Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: MhKmmnl3/3reI61tRUwEHkiWuiwbSx+fP22EvzByjXQ=
Subject key identifier: AB:A3:F7:E3:D3:15:D9:2B:36:0A:7F:91:89:45:95:D9:A0:F4:A6:04
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 018F874A337402C8A182A7ED073C7AE54D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0297
Signing time: Fri 17 May 2024 16:02:17 +0000
Manifest this update: Fri 17 May 2024 16:02:17 +0000
Manifest next update: Sat 18 May 2024 16:02:17 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: BQuBVFs8E0sOwSOyhP/WWb1LSKL+Db1b5nfJz3FZA5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:33:74:02:c8:a1:82:a7:ed:07:3c:7a:e5:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: May 17 16:02:17 2024 GMT
Not After : May 18 16:02:17 2024 GMT
Subject: CN=aba3f7e3d315d92b360a7f91894595d9a0f4a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:2f:c3:77:4a:df:88:7f:74:96:1f:d9:c5:
ff:d5:20:1b:aa:2a:53:6f:f1:c6:ee:f8:e4:68:39:
3a:30:b1:68:50:62:22:26:70:bc:e9:ad:20:e6:aa:
a9:7e:5f:75:81:00:89:26:a6:4e:c8:87:33:12:cf:
eb:de:41:7e:62:c2:c1:d3:c8:61:4c:8f:24:1e:d5:
72:ed:27:eb:96:24:be:2b:3e:46:bf:56:dd:6e:70:
5e:07:e3:11:f1:9f:0f:f4:20:ad:40:42:f3:7f:b4:
a8:5e:0c:c8:40:5e:fa:4f:f5:8c:7b:f9:c3:b9:5d:
5c:13:93:06:fe:56:52:c5:6b:4f:bd:14:24:5b:b9:
fd:ad:6c:6f:5a:72:ef:1f:50:a1:96:a1:ae:2e:63:
48:ac:d6:29:58:71:be:dd:b2:bd:35:fd:88:52:05:
ca:16:f3:0d:68:33:2f:d6:01:d3:82:1d:0b:13:94:
06:6a:bd:da:9a:1e:42:55:3f:45:7e:41:2a:00:6e:
af:f2:a0:e8:df:a5:3e:86:cf:9c:25:aa:f2:6c:6e:
b4:95:2a:dd:d9:3a:58:f9:74:a5:1c:ea:80:d5:3d:
a7:6d:23:1e:3e:ef:00:fb:8d:c5:a8:51:6c:a5:9d:
77:8e:15:42:81:01:b5:d4:3c:4d:c4:b9:1c:cc:f3:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:F7:E3:D3:15:D9:2B:36:0A:7F:91:89:45:95:D9:A0:F4:A6:04
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:0b:9f:11:4a:de:88:83:48:b9:d3:36:07:be:6f:d8:14:
05:8c:9c:24:b1:b3:67:88:18:5d:50:9a:a5:fd:64:95:a5:a0:
db:b5:9a:19:5d:f4:41:38:01:6c:78:6d:82:5b:55:21:6f:2f:
cc:33:18:c8:3c:4e:62:88:a9:5d:85:e4:bd:1a:d7:7d:8e:34:
09:cc:95:df:72:6b:e1:ab:7d:67:62:ac:79:d3:b7:25:71:f3:
91:ea:de:92:ab:1e:36:93:cb:f0:15:b0:9e:fa:e0:50:c9:82:
e7:6e:af:ac:c7:e8:a3:21:eb:bb:fc:31:6a:38:26:f2:c9:f1:
e7:d2:e5:ab:cc:7f:bd:e7:65:5b:ee:67:e2:e6:cd:44:a0:47:
a7:57:f7:df:89:dc:99:ac:0c:60:56:59:ad:a2:e8:a8:76:92:
d5:9b:ba:31:ac:28:31:7b:5e:a0:57:2d:96:23:4f:cd:b6:11:
9a:e1:9b:23:3c:49:92:48:2d:73:19:7d:b0:ee:e2:e3:bb:66:
ab:c8:45:53:f9:c2:ce:2e:da:14:40:b3:0e:2d:98:4d:9f:2a:
70:79:2d:f3:48:b1:b4:53:4e:81:c4:38:ca:13:83:43:19:ad:
0a:f4:dd:7a:7d:9f:2a:58:16:7d:91:28:77:bc:b9:e8:f7:ad:
0f:5f:4c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSjN0AsihgqftBzx65U1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjIyODg1YjA5NGNjYWJhNmJkY2U2ZmMzYWFmZGQ4ZmFh
N2U3NTYwHhcNMjQwNTE3MTYwMjE3WhcNMjQwNTE4MTYwMjE3WjAzMTEwLwYDVQQD
EyhhYmEzZjdlM2QzMTVkOTJiMzYwYTdmOTE4OTQ1OTVkOWEwZjRhNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qMvw3dK34h/dJYf2cX/1SAbqipT
b/HG7vjkaDk6MLFoUGIiJnC86a0g5qqpfl91gQCJJqZOyIczEs/r3kF+YsLB08hh
TI8kHtVy7SfrliS+Kz5Gv1bdbnBeB+MR8Z8P9CCtQELzf7SoXgzIQF76T/WMe/nD
uV1cE5MG/lZSxWtPvRQkW7n9rWxvWnLvH1ChlqGuLmNIrNYpWHG+3bK9Nf2IUgXK
FvMNaDMv1gHTgh0LE5QGar3amh5CVT9FfkEqAG6v8qDo36U+hs+cJarybG60lSrd
2TpY+XSlHOqA1T2nbSMePu8A+43FqFFspZ13jhVCgQG11DxNxLkczPP4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuj9+PTFdkrNgp/kYlFldmg9KYEMB8GA1UdIwQY
MBaAFI1iKIWwlMyrpr3Ob8Oq/dj6p+dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAt
Nzg5ZDJiNWE4NmJjLzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAtNzg5ZDJiNWE4NmJj
LzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG90LnxFK
3oiDSLnTNge+b9gUBYycJLGzZ4gYXVCapf1klaWg27WaGV30QTgBbHhtgltVIW8v
zDMYyDxOYoipXYXkvRrXfY40CcyV33Jr4at9Z2KsedO3JXHzkerekqseNpPL8BWw
nvrgUMmC526vrMfooyHru/wxajgm8snx59Llq8x/vedlW+5n4ubNRKBHp1f334nc
mawMYFZZraLoqHaS1Zu6MawoMXteoFctliNPzbYRmuGbIzxJkkgtcxl9sO7i47tm
q8hFU/nCzi7aFECzDi2YTZ8qcHkt80ixtFNOgcQ4yhODQxmtCvTden2fKlgWfZEo
d7y56PetD19M5g==
-----END CERTIFICATE-----
Generated at Fri May 17 18:21:53 2024 by rpki-client on console-ams.rpki-client.org