Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: HBcwIKKwrHSGfiGw/Bo351gXUuDdsH4EVQf2UJ7IlOc=
Subject key identifier: AE:A7:DA:8A:BF:60:8C:CF:FC:AA:AD:6A:4B:61:95:4E:61:37:89:1C
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 018F87B630A1A23F49E08413459AC791257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 10B8
Signing time: Fri 17 May 2024 18:00:15 +0000
Manifest this update: Fri 17 May 2024 18:00:15 +0000
Manifest next update: Sat 18 May 2024 18:00:15 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: TQN0LgYV5TC6rrpyn/Oo1CB8za2F39xGGHIxHz73dEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:30:a1:a2:3f:49:e0:84:13:45:9a:c7:91:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: May 17 18:00:15 2024 GMT
Not After : May 18 18:00:15 2024 GMT
Subject: CN=aea7da8abf608ccffcaaad6a4b61954e6137891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:c7:23:07:f2:c9:98:04:a8:56:0c:a9:98:
d9:ab:10:fc:1b:b8:0d:d3:e4:8d:ec:18:77:03:fe:
7c:c4:5e:f4:95:b6:c0:04:31:45:81:74:06:a0:2b:
1f:56:5a:4d:0c:a1:0d:47:ce:20:98:88:02:1f:7f:
0c:25:d0:3a:cb:9a:b6:91:1b:3d:c5:1b:b2:9d:b4:
4b:fc:9a:60:3a:52:66:fc:2e:18:7b:30:d3:3f:92:
60:bf:3e:bc:b2:b4:30:d2:1d:fa:c0:36:63:5e:f7:
ab:b4:b8:2f:5b:db:72:13:48:99:94:32:7a:72:c5:
f0:0f:a8:12:63:d3:91:80:90:db:08:4c:cb:2b:cd:
27:58:22:53:85:a9:d9:5d:a4:5c:74:c1:a5:16:44:
a7:5d:be:09:05:18:12:e7:df:4f:bf:1d:97:82:a3:
6c:79:31:f5:7b:63:de:b9:29:a9:98:49:c6:90:e5:
76:8a:44:0b:2e:08:a7:fd:c7:5e:34:00:19:22:1e:
3a:5e:ae:e4:c4:82:3b:57:65:4b:95:58:18:54:ca:
be:4e:64:ce:0b:b7:49:65:e9:23:a2:be:9e:11:ed:
b1:de:89:e3:12:22:ae:8b:d8:23:7c:e0:92:d0:32:
8c:51:29:bb:9c:31:04:63:0b:7d:18:7b:a9:fb:11:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:DA:8A:BF:60:8C:CF:FC:AA:AD:6A:4B:61:95:4E:61:37:89:1C
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:33:4a:6c:a3:79:9d:74:bb:b2:f7:aa:b0:e4:d3:be:2a:
16:46:43:0f:d4:3e:4f:32:f4:59:f6:66:e0:4f:e8:53:0a:ab:
3d:a2:c8:5d:80:49:4e:6e:28:47:41:56:de:b3:54:dd:63:1c:
75:1d:1e:5e:cf:09:e4:01:5f:dd:30:6f:18:87:e4:96:e8:69:
24:67:c6:cf:ec:d0:79:cb:74:bd:a8:2b:62:90:5c:be:84:55:
9a:a4:3f:9a:a8:35:9c:99:4f:bb:6c:be:36:cc:c1:cf:90:54:
42:41:d0:86:26:8b:bd:e1:58:13:85:18:48:e6:f0:68:c5:41:
34:c4:11:53:6c:0a:04:bb:87:e0:79:7f:57:ba:b8:9c:f9:99:
dc:28:ca:c2:0c:81:c7:a0:e0:a7:d4:58:dc:64:9e:71:b6:f4:
7a:7d:bf:2b:2e:70:87:47:13:54:73:3d:13:87:d6:b8:46:51:
19:eb:61:3d:16:e3:9b:0c:22:85:21:45:1d:73:5c:28:41:98:
b0:55:a0:81:ee:2a:9f:b8:b5:99:38:2f:55:62:3a:d5:87:39:
2e:ff:ce:56:f7:e7:0a:7f:17:44:7a:4a:98:22:13:84:15:ac:
82:91:e8:de:00:5b:10:a5:83:dd:14:a5:a7:ae:12:b8:bb:ec:
26:ab:73:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtjChoj9J4IQTRZrHkSV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTNmOGE1YTA2Nzc0NGU4ZmUzN2M5N2MxY2M0Yjg4N2Vk
YWM3MjAwHhcNMjQwNTE3MTgwMDE1WhcNMjQwNTE4MTgwMDE1WjAzMTEwLwYDVQQD
EyhhZWE3ZGE4YWJmNjA4Y2NmZmNhYWFkNmE0YjYxOTU0ZTYxMzc4OTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXXHIwfyyZgEqFYMqZjZqxD8G7gN
0+SN7Bh3A/58xF70lbbABDFFgXQGoCsfVlpNDKENR84gmIgCH38MJdA6y5q2kRs9
xRuynbRL/JpgOlJm/C4YezDTP5Jgvz68srQw0h36wDZjXvertLgvW9tyE0iZlDJ6
csXwD6gSY9ORgJDbCEzLK80nWCJThanZXaRcdMGlFkSnXb4JBRgS599Pvx2XgqNs
eTH1e2PeuSmpmEnGkOV2ikQLLgin/cdeNAAZIh46Xq7kxII7V2VLlVgYVMq+TmTO
C7dJZekjor6eEe2x3onjEiKui9gjfOCS0DKMUSm7nDEEYwt9GHup+xEYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6n2oq/YIzP/KqtakthlU5hN4kcMB8GA1UdIwQY
MBaAFE1T+KWgZ3ROj+N8l8HMS4h+2scgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQt
OGIxYTA5M2M4YzVjLzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQtOGIxYTA5M2M4YzVj
LzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB8zSmyj
eZ10u7L3qrDk074qFkZDD9Q+TzL0WfZm4E/oUwqrPaLIXYBJTm4oR0FW3rNU3WMc
dR0eXs8J5AFf3TBvGIfkluhpJGfGz+zQect0vagrYpBcvoRVmqQ/mqg1nJlPu2y+
NszBz5BUQkHQhiaLveFYE4UYSObwaMVBNMQRU2wKBLuH4Hl/V7q4nPmZ3CjKwgyB
x6Dgp9RY3GSecbb0en2/Ky5wh0cTVHM9E4fWuEZRGethPRbjmwwihSFFHXNcKEGY
sFWgge4qn7i1mTgvVWI61Yc5Lv/OVvfnCn8XRHpKmCIThBWsgpHo3gBbEKWD3RSl
p64SuLvsJqtzng==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:08 2024 by rpki-client on console-ams.rpki-client.org