Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
File: 0PncQczPGwp4tNaiRk59u8YhwCE.mft (raw, json)
Hash identifier: uO/w1GQxH1D5ARUPyu1pFxZq12bGxiDtiD9w+IQM2ww=
Subject key identifier: 76:63:AD:72:88:7A:10:D9:19:42:A5:E6:2A:3F:12:FB:8D:0E:FB:55
Authority key identifier: D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
Certificate issuer: /CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Certificate serial: 018F874AFCA5841DB59FE9419FAD1740777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
Manifest number: 010C
Signing time: Fri 17 May 2024 16:03:09 +0000
Manifest this update: Fri 17 May 2024 16:03:09 +0000
Manifest next update: Sat 18 May 2024 16:03:09 +0000
Files and hashes: 1: 0PncQczPGwp4tNaiRk59u8YhwCE.crl (hash: lwLSMfiXeFFGO1CaeHfzxlpJL/YjCIryZszxa4GOF8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:fc:a5:84:1d:b5:9f:e9:41:9f:ad:17:40:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Validity
Not Before: May 17 16:03:09 2024 GMT
Not After : May 18 16:03:09 2024 GMT
Subject: CN=7663ad72887a10d91942a5e62a3f12fb8d0efb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:e0:da:72:d0:24:83:47:aa:6f:7e:92:8f:
d1:25:9f:13:5b:ec:ef:61:65:bf:6a:8d:ae:69:96:
73:71:7c:b1:d1:3e:b6:e0:8d:da:a2:f6:cf:e4:a3:
d2:b0:40:42:79:88:bc:91:bf:46:8d:3e:92:22:d0:
a8:f4:d1:06:be:ba:f0:c9:79:a2:f8:ad:f5:cc:f1:
69:bb:0c:f0:0a:a9:80:7d:f0:03:cd:5e:25:8b:0d:
b8:19:67:02:b4:a7:50:02:d6:cd:d7:1f:d8:ab:ed:
1c:db:5f:a1:39:43:61:93:50:9e:91:20:3b:c2:4c:
fd:a7:fb:c1:58:a6:eb:cb:08:cb:03:fd:45:51:7a:
ef:0b:f0:8e:f3:e4:02:f8:db:5c:b1:24:8a:73:16:
55:7c:0a:02:48:13:49:d4:4f:36:b1:a6:31:c4:93:
95:79:1c:6d:94:42:a9:77:6e:26:49:92:ac:e6:2a:
43:e8:7f:07:a1:25:a0:7d:b9:cc:91:c8:7e:82:cc:
04:b7:0e:47:a4:6e:57:86:2c:d3:0a:2f:5c:89:b4:
10:c1:d0:12:c5:00:5d:b6:5e:c8:21:8d:14:27:03:
cf:fa:4c:75:72:bf:9e:e3:69:2d:75:44:41:be:62:
8d:16:74:d2:7d:21:12:59:9f:bd:df:ee:dd:35:78:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:AD:72:88:7A:10:D9:19:42:A5:E6:2A:3F:12:FB:8D:0E:FB:55
X509v3 Authority Key Identifier:
keyid:D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b6:46:0f:ff:ca:0d:1c:7e:de:bb:45:d0:11:45:26:0e:89:
40:f4:9d:70:42:7b:44:bf:35:1c:1a:bb:2a:e0:4a:70:a2:b9:
3e:5f:ff:b3:28:d0:95:09:19:bc:55:9b:59:81:09:83:90:29:
fd:f1:da:c4:88:d7:e5:45:02:59:ca:69:01:27:af:cd:8f:19:
b8:fe:89:df:b7:1b:8f:b8:d8:34:6f:b8:cd:d3:45:4f:8f:80:
11:8b:8f:30:10:84:17:94:2a:1d:08:5a:7a:1f:7c:cc:dc:ba:
7d:5a:a5:79:5c:c6:56:2c:24:da:06:ee:26:1a:3e:96:a9:b3:
3b:b7:43:ab:18:f8:f4:ef:16:bb:8f:ee:c3:70:84:86:55:92:
06:33:2c:6d:c6:94:e2:58:75:4c:e9:d3:a6:3b:a6:f4:63:d8:
b2:f2:62:af:24:db:59:77:b7:b2:a3:ce:2f:b5:bb:34:8e:81:
a7:df:bf:73:03:c8:25:30:8f:38:9d:a8:9f:30:05:f8:1c:30:
f4:f6:74:8f:aa:38:7b:c3:85:94:3c:e0:28:13:bd:f9:54:38:
1c:80:58:7b:4c:6a:fc:0c:94:df:cb:cd:50:0f:d9:df:5e:4f:
a5:48:4a:c7:59:1b:42:96:e9:90:57:6a:b7:ba:9f:a0:bf:78:
9e:25:45:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSvylhB21n+lBn60XQHd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjlkYzQxY2NjZjFiMGE3OGI0ZDZhMjQ2NGU3ZGJiYzYy
MWMwMjEwHhcNMjQwNTE3MTYwMzA5WhcNMjQwNTE4MTYwMzA5WjAzMTEwLwYDVQQD
Eyg3NjYzYWQ3Mjg4N2ExMGQ5MTk0MmE1ZTYyYTNmMTJmYjhkMGVmYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bg2nLQJINHqm9+ko/RJZ8TW+zv
YWW/ao2uaZZzcXyx0T624I3aovbP5KPSsEBCeYi8kb9GjT6SItCo9NEGvrrwyXmi
+K31zPFpuwzwCqmAffADzV4liw24GWcCtKdQAtbN1x/Yq+0c21+hOUNhk1CekSA7
wkz9p/vBWKbrywjLA/1FUXrvC/CO8+QC+NtcsSSKcxZVfAoCSBNJ1E82saYxxJOV
eRxtlEKpd24mSZKs5ipD6H8HoSWgfbnMkch+gswEtw5HpG5XhizTCi9cibQQwdAS
xQBdtl7IIY0UJwPP+kx1cr+e42ktdURBvmKNFnTSfSESWZ+93+7dNXgc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZjrXKIehDZGUKl5io/EvuNDvtVMB8GA1UdIwQY
MBaAFND53EHMzxsKeLTWokZOfbvGIcAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBuY1FjelBHd3A0dE5haVJrNTl1OFlod0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC81Yzg3MzUtNGNkZC00Zjg0LWJjMjMt
NGJiNDhkMjgzOTBhLzEvMFBuY1FjelBHd3A0dE5haVJrNTl1OFlod0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC81Yzg3MzUtNGNkZC00Zjg0LWJjMjMtNGJiNDhkMjgzOTBh
LzEvMFBuY1FjelBHd3A0dE5haVJrNTl1OFlod0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLZGD//K
DRx+3rtF0BFFJg6JQPSdcEJ7RL81HBq7KuBKcKK5Pl//syjQlQkZvFWbWYEJg5Ap
/fHaxIjX5UUCWcppASevzY8ZuP6J37cbj7jYNG+4zdNFT4+AEYuPMBCEF5QqHQha
eh98zNy6fVqleVzGViwk2gbuJho+lqmzO7dDqxj49O8Wu4/uw3CEhlWSBjMsbcaU
4lh1TOnTpjum9GPYsvJiryTbWXe3sqPOL7W7NI6Bp9+/cwPIJTCPOJ2onzAF+Bww
9PZ0j6o4e8OFlDzgKBO9+VQ4HIBYe0xq/AyU38vNUA/Z315PpUhKx1kbQpbpkFdq
t7qfoL94niVF7Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:36 2024 by rpki-client on console-ams.rpki-client.org