Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
File: DoWbfPDZfGOgD95kMinpkE6W-FE.mft (raw, json)
Hash identifier: t3saShJIThzzhkvV+gqQ/pBHcVHuIvZ2Z9XqMGVgkEE=
Subject key identifier: B2:C6:6F:C1:78:44:E6:A3:86:FE:07:BD:60:B5:2D:71:AB:3D:F3:4A
Authority key identifier: 0E:85:9B:7C:F0:D9:7C:63:A0:0F:DE:64:32:29:E9:90:4E:96:F8:51
Certificate issuer: /CN=0e859b7cf0d97c63a00fde643229e9904e96f851
Certificate serial: 018F430CB9E262A5630EC5B878240B36DE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoWbfPDZfGOgD95kMinpkE6W-FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
Manifest number: 05D7
Signing time: Sat 04 May 2024 10:00:58 +0000
Manifest this update: Sat 04 May 2024 10:00:58 +0000
Manifest next update: Sun 05 May 2024 10:00:58 +0000
Files and hashes: 1: DoWbfPDZfGOgD95kMinpkE6W-FE.crl (hash: GNeDgpahCBoMaLvj3YfxI4scmVBlA5R+MaLrRJIgEzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoWbfPDZfGOgD95kMinpkE6W-FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:0c:b9:e2:62:a5:63:0e:c5:b8:78:24:0b:36:de:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e859b7cf0d97c63a00fde643229e9904e96f851
Validity
Not Before: May 4 10:00:58 2024 GMT
Not After : May 5 10:00:58 2024 GMT
Subject: CN=b2c66fc17844e6a386fe07bd60b52d71ab3df34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:ea:1c:05:b3:5d:af:aa:23:34:4d:2e:f0:
30:d0:26:8b:b6:b4:81:dd:33:ee:c9:78:af:5e:73:
9b:0f:ec:0f:ae:7a:c4:c8:65:5a:ec:b6:c8:d4:92:
77:49:77:65:37:f9:87:e2:73:e0:b9:ed:fd:df:c8:
e9:4f:1b:26:31:aa:ea:89:04:d9:60:2f:68:57:85:
a0:9c:f0:b5:58:98:ab:ca:01:b2:4c:73:a9:bf:d4:
d4:2c:08:24:ed:1e:f9:e2:fe:62:5d:10:fd:56:0f:
11:91:98:91:1e:08:6f:40:fc:16:15:7b:49:de:fd:
a0:3b:31:fc:f3:f8:5e:c9:3f:31:20:29:ad:e9:46:
ef:17:92:65:1e:27:55:12:8d:07:0e:23:84:b0:0d:
b5:20:c3:f2:c9:6a:90:34:c2:99:15:74:31:d6:57:
0c:92:58:f0:3c:f8:6c:fc:27:3b:21:e3:44:c4:a0:
39:43:ac:ad:bf:35:7d:57:10:f0:1f:94:57:2c:8e:
41:6f:b6:a3:a5:67:2f:b0:82:29:a4:12:11:a2:aa:
cc:83:1c:59:e1:6c:fa:55:f7:64:71:df:e2:ff:c6:
b6:65:0e:e6:50:66:85:4a:73:88:c1:ae:4c:08:62:
15:79:80:44:3c:04:a7:64:7f:53:f1:50:ad:31:c0:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:6F:C1:78:44:E6:A3:86:FE:07:BD:60:B5:2D:71:AB:3D:F3:4A
X509v3 Authority Key Identifier:
keyid:0E:85:9B:7C:F0:D9:7C:63:A0:0F:DE:64:32:29:E9:90:4E:96:F8:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoWbfPDZfGOgD95kMinpkE6W-FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21a7ca-520e-4971-865b-371a7dba91c2/1/DoWbfPDZfGOgD95kMinpkE6W-FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ca:1d:45:6a:d6:c2:70:7c:0e:2e:6f:24:37:42:1c:49:27:
47:0b:ea:a0:ad:03:53:fc:d2:b2:8a:e4:fb:c0:0f:af:17:d9:
a8:ec:8e:a1:9d:a8:83:c3:b5:dd:42:3b:af:b0:57:80:a9:54:
99:d8:52:dd:54:9f:23:ef:85:e4:4b:a8:df:22:5b:23:1a:c8:
e6:e9:34:cb:9f:0f:10:74:1a:24:27:2e:03:67:44:35:3b:f8:
d0:10:6f:9b:39:56:66:02:2b:da:1b:c8:ca:67:da:f9:af:c4:
93:a1:bf:40:76:a2:2a:b3:1a:4c:95:8a:6b:6e:11:68:d2:3d:
21:10:1d:9f:c7:88:b2:4b:e9:40:81:2c:33:e4:c8:f0:2f:81:
4b:62:dc:af:49:bb:65:d4:e8:e6:63:b2:8f:88:2f:33:38:48:
c9:29:bc:48:a4:48:21:cf:14:e7:2b:9b:e2:25:d3:2f:74:4e:
91:62:19:98:41:62:13:af:f4:bd:fa:0d:91:99:08:00:2f:c4:
31:6b:d3:0c:4a:31:e3:2c:70:e7:e7:d3:83:33:16:47:d1:b9:
65:2f:31:59:62:bf:7f:a9:1e:2f:c8:33:1f:3f:e8:11:c0:a7:
f6:b6:c6:1f:26:25:df:ae:3c:be:98:78:cc:42:b5:17:d6:ab:
cd:a6:a9:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DDLniYqVjDsW4eCQLNt5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODU5YjdjZjBkOTdjNjNhMDBmZGU2NDMyMjllOTkwNGU5
NmY4NTEwHhcNMjQwNTA0MTAwMDU4WhcNMjQwNTA1MTAwMDU4WjAzMTEwLwYDVQQD
EyhiMmM2NmZjMTc4NDRlNmEzODZmZTA3YmQ2MGI1MmQ3MWFiM2RmMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VXqHAWzXa+qIzRNLvAw0CaLtrSB
3TPuyXivXnObD+wPrnrEyGVa7LbI1JJ3SXdlN/mH4nPgue3938jpTxsmMarqiQTZ
YC9oV4WgnPC1WJirygGyTHOpv9TULAgk7R754v5iXRD9Vg8RkZiRHghvQPwWFXtJ
3v2gOzH88/heyT8xICmt6UbvF5JlHidVEo0HDiOEsA21IMPyyWqQNMKZFXQx1lcM
kljwPPhs/Cc7IeNExKA5Q6ytvzV9VxDwH5RXLI5Bb7ajpWcvsIIppBIRoqrMgxxZ
4Wz6Vfdkcd/i/8a2ZQ7mUGaFSnOIwa5MCGIVeYBEPASnZH9T8VCtMcBUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLGb8F4ROajhv4HvWC1LXGrPfNKMB8GA1UdIwQY
MBaAFA6Fm3zw2XxjoA/eZDIp6ZBOlvhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9XYmZQRFpmR09nRDk1a01pbnBrRTZXLUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yMWE3Y2EtNTIwZS00OTcxLTg2NWIt
MzcxYTdkYmE5MWMyLzEvRG9XYmZQRFpmR09nRDk1a01pbnBrRTZXLUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yMWE3Y2EtNTIwZS00OTcxLTg2NWItMzcxYTdkYmE5MWMy
LzEvRG9XYmZQRFpmR09nRDk1a01pbnBrRTZXLUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8odRWrW
wnB8Di5vJDdCHEknRwvqoK0DU/zSsork+8APrxfZqOyOoZ2og8O13UI7r7BXgKlU
mdhS3VSfI++F5Euo3yJbIxrI5uk0y58PEHQaJCcuA2dENTv40BBvmzlWZgIr2hvI
ymfa+a/Ek6G/QHaiKrMaTJWKa24RaNI9IRAdn8eIskvpQIEsM+TI8C+BS2Lcr0m7
ZdTo5mOyj4gvMzhIySm8SKRIIc8U5yub4iXTL3ROkWIZmEFiE6/0vfoNkZkIAC/E
MWvTDEox4yxw5+fTgzMWR9G5ZS8xWWK/f6keL8gzHz/oEcCn9rbGHyYl3648vph4
zEK1F9arzaapjA==
-----END CERTIFICATE-----
Generated at Sat May 4 11:30:25 2024 by rpki-client on console-fra.rpki-client.org