Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: f2XQUtrXj/zwPg9wE5lc5GGApIvQ22lpbIVq2uO86y8=
Subject key identifier: CF:BA:E1:DF:EE:FE:7E:C5:53:37:F8:0A:4F:AB:1B:38:D0:58:12:4E
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 018F874A75956DBA55C05A72D570D6251667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 01DB
Signing time: Fri 17 May 2024 16:02:34 +0000
Manifest this update: Fri 17 May 2024 16:02:34 +0000
Manifest next update: Sat 18 May 2024 16:02:34 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: gSu7HuA/Ldy52HzvqekAVdbq0/FwXM1shgp3UNF1IjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:75:95:6d:ba:55:c0:5a:72:d5:70:d6:25:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: May 17 16:02:34 2024 GMT
Not After : May 18 16:02:34 2024 GMT
Subject: CN=cfbae1dfeefe7ec55337f80a4fab1b38d058124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:aa:39:cc:20:00:95:8f:f5:6d:41:80:3f:
6d:d5:20:9b:50:21:f9:15:ec:4d:74:eb:41:1b:c9:
c5:a3:4e:d1:f6:b9:c5:37:04:fd:7d:0a:4b:5f:de:
7a:09:a1:ce:38:12:5d:6b:93:5d:4d:9e:a7:6c:77:
98:05:6f:00:34:af:f6:2a:d7:68:b5:0d:77:97:1b:
ed:fc:78:43:68:21:b9:b2:3e:6d:58:4b:76:56:84:
f4:61:30:36:67:aa:6f:32:2d:86:6e:27:76:e7:23:
d3:59:3f:4f:1e:30:e9:71:2e:16:07:a3:76:bb:1e:
c4:fa:c4:5b:cc:75:a4:9a:fc:0c:46:84:c1:66:85:
c3:17:a2:bd:4f:ec:9c:bb:cd:4a:17:54:d6:01:f0:
2c:ca:38:02:31:11:92:b3:9e:ba:08:c7:45:ed:4e:
6d:ad:af:7f:ad:68:2d:ee:72:5e:5a:77:87:e5:b2:
c3:df:b3:77:f5:b5:81:f9:ad:bf:08:85:77:a7:5e:
1f:bd:f4:98:28:e6:82:0a:d1:9b:e5:26:48:36:5e:
07:4e:af:9d:96:51:d8:3b:99:5d:ed:8f:d3:be:48:
dc:55:82:82:64:d5:26:ae:51:8f:7c:94:a9:1e:3b:
6c:b3:ac:92:a8:c5:61:95:ad:57:8c:14:a1:d7:ef:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:E1:DF:EE:FE:7E:C5:53:37:F8:0A:4F:AB:1B:38:D0:58:12:4E
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e5:27:17:de:2f:53:60:6a:78:ed:bb:99:4b:dd:6a:dc:61:
e1:d2:66:46:16:09:cf:79:7f:d2:b0:bc:90:d6:67:11:32:20:
1b:a1:b8:c6:b2:89:9c:11:68:20:a5:b8:94:47:02:ed:16:20:
95:51:2c:64:65:35:e1:f6:00:a6:14:e7:e6:6b:b7:7d:1d:b2:
03:0b:bd:00:97:de:8c:a5:4b:79:a2:71:86:98:af:f7:ff:17:
92:f7:78:c0:43:67:db:14:37:e2:53:de:e8:4e:42:41:bd:e1:
84:b4:f6:d6:77:c8:16:e1:b4:37:4e:34:11:46:26:6f:8c:c2:
a4:b0:ee:49:bc:3d:46:0e:89:43:f8:de:db:2a:2a:a5:44:50:
96:e3:dc:c9:2f:35:70:96:da:35:14:a2:d1:fa:31:1c:86:0f:
75:ac:49:3f:3b:c0:2c:bb:dc:d6:f4:2f:6a:13:6b:e0:7c:4c:
7d:2f:44:3d:b2:c3:2d:a3:82:96:51:29:25:fa:a8:78:cf:ef:
85:7f:5e:99:d8:7a:83:a2:71:49:a9:5d:d8:f8:9c:15:d3:71:
d2:d9:4c:dc:be:94:41:6e:19:62:67:ec:7b:35:ac:6b:4e:6b:
d0:34:44:8a:0e:e5:b3:71:91:59:fd:03:83:c4:91:0f:66:68:
cb:f6:e4:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSnWVbbpVwFpy1XDWJRZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzIyNjMxZTJlYjdlYWJmYjVlZGI0ZmNiMGFiOGM5OTY4
MjNjNDgwHhcNMjQwNTE3MTYwMjM0WhcNMjQwNTE4MTYwMjM0WjAzMTEwLwYDVQQD
EyhjZmJhZTFkZmVlZmU3ZWM1NTMzN2Y4MGE0ZmFiMWIzOGQwNTgxMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTaqOcwgAJWP9W1BgD9t1SCbUCH5
FexNdOtBG8nFo07R9rnFNwT9fQpLX956CaHOOBJda5NdTZ6nbHeYBW8ANK/2Ktdo
tQ13lxvt/HhDaCG5sj5tWEt2VoT0YTA2Z6pvMi2Gbid25yPTWT9PHjDpcS4WB6N2
ux7E+sRbzHWkmvwMRoTBZoXDF6K9T+ycu81KF1TWAfAsyjgCMRGSs566CMdF7U5t
ra9/rWgt7nJeWneH5bLD37N39bWB+a2/CIV3p14fvfSYKOaCCtGb5SZINl4HTq+d
llHYO5ld7Y/TvkjcVYKCZNUmrlGPfJSpHjtss6ySqMVhla1XjBSh1+9MawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+64d/u/n7FUzf4Ck+rGzjQWBJOMB8GA1UdIwQY
MBaAFLwyJjHi636r+17bT8sKuMmWgjxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEt
MjllZGZhYjM5ZjQ5LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEtMjllZGZhYjM5ZjQ5
LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOUnF94v
U2BqeO27mUvdatxh4dJmRhYJz3l/0rC8kNZnETIgG6G4xrKJnBFoIKW4lEcC7RYg
lVEsZGU14fYAphTn5mu3fR2yAwu9AJfejKVLeaJxhpiv9/8Xkvd4wENn2xQ34lPe
6E5CQb3hhLT21nfIFuG0N040EUYmb4zCpLDuSbw9Rg6JQ/je2yoqpURQluPcyS81
cJbaNRSi0foxHIYPdaxJPzvALLvc1vQvahNr4HxMfS9EPbLDLaOCllEpJfqoeM/v
hX9emdh6g6JxSald2PicFdNx0tlM3L6UQW4ZYmfsezWsa05r0DREig7ls3GRWf0D
g8SRD2Zoy/bkPA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:46 2024 by rpki-client on console-fra.rpki-client.org