Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: KH2jM+L6m8C9j+wJI+MJAVmJ5ges8ugtynl1fnDtjyc=
Subject key identifier: B3:43:3B:3F:8E:3F:FE:74:C0:D7:A2:D3:C4:FE:A0:AD:9D:AA:F9:0B
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 018F8748A2C2AAD42E2FA17A133FF339A1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 01DF
Signing time: Fri 17 May 2024 16:00:35 +0000
Manifest this update: Fri 17 May 2024 16:00:35 +0000
Manifest next update: Sat 18 May 2024 16:00:35 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: GYXUx51Z2PXh2bK25BvY5upqEpAsAzNSDY8HSU7JTcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:a2:c2:aa:d4:2e:2f:a1:7a:13:3f:f3:39:a1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: May 17 16:00:35 2024 GMT
Not After : May 18 16:00:35 2024 GMT
Subject: CN=b3433b3f8e3ffe74c0d7a2d3c4fea0ad9daaf90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:fa:43:7a:e9:76:d7:29:cc:e6:d3:a3:32:
90:d6:c1:22:5d:a2:b6:85:8b:96:a0:dd:cc:53:b5:
4e:08:ed:83:10:3b:10:73:92:e6:26:36:4a:17:fd:
b3:e8:73:2f:83:3f:f7:9f:e1:2f:33:a1:c2:67:44:
b0:31:26:b2:15:51:9b:74:ed:be:6c:5c:67:64:40:
8e:cc:e1:06:2b:18:a3:8e:d3:3b:66:f9:20:73:49:
87:cf:85:ae:79:d6:c2:05:6f:ab:28:fe:2c:f5:63:
67:eb:1a:27:78:86:5e:77:21:ac:f1:02:da:39:d7:
1a:5c:f7:1a:62:3d:3f:88:0b:ce:b4:93:ef:46:4e:
16:b6:48:a3:84:83:8a:2f:f2:b9:9b:ca:da:ad:86:
4b:61:5f:e5:cf:c7:68:88:42:5d:34:95:33:28:52:
c8:9e:9a:e7:b3:a5:0b:bc:97:69:c6:75:16:f5:28:
2b:90:62:00:76:54:44:05:9d:58:33:74:66:01:f6:
18:dd:bb:54:00:02:37:0e:3e:75:c0:96:bb:d0:8c:
78:26:4d:72:2e:b6:68:69:d5:38:a2:14:65:c7:26:
30:9a:14:a4:31:d8:86:a6:66:61:eb:89:0d:22:17:
84:2c:fc:0c:71:31:8a:4d:49:13:77:10:2e:e8:97:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:3B:3F:8E:3F:FE:74:C0:D7:A2:D3:C4:FE:A0:AD:9D:AA:F9:0B
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8a:49:c7:ed:59:15:5a:89:be:af:cf:3d:4b:e6:10:e2:80:
6c:ab:66:97:c2:b1:dd:cf:a8:37:17:b6:ff:0a:f4:4a:04:61:
87:8d:a7:75:70:54:61:85:f0:48:62:f7:44:30:c8:d2:32:37:
86:22:1a:91:62:10:5f:08:55:27:1f:e8:59:0b:21:d3:27:76:
bb:80:ff:27:c3:0b:f6:8a:2e:c6:e5:02:47:95:53:dc:19:4c:
7c:21:2c:fa:90:d9:53:d8:c2:f0:3f:0e:2e:03:f4:34:ac:dc:
8a:fd:bb:bc:9b:87:26:52:e6:0d:7f:d8:09:93:ad:6f:2e:01:
be:9b:37:91:87:aa:6f:01:d0:02:67:d3:34:01:eb:93:d7:5c:
b4:87:4b:c3:e2:5e:87:a8:a4:b4:a7:5b:d3:ad:29:37:e8:09:
b5:c1:30:1b:e3:11:be:e4:7c:f5:fa:70:21:5c:94:1f:a2:00:
ed:d1:6a:8f:c0:2c:1d:a9:c3:56:20:a2:b8:e5:2d:87:7f:22:
df:36:d0:13:fd:3e:3c:fb:cc:39:8d:8d:fe:0d:d4:63:24:3e:
d7:d4:b5:87:bf:86:36:98:ad:ac:62:d1:96:cb:82:e2:d4:58:
f1:7a:38:14:9d:33:b3:a5:69:e2:66:fa:67:ac:b4:14:2b:69:
c5:15:ab:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSKLCqtQuL6F6Ez/zOaHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjQwNTE3MTYwMDM1WhcNMjQwNTE4MTYwMDM1WjAzMTEwLwYDVQQD
EyhiMzQzM2IzZjhlM2ZmZTc0YzBkN2EyZDNjNGZlYTBhZDlkYWFmOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bn6Q3rpdtcpzObTozKQ1sEiXaK2
hYuWoN3MU7VOCO2DEDsQc5LmJjZKF/2z6HMvgz/3n+EvM6HCZ0SwMSayFVGbdO2+
bFxnZECOzOEGKxijjtM7Zvkgc0mHz4WuedbCBW+rKP4s9WNn6xoneIZedyGs8QLa
OdcaXPcaYj0/iAvOtJPvRk4WtkijhIOKL/K5m8rarYZLYV/lz8doiEJdNJUzKFLI
nprns6ULvJdpxnUW9SgrkGIAdlREBZ1YM3RmAfYY3btUAAI3Dj51wJa70Ix4Jk1y
LrZoadU4ohRlxyYwmhSkMdiGpmZh64kNIheELPwMcTGKTUkTdxAu6JeWhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNDOz+OP/50wNei08T+oK2dqvkLMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4pJx+1Z
FVqJvq/PPUvmEOKAbKtml8Kx3c+oNxe2/wr0SgRhh42ndXBUYYXwSGL3RDDI0jI3
hiIakWIQXwhVJx/oWQsh0yd2u4D/J8ML9oouxuUCR5VT3BlMfCEs+pDZU9jC8D8O
LgP0NKzciv27vJuHJlLmDX/YCZOtby4Bvps3kYeqbwHQAmfTNAHrk9dctIdLw+Je
h6iktKdb060pN+gJtcEwG+MRvuR89fpwIVyUH6IA7dFqj8AsHanDViCiuOUth38i
3zbQE/0+PPvMOY2N/g3UYyQ+19S1h7+GNpitrGLRlsuC4tRY8Xo4FJ0zs6Vp4mb6
Z6y0FCtpxRWrRg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:48:30 2024 by rpki-client on console-ams.rpki-client.org