Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: V+0W544uqAZEyLdOXtyq465DfPz5eiN2OcnVXCw9h1I=
Subject key identifier: 9F:F1:6B:F4:F7:5C:9C:28:5E:8F:E1:2F:55:BE:E0:D5:8B:9B:29:69
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 0193549A6F5AEC0FAA28CB7E11ED249D3BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 0202
Signing time: Fri 22 Nov 2024 16:00:27 +0000
Manifest this update: Fri 22 Nov 2024 16:00:27 +0000
Manifest next update: Sat 23 Nov 2024 16:00:27 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: EulbQDoVNGh0+8sacZyGcdTA0OwcdSmeOAsDlQVyNv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:6f:5a:ec:0f:aa:28:cb:7e:11:ed:24:9d:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Nov 22 16:00:27 2024 GMT
Not After : Nov 23 16:00:27 2024 GMT
Subject: CN=9ff16bf4f75c9c285e8fe12f55bee0d58b9b2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:39:f6:a4:9f:67:4d:ed:b2:f6:67:14:76:
f6:e6:13:0f:c1:a7:25:53:f0:f8:9a:2c:c9:f8:80:
78:d1:22:6e:67:58:f1:b1:c4:55:2e:93:b1:6d:2a:
f6:08:7f:0a:68:af:89:6a:6e:77:58:cc:ae:61:62:
7b:ab:0b:76:04:33:39:f1:ba:75:c9:a5:9e:e4:2b:
6c:ac:1e:44:8a:cd:eb:1a:66:6d:ac:19:8b:8d:26:
18:be:3e:ea:4d:ee:3a:ac:b0:d6:5c:64:38:4c:3d:
af:43:83:8b:d7:20:b0:64:77:24:c6:0c:50:4a:1a:
9e:e3:5b:63:a0:5e:2f:4f:ef:1c:90:04:72:e0:9e:
a0:64:63:d9:d3:8d:87:4d:ce:2c:80:6d:40:9b:9f:
1e:97:46:b1:06:f1:3b:13:b1:0a:a9:6c:80:c9:d3:
1d:d4:45:1e:f6:b7:fc:1a:b9:3a:87:92:a6:96:df:
e2:7c:84:0b:00:e8:1f:ac:26:d1:a4:c3:c5:20:4e:
23:62:14:dd:17:ba:9f:32:30:7e:9e:67:4c:2b:8b:
39:8a:92:a4:4a:d2:3c:cf:64:94:a7:29:93:50:ff:
1b:ff:b7:3f:7a:8d:d2:e2:a2:f0:2f:6b:4c:83:9a:
43:81:8b:0e:95:6d:de:8d:29:20:15:97:d2:14:72:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:6B:F4:F7:5C:9C:28:5E:8F:E1:2F:55:BE:E0:D5:8B:9B:29:69
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4e:f3:f2:0f:69:14:8f:d3:f8:60:95:01:04:38:cf:41:de:
b3:f9:18:b2:54:d2:c1:5f:83:0a:d9:6b:0c:ca:a7:a9:66:16:
4c:d3:88:d1:de:b7:45:bb:0f:f3:1f:ec:9a:70:26:e6:8b:4b:
f9:5c:04:ad:c2:83:38:e0:6e:79:35:96:71:d3:61:33:1d:9f:
21:53:f4:61:0c:26:c0:9e:a0:aa:03:1d:20:4c:e7:33:cb:13:
ee:23:13:af:0e:3a:1e:17:62:25:bb:24:00:f4:ea:57:c0:66:
18:da:a5:ac:9b:ba:a6:f0:c0:52:06:7e:eb:44:86:ed:49:cc:
38:5c:c3:6e:76:bd:c7:b2:94:c1:24:c3:0c:62:f6:9a:3c:b3:
80:61:94:b5:07:d2:13:55:07:08:90:e9:6c:86:a1:55:24:01:
b6:6b:77:74:b0:3b:63:b7:17:5f:e4:48:8f:2f:3d:06:2e:f3:
bb:63:50:9a:35:32:c8:61:57:18:8e:fd:ca:0d:42:96:ba:da:
93:fc:a4:3f:49:2b:e1:1d:9a:ba:4a:67:f2:29:d3:fb:54:92:
52:bc:3f:73:5c:a2:30:59:f7:5a:39:19:8b:2a:7f:e1:1f:38:
0f:3d:83:61:88:4e:61:28:45:d5:31:fe:3f:96:97:65:82:b5:
2e:75:34:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmm9a7A+qKMt+Ee0knTvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzdmMzI2M2ZlMzQ4YWIyYzhkMzY4NDc1ZDZiYzA0N2E2
YTk3NmEwHhcNMjQxMTIyMTYwMDI3WhcNMjQxMTIzMTYwMDI3WjAzMTEwLwYDVQQD
Eyg5ZmYxNmJmNGY3NWM5YzI4NWU4ZmUxMmY1NWJlZTBkNThiOWIyOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cc59qSfZ03tsvZnFHb25hMPwacl
U/D4mizJ+IB40SJuZ1jxscRVLpOxbSr2CH8KaK+Jam53WMyuYWJ7qwt2BDM58bp1
yaWe5CtsrB5Eis3rGmZtrBmLjSYYvj7qTe46rLDWXGQ4TD2vQ4OL1yCwZHckxgxQ
Shqe41tjoF4vT+8ckARy4J6gZGPZ042HTc4sgG1Am58el0axBvE7E7EKqWyAydMd
1EUe9rf8Grk6h5Kmlt/ifIQLAOgfrCbRpMPFIE4jYhTdF7qfMjB+nmdMK4s5ipKk
StI8z2SUpymTUP8b/7c/eo3S4qLwL2tMg5pDgYsOlW3ejSkgFZfSFHItBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/xa/T3XJwoXo/hL1W+4NWLmylpMB8GA1UdIwQY
MBaAFOx38yY/40irLI02hHXWvAR6apdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQt
ZDUxNzI5MzBmOGJmLzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85OTQ4NTEtNzI4Mi00MWJlLTkxYjQtZDUxNzI5MzBmOGJm
LzEvN0hmekpqX2pTS3NzalRhRWRkYThCSHBxbDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU7z8g9p
FI/T+GCVAQQ4z0Hes/kYslTSwV+DCtlrDMqnqWYWTNOI0d63RbsP8x/smnAm5otL
+VwErcKDOOBueTWWcdNhMx2fIVP0YQwmwJ6gqgMdIEznM8sT7iMTrw46HhdiJbsk
APTqV8BmGNqlrJu6pvDAUgZ+60SG7UnMOFzDbna9x7KUwSTDDGL2mjyzgGGUtQfS
E1UHCJDpbIahVSQBtmt3dLA7Y7cXX+RIjy89Bi7zu2NQmjUyyGFXGI79yg1Clrra
k/ykP0kr4R2aukpn8inT+1SSUrw/c1yiMFn3WjkZiyp/4R84Dz2DYYhOYShF1TH+
P5aXZYK1LnU0lw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:45 2024 by rpki-client on console-ams.rpki-client.org