Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
File: XwMtciPxNqdVKSTWUPV8X9HXzc0.mft (raw, json)
Hash identifier: Y9bEPpe/JSFzVQL+CdRkwDaxjyOpznQtE9SO3QeCnhs=
Subject key identifier: DD:57:90:8C:3C:1B:20:2A:FB:83:84:A2:CD:5E:C9:D4:53:4C:6C:87
Authority key identifier: 5F:03:2D:72:23:F1:36:A7:55:29:24:D6:50:F5:7C:5F:D1:D7:CD:CD
Certificate issuer: /CN=5f032d7223f136a7552924d650f57c5fd1d7cdcd
Certificate serial: 0193568915A1898EE0C9656AB214AC745F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwMtciPxNqdVKSTWUPV8X9HXzc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
Manifest number: 071E
Signing time: Sat 23 Nov 2024 01:00:44 +0000
Manifest this update: Sat 23 Nov 2024 01:00:44 +0000
Manifest next update: Sun 24 Nov 2024 01:00:44 +0000
Files and hashes: 1: XwMtciPxNqdVKSTWUPV8X9HXzc0.crl (hash: Qalv8Xc7T3bboPqJ7103+0k5NSCdSJ7KOtpL9yzRzYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwMtciPxNqdVKSTWUPV8X9HXzc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:15:a1:89:8e:e0:c9:65:6a:b2:14:ac:74:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f032d7223f136a7552924d650f57c5fd1d7cdcd
Validity
Not Before: Nov 23 01:00:44 2024 GMT
Not After : Nov 24 01:00:44 2024 GMT
Subject: CN=dd57908c3c1b202afb8384a2cd5ec9d4534c6c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:2e:dd:23:78:42:6b:4e:81:6f:04:57:a5:
a6:3c:1e:c3:52:14:e0:35:94:dc:fc:d5:6b:36:e1:
c4:d7:8e:d1:f6:97:52:f6:05:20:84:59:86:ad:8d:
92:7a:78:4b:b1:de:77:90:f6:d8:5f:8f:ce:e6:4a:
a1:b7:9c:95:ca:c4:18:94:23:52:14:32:e9:ed:9c:
8d:bf:13:0f:42:26:63:64:66:49:f5:c5:ae:45:a0:
ce:17:18:ec:15:6f:2b:d4:74:0c:9a:b3:dc:7b:7c:
ca:07:01:c9:7c:07:b2:b2:11:07:58:c9:41:9a:16:
9b:a0:08:c3:c6:27:aa:e5:97:66:bb:d8:be:71:b6:
52:fc:2b:83:e7:d6:da:83:d9:5a:ab:cb:e2:27:d9:
e2:2e:5c:94:b1:86:e8:7f:99:92:b8:9a:16:e3:f1:
1c:9b:2d:31:c5:a3:64:1b:a4:09:26:cc:ce:e9:f9:
0e:1e:23:a8:46:76:a0:de:8d:55:8a:b2:e7:66:85:
a8:17:6a:8d:dc:03:37:a2:06:d0:ee:af:f5:f5:68:
b9:67:5f:92:fc:76:cd:32:c8:26:bd:23:a8:9f:0b:
49:17:21:95:4e:3e:48:fb:11:ff:63:05:64:b8:b8:
13:85:6c:0b:25:e9:a0:9f:59:02:b1:ed:9e:c2:77:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:90:8C:3C:1B:20:2A:FB:83:84:A2:CD:5E:C9:D4:53:4C:6C:87
X509v3 Authority Key Identifier:
keyid:5F:03:2D:72:23:F1:36:A7:55:29:24:D6:50:F5:7C:5F:D1:D7:CD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwMtciPxNqdVKSTWUPV8X9HXzc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ab30b2-e32e-466a-b10c-b1005eb1e48c/1/XwMtciPxNqdVKSTWUPV8X9HXzc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4f:11:cb:8a:03:d7:bc:c6:9b:a4:71:4a:74:67:6e:c2:49:
b0:c1:2f:fd:5d:c8:37:29:6d:2c:08:96:10:89:65:14:7f:07:
0c:0e:da:9a:7b:94:c2:9e:a0:2b:1f:66:3c:af:a7:8d:7b:70:
4e:01:d0:d6:c8:b5:ac:8c:bc:e1:7a:01:54:32:f5:c0:f0:67:
7a:d0:89:7f:66:3f:ca:3e:d8:4f:dc:40:01:56:63:86:7e:66:
8d:1b:a4:0a:2d:31:0e:0a:20:65:03:27:29:99:84:d4:5d:e7:
14:80:ce:01:72:fa:02:b1:6a:05:67:af:4c:34:bb:5a:b0:f6:
3e:f0:a5:0f:e6:2d:8a:9a:55:9f:da:7d:4b:be:b7:38:b1:db:
dc:65:09:b8:93:54:1c:c3:2d:63:b3:31:19:3c:45:62:ae:a2:
7b:9e:e4:9c:37:c5:89:63:61:56:b6:a2:93:4b:f4:71:cf:bd:
24:af:6e:f3:75:e5:98:a6:44:b8:7b:a7:40:0c:e3:f3:1a:42:
e9:eb:0f:ed:2b:43:03:04:b6:45:e4:51:7d:21:a1:d3:ba:3d:
78:f9:0f:6f:09:c7:30:e7:78:0d:29:be:da:32:ad:18:15:ba:
95:3f:9e:f6:01:42:e0:cf:7e:2a:c1:df:96:02:1f:29:59:af:
59:db:b5:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiRWhiY7gyWVqshSsdF91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDMyZDcyMjNmMTM2YTc1NTI5MjRkNjUwZjU3YzVmZDFk
N2NkY2QwHhcNMjQxMTIzMDEwMDQ0WhcNMjQxMTI0MDEwMDQ0WjAzMTEwLwYDVQQD
EyhkZDU3OTA4YzNjMWIyMDJhZmI4Mzg0YTJjZDVlYzlkNDUzNGM2Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot8u3SN4QmtOgW8EV6WmPB7DUhTg
NZTc/NVrNuHE147R9pdS9gUghFmGrY2SenhLsd53kPbYX4/O5kqht5yVysQYlCNS
FDLp7ZyNvxMPQiZjZGZJ9cWuRaDOFxjsFW8r1HQMmrPce3zKBwHJfAeyshEHWMlB
mhaboAjDxieq5Zdmu9i+cbZS/CuD59bag9laq8viJ9niLlyUsYbof5mSuJoW4/Ec
my0xxaNkG6QJJszO6fkOHiOoRnag3o1VirLnZoWoF2qN3AM3ogbQ7q/19Wi5Z1+S
/HbNMsgmvSOonwtJFyGVTj5I+xH/YwVkuLgThWwLJemgn1kCse2ewnfEQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1XkIw8GyAq+4OEos1eydRTTGyHMB8GA1UdIwQY
MBaAFF8DLXIj8TanVSkk1lD1fF/R183NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdNdGNpUHhOcWRWS1NUV1VQVjhYOUhYemMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hYjMwYjItZTMyZS00NjZhLWIxMGMt
YjEwMDVlYjFlNDhjLzEvWHdNdGNpUHhOcWRWS1NUV1VQVjhYOUhYemMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hYjMwYjItZTMyZS00NjZhLWIxMGMtYjEwMDVlYjFlNDhj
LzEvWHdNdGNpUHhOcWRWS1NUV1VQVjhYOUhYemMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX08Ry4oD
17zGm6RxSnRnbsJJsMEv/V3INyltLAiWEIllFH8HDA7amnuUwp6gKx9mPK+njXtw
TgHQ1si1rIy84XoBVDL1wPBnetCJf2Y/yj7YT9xAAVZjhn5mjRukCi0xDgogZQMn
KZmE1F3nFIDOAXL6ArFqBWevTDS7WrD2PvClD+YtippVn9p9S763OLHb3GUJuJNU
HMMtY7MxGTxFYq6ie57knDfFiWNhVraik0v0cc+9JK9u83XlmKZEuHunQAzj8xpC
6esP7StDAwS2ReRRfSGh07o9ePkPbwnHMOd4DSm+2jKtGBW6lT+e9gFC4M9+KsHf
lgIfKVmvWdu1CA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:53 2024 by rpki-client on console-fra.rpki-client.org