Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.mft
File: CpywsnmGsNq0gTKBBQN_kKR91vk.mft (raw, json)
Hash identifier: Ij/1zOJCTipEzOtCO2Pt/f+vyPV1XzqFrmBUs6Wo1vQ=
Subject key identifier: 19:7B:0C:18:89:85:D9:A6:FC:26:D1:4C:63:C0:79:D9:FE:B5:A4:B3
Authority key identifier: 0A:9C:B0:B2:79:86:B0:DA:B4:81:32:81:05:03:7F:90:A4:7D:D6:F9
Certificate issuer: /CN=0a9cb0b27986b0dab481328105037f90a47dd6f9
Certificate serial: 018F3440324658FC53CC8F97CEE7E335FD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CpywsnmGsNq0gTKBBQN_kKR91vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.mft
Manifest number: 0886
Signing time: Wed 01 May 2024 13:02:53 +0000
Manifest this update: Wed 01 May 2024 13:02:53 +0000
Manifest next update: Thu 02 May 2024 13:02:53 +0000
Files and hashes: 1: CpywsnmGsNq0gTKBBQN_kKR91vk.crl (hash: 7llehpmANQ0M0XBn5F1QdE1XOPSoO9NnHTAWMMSd7wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CpywsnmGsNq0gTKBBQN_kKR91vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:40:32:46:58:fc:53:cc:8f:97:ce:e7:e3:35:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9cb0b27986b0dab481328105037f90a47dd6f9
Validity
Not Before: May 1 13:02:53 2024 GMT
Not After : May 2 13:02:53 2024 GMT
Subject: CN=197b0c188985d9a6fc26d14c63c079d9feb5a4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:d3:9b:ac:20:31:63:77:07:44:68:a3:bb:
85:08:59:19:df:6b:b1:5c:2f:45:57:fb:e1:8f:9e:
2c:d2:51:0c:04:22:c4:0d:71:c7:31:23:6e:b3:36:
e3:23:ab:14:eb:2b:55:eb:a5:61:5f:a4:b2:5d:b8:
e2:94:dd:5c:42:12:6a:da:b4:1c:2b:65:93:b2:e8:
b4:b1:6b:1e:2c:0f:6c:d6:88:45:1d:b1:b4:18:37:
8c:8b:46:22:3d:d5:98:35:a4:e3:46:3a:a8:41:7b:
a1:63:6a:44:77:93:e2:a1:87:cb:3b:e0:32:f2:07:
25:b1:ba:34:8a:44:4a:5c:78:87:36:e4:d2:6b:0a:
05:50:ba:5f:a5:30:5a:27:bf:7e:6d:e7:b4:40:8e:
c1:20:1d:72:43:f5:7e:c3:35:63:55:1a:cb:7b:ca:
47:35:bc:c1:95:c3:5e:d8:d7:73:05:ea:b1:f2:fb:
e2:c7:94:3d:1b:71:a4:3a:b9:c4:a8:1d:15:93:30:
f8:63:db:f4:5e:15:96:ad:b1:19:63:4f:f1:5b:dc:
01:6a:e5:55:2d:01:f8:ab:d3:a2:c2:1b:43:6c:ad:
36:24:29:9e:46:aa:c3:43:41:db:dc:b1:05:cb:b6:
a4:11:ba:e6:a4:ca:7b:65:9a:e7:d9:94:a0:ff:00:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:0C:18:89:85:D9:A6:FC:26:D1:4C:63:C0:79:D9:FE:B5:A4:B3
X509v3 Authority Key Identifier:
keyid:0A:9C:B0:B2:79:86:B0:DA:B4:81:32:81:05:03:7F:90:A4:7D:D6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpywsnmGsNq0gTKBBQN_kKR91vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/973a9c-19a3-4448-9e6b-4d45ab641655/1/CpywsnmGsNq0gTKBBQN_kKR91vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0f:c4:06:fa:2e:dc:06:92:0a:d9:1a:fc:0a:13:26:31:93:
1a:c2:61:76:62:b2:d5:ab:a1:91:cf:64:af:67:4a:1e:50:8c:
e3:2b:5c:e1:6e:92:cf:f3:0d:ea:49:b7:a3:1a:0e:56:60:fa:
d3:8a:d8:02:fe:57:eb:ef:8c:81:bf:34:d6:ec:c1:f8:95:2f:
01:f4:23:e1:49:c2:3a:5c:31:4f:d8:82:bb:7a:ad:10:2c:65:
21:f1:a8:ad:1b:23:7d:a6:09:c9:6e:6c:06:2f:94:5d:84:63:
e8:71:b1:1b:76:37:e2:18:77:bd:62:d8:eb:50:a7:24:c8:14:
4e:f3:0e:76:12:16:82:6b:34:ba:b3:a1:30:87:f2:dc:84:45:
05:ee:93:37:7c:9d:ea:4d:23:17:fa:c0:c0:22:79:12:ad:bf:
79:b8:95:e9:0c:fe:d0:4e:b9:e1:78:37:b8:0c:46:8c:04:6c:
49:08:e1:ee:18:3d:d7:f4:f8:e1:41:50:cc:b9:24:76:2c:6b:
19:0d:f2:8d:16:f6:f0:a0:2f:69:d0:9e:a8:50:2c:14:ce:ec:
1f:b1:db:14:b6:b3:9b:53:70:9b:c4:c5:a0:6c:2d:69:0b:aa:
df:e7:a5:b1:7f:6f:01:02:d5:2e:c6:54:bf:e7:bf:59:e5:74:
4e:14:df:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80QDJGWPxTzI+XzufjNf0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWNiMGIyNzk4NmIwZGFiNDgxMzI4MTA1MDM3ZjkwYTQ3
ZGQ2ZjkwHhcNMjQwNTAxMTMwMjUzWhcNMjQwNTAyMTMwMjUzWjAzMTEwLwYDVQQD
EygxOTdiMGMxODg5ODVkOWE2ZmMyNmQxNGM2M2MwNzlkOWZlYjVhNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMTTm6wgMWN3B0Roo7uFCFkZ32ux
XC9FV/vhj54s0lEMBCLEDXHHMSNuszbjI6sU6ytV66VhX6SyXbjilN1cQhJq2rQc
K2WTsui0sWseLA9s1ohFHbG0GDeMi0YiPdWYNaTjRjqoQXuhY2pEd5PioYfLO+Ay
8gclsbo0ikRKXHiHNuTSawoFULpfpTBaJ79+bee0QI7BIB1yQ/V+wzVjVRrLe8pH
NbzBlcNe2NdzBeqx8vvix5Q9G3GkOrnEqB0VkzD4Y9v0XhWWrbEZY0/xW9wBauVV
LQH4q9OiwhtDbK02JCmeRqrDQ0Hb3LEFy7akEbrmpMp7ZZrn2ZSg/wCOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl7DBiJhdmm/CbRTGPAedn+taSzMB8GA1UdIwQY
MBaAFAqcsLJ5hrDatIEygQUDf5Ckfdb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3B5d3NubUdzTnEwZ1RLQkJRTl9rS1I5MXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NzNhOWMtMTlhMy00NDQ4LTllNmIt
NGQ0NWFiNjQxNjU1LzEvQ3B5d3NubUdzTnEwZ1RLQkJRTl9rS1I5MXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NzNhOWMtMTlhMy00NDQ4LTllNmItNGQ0NWFiNjQxNjU1
LzEvQ3B5d3NubUdzTnEwZ1RLQkJRTl9rS1I5MXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACA/EBvou
3AaSCtka/AoTJjGTGsJhdmKy1auhkc9kr2dKHlCM4ytc4W6Sz/MN6km3oxoOVmD6
04rYAv5X6++Mgb801uzB+JUvAfQj4UnCOlwxT9iCu3qtECxlIfGorRsjfaYJyW5s
Bi+UXYRj6HGxG3Y34hh3vWLY61CnJMgUTvMOdhIWgms0urOhMIfy3IRFBe6TN3yd
6k0jF/rAwCJ5Eq2/ebiV6Qz+0E654Xg3uAxGjARsSQjh7hg91/T44UFQzLkkdixr
GQ3yjRb28KAvadCeqFAsFM7sH7HbFLazm1Nwm8TFoGwtaQuq3+elsX9vAQLVLsZU
v+e/WeV0ThTfYQ==
-----END CERTIFICATE-----
Generated at Wed May 1 16:41:15 2024 by rpki-client on console-fra.rpki-client.org