Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
File: oYhrwvjZOpz8WoN-LydS7knyJHQ.mft (raw, json)
Hash identifier: 8C8k5C6YGEzmx4/Jv+gBs3wBsngacd7Dq0U3pgvgfWw=
Subject key identifier: 2D:C9:84:00:18:6B:D0:6D:A8:32:87:07:C8:89:7A:B5:20:F1:9A:B0
Authority key identifier: A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
Certificate issuer: /CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Certificate serial: 018F87B69DBDA5D6C92091E6454E4A89F60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
Manifest number: 1174
Signing time: Fri 17 May 2024 18:00:43 +0000
Manifest this update: Fri 17 May 2024 18:00:43 +0000
Manifest next update: Sat 18 May 2024 18:00:43 +0000
Files and hashes: 1: oYhrwvjZOpz8WoN-LydS7knyJHQ.crl (hash: whugJ6oLWW6/doufas+Q3zo/g1PnUc7H7aKvw8mihX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:9d:bd:a5:d6:c9:20:91:e6:45:4e:4a:89:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Validity
Not Before: May 17 18:00:43 2024 GMT
Not After : May 18 18:00:43 2024 GMT
Subject: CN=2dc98400186bd06da8328707c8897ab520f19ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:74:6a:94:1e:af:43:6a:27:df:5e:21:66:
0c:60:d5:5c:64:c4:19:1c:db:e9:3d:9b:e9:97:cf:
e5:72:ed:51:91:93:e6:6c:59:ef:73:b9:fb:a9:a3:
98:47:65:ae:8d:0b:d0:02:c6:70:86:bf:db:a3:a3:
43:98:8f:10:15:28:69:83:75:30:94:21:83:b2:e2:
49:5b:bb:aa:0a:c5:50:80:67:ab:64:c8:ca:2a:bc:
cf:d9:20:c7:bb:28:a6:b0:3a:22:47:c0:57:8d:ed:
bf:3e:ee:fa:e7:2a:3a:c2:91:b4:89:33:f6:b9:86:
bc:e9:11:4f:35:76:fc:66:a3:75:c3:59:a5:5b:9a:
48:ba:74:ba:f1:a8:fe:d7:5e:14:aa:b4:b1:88:94:
97:6f:6f:b5:db:0e:f6:8d:36:45:c4:97:ba:3c:f5:
d5:f1:a0:b6:0f:a7:bf:d8:a3:f8:19:3e:1c:f3:a6:
ef:81:b9:8e:8f:82:b9:54:55:88:b9:a9:aa:31:f2:
4c:9a:d3:2f:2c:2e:5e:75:05:7c:5b:b1:cc:7b:9d:
15:a6:4b:10:01:ca:b2:0a:6f:89:a5:6a:35:89:c9:
5c:38:2f:c4:2c:e3:d0:c1:a8:bb:b3:7e:dc:30:3b:
bb:cd:6c:d4:61:6d:6e:e7:11:8c:47:9a:8e:2d:ed:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:84:00:18:6B:D0:6D:A8:32:87:07:C8:89:7A:B5:20:F1:9A:B0
X509v3 Authority Key Identifier:
keyid:A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:dd:91:23:e8:f6:6b:9f:0b:85:f0:27:f8:b9:75:0b:66:
4f:e4:fa:24:ca:11:3b:6b:ee:30:d4:9b:b1:46:0a:68:9f:67:
a4:82:54:93:76:72:61:e1:15:97:be:22:09:66:dd:07:1b:4e:
95:06:6b:ee:04:27:48:eb:4e:01:ea:72:e7:37:98:a4:e8:64:
db:c8:cb:38:3e:2b:14:79:de:a9:81:d2:ca:3f:95:4d:80:f4:
42:fd:d4:88:c5:c7:34:44:b4:53:eb:56:98:dd:89:43:79:fc:
6d:ae:a4:99:33:38:2d:33:bc:f3:14:8a:bc:31:e6:29:71:68:
68:83:71:da:68:c5:4c:9e:49:44:d2:14:f0:42:96:58:b5:7c:
da:f5:d7:b4:80:b2:50:57:45:fd:07:8a:c6:72:73:1c:67:25:
0f:13:75:a8:52:65:37:db:eb:36:5f:40:cc:f6:99:dc:d7:38:
8c:6c:42:44:74:cc:1d:f5:0d:19:dc:3c:94:c0:b2:3d:d7:62:
52:15:ed:c6:df:63:9c:15:77:79:e1:f7:3a:92:2b:e9:06:2a:
b7:4b:22:76:50:70:f4:44:f0:bd:6a:b2:1c:81:f5:f5:5a:23:
da:d4:8a:a2:a2:7c:2e:bd:95:21:b4:47:e2:99:e8:d2:de:d1:
43:1c:30:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htp29pdbJIJHmRU5KifYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODg2YmMyZjhkOTNhOWNmYzVhODM3ZTJmMjc1MmVlNDlm
MjI0NzQwHhcNMjQwNTE3MTgwMDQzWhcNMjQwNTE4MTgwMDQzWjAzMTEwLwYDVQQD
EygyZGM5ODQwMDE4NmJkMDZkYTgzMjg3MDdjODg5N2FiNTIwZjE5YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtd0apQer0NqJ99eIWYMYNVcZMQZ
HNvpPZvpl8/lcu1RkZPmbFnvc7n7qaOYR2WujQvQAsZwhr/bo6NDmI8QFShpg3Uw
lCGDsuJJW7uqCsVQgGerZMjKKrzP2SDHuyimsDoiR8BXje2/Pu765yo6wpG0iTP2
uYa86RFPNXb8ZqN1w1mlW5pIunS68aj+114UqrSxiJSXb2+12w72jTZFxJe6PPXV
8aC2D6e/2KP4GT4c86bvgbmOj4K5VFWIuamqMfJMmtMvLC5edQV8W7HMe50VpksQ
AcqyCm+JpWo1iclcOC/ELOPQwai7s37cMDu7zWzUYW1u5xGMR5qOLe2ytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3JhAAYa9BtqDKHB8iJerUg8ZqwMB8GA1UdIwQY
MBaAFKGIa8L42Tqc/FqDfi8nUu5J8iR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1locnd2alpPcHo4V29OLUx5ZFM3a255SkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83Y2I3NmUtOTU3Yi00MzExLTg5Yzkt
OTk1ZDExYTg2MDE1LzEvb1locnd2alpPcHo4V29OLUx5ZFM3a255SkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83Y2I3NmUtOTU3Yi00MzExLTg5YzktOTk1ZDExYTg2MDE1
LzEvb1locnd2alpPcHo4V29OLUx5ZFM3a255SkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETzdkSPo
9mufC4XwJ/i5dQtmT+T6JMoRO2vuMNSbsUYKaJ9npIJUk3ZyYeEVl74iCWbdBxtO
lQZr7gQnSOtOAepy5zeYpOhk28jLOD4rFHneqYHSyj+VTYD0Qv3UiMXHNES0U+tW
mN2JQ3n8ba6kmTM4LTO88xSKvDHmKXFoaINx2mjFTJ5JRNIU8EKWWLV82vXXtICy
UFdF/QeKxnJzHGclDxN1qFJlN9vrNl9AzPaZ3Nc4jGxCRHTMHfUNGdw8lMCyPddi
UhXtxt9jnBV3eeH3OpIr6QYqt0sidlBw9ETwvWqyHIH19Voj2tSKoqJ8Lr2VIbRH
4pno0t7RQxww8g==
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:38 2024 by rpki-client on console-fra.rpki-client.org