Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: qg2LrNh50geOfKyI/mZ68d30yhkOj4KDjaRKDvGYxmI=
Subject key identifier: B0:0C:CB:E5:EA:2C:AE:F3:FE:04:A2:D2:DE:9E:60:BE:A7:B5:B1:5A
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019362208EBA3CE195F156B650678415397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 05A0
Signing time: Mon 25 Nov 2024 07:02:00 +0000
Manifest this update: Mon 25 Nov 2024 07:02:00 +0000
Manifest next update: Tue 26 Nov 2024 07:02:00 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: ZxVjTeDjY3FhYeAa72NrMVFNuW94dBUKQ57AuTX1uzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:20:8e:ba:3c:e1:95:f1:56:b6:50:67:84:15:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Nov 25 07:02:00 2024 GMT
Not After : Nov 26 07:02:00 2024 GMT
Subject: CN=b00ccbe5ea2caef3fe04a2d2de9e60bea7b5b15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:53:e7:d0:bb:b6:4f:71:34:cd:d4:a4:ea:
cd:cd:08:f4:52:43:87:ab:f0:c6:b6:8a:5f:b8:3b:
da:75:15:0c:53:6e:01:01:c4:27:57:38:96:db:6e:
37:ec:d7:4b:6a:6e:c1:f9:3a:86:f2:eb:83:5c:f6:
24:36:de:17:da:6e:31:1d:de:bd:ad:36:02:33:4c:
b7:31:be:35:e0:43:16:6b:7e:df:4b:da:e1:5d:17:
de:8a:0f:75:73:5a:c3:d3:d6:28:d1:9f:76:72:36:
9c:6e:70:cb:5c:27:c7:2e:67:3c:d4:db:f1:30:c5:
03:ea:94:38:e2:20:1a:85:64:af:fc:55:d3:d3:c3:
6d:98:fd:16:46:8c:3f:56:e3:54:80:31:86:04:22:
2b:fc:c4:4c:17:70:15:e1:61:6c:c4:dd:c4:56:90:
8a:99:1a:4c:32:38:8c:0f:0a:f7:82:18:38:aa:5d:
11:84:a8:40:81:44:6d:ec:c6:89:43:76:42:8b:42:
d4:ab:56:10:d7:58:b5:a8:a1:6c:fc:cf:95:5f:36:
37:fa:a5:4f:1a:d2:1c:1e:20:42:49:d4:87:fe:6f:
5f:6d:ed:e7:db:3f:90:b3:9e:6c:af:25:ae:84:5f:
5e:75:e0:9b:6d:20:f8:7e:19:83:0c:8f:36:26:46:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:CB:E5:EA:2C:AE:F3:FE:04:A2:D2:DE:9E:60:BE:A7:B5:B1:5A
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:76:b9:19:de:30:78:1d:ff:ad:43:9f:10:b8:a9:c7:4d:5e:
c7:25:0a:ff:8b:ef:3f:1c:63:7b:75:1f:94:f7:ff:d7:ab:2e:
a9:9a:58:3d:b5:e3:2c:a0:29:86:bf:20:75:1c:84:44:02:7b:
64:62:e6:b4:7c:aa:32:55:66:a0:7d:5a:09:84:bc:46:21:cd:
dc:34:88:1f:c8:5f:9d:46:c2:c6:cc:cf:69:88:7d:37:03:a4:
0d:a2:98:70:d3:7b:c7:11:60:8e:a0:64:4e:e7:7a:3d:3e:11:
0d:b2:1c:1a:dc:46:e2:a0:f7:64:82:e6:d8:43:7a:f4:36:f8:
59:fe:c4:75:af:05:f5:39:5f:69:3d:90:d4:18:09:fa:3c:ab:
0b:03:89:51:0f:7f:3f:6c:7d:82:e5:79:9c:ba:a7:70:d1:4c:
1d:1d:45:66:79:b9:d5:d1:99:b2:b1:ab:02:44:c1:37:05:c2:
81:ea:38:68:ee:c1:af:f0:b1:42:17:36:e4:e0:50:ac:fb:6c:
c5:66:57:82:f8:8f:fb:18:32:0b:cd:ec:c7:b1:83:1d:b2:d1:
0b:4d:f3:96:4f:92:f5:ed:e8:0d:19:1b:b8:91:c4:51:d1:cb:
ba:4d:aa:9f:2c:50:ce:92:4e:bb:f4:10:3e:45:3e:2d:fd:16:
f4:10:ea:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNiII66POGV8Va2UGeEFTl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjQxMTI1MDcwMjAwWhcNMjQxMTI2MDcwMjAwWjAzMTEwLwYDVQQD
EyhiMDBjY2JlNWVhMmNhZWYzZmUwNGEyZDJkZTllNjBiZWE3YjViMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxBT59C7tk9xNM3UpOrNzQj0UkOH
q/DGtopfuDvadRUMU24BAcQnVziW22437NdLam7B+TqG8uuDXPYkNt4X2m4xHd69
rTYCM0y3Mb414EMWa37fS9rhXRfeig91c1rD09Yo0Z92cjacbnDLXCfHLmc81Nvx
MMUD6pQ44iAahWSv/FXT08NtmP0WRow/VuNUgDGGBCIr/MRMF3AV4WFsxN3EVpCK
mRpMMjiMDwr3ghg4ql0RhKhAgURt7MaJQ3ZCi0LUq1YQ11i1qKFs/M+VXzY3+qVP
GtIcHiBCSdSH/m9fbe3n2z+Qs55sryWuhF9edeCbbSD4fhmDDI82JkYKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAMy+XqLK7z/gSi0t6eYL6ntbFaMB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXa5Gd4w
eB3/rUOfELipx01exyUK/4vvPxxje3UflPf/16suqZpYPbXjLKAphr8gdRyERAJ7
ZGLmtHyqMlVmoH1aCYS8RiHN3DSIH8hfnUbCxszPaYh9NwOkDaKYcNN7xxFgjqBk
Tud6PT4RDbIcGtxG4qD3ZILm2EN69Db4Wf7Eda8F9TlfaT2Q1BgJ+jyrCwOJUQ9/
P2x9guV5nLqncNFMHR1FZnm51dGZsrGrAkTBNwXCgeo4aO7Br/CxQhc25OBQrPts
xWZXgviP+xgyC83sx7GDHbLRC03zlk+S9e3oDRkbuJHEUdHLuk2qnyxQzpJOu/QQ
PkU+Lf0W9BDqaA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:09 2024 by rpki-client on console-ams.rpki-client.org