Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
File: iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft (raw, json)
Hash identifier: SBnnEL0ibKdEyAplLlqZQvtBSYb3M/ouHFMZCo+DFK0=
Subject key identifier: D5:F3:7D:D0:C2:29:20:6C:AD:3D:5B:CD:92:3A:5B:F1:2E:B4:50:F6
Authority key identifier: 89:5A:E6:F2:45:29:13:6D:2B:85:6A:72:67:97:26:47:EE:23:82:6F
Certificate issuer: /CN=895ae6f24529136d2b856a7267972647ee23826f
Certificate serial: 018F885B60F05ABA4AA99A8AC3B3E24AF638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
Manifest number: 0144
Signing time: Fri 17 May 2024 21:00:40 +0000
Manifest this update: Fri 17 May 2024 21:00:40 +0000
Manifest next update: Sat 18 May 2024 21:00:40 +0000
Files and hashes: 1: iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl (hash: KQTi8cXLZM8u/wLsTjp+H1Z61PquiVKj2mI08INN3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:60:f0:5a:ba:4a:a9:9a:8a:c3:b3:e2:4a:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895ae6f24529136d2b856a7267972647ee23826f
Validity
Not Before: May 17 21:00:40 2024 GMT
Not After : May 18 21:00:40 2024 GMT
Subject: CN=d5f37dd0c229206cad3d5bcd923a5bf12eb450f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:e7:87:87:c3:34:77:53:fd:b9:33:36:07:
e3:f3:3a:9f:d1:3c:f0:c1:90:c0:01:c0:2e:9e:09:
cd:75:07:1a:cf:ee:59:78:1d:bd:5e:fd:9a:b0:56:
3b:6d:b0:28:0d:e8:7c:2b:1d:e7:74:c9:14:b7:b8:
3c:01:13:a4:7f:f1:fd:6a:b1:14:9c:01:8e:df:8a:
8e:b2:2a:df:b6:8c:32:13:ea:8e:e3:74:80:95:02:
9b:18:fa:f7:9e:4b:08:8b:46:da:3d:9a:9e:47:93:
36:13:70:90:87:3e:4e:a3:4c:a1:11:5e:31:53:21:
92:73:5f:51:b7:f0:97:ab:de:d9:c7:ce:b8:fe:30:
18:65:2c:f8:a4:93:54:51:69:f3:8b:c2:c8:e8:a9:
c8:14:46:3b:0b:cb:f2:e8:4c:e0:12:c5:4e:f6:e1:
ab:28:21:9f:37:bb:be:d3:68:9d:07:83:7b:5f:ec:
44:10:72:13:07:26:29:2c:3f:34:8a:29:25:27:8e:
db:5a:e1:cc:ab:bd:49:fc:8e:88:c6:8c:c1:fc:3a:
15:b7:2e:01:e4:de:a1:66:8c:be:a1:1c:fc:f4:52:
67:38:98:a9:30:f9:6d:f1:8a:40:c2:82:fd:9a:ba:
1e:61:9c:18:ab:0b:70:34:0d:50:bf:2f:95:5c:7d:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:7D:D0:C2:29:20:6C:AD:3D:5B:CD:92:3A:5B:F1:2E:B4:50:F6
X509v3 Authority Key Identifier:
keyid:89:5A:E6:F2:45:29:13:6D:2B:85:6A:72:67:97:26:47:EE:23:82:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVrm8kUpE20rhWpyZ5cmR-4jgm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6cb43f-6a32-4fbe-a3b1-0a5503b26641/1/iVrm8kUpE20rhWpyZ5cmR-4jgm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:eb:38:10:14:99:d3:2d:74:3a:9a:5a:6a:e3:9c:1c:4c:
7c:df:a4:55:cc:79:2d:e3:16:21:d7:55:87:36:31:ea:51:29:
8a:87:78:cb:02:1b:51:9d:e6:1b:bc:f4:4e:d3:06:05:95:0e:
5f:c4:98:7f:3c:82:e3:5c:97:3a:52:e9:b3:08:71:77:8d:92:
fc:5c:52:3c:2b:1d:ca:4c:85:8e:2b:ab:93:b8:70:40:3c:d4:
8a:15:b7:e8:94:b7:c6:d6:4e:d3:23:6b:13:46:f7:f8:4e:02:
da:31:0d:92:18:9b:82:71:02:65:ad:78:9c:cb:d4:93:a4:16:
5d:a2:4d:39:06:03:eb:e8:42:dd:89:49:f9:38:97:4c:4e:e5:
c6:ab:23:34:88:59:9e:96:cc:67:d2:b3:54:36:39:d3:d5:50:
4f:f4:61:49:fb:92:25:ba:a5:0d:de:e1:f1:34:e5:34:f2:38:
68:ff:e4:6c:15:26:bf:08:3e:86:54:7d:95:88:fb:cd:7b:2a:
62:04:4f:16:46:e5:42:80:ce:43:09:85:39:45:2a:5e:9c:7d:
78:e7:31:20:36:34:88:d2:2d:58:a6:99:56:3e:b4:69:a2:b3:
4c:12:2c:9c:7b:3e:8b:f6:f9:42:f8:3e:10:ee:74:58:ef:0d:
d2:bd:c3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW2DwWrpKqZqKw7PiSvY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NWFlNmYyNDUyOTEzNmQyYjg1NmE3MjY3OTcyNjQ3ZWUy
MzgyNmYwHhcNMjQwNTE3MjEwMDQwWhcNMjQwNTE4MjEwMDQwWjAzMTEwLwYDVQQD
EyhkNWYzN2RkMGMyMjkyMDZjYWQzZDViY2Q5MjNhNWJmMTJlYjQ1MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulXnh4fDNHdT/bkzNgfj8zqf0Tzw
wZDAAcAungnNdQcaz+5ZeB29Xv2asFY7bbAoDeh8Kx3ndMkUt7g8AROkf/H9arEU
nAGO34qOsirftowyE+qO43SAlQKbGPr3nksIi0baPZqeR5M2E3CQhz5Oo0yhEV4x
UyGSc19Rt/CXq97Zx864/jAYZSz4pJNUUWnzi8LI6KnIFEY7C8vy6EzgEsVO9uGr
KCGfN7u+02idB4N7X+xEEHITByYpLD80iiklJ47bWuHMq71J/I6IxozB/DoVty4B
5N6hZoy+oRz89FJnOJipMPlt8YpAwoL9mroeYZwYqwtwNA1Qvy+VXH1y1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXzfdDCKSBsrT1bzZI6W/EutFD2MB8GA1UdIwQY
MBaAFIla5vJFKRNtK4VqcmeXJkfuI4JvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZybThrVXBFMjByaFdweVo1Y21SLTRqZ204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82Y2I0M2YtNmEzMi00ZmJlLWEzYjEt
MGE1NTAzYjI2NjQxLzEvaVZybThrVXBFMjByaFdweVo1Y21SLTRqZ204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82Y2I0M2YtNmEzMi00ZmJlLWEzYjEtMGE1NTAzYjI2NjQx
LzEvaVZybThrVXBFMjByaFdweVo1Y21SLTRqZ204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIirrOBAU
mdMtdDqaWmrjnBxMfN+kVcx5LeMWIddVhzYx6lEpiod4ywIbUZ3mG7z0TtMGBZUO
X8SYfzyC41yXOlLpswhxd42S/FxSPCsdykyFjiurk7hwQDzUihW36JS3xtZO0yNr
E0b3+E4C2jENkhibgnECZa14nMvUk6QWXaJNOQYD6+hC3YlJ+TiXTE7lxqsjNIhZ
npbMZ9KzVDY509VQT/RhSfuSJbqlDd7h8TTlNPI4aP/kbBUmvwg+hlR9lYj7zXsq
YgRPFkblQoDOQwmFOUUqXpx9eOcxIDY0iNItWKaZVj60aaKzTBIsnHs+i/b5Qvg+
EO50WO8N0r3DWA==
-----END CERTIFICATE-----
Generated at Fri May 17 21:44:37 2024 by rpki-client on console-fra.rpki-client.org