Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: xPuqgvQf5FJhw15r5aOJW8q1v4a6klR2v/ZWf3SJvTI=
Subject key identifier: D2:EF:88:30:B1:D4:70:1D:5C:90:D6:8E:F1:D8:7E:E3:5D:FB:7E:64
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 019074D31C00BE4842EB18B1DDE043555771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 11F2
Signing time: Tue 02 Jul 2024 19:01:50 +0000
Manifest this update: Tue 02 Jul 2024 19:01:50 +0000
Manifest next update: Wed 03 Jul 2024 19:01:50 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: udxXWEkj5LsdxdCBb/JEiGxYh6dvf/d+vExfi8/8bJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:d3:1c:00:be:48:42:eb:18:b1:dd:e0:43:55:57:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Jul 2 19:01:50 2024 GMT
Not After : Jul 3 19:01:50 2024 GMT
Subject: CN=d2ef8830b1d4701d5c90d68ef1d87ee35dfb7e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:0d:43:8e:f1:94:a9:8b:03:b6:3d:6e:e3:
16:50:64:a8:ac:14:13:9f:0f:fb:5c:0e:17:27:bb:
c5:2f:70:9f:d4:3a:54:30:b1:55:52:5d:31:8d:cc:
5a:17:79:ae:30:c1:d1:71:f1:c0:47:4c:fd:db:34:
eb:6d:d5:d7:dd:a0:70:97:d7:62:f6:bf:d8:18:c4:
19:aa:80:80:9c:50:e5:e9:67:bd:de:c5:55:d1:16:
c9:d9:1a:fd:e2:78:3e:43:8d:fd:9e:68:6d:7b:5d:
88:54:e5:1e:9e:16:83:55:04:6b:98:b3:de:0f:d2:
d0:4e:e9:9c:90:33:46:28:20:61:82:8b:18:45:6e:
9f:a2:7e:e8:e8:33:a2:cf:58:ff:f2:56:ad:01:bc:
ee:13:95:65:3e:02:d4:94:d5:91:d5:01:fa:f0:97:
6f:39:8f:54:c1:77:53:09:f5:bb:f1:d7:83:e1:86:
c4:a0:b0:37:79:43:cb:c5:1c:08:83:00:42:b2:d8:
ed:0a:c5:aa:02:a9:99:2c:c2:55:51:e5:33:ae:43:
c7:98:9f:b3:f1:fc:4e:28:4f:43:79:d5:d4:39:59:
ad:02:a4:a1:4e:4b:7e:bd:3c:a5:c5:d8:9f:13:b7:
bf:f0:d8:50:3c:29:c1:07:5d:25:e0:7f:6e:f1:47:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:88:30:B1:D4:70:1D:5C:90:D6:8E:F1:D8:7E:E3:5D:FB:7E:64
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:c7:4d:49:c4:fc:3b:f8:4e:dc:d3:e1:f1:e0:e3:78:8f:
3d:ea:33:d6:df:ed:5f:bb:d2:ff:e3:7a:29:0c:f8:e7:86:50:
36:d1:8c:8b:5d:d4:dc:c2:74:6e:48:e4:f1:c5:5b:b6:1b:94:
a9:b0:b2:8a:ed:54:21:3c:35:04:22:21:d2:95:7d:06:95:fa:
0d:0d:67:de:c0:17:5b:0c:b6:0e:54:e3:c7:3d:a9:97:f4:64:
67:33:1d:16:cb:ad:ef:fd:8f:ec:ab:9a:36:c7:55:84:50:f1:
5f:c9:88:0e:2b:b2:01:da:f6:e0:e6:28:e6:7e:6d:32:8d:f0:
a7:58:e2:9f:3f:fc:d6:c2:ee:f5:d5:90:e4:e1:37:08:ae:e0:
67:1e:1e:aa:58:5b:ff:09:c7:12:26:a8:82:bc:c9:ca:60:19:
6e:f6:78:30:98:d9:6a:4d:d1:33:af:94:87:b9:e1:b4:3c:df:
f3:6f:6e:19:b2:ae:3a:a8:23:e3:a8:c9:eb:a6:0c:8b:7d:fa:
eb:0f:57:7e:96:f2:69:63:22:4a:29:b1:e6:4a:f7:9c:f9:60:
02:5c:97:8c:d9:ac:2e:db:da:14:a1:23:91:42:7c:b3:4a:26:
f1:97:69:e3:c9:de:b7:2d:ca:1c:58:50:1b:3a:52:e9:25:22:
fb:65:57:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZB00xwAvkhC6xix3eBDVVdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDNmN2RjZmM2MDg5MWZjMzg4ZmE1YzFkYmQ3NWYyN2I5
NTE5ZTIwHhcNMjQwNzAyMTkwMTUwWhcNMjQwNzAzMTkwMTUwWjAzMTEwLwYDVQQD
EyhkMmVmODgzMGIxZDQ3MDFkNWM5MGQ2OGVmMWQ4N2VlMzVkZmI3ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwgNQ47xlKmLA7Y9buMWUGSorBQT
nw/7XA4XJ7vFL3Cf1DpUMLFVUl0xjcxaF3muMMHRcfHAR0z92zTrbdXX3aBwl9di
9r/YGMQZqoCAnFDl6We93sVV0RbJ2Rr94ng+Q439nmhte12IVOUenhaDVQRrmLPe
D9LQTumckDNGKCBhgosYRW6fon7o6DOiz1j/8latAbzuE5VlPgLUlNWR1QH68Jdv
OY9UwXdTCfW78deD4YbEoLA3eUPLxRwIgwBCstjtCsWqAqmZLMJVUeUzrkPHmJ+z
8fxOKE9DedXUOVmtAqShTkt+vTylxdifE7e/8NhQPCnBB10l4H9u8Uc/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLviDCx1HAdXJDWjvHYfuNd+35kMB8GA1UdIwQY
MBaAFL/T99z8YIkfw4j6XB29dfJ7lRniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTkt
NThmZWQyODIyY2EzLzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTktNThmZWQyODIyY2Ez
LzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8DHTUnE
/Dv4TtzT4fHg43iPPeoz1t/tX7vS/+N6KQz454ZQNtGMi13U3MJ0bkjk8cVbthuU
qbCyiu1UITw1BCIh0pV9BpX6DQ1n3sAXWwy2DlTjxz2pl/RkZzMdFsut7/2P7Kua
NsdVhFDxX8mIDiuyAdr24OYo5n5tMo3wp1jinz/81sLu9dWQ5OE3CK7gZx4eqlhb
/wnHEiaogrzJymAZbvZ4MJjZak3RM6+Uh7nhtDzf829uGbKuOqgj46jJ66YMi336
6w9XfpbyaWMiSimx5kr3nPlgAlyXjNmsLtvaFKEjkUJ8s0om8Zdp48nety3KHFhQ
GzpS6SUi+2VXUQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 21:27:44 2024 by rpki-client on console-ams.rpki-client.org