Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: s4p2Flh/f2p9cQNv91vMHcXurJw6oStUNncaDgnXu2w=
Subject key identifier: E8:B9:17:0A:5B:FE:D4:CB:04:D2:74:19:B1:FC:35:DA:C3:97:01:D4
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 018FD119CA348C9E7D08FB7C4825A7ED5574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 0D52
Signing time: Sat 01 Jun 2024 00:01:19 +0000
Manifest this update: Sat 01 Jun 2024 00:01:19 +0000
Manifest next update: Sun 02 Jun 2024 00:01:19 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: GQjwA8rHof78b0G/13IV0i9sn889rJP2dpnGEsuu2Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d1:19:ca:34:8c:9e:7d:08:fb:7c:48:25:a7:ed:55:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Jun 1 00:01:19 2024 GMT
Not After : Jun 2 00:01:19 2024 GMT
Subject: CN=e8b9170a5bfed4cb04d27419b1fc35dac39701d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:86:f7:da:e9:84:36:3d:91:d6:24:7b:88:
a2:f3:2e:43:7b:57:0f:a7:89:66:74:81:99:c3:38:
1c:3f:5f:d9:c7:e9:b6:03:d6:14:4e:20:c5:e9:ca:
2b:81:9d:54:ef:1d:18:4e:fa:29:72:ef:58:01:90:
bd:df:d7:a9:48:cb:59:9c:66:ff:d3:85:f1:c7:ba:
08:ac:ff:e7:7c:24:72:0e:4e:23:3f:60:1d:5e:5d:
6a:4c:5a:cc:2c:ff:2c:05:84:bb:6e:3c:92:29:6b:
1d:3b:50:a2:4f:8e:11:24:20:bd:58:e6:24:dd:e1:
d6:d9:46:55:dc:5a:b7:b6:d5:5a:6f:6a:51:9d:73:
8d:16:a9:9f:c3:17:23:33:0c:c0:c0:94:c4:36:87:
17:3e:ce:13:5d:5c:0c:e6:08:c2:d4:af:51:f0:63:
06:ac:11:34:a7:02:23:1d:da:5f:11:4a:b0:a1:29:
97:82:e7:80:b5:1b:8b:1e:66:a9:92:35:85:e6:71:
93:3a:26:fe:90:d5:cf:f3:b3:2d:74:25:53:17:01:
f6:84:68:3c:9e:e6:1e:06:04:fb:4d:d6:a3:2b:f7:
6f:d6:9f:f0:f8:2c:ff:fb:5a:07:b8:0b:66:c4:4a:
72:9a:72:9f:ec:31:ad:ab:b0:ef:91:8f:66:0b:5c:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:17:0A:5B:FE:D4:CB:04:D2:74:19:B1:FC:35:DA:C3:97:01:D4
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:25:5e:08:83:9d:17:d1:05:81:60:45:44:d4:de:e1:49:2b:
31:ec:c9:92:2a:c3:20:0f:6f:3d:3c:7e:a8:34:20:b8:fa:4c:
bd:f8:c9:fd:33:8f:f2:03:d1:24:57:e0:dc:a1:56:41:e1:b8:
1f:b2:8f:ae:e5:f0:ee:f2:51:32:0c:4a:c0:73:e2:82:04:79:
be:4d:a5:b1:27:ba:e5:d5:e9:8b:f3:94:71:37:cc:42:58:fd:
c6:05:3f:7d:08:ef:d5:ae:13:ff:16:ec:b8:7f:f4:d0:aa:0a:
72:f6:e5:5e:36:cd:a7:f3:05:04:2f:cf:bd:0b:c3:7f:a2:94:
19:4e:c2:d3:ef:60:18:b9:83:41:95:90:1e:ea:93:fd:17:34:
a6:d6:e1:d9:b6:b5:2d:95:a2:38:61:4f:d9:3f:cf:1c:af:c3:
e1:8f:ce:21:36:74:c4:91:23:33:79:e9:42:d9:61:8b:d3:ea:
7a:d8:91:8f:a3:9f:a3:75:54:89:8f:df:42:d9:92:61:e4:8c:
ee:b9:89:2e:a7:02:02:f5:29:cf:9b:9f:74:91:d7:77:e3:0e:
63:47:d0:21:41:63:96:53:2e:70:9e:68:62:e9:6e:7d:fe:81:
35:d6:40:a5:58:10:d7:54:41:ff:92:33:47:c9:a8:60:9b:d5:
12:66:9b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/RGco0jJ59CPt8SCWn7VV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx
YzkyNTkwHhcNMjQwNjAxMDAwMTE5WhcNMjQwNjAyMDAwMTE5WjAzMTEwLwYDVQQD
EyhlOGI5MTcwYTViZmVkNGNiMDRkMjc0MTliMWZjMzVkYWMzOTcwMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoayG99rphDY9kdYke4ii8y5De1cP
p4lmdIGZwzgcP1/Zx+m2A9YUTiDF6corgZ1U7x0YTvopcu9YAZC939epSMtZnGb/
04Xxx7oIrP/nfCRyDk4jP2AdXl1qTFrMLP8sBYS7bjySKWsdO1CiT44RJCC9WOYk
3eHW2UZV3Fq3ttVab2pRnXONFqmfwxcjMwzAwJTENocXPs4TXVwM5gjC1K9R8GMG
rBE0pwIjHdpfEUqwoSmXgueAtRuLHmapkjWF5nGTOib+kNXP87MtdCVTFwH2hGg8
nuYeBgT7TdajK/dv1p/w+Cz/+1oHuAtmxEpymnKf7DGtq7DvkY9mC1wSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi5Fwpb/tTLBNJ0GbH8NdrDlwHUMB8GA1UdIwQY
MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt
NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx
LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliVeCIOd
F9EFgWBFRNTe4UkrMezJkirDIA9vPTx+qDQguPpMvfjJ/TOP8gPRJFfg3KFWQeG4
H7KPruXw7vJRMgxKwHPiggR5vk2lsSe65dXpi/OUcTfMQlj9xgU/fQjv1a4T/xbs
uH/00KoKcvblXjbNp/MFBC/PvQvDf6KUGU7C0+9gGLmDQZWQHuqT/Rc0ptbh2ba1
LZWiOGFP2T/PHK/D4Y/OITZ0xJEjM3npQtlhi9PqetiRj6Ofo3VUiY/fQtmSYeSM
7rmJLqcCAvUpz5ufdJHXd+MOY0fQIUFjllMucJ5oYuluff6BNdZApVgQ11RB/5Iz
R8moYJvVEmabBA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:30:25 2024 by rpki-client on console-ams.rpki-client.org