Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: nvX3XrBw0rF/s9vbTl9JFoFs9cmNMXvN8g97E+EluhQ=
Subject key identifier: 01:EC:A0:8A:54:E3:1A:35:40:CF:BB:0A:A3:DB:B5:B6:75:5F:F2:DE
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 018F8748B9430E979A7A8667F427BD423DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0A71
Signing time: Fri 17 May 2024 16:00:41 +0000
Manifest this update: Fri 17 May 2024 16:00:41 +0000
Manifest next update: Sat 18 May 2024 16:00:41 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: Ny/47xc5dMHVQFsVqkRyxvMPaPxgFfrihXo8q50Cujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:b9:43:0e:97:9a:7a:86:67:f4:27:bd:42:3d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: May 17 16:00:41 2024 GMT
Not After : May 18 16:00:41 2024 GMT
Subject: CN=01eca08a54e31a3540cfbb0aa3dbb5b6755ff2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:25:15:1f:d3:5c:d4:aa:c4:3a:9a:c0:eb:
5f:c9:35:af:83:4c:6b:c5:94:e0:2b:5b:75:69:42:
2d:5c:77:5f:a7:97:45:40:f8:66:96:9e:84:f0:70:
2c:34:7f:fd:6f:d1:7d:1a:12:da:1d:25:99:ad:0f:
7a:c8:cf:25:01:d4:b5:a0:d6:bd:cc:bd:1d:5b:9b:
87:16:34:24:cc:20:c5:82:a3:5d:01:f7:3d:be:b8:
66:33:d1:fc:26:d7:2e:88:79:8c:69:8b:91:da:73:
6d:0c:c6:0d:71:b5:4d:c0:85:d6:1d:19:15:0a:a5:
ac:df:13:06:7c:14:7b:e3:94:d0:07:60:9b:a9:14:
59:f5:45:46:05:91:f3:fc:7b:d7:cb:59:02:06:37:
c5:82:e7:d9:db:d9:73:4d:6d:6f:9a:ad:fe:77:97:
a3:e9:cb:8d:65:78:f3:dc:e8:08:0c:54:1d:81:70:
0d:21:73:63:91:93:b9:4c:24:d5:e1:98:4d:88:5f:
8d:dc:66:8d:f3:3f:d6:a1:d6:59:99:72:9b:91:64:
f1:7d:b3:da:db:80:35:20:cb:38:13:05:8a:48:bd:
07:81:d8:20:bf:3c:7f:9a:f4:49:1b:c8:6e:ca:5a:
07:88:cd:8a:c3:e3:e8:a7:20:ea:75:8c:cb:59:e5:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:A0:8A:54:E3:1A:35:40:CF:BB:0A:A3:DB:B5:B6:75:5F:F2:DE
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:49:96:d9:3d:92:c4:55:50:78:cb:f5:a1:24:55:cb:d4:86:
4a:dd:5f:90:1a:80:0b:a8:14:af:cb:7d:50:0f:50:f7:f3:de:
01:73:f8:1b:33:28:23:a6:72:15:cc:35:09:58:3a:8a:3a:3a:
10:33:56:d4:3b:fc:46:37:18:86:96:04:24:4d:17:fa:fc:ee:
41:3a:0b:b0:25:58:ab:f3:02:64:28:84:10:93:ae:a0:09:7b:
39:cb:3f:e7:01:09:3b:be:f6:17:87:09:f7:e8:16:80:cf:6f:
d1:e1:ee:7e:66:74:5f:35:51:e0:a8:6f:c3:6a:89:14:0e:aa:
8c:9e:f4:a7:ff:90:ad:04:b8:34:52:f1:d2:cb:32:35:4c:6b:
76:3a:46:45:41:8f:86:81:98:41:de:2c:be:2a:95:3a:b6:00:
b3:84:74:23:48:a6:eb:44:b5:52:1e:85:25:ab:41:4f:51:1b:
20:b4:4d:d3:4f:21:d7:98:c9:2e:96:53:84:93:46:68:a0:e0:
74:6f:5d:3f:c2:bf:da:d5:7f:52:0e:21:97:c8:78:1e:e1:72:
12:ad:33:4c:6d:76:24:82:29:7b:5c:1c:29:7e:f3:47:d0:49:
0d:a9:db:4b:3a:d5:6f:09:34:9f:c5:47:e2:e4:92:e6:7e:4f:
99:f2:a1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSLlDDpeaeoZn9Ce9Qj32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTY2MTY5N2RhOTBiNTgwMGJjNDJhZGY5YjQ1OTUzMjE5
NzU1ZDAwHhcNMjQwNTE3MTYwMDQxWhcNMjQwNTE4MTYwMDQxWjAzMTEwLwYDVQQD
EygwMWVjYTA4YTU0ZTMxYTM1NDBjZmJiMGFhM2RiYjViNjc1NWZmMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z8lFR/TXNSqxDqawOtfyTWvg0xr
xZTgK1t1aUItXHdfp5dFQPhmlp6E8HAsNH/9b9F9GhLaHSWZrQ96yM8lAdS1oNa9
zL0dW5uHFjQkzCDFgqNdAfc9vrhmM9H8JtcuiHmMaYuR2nNtDMYNcbVNwIXWHRkV
CqWs3xMGfBR745TQB2CbqRRZ9UVGBZHz/HvXy1kCBjfFgufZ29lzTW1vmq3+d5ej
6cuNZXjz3OgIDFQdgXANIXNjkZO5TCTV4ZhNiF+N3GaN8z/WodZZmXKbkWTxfbPa
24A1IMs4EwWKSL0Hgdggvzx/mvRJG8huyloHiM2Kw+PopyDqdYzLWeVn+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHsoIpU4xo1QM+7CqPbtbZ1X/LeMB8GA1UdIwQY
MBaAFI5WYWl9qQtYALxCrfm0WVMhl1XQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDIt
YTFjOWQzZTVmYmJhLzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDItYTFjOWQzZTVmYmJh
LzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kmW2T2S
xFVQeMv1oSRVy9SGSt1fkBqAC6gUr8t9UA9Q9/PeAXP4GzMoI6ZyFcw1CVg6ijo6
EDNW1Dv8RjcYhpYEJE0X+vzuQToLsCVYq/MCZCiEEJOuoAl7Ocs/5wEJO772F4cJ
9+gWgM9v0eHufmZ0XzVR4Khvw2qJFA6qjJ70p/+QrQS4NFLx0ssyNUxrdjpGRUGP
hoGYQd4sviqVOrYAs4R0I0im60S1Uh6FJatBT1EbILRN008h15jJLpZThJNGaKDg
dG9dP8K/2tV/Ug4hl8h4HuFyEq0zTG12JIIpe1wcKX7zR9BJDanbSzrVbwk0n8VH
4uSS5n5PmfKhTQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:28 2024 by rpki-client on console-fra.rpki-client.org