Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
File: 1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft (raw, json)
Hash identifier: LhWgLcUaiPyYKs3bsiUAflovTXf4ZWe1rySMUn2H94U=
Subject key identifier: 00:54:79:B2:34:9F:D8:90:B3:98:1E:49:0B:A2:64:4B:02:8C:6F:1E
Authority key identifier: F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
Certificate issuer: /CN=f9612b9df2c8e45bad0b90dbaf50bf22f9e98dfa
Certificate serial: 019369D9C4BBC27073316E57D4CC0A4600A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
Manifest number: 03AA
Signing time: Tue 26 Nov 2024 19:01:39 +0000
Manifest this update: Tue 26 Nov 2024 19:01:39 +0000
Manifest next update: Wed 27 Nov 2024 19:01:39 +0000
Files and hashes: 1: 1-WErnfLI5FutC5Dbr1C_Ivnpjfo.crl (hash: 4GDY7GSaj+L/kcUZBFxGNL1Je9TcpuzIOWD+N7+VpwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:c4:bb:c2:70:73:31:6e:57:d4:cc:0a:46:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9612b9df2c8e45bad0b90dbaf50bf22f9e98dfa
Validity
Not Before: Nov 26 19:01:39 2024 GMT
Not After : Nov 27 19:01:39 2024 GMT
Subject: CN=005479b2349fd890b3981e490ba2644b028c6f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:53:6d:a4:6d:71:ab:a2:4f:2e:9c:04:c3:
6b:8e:9a:d8:fb:eb:01:90:0b:4a:de:19:a5:ad:7f:
ea:8d:2d:87:e3:47:02:10:14:ed:64:cc:93:42:b8:
b7:17:ea:fc:08:00:7f:dc:60:c2:77:87:fa:65:bb:
bb:9f:3d:2d:d9:6f:76:5b:be:ce:f7:2a:91:cf:63:
b9:8f:81:55:59:10:d5:91:8d:b6:e7:2a:ad:84:3e:
f4:2f:cb:a9:96:2b:09:cb:45:2f:49:6d:67:e1:84:
9e:92:71:7d:6a:88:be:5d:77:ed:f0:74:20:40:23:
9a:2b:29:a7:f3:7c:bc:4d:cf:78:f8:6a:77:9e:cf:
41:de:e6:bb:a3:98:00:5e:23:12:10:c6:75:67:0e:
e5:10:6a:d3:d4:4a:78:cf:c7:4c:81:fa:75:38:c1:
49:df:cd:30:8b:fa:b1:81:4b:e5:d8:52:29:c7:3b:
6c:c5:53:3c:b5:f1:9e:16:8d:53:a3:21:70:3c:f9:
d5:ba:00:71:a8:59:d7:f9:12:d8:0f:c6:ff:71:bd:
6c:6c:64:97:51:38:3d:af:f6:f3:51:22:5f:c4:10:
17:d2:a1:e1:63:4e:4a:cc:ec:cc:bf:f1:8c:c3:39:
5e:f5:f0:40:da:63:8d:c1:d6:6f:ca:38:71:3f:03:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:79:B2:34:9F:D8:90:B3:98:1E:49:0B:A2:64:4B:02:8C:6F:1E
X509v3 Authority Key Identifier:
keyid:F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:0f:8c:42:ac:ae:eb:af:04:76:1e:3d:42:68:5d:ef:5b:
7c:4d:aa:45:89:08:ac:00:bb:3f:f0:03:52:07:10:c4:97:dd:
90:d1:d9:e8:31:df:4f:15:6b:8b:95:3f:02:56:dc:36:e0:c8:
86:72:bb:71:d2:d8:e4:2b:57:ef:2c:28:06:87:e1:9f:5a:39:
f7:45:b0:7e:be:42:bc:87:44:2c:88:eb:89:dc:d3:f0:bf:db:
10:cc:4b:d7:55:cc:50:c0:0d:29:fb:ee:51:81:85:97:17:a3:
29:c1:81:18:ed:13:bc:5e:08:7b:44:1d:eb:1c:ed:96:55:d9:
f1:95:cf:78:2d:ac:da:5d:0c:c5:b4:d1:9c:63:fa:cf:20:6e:
5b:86:c4:ce:97:f1:94:f5:b8:c9:9f:34:0e:50:9b:fa:0d:25:
78:c0:4d:5c:96:ef:70:83:5b:56:05:92:79:57:f1:c9:35:a2:
a6:64:d4:fc:4a:64:cf:76:86:5b:1d:54:08:db:a2:c7:0d:c0:
27:a2:76:0a:29:fa:26:83:e9:48:34:d9:4f:51:ce:69:4b:ca:
e6:9b:76:6d:ee:d4:c3:c4:88:a5:52:d1:3e:49:66:37:55:cd:
e1:26:3e:a1:27:17:08:6a:7f:eb:4b:c5:83:30:5b:c8:40:ac:
ae:f9:c6:de
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNp2cS7wnBzMW5X1MwKRgCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjEyYjlkZjJjOGU0NWJhZDBiOTBkYmFmNTBiZjIyZjll
OThkZmEwHhcNMjQxMTI2MTkwMTM5WhcNMjQxMTI3MTkwMTM5WjAzMTEwLwYDVQQD
EygwMDU0NzliMjM0OWZkODkwYjM5ODFlNDkwYmEyNjQ0YjAyOGM2ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJTbaRtcauiTy6cBMNrjprY++sB
kAtK3hmlrX/qjS2H40cCEBTtZMyTQri3F+r8CAB/3GDCd4f6Zbu7nz0t2W92W77O
9yqRz2O5j4FVWRDVkY225yqthD70L8uplisJy0UvSW1n4YSeknF9aoi+XXft8HQg
QCOaKymn83y8Tc94+Gp3ns9B3ua7o5gAXiMSEMZ1Zw7lEGrT1Ep4z8dMgfp1OMFJ
380wi/qxgUvl2FIpxztsxVM8tfGeFo1ToyFwPPnVugBxqFnX+RLYD8b/cb1sbGSX
UTg9r/bzUSJfxBAX0qHhY05KzOzMv/GMwzle9fBA2mONwdZvyjhxPwOhywIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFABUebI0n9iQs5geSQuiZEsCjG8eMB8GA1UdIwQY
MBaAFPlhK53yyORbrQuQ269QvyL56Y36MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XRXJuZkxJNUZ1dEM1RGJyMUNfSXZucGpmby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMTA1NGUxLWRjNzMtNDA4ZC1iZmYx
LTNmZDBjMmVkYWZkYi8xLzEtV0VybmZMSTVGdXRDNURicjFDX0l2bnBqZm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RjLzEwNTRlMS1kYzczLTQwOGQtYmZmMS0zZmQwYzJlZGFm
ZGIvMS8xLVdFcm5mTEk1RnV0QzVEYnIxQ19Jdm5wamZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfe8P
jEKsruuvBHYePUJoXe9bfE2qRYkIrAC7P/ADUgcQxJfdkNHZ6DHfTxVri5U/Albc
NuDIhnK7cdLY5CtX7ywoBofhn1o590Wwfr5CvIdELIjridzT8L/bEMxL11XMUMAN
KfvuUYGFlxejKcGBGO0TvF4Ie0Qd6xztllXZ8ZXPeC2s2l0MxbTRnGP6zyBuW4bE
zpfxlPW4yZ80DlCb+g0leMBNXJbvcINbVgWSeVfxyTWipmTU/Epkz3aGWx1UCNui
xw3AJ6J2Cin6JoPpSDTZT1HOaUvK5pt2be7Uw8SIpVLRPklmN1XN4SY+oScXCGp/
60vFgzBbyECsrvnG3g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:59 2024 by rpki-client on console-fra.rpki-client.org