Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: Xg3GI7i+suZpJujCDn4VWTUQdM4GLYTW3abE5vRlEhw=
Subject key identifier: 7C:47:D2:F1:7C:5E:1C:13:36:E5:68:6E:1D:E8:CF:31:85:C1:9A:73
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 018FB30F8B01F2B0B69B14014A084553AD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: DD
Signing time: Sun 26 May 2024 04:01:31 +0000
Manifest this update: Sun 26 May 2024 04:01:31 +0000
Manifest next update: Mon 27 May 2024 04:01:31 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: E01O3KSWYbxU4WLrmdXDgOOLyqbH7HoAwbb5K42PkEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:0f:8b:01:f2:b0:b6:9b:14:01:4a:08:45:53:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: May 26 04:01:31 2024 GMT
Not After : May 27 04:01:31 2024 GMT
Subject: CN=7c47d2f17c5e1c1336e5686e1de8cf3185c19a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:0c:70:90:8f:31:5f:5a:9a:e8:54:24:72:
10:23:f1:8b:28:d9:55:76:d6:8d:ca:da:74:8e:ce:
c4:68:1b:22:cf:33:d2:e4:b7:86:8f:2e:98:29:e9:
ef:89:49:3d:79:43:94:d5:43:ee:d5:3a:9b:df:63:
ef:eb:8a:0f:35:88:99:c4:17:43:58:80:55:3d:3a:
3f:79:50:37:35:b1:f2:ed:7b:53:f6:2c:1e:2d:5b:
31:6e:af:b9:53:14:e3:a8:44:5d:b8:d2:e6:c3:e0:
71:b0:43:f9:18:80:9b:6c:89:9c:32:39:9c:8b:d7:
40:1d:58:47:4b:96:e3:95:0c:f8:57:8b:ca:67:4b:
78:b2:a0:2e:f4:21:22:14:d7:c3:b9:4a:b9:1d:a4:
da:75:71:57:e7:ff:15:83:c3:17:21:b7:bc:92:90:
68:14:56:99:c4:f9:b4:99:10:34:86:3a:e9:8c:2a:
92:be:53:12:d9:ee:dc:8c:3f:75:1b:12:c2:49:c8:
bb:04:93:9d:ad:ad:ee:77:2a:dc:96:bb:b6:af:b4:
fc:6e:b5:8c:1c:6a:4a:53:ee:4b:56:fa:5c:4a:fe:
e0:98:59:31:cf:1a:56:5c:42:ba:19:8a:0b:2c:7a:
ef:84:6b:d7:fb:a2:96:8f:bc:8b:d8:08:74:69:d4:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:D2:F1:7C:5E:1C:13:36:E5:68:6E:1D:E8:CF:31:85:C1:9A:73
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:4c:77:48:07:ed:41:7b:76:ee:7b:17:98:a8:40:d9:93:
17:af:72:90:e9:37:1d:c6:2e:8f:9d:26:16:0a:25:8e:1d:ec:
f2:ad:da:70:d8:db:59:52:69:0d:48:2d:a6:ec:bb:97:3d:d6:
68:41:23:d1:cc:66:3a:40:36:93:0e:f5:34:31:36:c9:c6:4c:
72:65:9b:b0:9c:91:5a:9d:c3:70:f7:3b:45:bd:fe:b0:d0:76:
f9:12:66:35:f6:94:70:6c:22:e0:ba:63:64:a7:d1:ec:04:f9:
6f:d6:c7:7b:d5:8f:0e:58:d4:ca:3b:4f:8a:e5:eb:b5:da:37:
de:0e:71:f7:f7:b1:2b:ae:36:18:a5:0f:54:74:ba:22:fb:dc:
aa:23:3c:f7:00:7b:79:66:61:36:f7:d3:3d:0d:c1:1a:85:ae:
c8:e7:8b:5f:e7:0b:62:20:46:ac:a3:8c:89:71:5e:5a:b3:3b:
76:21:38:da:75:eb:f9:43:25:17:9a:d3:4b:d4:c4:4f:f1:4b:
43:f6:92:7b:f5:c0:0b:71:52:df:71:05:57:d8:3f:79:e0:b7:
f9:ed:a7:85:29:df:12:1d:22:a0:9d:3c:1b:4f:7b:40:ec:7b:
22:b7:cd:2f:8e:b2:6a:8e:a6:a4:ae:b9:e4:64:d5:3a:df:e9:
f2:28:68:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+zD4sB8rC2mxQBSghFU61UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDg3MzVhMzU3ZDMxZmE4YWRhMzFlMjlmMTk1ODZhNmZm
ZDk1OTIwHhcNMjQwNTI2MDQwMTMxWhcNMjQwNTI3MDQwMTMxWjAzMTEwLwYDVQQD
Eyg3YzQ3ZDJmMTdjNWUxYzEzMzZlNTY4NmUxZGU4Y2YzMTg1YzE5YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseoMcJCPMV9amuhUJHIQI/GLKNlV
dtaNytp0js7EaBsizzPS5LeGjy6YKenviUk9eUOU1UPu1Tqb32Pv64oPNYiZxBdD
WIBVPTo/eVA3NbHy7XtT9iweLVsxbq+5UxTjqERduNLmw+BxsEP5GICbbImcMjmc
i9dAHVhHS5bjlQz4V4vKZ0t4sqAu9CEiFNfDuUq5HaTadXFX5/8Vg8MXIbe8kpBo
FFaZxPm0mRA0hjrpjCqSvlMS2e7cjD91GxLCSci7BJOdra3udyrclru2r7T8brWM
HGpKU+5LVvpcSv7gmFkxzxpWXEK6GYoLLHrvhGvX+6KWj7yL2Ah0adRyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxH0vF8XhwTNuVobh3ozzGFwZpzMB8GA1UdIwQY
MBaAFJ0Ic1o1fTH6itox4p8ZWGpv/ZWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzIt
YTM0ODgyMWNhMWUwLzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzItYTM0ODgyMWNhMWUw
LzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKBMd0gH
7UF7du57F5ioQNmTF69ykOk3HcYuj50mFgoljh3s8q3acNjbWVJpDUgtpuy7lz3W
aEEj0cxmOkA2kw71NDE2ycZMcmWbsJyRWp3DcPc7Rb3+sNB2+RJmNfaUcGwi4Lpj
ZKfR7AT5b9bHe9WPDljUyjtPiuXrtdo33g5x9/exK642GKUPVHS6IvvcqiM89wB7
eWZhNvfTPQ3BGoWuyOeLX+cLYiBGrKOMiXFeWrM7diE42nXr+UMlF5rTS9TET/FL
Q/aSe/XAC3FS33EFV9g/eeC3+e2nhSnfEh0ioJ08G097QOx7IrfNL46yao6mpK65
5GTVOt/p8ihoZw==
-----END CERTIFICATE-----
Generated at Sun May 26 08:29:33 2024 by rpki-client on console-fra.rpki-client.org