Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier: noTEmTS5bkZyAcO7gqFDVtIO+Tb9sdcueNSe5xh+MTk=
Subject key identifier: 52:B2:32:E8:2C:32:2D:32:03:CF:A4:A9:47:49:FD:5D:FB:A9:1D:A0
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial: 018F94CEFB6BF8C024B8364C262B9461248D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number: 117A
Signing time: Mon 20 May 2024 07:02:23 +0000
Manifest this update: Mon 20 May 2024 07:02:23 +0000
Manifest next update: Tue 21 May 2024 07:02:23 +0000
Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: k10Amz4XR6LAH7c4B053ieWzFav8lH7DVm0sk+ehUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:ce:fb:6b:f8:c0:24:b8:36:4c:26:2b:94:61:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Validity
Not Before: May 20 07:02:23 2024 GMT
Not After : May 21 07:02:23 2024 GMT
Subject: CN=52b232e82c322d3203cfa4a94749fd5dfba91da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:e5:69:4d:c8:20:31:52:f8:9b:9a:5c:d6:
f3:11:45:9d:87:bf:a2:74:b0:eb:08:70:bd:10:a5:
dc:f6:76:e5:79:17:6b:0f:af:7d:37:9e:20:c4:df:
53:65:39:15:90:e6:12:31:dd:3c:86:dd:8d:cb:a6:
5e:e5:c6:6c:ec:e2:f3:94:6f:39:7b:e9:e7:20:cf:
3b:fd:4a:18:7f:88:77:f5:fa:86:bc:2f:44:f1:fc:
9a:1a:03:fb:ed:7b:b2:a9:b4:f5:f7:c1:9b:98:15:
2e:a8:ff:2c:7d:1a:76:40:39:a8:56:2d:fb:f7:cb:
35:80:dc:03:31:ff:85:03:6d:7e:bf:74:f8:2c:64:
2b:cc:3d:6a:c7:82:21:4a:30:fa:49:52:e0:34:a4:
60:df:a7:8c:34:c5:db:71:3a:62:cd:ea:5c:d4:1a:
9b:a7:c3:de:cd:dd:6b:29:9e:b8:38:55:a2:c1:50:
fd:30:1a:08:87:d2:f2:92:51:a0:6e:34:5e:26:f4:
70:58:e2:05:d5:ba:de:8b:5d:04:2c:47:00:65:d4:
f2:db:51:75:ab:94:28:27:66:cc:b1:35:29:5f:65:
56:bd:0d:7a:23:55:63:50:9f:c3:4b:33:97:b6:c9:
0e:80:5e:8e:a2:ea:73:b1:35:87:2b:b7:14:19:9a:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:32:E8:2C:32:2D:32:03:CF:A4:A9:47:49:FD:5D:FB:A9:1D:A0
X509v3 Authority Key Identifier:
keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:0e:3a:52:89:f8:71:eb:cd:71:b0:62:f5:5a:d8:ed:c0:
dd:a2:96:92:5a:7e:82:99:18:ad:b6:78:2e:c5:9d:34:16:5c:
a6:da:c3:d0:f2:a2:b2:28:9f:8b:61:d8:a8:31:6b:25:b6:83:
7d:a4:f4:3d:07:29:98:ba:7a:de:06:9a:75:3a:f3:d2:2c:27:
08:23:45:00:97:3a:ec:d4:dd:98:72:62:90:4b:6e:76:ac:5e:
9b:ef:2d:ad:4f:8a:58:69:46:bf:90:9a:29:8e:20:f3:bb:1d:
33:3e:d3:86:be:de:51:84:8d:b9:44:6e:a0:9b:49:a7:82:c0:
66:a6:bc:7c:7f:b9:8a:af:e3:24:c3:14:d5:c4:3b:cc:19:3a:
5f:cb:bc:70:78:9e:7d:1b:4c:03:0e:c0:7c:21:f4:26:c1:53:
b0:a1:8f:68:6a:23:fd:53:34:b0:ca:bc:b7:b1:4a:88:a9:cb:
60:1a:65:ec:b4:f9:b3:b0:3e:94:f2:13:ae:d2:14:e9:71:f2:
93:a6:dd:33:13:f7:de:4e:87:dd:99:b0:35:58:96:09:c1:17:
f4:15:fd:68:20:18:0c:88:48:3e:30:d9:6a:b9:16:e9:34:3d:
2b:ef:95:f0:b9:99:4a:1d:03:5d:39:74:94:ae:47:58:d5:6d:
f7:fa:de:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Uzvtr+MAkuDZMJiuUYSSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNjI4ZjA1Y2NhOGM4N2Q1OTNlNzFlOWRkMjFiMGU3Zjg5
ZDU4OTMwHhcNMjQwNTIwMDcwMjIzWhcNMjQwNTIxMDcwMjIzWjAzMTEwLwYDVQQD
Eyg1MmIyMzJlODJjMzIyZDMyMDNjZmE0YTk0NzQ5ZmQ1ZGZiYTkxZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbPlaU3IIDFS+JuaXNbzEUWdh7+i
dLDrCHC9EKXc9nbleRdrD699N54gxN9TZTkVkOYSMd08ht2Ny6Ze5cZs7OLzlG85
e+nnIM87/UoYf4h39fqGvC9E8fyaGgP77XuyqbT198GbmBUuqP8sfRp2QDmoVi37
98s1gNwDMf+FA21+v3T4LGQrzD1qx4IhSjD6SVLgNKRg36eMNMXbcTpizepc1Bqb
p8Pezd1rKZ64OFWiwVD9MBoIh9LyklGgbjReJvRwWOIF1brei10ELEcAZdTy21F1
q5QoJ2bMsTUpX2VWvQ16I1VjUJ/DSzOXtskOgF6OoupzsTWHK7cUGZpKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKyMugsMi0yA8+kqUdJ/V37qR2gMB8GA1UdIwQY
MBaAFF9ijwXMqMh9WT5x6d0hsOf4nViTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMt
OWZiZTg5MTlkYjkwLzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMtOWZiZTg5MTlkYjkw
LzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIUOOlKJ
+HHrzXGwYvVa2O3A3aKWklp+gpkYrbZ4LsWdNBZcptrD0PKisiifi2HYqDFrJbaD
faT0PQcpmLp63gaadTrz0iwnCCNFAJc67NTdmHJikEtudqxem+8trU+KWGlGv5Ca
KY4g87sdMz7Thr7eUYSNuURuoJtJp4LAZqa8fH+5iq/jJMMU1cQ7zBk6X8u8cHie
fRtMAw7AfCH0JsFTsKGPaGoj/VM0sMq8t7FKiKnLYBpl7LT5s7A+lPITrtIU6XHy
k6bdMxP33k6H3ZmwNViWCcEX9BX9aCAYDIhIPjDZarkW6TQ9K++V8LmZSh0DXTl0
lK5HWNVt9/reeg==
-----END CERTIFICATE-----
Generated at Mon May 20 13:18:36 2024 by rpki-client on console-fra.rpki-client.org