Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
File: IgOiQWJTsPPH-8Knz9AvgkleLC0.mft (raw, json)
Hash identifier: ICdMO3B9C/s27XT6xCW6wIY4IEkh+Kd9UcUp22+rCJo=
Subject key identifier: 62:0E:40:AC:10:2B:BA:0D:9F:41:74:59:6E:B0:BB:5D:E6:39:81:3A
Authority key identifier: 22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D
Certificate issuer: /CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
Certificate serial: 018F429F634C54CE181C46BF8342C93E094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
Manifest number: 0DFC
Signing time: Sat 04 May 2024 08:01:32 +0000
Manifest this update: Sat 04 May 2024 08:01:32 +0000
Manifest next update: Sun 05 May 2024 08:01:32 +0000
Files and hashes: 1: IgOiQWJTsPPH-8Knz9AvgkleLC0.crl (hash: sXMoe68VK1B6P76zfKDizdj7wBIna1dQuScVqT/+gMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:9f:63:4c:54:ce:18:1c:46:bf:83:42:c9:3e:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
Validity
Not Before: May 4 08:01:32 2024 GMT
Not After : May 5 08:01:32 2024 GMT
Subject: CN=620e40ac102bba0d9f4174596eb0bb5de639813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:3d:bb:62:1e:f8:f1:0c:39:fe:11:52:ca:
f0:d5:ee:28:9c:bf:b4:fe:12:6a:b1:04:70:6b:2f:
31:e3:0a:8f:1f:b5:bc:fb:a1:39:58:59:9e:a4:71:
fb:c4:65:49:2e:02:44:6f:83:75:2c:ed:26:59:77:
c2:56:9a:91:ff:21:72:9b:17:9d:29:a0:b9:46:a1:
e5:f2:76:fd:7a:3e:64:6a:5f:94:37:f6:62:48:e0:
b8:84:63:d1:c9:80:53:4a:15:d1:b6:c6:de:30:11:
3e:6d:b5:fc:fe:ed:fb:7d:f9:a0:d6:09:e4:4f:a8:
e5:8e:6e:9a:be:e0:59:6b:83:12:54:2d:9e:a4:53:
df:95:3e:ed:b5:f4:0d:0e:58:29:5d:95:9c:fe:8f:
ce:0c:fc:dc:5c:07:00:a8:01:a1:6a:c5:f9:56:ec:
ad:e3:df:36:8f:4d:81:87:c4:b8:2f:30:90:e0:50:
e5:05:8a:df:c4:8e:96:18:2c:46:ca:24:2a:4f:42:
29:83:91:3a:bb:40:22:35:53:58:74:05:2a:fb:cd:
7e:e4:cf:68:b7:b2:5d:3b:bd:42:25:96:e3:87:04:
35:8e:33:c1:4e:32:58:b8:31:c2:0e:de:db:d1:a1:
ea:b6:02:af:c2:0f:19:86:49:dc:3f:e3:f4:cf:84:
fb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:40:AC:10:2B:BA:0D:9F:41:74:59:6E:B0:BB:5D:E6:39:81:3A
X509v3 Authority Key Identifier:
keyid:22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bc:34:3b:ed:72:97:7a:7e:f8:29:cd:33:b8:ac:48:34:ee:
ce:73:6a:6b:d4:8f:d7:bb:bc:85:b2:82:6e:1f:cd:17:eb:a9:
e3:b6:d4:4d:f7:23:0c:d1:99:7b:94:81:f6:ab:fe:87:61:58:
1c:ab:b9:1b:23:7b:7b:5e:fc:64:98:d1:f1:f4:50:23:0d:bf:
ca:f2:42:37:2b:79:d5:fa:bc:d8:ca:78:9e:d8:ee:a5:75:82:
79:0f:f0:93:fa:3b:ad:e1:b3:df:81:44:06:19:e6:23:a7:f2:
33:9e:37:25:5f:ce:0f:c2:b9:64:a2:05:48:94:69:5f:94:bd:
d0:c4:d7:ea:2d:ba:c6:8e:23:69:21:4e:c3:58:f1:ac:ce:fb:
0d:3e:77:d4:11:93:eb:f8:6d:c9:e0:3d:36:d7:b7:ee:b6:86:
45:7e:42:c0:3f:35:0b:d9:e0:31:11:ac:66:83:c9:6c:03:e3:
2e:f1:32:73:82:18:a6:9f:08:35:22:af:34:d9:52:be:db:02:
9d:83:f2:73:b3:75:25:2b:cb:36:39:4f:89:98:d6:9b:89:4b:
18:95:14:69:e6:55:78:81:25:6b:d6:6b:ee:b5:1d:f4:44:b6:
11:a0:26:c1:5b:7d:51:e7:d6:54:3a:e1:8c:95:42:bc:52:27:
ff:62:eb:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Cn2NMVM4YHEa/g0LJPglOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMDNhMjQxNjI1M2IwZjNjN2ZiYzJhN2NmZDAyZjgyNDk1
ZTJjMmQwHhcNMjQwNTA0MDgwMTMyWhcNMjQwNTA1MDgwMTMyWjAzMTEwLwYDVQQD
Eyg2MjBlNDBhYzEwMmJiYTBkOWY0MTc0NTk2ZWIwYmI1ZGU2Mzk4MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvk9u2Ie+PEMOf4RUsrw1e4onL+0
/hJqsQRway8x4wqPH7W8+6E5WFmepHH7xGVJLgJEb4N1LO0mWXfCVpqR/yFymxed
KaC5RqHl8nb9ej5kal+UN/ZiSOC4hGPRyYBTShXRtsbeMBE+bbX8/u37ffmg1gnk
T6jljm6avuBZa4MSVC2epFPflT7ttfQNDlgpXZWc/o/ODPzcXAcAqAGhasX5Vuyt
4982j02Bh8S4LzCQ4FDlBYrfxI6WGCxGyiQqT0Ipg5E6u0AiNVNYdAUq+81+5M9o
t7JdO71CJZbjhwQ1jjPBTjJYuDHCDt7b0aHqtgKvwg8ZhkncP+P0z4T7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIOQKwQK7oNn0F0WW6wu13mOYE6MB8GA1UdIwQY
MBaAFCIDokFiU7Dzx/vCp8/QL4JJXiwtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWdPaVFXSlRzUFBILThLbno5QXZna2xlTEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85YzgyMDAtN2Y1YS00MGE3LTg3Mzkt
OTQ1MDNkMjJhNzcxLzEvSWdPaVFXSlRzUFBILThLbno5QXZna2xlTEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85YzgyMDAtN2Y1YS00MGE3LTg3MzktOTQ1MDNkMjJhNzcx
LzEvSWdPaVFXSlRzUFBILThLbno5QXZna2xlTEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrw0O+1y
l3p++CnNM7isSDTuznNqa9SP17u8hbKCbh/NF+up47bUTfcjDNGZe5SB9qv+h2FY
HKu5GyN7e178ZJjR8fRQIw2/yvJCNyt51fq82Mp4ntjupXWCeQ/wk/o7reGz34FE
BhnmI6fyM543JV/OD8K5ZKIFSJRpX5S90MTX6i26xo4jaSFOw1jxrM77DT531BGT
6/htyeA9Nte37raGRX5CwD81C9ngMRGsZoPJbAPjLvEyc4IYpp8INSKvNNlSvtsC
nYPyc7N1JSvLNjlPiZjWm4lLGJUUaeZVeIEla9Zr7rUd9ES2EaAmwVt9UefWVDrh
jJVCvFIn/2LrEA==
-----END CERTIFICATE-----
Generated at Sat May 4 09:25:07 2024 by rpki-client on console-ams.rpki-client.org