:ce:50:05:2a:30:6d:76:52:54:
f0:1c:a5:26:f3:65:a3:00:fb:63:bc:1e:7d:69:40:
f5:f7:d9:33:c0:93:35:af:25:cc:70:ca:f1:83:dd:
16:aa:3b:a6:ac:53:6a:5d:f2:36:a4:c2:93:71:c5:
3c:9c:b5:d3:e0:1f:67:72:14:5b:c7:ba:25:ca:15:
ac:ac:d8:eb:31:0e:3a:8a:30:9a:e0:93:6b:b5:d8:
9b:04:08:45:69:fd:e3:dc:b1:f7:51:5c:d0:fd:e5:
f5:3a:e9:87:e2:f8:1e:15:9d:84:7c:4d:18:43:3d:
84:f3:3d:7e:84:3e:85:48:20:cb:de:e4:bf:00:4f:
57:d7:e3:f6:ab:ba:9e:ef:b3:7a:d3:50:5f:de:fb:
26:8e:d1:97:45:22:fe:2b:5b:cf:5e:de:a4:ce:70:
f1:5e:fd:df:bd:14:ce:e8:02:54:37:f9:df:a2:23:
4d:ac:01:88:4d:41:49:1d:22:4c:4a:f3:16:26:d0:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:D7:A8:27:18:7F:89:42:87:5D:BB:A9:8D:B7:D7:D8:8B:9E:3E
X509v3 Authority Key Identifier:
keyid:17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:36:26:7f:0d:64:33:98:db:e2:f3:7e:d5:d9:29:90:9f:63:
76:1f:d7:86:e9:7c:7f:25:73:da:a1:fd:91:22:ed:02:d1:42:
ac:c0:d6:d5:52:d0:9b:db:74:e8:7c:cd:2e:b5:55:53:4b:8c:
32:6e:f6:30:8a:4d:4e:ba:e8:76:da:ab:06:1b:70:e0:8a:84:
79:e8:a5:68:3b:73:66:93:c9:65:a0:12:7b:df:56:61:86:6a:
2a:0f:4d:55:ab:ba:51:9e:e4:99:a9:99:20:23:78:10:fb:0d:
be:d6:4e:68:9c:ac:48:19:d7:e7:ed:37:83:60:80:f0:a0:a2:
0f:67:d3:4e:05:8e:6b:f5:a8:cb:22:a6:ab:aa:45:77:15:d0:
c6:ac:63:29:3f:71:cc:69:cf:52:4d:c5:23:be:ab:94:2c:ae:
93:c4:88:87:32:89:47:4c:9b:31:0d:39:22:21:9b:8f:c2:26:
57:1f:f9:49:c2:d7:e4:7a:76:7f:41:5b:1b:e7:8d:d7:36:e7:
92:83:eb:a3:f6:1f:2f:4b:29:f8:bd:25:d1:cc:5f:5b:56:a9:
c2:8b:f1:e2:25:f8:79:aa:2a:9e:de:37:ef:aa:7a:94:ef:1b:
db:7f:2d:8d:11:67:20:ec:3a:b1:49:40:67:1c:44:4a:e5:60:
d1:12:eb:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GDe5SavLTJyLHRFE8Z+V2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTY5MDdlNzIwZDNkZWU5ZmFmN2UxODJmM2Q5ZThlNjIx
ZWRjODIwHhcNMjQwNTA1MDAwMTA4WhcNMjQwNTA2MDAwMTA4WjAzMTEwLwYDVQQD
Eyg4NTdjZDdhODI3MTg3Zjg5NDI4NzVkYmJhOThkYjdkN2Q4OGI5ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuQOHFqns8w2yK8iVbCNgADr3wn5
7J7OUjn5mvmhxXZfAIsKqGE7jlAKHEOMwEdd2yUl9WA7VNRw+Fo/dt831WvOUAUq
MG12UlTwHKUm82WjAPtjvB59aUD199kzwJM1ryXMcMrxg90WqjumrFNqXfI2pMKT
ccU8nLXT4B9nchRbx7olyhWsrNjrMQ46ijCa4JNrtdibBAhFaf3j3LH3UVzQ/eX1
OumH4vgeFZ2EfE0YQz2E8z1+hD6FSCDL3uS/AE9X1+P2q7qe77N601Bf3vsmjtGX
RSL+K1vPXt6kznDxXv3fvRTO6AJUN/nfoiNNrAGITUFJHSJMSvMWJtCHNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV816gnGH+JQoddu6mNt9fYi54+MB8GA1UdIwQY
MBaAFBdWkH5yDT3un69+GC89no5iHtyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZTQxY2ItOThkNi00NjUzLWJiMDQt
MTQ3YTQ2ZTk0MjZiLzEvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZTQxY2ItOThkNi00NjUzLWJiMDQtMTQ3YTQ2ZTk0MjZi
LzEvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzYmfw1k
M5jb4vN+1dkpkJ9jdh/Xhul8fyVz2qH9kSLtAtFCrMDW1VLQm9t06HzNLrVVU0uM
Mm72MIpNTrrodtqrBhtw4IqEeeilaDtzZpPJZaASe99WYYZqKg9NVau6UZ7kmamZ
ICN4EPsNvtZOaJysSBnX5+03g2CA8KCiD2fTTgWOa/WoyyKmq6pFdxXQxqxjKT9x
zGnPUk3FI76rlCyuk8SIhzKJR0ybMQ05IiGbj8ImVx/5ScLX5Hp2f0FbG+eN1zbn
koPro/YfL0sp+L0l0cxfW1apwovx4iX4eaoqnt4376p6lO8b238tjRFnIOw6sUlA
ZxxESuVg0RLrDA==
-----END CERTIFICATE-----
Generated at Sun May 5 01:46:23 2024 by rpki-client on console-fra.rpki-client.org