Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: G9/WL6nJF94IP169c4bnrSQ9L0RvdGP+aczaDcFgEq0=
Subject key identifier: BF:D3:C0:3D:4B:08:DE:86:59:FB:4D:80:EA:F5:60:BB:D9:78:E4:EC
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 018F3251EFB430B53F599EFA097ED8EB48C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1147
Signing time: Wed 01 May 2024 04:03:01 +0000
Manifest this update: Wed 01 May 2024 04:03:01 +0000
Manifest next update: Thu 02 May 2024 04:03:01 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: wiOLsElc1bLYtreNbAURkcAX4LH7+ewBU5bTZF/yB0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 04:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:51:ef:b4:30:b5:3f:59:9e:fa:09:7e:d8:eb:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: May 1 04:03:01 2024 GMT
Not After : May 2 04:03:01 2024 GMT
Subject: CN=bfd3c03d4b08de8659fb4d80eaf560bbd978e4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:19:02:fb:1d:75:81:46:8a:88:37:ef:a3:
1c:e7:ff:16:3b:06:5a:05:6b:86:c4:aa:ca:08:07:
d4:8c:cd:d3:f6:4f:45:32:7e:6f:db:7c:5d:1c:c9:
df:bb:e3:fa:d6:1b:7d:54:e4:54:e2:6b:bd:44:f8:
ff:ba:5e:90:95:07:0b:0f:57:ad:b7:d7:11:a1:9e:
eb:5e:02:d9:01:b5:1c:63:0a:38:a6:58:1f:c3:d1:
cc:5a:ec:43:aa:5e:d2:71:44:19:d7:62:f0:40:35:
6d:f4:13:d7:39:74:d4:55:96:24:fe:e1:4d:3f:26:
48:72:23:43:74:58:5f:25:38:22:8f:fe:80:1c:e5:
81:eb:54:e4:63:1c:fe:68:bd:fa:4c:dd:52:f5:44:
4b:2e:e9:75:66:e3:99:02:bb:5a:8f:1d:80:1b:31:
94:cd:32:a3:5c:25:93:89:53:bf:53:59:a8:88:94:
35:5f:a3:93:d4:28:84:86:94:93:74:49:fd:8f:c0:
02:b4:fa:59:91:3f:2a:11:18:02:a0:27:6f:a8:d7:
c3:16:12:93:2c:81:33:42:88:3a:ff:70:c9:0d:1f:
17:1c:36:d7:59:87:c6:04:60:c3:69:73:d3:71:7f:
aa:8d:c9:d6:a6:87:e9:eb:a1:37:40:dd:63:1c:78:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:C0:3D:4B:08:DE:86:59:FB:4D:80:EA:F5:60:BB:D9:78:E4:EC
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:af:bb:13:83:a6:30:82:98:ec:32:dd:0f:61:29:c1:4d:c3:
45:d2:94:81:7f:eb:95:7c:6b:d9:86:74:ea:7e:47:d1:b0:e3:
89:f5:bf:e1:df:98:4b:06:47:dc:0d:a9:2b:7f:b1:b3:4d:24:
a7:7e:3c:d4:af:13:dd:14:dc:18:0b:db:df:ee:7e:ba:1a:da:
fa:74:7a:38:00:2b:82:0c:0e:5d:f1:de:49:fa:de:98:33:bc:
8f:d7:56:90:8d:7d:8e:49:b7:5e:ad:b0:58:56:94:cb:3b:5e:
b3:a5:64:93:48:12:b8:41:cc:48:8d:c0:be:6f:fc:30:65:e1:
a0:30:0c:85:d3:e5:ae:e2:fc:b9:25:db:df:77:72:22:0f:a3:
4e:35:dd:c7:43:bf:c3:91:d2:2b:ab:30:1c:21:91:2b:e4:87:
97:c3:93:cb:b3:29:46:64:4f:d1:77:43:7a:1e:f7:9c:f6:ac:
15:df:fd:88:89:94:6b:4a:7f:54:d4:0b:0e:81:bf:f7:59:82:
bb:32:9a:a7:38:f8:94:28:80:e1:75:d7:c2:27:99:aa:a2:62:
02:4c:98:37:f3:23:32:0a:b1:45:75:b1:b0:a9:46:7d:fb:2b:
81:a5:3c:39:76:09:70:09:41:66:fe:2d:49:8b:ef:12:c9:17:
31:d3:31:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8yUe+0MLU/WZ76CX7Y60jAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjQwNTAxMDQwMzAxWhcNMjQwNTAyMDQwMzAxWjAzMTEwLwYDVQQD
EyhiZmQzYzAzZDRiMDhkZTg2NTlmYjRkODBlYWY1NjBiYmQ5NzhlNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgZAvsddYFGiog376Mc5/8WOwZa
BWuGxKrKCAfUjM3T9k9FMn5v23xdHMnfu+P61ht9VORU4mu9RPj/ul6QlQcLD1et
t9cRoZ7rXgLZAbUcYwo4plgfw9HMWuxDql7ScUQZ12LwQDVt9BPXOXTUVZYk/uFN
PyZIciNDdFhfJTgij/6AHOWB61TkYxz+aL36TN1S9URLLul1ZuOZArtajx2AGzGU
zTKjXCWTiVO/U1moiJQ1X6OT1CiEhpSTdEn9j8ACtPpZkT8qERgCoCdvqNfDFhKT
LIEzQog6/3DJDR8XHDbXWYfGBGDDaXPTcX+qjcnWpofp66E3QN1jHHixWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/TwD1LCN6GWftNgOr1YLvZeOTsMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq+7E4Om
MIKY7DLdD2EpwU3DRdKUgX/rlXxr2YZ06n5H0bDjifW/4d+YSwZH3A2pK3+xs00k
p3481K8T3RTcGAvb3+5+uhra+nR6OAArggwOXfHeSfremDO8j9dWkI19jkm3Xq2w
WFaUyztes6Vkk0gSuEHMSI3Avm/8MGXhoDAMhdPlruL8uSXb33dyIg+jTjXdx0O/
w5HSK6swHCGRK+SHl8OTy7MpRmRP0XdDeh73nPasFd/9iImUa0p/VNQLDoG/91mC
uzKapzj4lCiA4XXXwieZqqJiAkyYN/MjMgqxRXWxsKlGffsrgaU8OXYJcAlBZv4t
SYvvEskXMdMxMQ==
-----END CERTIFICATE-----
Generated at Wed May 1 14:58:21 2024 by rpki-client on console-fra.rpki-client.org