Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: JpoZO+FyHztfRUorzJCL4XxrmXOo1vyU4MDkGJPmDzo=
Subject key identifier: 66:96:F8:AC:2F:2E:64:D0:D4:C8:9E:EA:92:BA:2A:2E:0B:6A:6A:27
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 018F8823F689A8636B662323A4C34A32552C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 0FA5
Signing time: Fri 17 May 2024 20:00:09 +0000
Manifest this update: Fri 17 May 2024 20:00:09 +0000
Manifest next update: Sat 18 May 2024 20:00:09 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: MmS5NLlxHIModE7DBp3GhvlCqxXqXXX94aNSCJDt7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:23:f6:89:a8:63:6b:66:23:23:a4:c3:4a:32:55:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: May 17 20:00:09 2024 GMT
Not After : May 18 20:00:09 2024 GMT
Subject: CN=6696f8ac2f2e64d0d4c89eea92ba2a2e0b6a6a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:cf:0b:14:94:45:97:1f:43:89:82:91:ba:
83:e0:6a:68:57:06:67:ee:90:58:2c:a7:c6:a2:c8:
1f:4d:f7:6a:d4:a7:09:c2:f6:c9:8a:77:c0:88:4a:
43:59:bc:00:fa:66:ca:71:cd:8a:d1:89:8a:90:02:
c1:3b:c7:18:e8:47:b0:0f:94:b4:9c:2a:97:09:1b:
e8:71:26:c1:9b:75:bc:d3:2d:07:cd:32:d5:6e:10:
c6:a2:16:f1:ae:7d:c6:85:f5:3a:29:1c:c0:62:38:
50:72:4b:b8:f5:71:a9:59:ee:13:d9:d4:30:87:0e:
72:53:56:30:27:4d:9c:ae:c0:3a:17:d4:75:74:61:
71:24:03:87:5c:1e:08:95:d6:f1:00:2d:10:66:53:
af:fa:95:af:fc:4b:d0:c9:e7:19:37:98:cd:14:66:
1c:53:39:c0:81:c7:35:ee:39:d4:fb:99:4d:82:2f:
a2:90:15:d1:4b:de:9e:63:d4:9a:73:f5:6d:05:3a:
05:b9:59:b0:48:52:18:57:1e:c2:49:6e:73:29:ba:
91:13:e5:ad:87:98:0d:ac:67:81:01:ab:41:1e:20:
47:e8:55:02:57:09:0b:78:45:09:84:ab:a2:a4:23:
a5:62:a3:dc:d2:7a:d4:25:2b:6c:34:1a:5a:3f:c1:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:F8:AC:2F:2E:64:D0:D4:C8:9E:EA:92:BA:2A:2E:0B:6A:6A:27
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:09:19:68:41:5c:8f:98:8e:e0:20:a0:cf:01:75:c1:4e:66:
bd:c8:a8:00:18:5c:9d:42:13:99:77:71:4a:33:2e:91:3d:eb:
b4:7d:a7:dd:01:31:5e:4f:90:97:75:dd:3f:e7:55:4a:a7:48:
80:07:7c:43:f2:54:3a:f9:62:b7:38:cc:d3:58:51:8c:f3:97:
48:10:1d:0c:54:38:5d:48:12:fb:e2:56:83:17:74:8f:57:ec:
c7:0a:79:86:65:fd:ac:b4:0d:7a:37:0b:8c:e8:e9:dc:82:96:
3b:15:09:0e:a5:2c:79:c3:26:3c:b5:38:f8:19:de:f7:25:83:
39:6a:ed:f4:2c:b8:74:32:3e:e5:82:76:59:26:85:05:0f:05:
75:d5:08:f6:e3:bc:e8:7d:3a:ca:3a:e6:78:6a:5a:e1:19:15:
00:18:a0:d9:66:02:e6:89:59:9d:04:dd:e9:ef:32:b5:9f:59:
c0:59:fb:7f:99:97:6d:85:31:52:be:a4:af:22:6b:68:08:2c:
88:fc:8a:cb:60:02:84:99:7b:38:d6:10:33:8a:81:e9:4d:ef:
f3:90:5f:d6:b4:aa:68:80:d2:ac:80:fc:d9:3f:3b:7d:12:1f:
23:7c:a8:27:f0:6b:39:be:eb:4d:99:00:10:81:f8:ab:83:61:
7c:87:eb:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/aJqGNrZiMjpMNKMlUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy
Mjg3ZmUwHhcNMjQwNTE3MjAwMDA5WhcNMjQwNTE4MjAwMDA5WjAzMTEwLwYDVQQD
Eyg2Njk2ZjhhYzJmMmU2NGQwZDRjODllZWE5MmJhMmEyZTBiNmE2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yPPCxSURZcfQ4mCkbqD4GpoVwZn
7pBYLKfGosgfTfdq1KcJwvbJinfAiEpDWbwA+mbKcc2K0YmKkALBO8cY6EewD5S0
nCqXCRvocSbBm3W80y0HzTLVbhDGohbxrn3GhfU6KRzAYjhQcku49XGpWe4T2dQw
hw5yU1YwJ02crsA6F9R1dGFxJAOHXB4IldbxAC0QZlOv+pWv/EvQyecZN5jNFGYc
UznAgcc17jnU+5lNgi+ikBXRS96eY9Sac/VtBToFuVmwSFIYVx7CSW5zKbqRE+Wt
h5gNrGeBAatBHiBH6FUCVwkLeEUJhKuipCOlYqPc0nrUJStsNBpaP8FYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaW+KwvLmTQ1Mie6pK6Ki4LamonMB8GA1UdIwQY
MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt
YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw
LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgkZaEFc
j5iO4CCgzwF1wU5mvcioABhcnUITmXdxSjMukT3rtH2n3QExXk+Ql3XdP+dVSqdI
gAd8Q/JUOvlitzjM01hRjPOXSBAdDFQ4XUgS++JWgxd0j1fsxwp5hmX9rLQNejcL
jOjp3IKWOxUJDqUsecMmPLU4+Bne9yWDOWrt9Cy4dDI+5YJ2WSaFBQ8FddUI9uO8
6H06yjrmeGpa4RkVABig2WYC5olZnQTd6e8ytZ9ZwFn7f5mXbYUxUr6kryJraAgs
iPyKy2AChJl7ONYQM4qB6U3v85Bf1rSqaIDSrID82T87fRIfI3yoJ/BrOb7rTZkA
EIH4q4NhfIfrWA==
-----END CERTIFICATE-----
Generated at Fri May 17 21:03:00 2024 by rpki-client on console-fra.rpki-client.org