Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
File: 7t3kHzYumK430e_HyvPn08FlPuI.mft (raw, json)
Hash identifier: hmhmBl8IcpBeI4NBwpjFFDnmkeaCmGw7r/os/rCWmO4=
Subject key identifier: C6:B4:3C:F4:25:6C:AB:DB:D7:84:44:E8:9B:DD:04:10:1A:A8:07:84
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Certificate issuer: /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial: 018F234AC5804A4DC670476FD18EB828C184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
Manifest number: 1148
Signing time: Sun 28 Apr 2024 06:00:53 +0000
Manifest this update: Sun 28 Apr 2024 06:00:53 +0000
Manifest next update: Mon 29 Apr 2024 06:00:53 +0000
Files and hashes: 1: 7t3kHzYumK430e_HyvPn08FlPuI.crl (hash: 1Pr+pRUE9hiJjTWlS8FM/5kRz3zFJcgTUL8Z5a50p3g=)
2: pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa (hash: 9FqKAnn6lTbVPZl3tFM6UZFZSPuQ13ePhggIEkhVq00=)
3: qee9JBcyPQsqho8RHzSCw4zM34g.roa (hash: /hUsJ55oFwkNDDCajUWa5hu5GrYBHB61OB0gXOh+noI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:4a:c5:80:4a:4d:c6:70:47:6f:d1:8e:b8:28:c1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Validity
Not Before: Apr 28 06:00:53 2024 GMT
Not After : Apr 29 06:00:53 2024 GMT
Subject: CN=c6b43cf4256cabdbd78444e89bdd04101aa80784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:8c:f3:4f:1a:dc:17:b5:76:12:bb:91:89:
7a:e5:eb:41:d8:ad:70:78:97:5e:6d:aa:f1:17:76:
72:9c:7c:5d:94:f7:d5:cf:4d:79:b2:a7:d0:af:78:
22:32:71:f4:c0:4f:76:09:69:f9:6c:7d:d8:f6:45:
64:7e:e2:d5:b6:21:34:80:04:94:dc:22:18:2a:2a:
07:84:f7:21:f9:87:40:cc:d9:91:da:22:95:98:fd:
c8:61:03:0c:b1:6d:81:a5:be:c7:7c:c3:76:04:fb:
ed:3a:b1:d2:ac:c5:c7:9a:ab:34:f8:0f:35:3a:35:
36:44:fd:bf:49:a2:c7:d2:22:13:e8:64:13:3a:6e:
1f:e0:0b:31:ee:62:29:19:30:10:23:54:ab:cd:09:
2f:ed:f8:c8:90:b1:49:ad:3e:95:85:58:73:e6:44:
45:41:ee:4d:bb:ee:24:e2:b0:f0:ad:a5:04:a6:85:
9a:59:f5:4d:63:1c:c3:ec:b3:70:cb:74:e7:26:01:
a1:ff:08:e0:9c:79:3a:29:5b:ce:0c:6b:73:01:88:
be:4e:2f:ed:8d:cf:3f:eb:ff:36:a2:84:f8:12:ce:
89:2d:57:8e:7e:ca:f8:a4:d9:fb:40:11:18:5c:64:
6c:b5:44:8a:48:27:39:08:84:8e:1d:a3:3a:6e:4b:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:3C:F4:25:6C:AB:DB:D7:84:44:E8:9B:DD:04:10:1A:A8:07:84
X509v3 Authority Key Identifier:
keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:70:fb:a1:86:4a:b4:3a:20:fb:42:6d:b1:5a:c6:c7:cf:1d:
aa:41:d8:e1:0b:ce:a5:29:a4:2c:9c:c6:5e:fb:39:8f:26:d6:
3c:6c:89:b3:f2:ef:61:0b:84:17:fb:dc:6c:a7:9e:59:c8:9b:
41:74:46:78:6e:f6:6c:56:b5:0a:0c:f5:17:75:e6:75:e2:1e:
ad:c3:92:b8:ea:9c:36:5b:66:3b:c3:4b:ca:50:13:d8:a4:97:
bb:38:d5:a7:d1:87:7f:1c:9f:d3:18:9c:d9:08:bb:40:96:64:
66:1c:13:be:72:31:fe:ec:51:6c:8d:61:33:dc:42:28:03:56:
9c:b7:6d:88:1e:5f:6a:4a:be:18:a0:32:36:18:ea:57:84:03:
00:2c:47:f5:d0:de:05:e8:0f:89:cc:be:77:1f:ee:82:22:0f:
8c:69:20:80:6c:20:22:c3:b8:0e:56:c9:6f:c1:5f:1f:c2:0a:
90:75:0c:67:10:ea:95:dd:59:08:50:30:e8:d4:cb:83:8b:b4:
b4:2f:91:a5:53:ed:25:c0:e3:c3:cc:fa:b4:c3:d7:b6:51:d6:
65:15:5d:bf:a3:23:9f:6e:43:88:bb:9e:0b:be:0d:9e:65:57:
e6:22:94:93:10:ac:81:20:4a:76:13:8f:b9:08:db:e3:31:00:
75:a1:6e:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8jSsWASk3GcEdv0Y64KMGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZGRlNDFmMzYyZTk4YWUzN2QxZWZjN2NhZjNlN2QzYzE2
NTNlZTIwHhcNMjQwNDI4MDYwMDUzWhcNMjQwNDI5MDYwMDUzWjAzMTEwLwYDVQQD
EyhjNmI0M2NmNDI1NmNhYmRiZDc4NDQ0ZTg5YmRkMDQxMDFhYTgwNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSyM808a3Be1dhK7kYl65etB2K1w
eJdebarxF3ZynHxdlPfVz015sqfQr3giMnH0wE92CWn5bH3Y9kVkfuLVtiE0gASU
3CIYKioHhPch+YdAzNmR2iKVmP3IYQMMsW2Bpb7HfMN2BPvtOrHSrMXHmqs0+A81
OjU2RP2/SaLH0iIT6GQTOm4f4Asx7mIpGTAQI1SrzQkv7fjIkLFJrT6VhVhz5kRF
Qe5Nu+4k4rDwraUEpoWaWfVNYxzD7LNwy3TnJgGh/wjgnHk6KVvODGtzAYi+Ti/t
jc8/6/82ooT4Es6JLVeOfsr4pNn7QBEYXGRstUSKSCc5CISOHaM6bkvZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa0PPQlbKvb14RE6JvdBBAaqAeEMB8GA1UdIwQY
MBaAFO7d5B82LpiuN9Hvx8rz59PBZT7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Qza0h6WXVtSzQzMGVfSHl2UG4wOEZsUHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82MjZmYTYtNmVjYS00NzZlLWE1YWYt
YWZlNjMzNzZjODhmLzEvN3Qza0h6WXVtSzQzMGVfSHl2UG4wOEZsUHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My82MjZmYTYtNmVjYS00NzZlLWE1YWYtYWZlNjMzNzZjODhm
LzEvN3Qza0h6WXVtSzQzMGVfSHl2UG4wOEZsUHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHD7oYZK
tDog+0JtsVrGx88dqkHY4QvOpSmkLJzGXvs5jybWPGyJs/LvYQuEF/vcbKeeWcib
QXRGeG72bFa1Cgz1F3XmdeIercOSuOqcNltmO8NLylAT2KSXuzjVp9GHfxyf0xic
2Qi7QJZkZhwTvnIx/uxRbI1hM9xCKANWnLdtiB5fakq+GKAyNhjqV4QDACxH9dDe
BegPicy+dx/ugiIPjGkggGwgIsO4DlbJb8FfH8IKkHUMZxDqld1ZCFAw6NTLg4u0
tC+RpVPtJcDjw8z6tMPXtlHWZRVdv6Mjn25DiLueC74NnmVX5iKUkxCsgSBKdhOP
uQjb4zEAdaFuAA==
-----END CERTIFICATE-----
Generated at Sun Apr 28 06:35:32 2024 by rpki-client on console-ams.rpki-client.org