Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: uOiUYmShyWqIkbNlkJnfgMEUIGvkjlCoNhl1GUNRv54=
Subject key identifier: 41:DA:B7:8F:09:70:06:2B:0C:40:47:94:90:7D:1C:EB:30:50:F5:D0
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 018F5138F1CE4990F671684746741D5B8C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1158
Signing time: Tue 07 May 2024 04:03:57 +0000
Manifest this update: Tue 07 May 2024 04:03:57 +0000
Manifest next update: Wed 08 May 2024 04:03:57 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: jLQnuFfCY6qDIMc5aX60d03mRAtI+LwTbWwv5D6kjNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:38:f1:ce:49:90:f6:71:68:47:46:74:1d:5b:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: May 7 04:03:57 2024 GMT
Not After : May 8 04:03:57 2024 GMT
Subject: CN=41dab78f0970062b0c404794907d1ceb3050f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:c3:d1:7f:18:4d:6f:54:78:1a:b2:84:18:
31:24:70:a3:c4:86:01:77:e5:a7:23:70:bc:0d:e5:
e4:76:d3:b0:bf:5e:c3:cb:59:f5:6c:a5:37:73:5c:
2c:de:0f:26:75:23:6d:86:c7:d7:32:3a:8e:c5:3d:
a5:91:74:ec:54:d2:df:c9:26:a8:b2:b4:8e:80:9c:
04:69:1a:f5:ac:a3:b5:77:24:7a:6d:59:b2:f8:e3:
70:52:55:18:8b:2f:bc:86:44:06:19:fb:ae:48:48:
93:1f:61:cf:be:02:56:d0:fb:88:70:03:9c:0b:95:
ad:d7:8b:bd:ca:c0:e1:51:8b:91:cb:a8:7b:fb:51:
1c:35:34:91:75:b3:4d:58:43:44:19:0b:79:c6:00:
98:b4:39:3e:da:b9:25:37:f0:ff:0f:c4:ff:0b:04:
8d:76:be:9d:81:b2:ef:3f:99:42:bd:23:94:e1:05:
48:16:d8:55:19:d5:65:c7:d5:b3:f0:38:3b:d8:5c:
94:c2:27:de:7b:41:02:98:41:63:e2:e1:da:7a:59:
c9:d2:3a:6e:23:2d:d3:01:a1:c1:ab:5f:f3:0f:8f:
c1:11:8d:a2:fe:9e:a0:23:c7:bf:62:04:a7:6d:8f:
ff:b6:5b:05:5e:73:7a:71:85:a7:61:40:2a:64:e4:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:B7:8F:09:70:06:2B:0C:40:47:94:90:7D:1C:EB:30:50:F5:D0
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:f4:75:da:5b:26:f4:c6:1a:c6:57:35:78:af:2e:6d:14:
34:09:7d:cd:63:5d:2a:ac:46:03:21:1d:a6:d0:fe:19:f0:a4:
18:a7:a2:4c:f1:d1:06:60:b1:28:fa:2b:3b:4f:cc:ab:7f:3e:
d3:44:8e:1a:7d:1a:ae:2d:90:32:b1:2d:ee:29:59:1e:65:55:
f5:b5:09:80:c2:87:9e:4b:19:77:24:c6:c3:7e:70:31:29:07:
5a:ab:60:34:81:5b:9a:5d:fa:c8:2f:41:7d:93:a7:dd:fd:cc:
ce:66:72:f4:bd:29:c0:01:4a:a9:ca:fe:eb:64:09:06:2c:ad:
fd:a5:1f:13:ec:23:0c:c8:fe:c8:e3:5c:62:f2:6e:57:8c:79:
06:d6:1e:f0:7c:35:f4:90:64:98:e4:6f:f1:e3:b2:81:fb:ba:
a7:3e:69:58:58:d3:53:19:2c:92:7d:38:a8:76:13:53:93:a5:
11:3d:fc:99:46:e9:2d:62:86:17:93:b2:9e:84:cd:70:8e:9e:
cb:d3:ac:81:6f:f0:4f:b6:66:81:e4:f6:55:ba:e6:dd:83:4e:
64:a8:1e:ae:fa:04:04:76:f6:30:8b:ae:4a:da:b0:ab:86:ea:
d0:b2:70:67:69:5c:5b:c5:72:54:af:ac:cd:32:f6:aa:56:65:
20:db:31:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROPHOSZD2cWhHRnQdW4wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjQwNTA3MDQwMzU3WhcNMjQwNTA4MDQwMzU3WjAzMTEwLwYDVQQD
Eyg0MWRhYjc4ZjA5NzAwNjJiMGM0MDQ3OTQ5MDdkMWNlYjMwNTBmNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzD0X8YTW9UeBqyhBgxJHCjxIYB
d+WnI3C8DeXkdtOwv17Dy1n1bKU3c1ws3g8mdSNthsfXMjqOxT2lkXTsVNLfySao
srSOgJwEaRr1rKO1dyR6bVmy+ONwUlUYiy+8hkQGGfuuSEiTH2HPvgJW0PuIcAOc
C5Wt14u9ysDhUYuRy6h7+1EcNTSRdbNNWENEGQt5xgCYtDk+2rklN/D/D8T/CwSN
dr6dgbLvP5lCvSOU4QVIFthVGdVlx9Wz8Dg72FyUwifee0ECmEFj4uHaelnJ0jpu
Iy3TAaHBq1/zD4/BEY2i/p6gI8e/YgSnbY//tlsFXnN6cYWnYUAqZOTpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHat48JcAYrDEBHlJB9HOswUPXQMB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm30ddpb
JvTGGsZXNXivLm0UNAl9zWNdKqxGAyEdptD+GfCkGKeiTPHRBmCxKPorO0/Mq38+
00SOGn0ari2QMrEt7ilZHmVV9bUJgMKHnksZdyTGw35wMSkHWqtgNIFbml36yC9B
fZOn3f3MzmZy9L0pwAFKqcr+62QJBiyt/aUfE+wjDMj+yONcYvJuV4x5BtYe8Hw1
9JBkmORv8eOygfu6pz5pWFjTUxkskn04qHYTU5OlET38mUbpLWKGF5OynoTNcI6e
y9OsgW/wT7ZmgeT2Vbrm3YNOZKgervoEBHb2MIuuStqwq4bq0LJwZ2lcW8VyVK+s
zTL2qlZlINsx+w==
-----END CERTIFICATE-----
Generated at Tue May 7 05:46:25 2024 by rpki-client on console-ams.rpki-client.org