Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
File: PSHzZqInwy5a81ik_fegqUhjgVA.mft (raw, json)
Hash identifier: 0Ek6zhI4gG8nDgo93aI4u5M7a1wf7dbRe5Vx+5szVhE=
Subject key identifier: FF:A1:3B:E0:CE:D5:25:EC:13:8B:9E:B2:6B:67:7B:33:88:F4:4B:60
Authority key identifier: 3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50
Certificate issuer: /CN=3d21f366a227c32e5af358a4fdf7a0a948638150
Certificate serial: 018F8891F0D1DAC0229C8C3B547EFC912780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
Manifest number: 03DA
Signing time: Fri 17 May 2024 22:00:16 +0000
Manifest this update: Fri 17 May 2024 22:00:16 +0000
Manifest next update: Sat 18 May 2024 22:00:16 +0000
Files and hashes: 1: PSHzZqInwy5a81ik_fegqUhjgVA.crl (hash: FTw3Wr5GW5aGP6SOMy3SIfYYKsAWvPLfx2uqMTAPpFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:91:f0:d1:da:c0:22:9c:8c:3b:54:7e:fc:91:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d21f366a227c32e5af358a4fdf7a0a948638150
Validity
Not Before: May 17 22:00:16 2024 GMT
Not After : May 18 22:00:16 2024 GMT
Subject: CN=ffa13be0ced525ec138b9eb26b677b3388f44b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:aa:f6:85:fd:df:4e:47:49:40:b2:0d:5d:
5d:91:27:ab:e3:ec:1b:04:49:67:63:1e:b3:99:94:
9d:b7:fd:c1:4c:f6:f1:55:04:fd:6c:e8:71:41:3f:
b7:a8:c0:e1:78:a8:1a:51:4d:ab:19:b9:2c:3d:44:
36:a8:9f:e1:8a:1d:d4:04:2d:aa:44:1b:f3:7c:1d:
2d:8e:6a:c1:4e:66:d8:a9:5f:11:d8:f1:aa:78:83:
49:59:ff:3a:73:b7:ce:f1:22:ff:30:6e:61:54:f5:
26:ef:5e:c3:80:f4:73:f1:be:83:a9:e7:a7:c1:f6:
0a:c3:e9:c5:6d:36:21:19:7b:fc:e5:be:5a:f4:dd:
bc:c8:83:7f:26:f9:7a:b6:cc:30:d8:94:93:67:75:
35:5a:6e:dd:36:66:bc:7c:9d:70:57:14:5b:b6:63:
3b:d9:f5:0c:af:7f:4c:73:3d:5f:b8:f3:92:a0:34:
78:40:f4:4d:61:68:39:e2:c4:42:48:ad:6b:13:d4:
7d:1b:6c:8c:bb:28:0d:44:c7:f2:28:2e:34:b5:8d:
93:0f:65:f5:1c:e6:fc:d2:7f:e0:10:8e:e4:f9:04:
84:aa:6a:6f:6b:4d:26:ec:a0:78:d7:11:ae:2f:bc:
22:2a:b1:f5:5e:7f:71:2a:10:2f:fd:15:b0:ea:bb:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:3B:E0:CE:D5:25:EC:13:8B:9E:B2:6B:67:7B:33:88:F4:4B:60
X509v3 Authority Key Identifier:
keyid:3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:37:e2:ca:db:fa:40:05:da:5d:63:e5:45:22:42:02:3f:1a:
2c:af:53:2c:74:08:b1:e1:cd:49:ba:92:48:0d:5f:e4:dc:2d:
f5:f3:ba:9b:b3:a8:bc:54:09:69:d8:50:7d:77:c4:8b:23:a2:
b0:d0:bb:5d:c2:f0:b2:90:97:a2:6d:52:6b:8e:83:22:e4:2e:
f5:3f:94:9a:0d:56:08:1d:45:45:9b:73:62:e5:b2:30:f1:b4:
99:5d:dc:88:c4:67:b8:38:5c:1c:78:cf:b5:97:87:8f:5f:84:
d3:2c:65:af:3a:6e:23:0f:c7:56:6d:15:f8:19:32:38:af:cc:
6c:ca:43:ad:ce:79:23:64:cc:73:9a:ba:c5:da:0d:b1:f4:9a:
9f:b0:5d:cc:53:ed:ef:52:e1:c2:d7:d0:04:86:ce:89:ac:cc:
bb:77:c6:b2:78:79:53:78:ce:ee:ea:8b:da:1f:6d:7d:ae:d1:
3d:25:e3:35:51:30:04:af:54:f6:18:eb:3b:05:2d:e4:6f:53:
f4:79:25:41:23:e2:86:64:71:1c:29:10:b9:c0:21:36:81:22:
c7:9f:01:f3:25:c3:db:0c:f5:6d:6e:3f:e1:84:12:a4:8b:61:
42:b1:15:61:9b:24:1e:17:31:f2:4d:7b:f9:6b:9a:6b:bc:79:
27:0a:12:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkfDR2sAinIw7VH78kSeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjFmMzY2YTIyN2MzMmU1YWYzNThhNGZkZjdhMGE5NDg2
MzgxNTAwHhcNMjQwNTE3MjIwMDE2WhcNMjQwNTE4MjIwMDE2WjAzMTEwLwYDVQQD
EyhmZmExM2JlMGNlZDUyNWVjMTM4YjllYjI2YjY3N2IzMzg4ZjQ0YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3+q9oX9305HSUCyDV1dkSer4+wb
BElnYx6zmZSdt/3BTPbxVQT9bOhxQT+3qMDheKgaUU2rGbksPUQ2qJ/hih3UBC2q
RBvzfB0tjmrBTmbYqV8R2PGqeINJWf86c7fO8SL/MG5hVPUm717DgPRz8b6Dqeen
wfYKw+nFbTYhGXv85b5a9N28yIN/Jvl6tsww2JSTZ3U1Wm7dNma8fJ1wVxRbtmM7
2fUMr39Mcz1fuPOSoDR4QPRNYWg54sRCSK1rE9R9G2yMuygNRMfyKC40tY2TD2X1
HOb80n/gEI7k+QSEqmpva00m7KB41xGuL7wiKrH1Xn9xKhAv/RWw6rtXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+hO+DO1SXsE4uesmtnezOI9EtgMB8GA1UdIwQY
MBaAFD0h82aiJ8MuWvNYpP33oKlIY4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNIelpxSW53eTVhODFpa19mZWdxVWhqZ1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC83ZDM4YjMtMTIxMC00YjQ5LWFhNzEt
Mzc2OTU4MjhkYmY0LzEvUFNIelpxSW53eTVhODFpa19mZWdxVWhqZ1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC83ZDM4YjMtMTIxMC00YjQ5LWFhNzEtMzc2OTU4MjhkYmY0
LzEvUFNIelpxSW53eTVhODFpa19mZWdxVWhqZ1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDfiytv6
QAXaXWPlRSJCAj8aLK9TLHQIseHNSbqSSA1f5Nwt9fO6m7OovFQJadhQfXfEiyOi
sNC7XcLwspCXom1Sa46DIuQu9T+Umg1WCB1FRZtzYuWyMPG0mV3ciMRnuDhcHHjP
tZeHj1+E0yxlrzpuIw/HVm0V+BkyOK/MbMpDrc55I2TMc5q6xdoNsfSan7BdzFPt
71LhwtfQBIbOiazMu3fGsnh5U3jO7uqL2h9tfa7RPSXjNVEwBK9U9hjrOwUt5G9T
9HklQSPihmRxHCkQucAhNoEix58B8yXD2wz1bW4/4YQSpIthQrEVYZskHhcx8k17
+Wuaa7x5JwoS6w==
-----END CERTIFICATE-----
Generated at Fri May 17 23:43:54 2024 by rpki-client on console-fra.rpki-client.org