Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: sCsxxav2Gp8b8AfLcvyUZs5jovf9z81+evGdF2+GpF0=
Subject key identifier: 41:E5:C6:0B:2E:DC:76:84:7F:7D:AF:A1:6F:B0:4D:E3:7C:C6:EA:0A
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 018F9194F692DE8EB76235306D751761E113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 117A
Signing time: Sun 19 May 2024 16:00:09 +0000
Manifest this update: Sun 19 May 2024 16:00:09 +0000
Manifest next update: Mon 20 May 2024 16:00:09 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: l7AxTT3NgXkn71i40jKgvTboib6UdOKiNbw6H+zsrwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:91:94:f6:92:de:8e:b7:62:35:30:6d:75:17:61:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: May 19 16:00:09 2024 GMT
Not After : May 20 16:00:09 2024 GMT
Subject: CN=41e5c60b2edc76847f7dafa16fb04de37cc6ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:e7:10:f1:56:bf:04:5a:18:dc:82:6c:70:
bb:0c:1b:d0:9b:ef:02:81:8b:67:01:cc:29:91:51:
e9:e0:af:1a:46:6f:4f:c9:2a:15:db:66:ce:4d:bb:
61:07:c6:80:23:da:3d:37:77:c9:c4:b0:ff:14:5b:
f3:0e:8c:50:ae:c2:5d:dc:7c:24:14:ee:a0:d5:29:
3d:16:fa:a6:d7:1e:89:a9:eb:49:9b:8b:7a:38:3f:
db:50:37:c3:01:8f:10:88:27:46:66:98:c5:cb:a3:
63:2c:c0:41:19:92:4a:be:99:98:49:ec:46:85:61:
37:98:4a:6e:77:1b:7e:57:0e:8b:4a:e9:29:c0:5b:
8a:28:d2:02:9b:49:1e:50:92:9c:d2:e9:48:be:c7:
eb:a5:35:26:59:4c:c4:e8:31:a9:c7:1b:63:b6:79:
cf:2c:37:65:06:a7:6f:34:40:9c:06:47:5c:9f:b7:
ec:04:13:2b:98:7c:f8:15:e6:1f:c2:fe:11:04:1a:
28:0d:0f:44:4f:da:74:d4:a7:d1:9b:e9:41:2c:76:
0c:52:48:13:98:bd:57:fe:bf:f1:59:a0:64:04:36:
fc:78:0e:96:d5:65:ff:8f:be:1a:29:ab:c7:40:a0:
29:44:49:7e:47:a3:ee:cb:cf:0f:6a:91:c3:4b:a2:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:C6:0B:2E:DC:76:84:7F:7D:AF:A1:6F:B0:4D:E3:7C:C6:EA:0A
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:e3:0a:63:ce:1e:79:a3:9f:c5:93:84:84:0b:08:ac:4b:
21:21:bb:43:ea:37:bd:fd:13:13:75:35:67:e9:24:61:aa:0f:
c6:0f:3a:fe:99:04:c4:0a:cf:0d:13:76:74:c2:cf:bf:17:ba:
65:19:75:c7:6a:0c:27:51:66:87:1e:17:98:1c:c5:ea:e8:8f:
e4:ea:5b:5c:5b:e9:c6:3e:2b:c9:02:d6:2d:ac:0c:d9:9d:03:
6a:f5:38:e4:eb:3e:95:27:69:23:38:14:d8:55:ef:33:56:52:
f5:d2:80:d9:73:b3:87:0c:fc:9c:5c:b8:24:53:e7:78:a5:9b:
f7:68:1e:4a:a4:7e:f5:ff:6a:a8:9b:76:ac:35:27:89:df:14:
74:a8:83:0c:23:06:ea:3f:ca:5f:f9:98:b7:0c:2f:28:c3:fe:
8c:12:f2:87:6f:4c:52:a0:bb:5d:59:59:a8:76:87:fd:21:cf:
40:55:99:d9:b1:e6:05:50:fe:4d:b7:48:64:38:cc:46:a4:40:
6b:f7:1f:8d:d0:37:67:73:61:7a:5a:29:e5:18:39:90:fb:f8:
fe:b9:0e:ce:c2:1d:92:cf:d0:a6:d6:a1:f4:a0:2c:14:b1:d5:
bb:0b:2f:dd:30:1e:09:d0:c0:a2:1b:89:10:76:6c:8b:c3:60:
13:a5:e7:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+RlPaS3o63YjUwbXUXYeETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh
ZDU5NDIwHhcNMjQwNTE5MTYwMDA5WhcNMjQwNTIwMTYwMDA5WjAzMTEwLwYDVQQD
Eyg0MWU1YzYwYjJlZGM3Njg0N2Y3ZGFmYTE2ZmIwNGRlMzdjYzZlYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3nEPFWvwRaGNyCbHC7DBvQm+8C
gYtnAcwpkVHp4K8aRm9PySoV22bOTbthB8aAI9o9N3fJxLD/FFvzDoxQrsJd3Hwk
FO6g1Sk9Fvqm1x6JqetJm4t6OD/bUDfDAY8QiCdGZpjFy6NjLMBBGZJKvpmYSexG
hWE3mEpudxt+Vw6LSukpwFuKKNICm0keUJKc0ulIvsfrpTUmWUzE6DGpxxtjtnnP
LDdlBqdvNECcBkdcn7fsBBMrmHz4FeYfwv4RBBooDQ9ET9p01KfRm+lBLHYMUkgT
mL1X/r/xWaBkBDb8eA6W1WX/j74aKavHQKApREl+R6Puy88PapHDS6LevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHlxgsu3HaEf32voW+wTeN8xuoKMB8GA1UdIwQY
MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut
MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm
LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQnjCmPO
Hnmjn8WThIQLCKxLISG7Q+o3vf0TE3U1Z+kkYaoPxg86/pkExArPDRN2dMLPvxe6
ZRl1x2oMJ1Fmhx4XmBzF6uiP5OpbXFvpxj4ryQLWLawM2Z0DavU45Os+lSdpIzgU
2FXvM1ZS9dKA2XOzhwz8nFy4JFPneKWb92geSqR+9f9qqJt2rDUnid8UdKiDDCMG
6j/KX/mYtwwvKMP+jBLyh29MUqC7XVlZqHaH/SHPQFWZ2bHmBVD+TbdIZDjMRqRA
a/cfjdA3Z3Nhelop5Rg5kPv4/rkOzsIdks/Qptah9KAsFLHVuwsv3TAeCdDAohuJ
EHZsi8NgE6XngA==
-----END CERTIFICATE-----
Generated at Sun May 19 17:34:50 2024 by rpki-client on console-ams.rpki-client.org