Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: N0Du0L+SJPaR2MtdDWzSA6GU6EQPFhuPq3ck72PQoDo=
Subject key identifier: 9F:93:DF:62:5F:6E:7F:64:4C:C8:C2:32:59:99:3D:66:96:D5:D8:33
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 018F87B664A5CBC791FDAF922666FD235FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 0141
Signing time: Fri 17 May 2024 18:00:28 +0000
Manifest this update: Fri 17 May 2024 18:00:28 +0000
Manifest next update: Sat 18 May 2024 18:00:28 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: xcuQ7QBBqff9NMAvgQWGRkiHoJPK8GsVwMcqcoLXjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:64:a5:cb:c7:91:fd:af:92:26:66:fd:23:5f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: May 17 18:00:28 2024 GMT
Not After : May 18 18:00:28 2024 GMT
Subject: CN=9f93df625f6e7f644cc8c23259993d6696d5d833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:89:70:98:0b:77:3a:4e:a3:39:12:72:3c:
8d:de:33:f6:7a:a4:a2:1a:ff:b1:3d:97:69:78:ee:
0f:d0:0c:87:33:86:f3:12:30:a7:1b:bf:29:4c:cf:
f6:5f:4f:0d:f6:d1:af:72:f5:d7:92:cb:4e:eb:19:
ba:e7:3c:3d:49:16:f2:20:fa:24:9d:51:b7:0a:45:
c9:02:36:dd:20:c6:76:c5:24:d3:90:28:11:ae:59:
17:dc:92:56:1b:44:be:48:3d:6c:94:70:6c:96:cb:
70:1a:4b:b7:42:99:ba:bc:00:86:6c:9f:3c:fc:12:
37:36:4e:cb:b6:49:1f:cf:17:c0:0b:b5:da:ec:34:
c4:7d:39:16:54:f0:a7:02:30:5e:ec:34:a9:82:da:
f8:ad:e2:7e:e9:f8:29:a4:92:fc:23:89:d5:5c:9a:
3c:46:9e:0b:9d:b0:8f:9e:50:e6:68:a3:1b:70:54:
0a:f5:6f:f2:17:3c:06:86:c8:bf:b9:eb:aa:b0:b9:
46:2d:40:aa:d9:ac:7c:1c:05:3f:7a:6e:d5:07:63:
99:06:72:57:ff:6f:50:62:8b:f4:c6:4e:87:fb:84:
74:71:d2:46:e2:9b:9a:4d:6f:be:32:e2:79:01:21:
a4:69:9c:4d:1e:67:66:09:a2:80:72:72:b9:17:54:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:93:DF:62:5F:6E:7F:64:4C:C8:C2:32:59:99:3D:66:96:D5:D8:33
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:95:a9:e8:19:4c:fd:40:40:62:5b:bb:dc:dc:7f:d9:fb:
1d:78:10:84:b1:64:f9:af:1e:f5:c1:c9:9a:24:70:f3:90:16:
ca:38:28:89:42:9d:fe:31:66:92:bc:b0:54:98:93:86:3e:17:
14:75:fe:47:d5:6b:9a:7f:74:5c:d0:07:c3:43:9a:58:c2:cf:
3e:68:36:82:5b:c9:1f:44:d5:99:7a:1d:0c:49:91:91:60:97:
fd:b8:db:c0:46:bc:b6:6b:57:d6:95:27:a8:61:95:81:40:00:
02:02:9d:ef:52:8c:bc:25:6e:62:9b:c6:71:f7:bc:56:84:ca:
6e:a5:3e:52:d0:0c:19:ca:42:8b:75:12:88:2e:2f:58:71:05:
38:8b:3f:32:a6:9e:3f:23:e1:1f:14:e8:68:2b:2d:eb:35:84:
1c:8b:80:af:7c:1d:50:32:5e:fb:59:57:39:eb:8c:a5:26:e3:
7f:3d:4e:a2:f7:dd:94:3f:82:ba:53:d0:4b:7b:a7:2f:03:c6:
60:7d:13:4e:77:04:f6:22:7c:28:3d:92:0c:2b:7b:7c:60:94:
a9:ca:81:44:27:a3:51:89:38:a3:e0:85:2a:74:b4:46:51:66:
e6:c4:06:24:c1:1c:bb:3b:5e:7f:1e:01:b8:82:c3:dd:19:a4:
77:d7:c1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmSly8eR/a+SJmb9I1/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjZjYzQyYzc1OGU3ZGE3YzRiZmFiYzIxMjEyZDFkMjgy
MTYwMzEwHhcNMjQwNTE3MTgwMDI4WhcNMjQwNTE4MTgwMDI4WjAzMTEwLwYDVQQD
Eyg5ZjkzZGY2MjVmNmU3ZjY0NGNjOGMyMzI1OTk5M2Q2Njk2ZDVkODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7uJcJgLdzpOozkScjyN3jP2eqSi
Gv+xPZdpeO4P0AyHM4bzEjCnG78pTM/2X08N9tGvcvXXkstO6xm65zw9SRbyIPok
nVG3CkXJAjbdIMZ2xSTTkCgRrlkX3JJWG0S+SD1slHBslstwGku3Qpm6vACGbJ88
/BI3Nk7LtkkfzxfAC7Xa7DTEfTkWVPCnAjBe7DSpgtr4reJ+6fgppJL8I4nVXJo8
Rp4LnbCPnlDmaKMbcFQK9W/yFzwGhsi/ueuqsLlGLUCq2ax8HAU/em7VB2OZBnJX
/29QYov0xk6H+4R0cdJG4puaTW++MuJ5ASGkaZxNHmdmCaKAcnK5F1QnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+T32Jfbn9kTMjCMlmZPWaW1dgzMB8GA1UdIwQY
MBaAFHf2zELHWOfafEv6vCEhLR0oIWAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9iTVFzZFk1OXA4U19xOElTRXRIU2doWURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NzQyNjQtOGVhYi00NjdhLWEyZGQt
NGJlY2IzMzY5ZGVjLzEvZF9iTVFzZFk1OXA4U19xOElTRXRIU2doWURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NzQyNjQtOGVhYi00NjdhLWEyZGQtNGJlY2IzMzY5ZGVj
LzEvZF9iTVFzZFk1OXA4U19xOElTRXRIU2doWURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaeVqegZ
TP1AQGJbu9zcf9n7HXgQhLFk+a8e9cHJmiRw85AWyjgoiUKd/jFmkrywVJiThj4X
FHX+R9Vrmn90XNAHw0OaWMLPPmg2glvJH0TVmXodDEmRkWCX/bjbwEa8tmtX1pUn
qGGVgUAAAgKd71KMvCVuYpvGcfe8VoTKbqU+UtAMGcpCi3USiC4vWHEFOIs/Mqae
PyPhHxToaCst6zWEHIuAr3wdUDJe+1lXOeuMpSbjfz1OovfdlD+CulPQS3unLwPG
YH0TTncE9iJ8KD2SDCt7fGCUqcqBRCejUYk4o+CFKnS0RlFm5sQGJMEcuztefx4B
uILD3Rmkd9fBIg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:39 2024 by rpki-client on console-fra.rpki-client.org