Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
File: O6f2wLnkClXinPNiN8eJmPyx6uo.mft (raw, json)
Hash identifier: RkptpXnysveCt5rsBEBd7sq5oV8wJWEGv+yB80BKsGk=
Subject key identifier: 76:37:E7:29:11:41:B9:7E:1C:4C:43:C8:F1:F8:90:73:6F:F8:FC:D8
Authority key identifier: 3B:A7:F6:C0:B9:E4:0A:55:E2:9C:F3:62:37:C7:89:98:FC:B1:EA:EA
Certificate issuer: /CN=3ba7f6c0b9e40a55e29cf36237c78998fcb1eaea
Certificate serial: 01909682A13F2DFD1AEE9F10A35080B7659A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6f2wLnkClXinPNiN8eJmPyx6uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
Manifest number: 051F
Signing time: Tue 09 Jul 2024 08:01:01 +0000
Manifest this update: Tue 09 Jul 2024 08:01:01 +0000
Manifest next update: Wed 10 Jul 2024 08:01:01 +0000
Files and hashes: 1: O6f2wLnkClXinPNiN8eJmPyx6uo.crl (hash: HymJYAMG2DaegKVgQIHi+hurzqFENZXyMHavQK9acnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6f2wLnkClXinPNiN8eJmPyx6uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jul 2024 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:82:a1:3f:2d:fd:1a:ee:9f:10:a3:50:80:b7:65:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba7f6c0b9e40a55e29cf36237c78998fcb1eaea
Validity
Not Before: Jul 9 08:01:01 2024 GMT
Not After : Jul 10 08:01:01 2024 GMT
Subject: CN=7637e7291141b97e1c4c43c8f1f890736ff8fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2a:fa:5c:89:35:52:ef:9e:cf:13:10:de:d5:
3e:7d:ba:5a:0a:20:00:22:9c:78:af:09:b3:d9:12:
fc:42:fe:77:a4:3c:1d:29:a8:61:7e:ba:d3:88:6b:
51:fc:66:b6:59:40:96:2e:c6:99:1c:51:18:6b:42:
80:ef:6d:e8:6b:63:7e:bc:f8:33:6f:b1:69:b6:2d:
3d:c9:ed:4a:d7:b0:e6:8e:95:1e:1a:2c:63:0a:b2:
1d:ad:ea:de:a8:f0:7c:ed:96:ea:67:d1:46:39:8d:
87:e9:ca:2b:d3:cb:41:b3:f3:06:30:5e:87:7b:83:
1e:84:a7:e5:f5:44:95:40:cb:56:3c:1f:b9:fe:0a:
38:4d:63:e9:4d:b1:79:e7:3f:1c:96:b6:66:20:4a:
28:71:47:3d:46:03:06:bd:96:63:6f:b7:25:bc:8d:
7f:04:63:fd:b8:f5:b3:27:2f:e2:b5:d8:19:2f:bb:
c8:dd:67:c1:45:ba:d4:f1:db:56:98:be:31:c1:06:
cb:35:f5:ae:8e:06:56:19:40:f1:81:bf:12:56:83:
38:97:83:62:e4:33:5c:ae:eb:7e:cd:ac:81:95:43:
32:aa:5a:f9:4a:8f:1e:8a:ce:22:95:7c:7b:3c:d7:
ba:ca:79:fb:5e:79:d1:48:8b:4a:4a:11:85:d7:e4:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:37:E7:29:11:41:B9:7E:1C:4C:43:C8:F1:F8:90:73:6F:F8:FC:D8
X509v3 Authority Key Identifier:
keyid:3B:A7:F6:C0:B9:E4:0A:55:E2:9C:F3:62:37:C7:89:98:FC:B1:EA:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6f2wLnkClXinPNiN8eJmPyx6uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:23:a2:0c:0d:f7:78:e5:9f:2f:44:21:b3:8e:9b:23:68:95:
5e:20:d2:3c:2b:a7:ef:46:29:32:c5:95:76:e1:51:5e:e2:98:
cd:f8:48:31:29:ad:67:1a:54:84:c2:c8:46:95:49:96:40:c3:
b6:37:3d:c7:20:56:d2:80:7c:cb:e3:f0:68:b7:17:99:ce:df:
73:e6:f6:86:28:8b:bd:56:c8:d4:1f:16:17:04:90:0e:d6:8b:
43:1f:75:6f:f3:c0:e3:4e:0a:01:0c:3d:ff:01:c7:dc:e8:d3:
e2:85:13:20:a2:f3:20:25:11:f9:3c:c8:23:65:0a:a8:b7:6d:
ee:b1:93:c8:83:54:f3:7b:8d:ae:f6:a1:db:ee:a7:4e:0d:8b:
7c:8f:9f:6b:ac:3a:ea:e4:cc:ac:c1:76:04:ae:38:fa:6d:8e:
30:a8:c6:57:68:20:c3:99:cd:19:bf:ff:bd:a3:09:75:4b:d8:
66:be:fe:96:32:f2:24:29:78:1d:f4:a3:f9:93:f6:2d:f9:3b:
42:e3:7b:7d:03:4e:40:1a:9f:22:57:5a:ef:21:06:1e:a8:60:
80:09:7b:d9:d2:31:74:07:55:24:e4:34:f1:1f:e4:0e:72:f3:
ff:7b:8a:60:4d:13:f9:ec:7c:c3:b3:35:b6:c3:97:21:07:46:
e9:76:da:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCWgqE/Lf0a7p8Qo1CAt2WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTdmNmMwYjllNDBhNTVlMjljZjM2MjM3Yzc4OTk4ZmNi
MWVhZWEwHhcNMjQwNzA5MDgwMTAxWhcNMjQwNzEwMDgwMTAxWjAzMTEwLwYDVQQD
Eyg3NjM3ZTcyOTExNDFiOTdlMWM0YzQzYzhmMWY4OTA3MzZmZjhmY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Sr6XIk1Uu+ezxMQ3tU+fbpaCiAA
Ipx4rwmz2RL8Qv53pDwdKahhfrrTiGtR/Ga2WUCWLsaZHFEYa0KA723oa2N+vPgz
b7Fpti09ye1K17DmjpUeGixjCrIdrereqPB87ZbqZ9FGOY2H6cor08tBs/MGMF6H
e4MehKfl9USVQMtWPB+5/go4TWPpTbF55z8clrZmIEoocUc9RgMGvZZjb7clvI1/
BGP9uPWzJy/itdgZL7vI3WfBRbrU8dtWmL4xwQbLNfWujgZWGUDxgb8SVoM4l4Ni
5DNcrut+zayBlUMyqlr5So8eis4ilXx7PNe6ynn7XnnRSItKShGF1+R78QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY35ykRQbl+HExDyPH4kHNv+PzYMB8GA1UdIwQY
MBaAFDun9sC55ApV4pzzYjfHiZj8serqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZmMndMbmtDbFhpblBOaU44ZUptUHl4NnVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81YTI1MTQtZWZlYy00OTlhLWIwMGUt
YjcyNmMxY2FjMTEwLzEvTzZmMndMbmtDbFhpblBOaU44ZUptUHl4NnVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS81YTI1MTQtZWZlYy00OTlhLWIwMGUtYjcyNmMxY2FjMTEw
LzEvTzZmMndMbmtDbFhpblBOaU44ZUptUHl4NnVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniOiDA33
eOWfL0Qhs46bI2iVXiDSPCun70YpMsWVduFRXuKYzfhIMSmtZxpUhMLIRpVJlkDD
tjc9xyBW0oB8y+PwaLcXmc7fc+b2hiiLvVbI1B8WFwSQDtaLQx91b/PA404KAQw9
/wHH3OjT4oUTIKLzICUR+TzII2UKqLdt7rGTyINU83uNrvah2+6nTg2LfI+fa6w6
6uTMrMF2BK44+m2OMKjGV2ggw5nNGb//vaMJdUvYZr7+ljLyJCl4HfSj+ZP2Lfk7
QuN7fQNOQBqfIlda7yEGHqhggAl72dIxdAdVJOQ08R/kDnLz/3uKYE0T+ex8w7M1
tsOXIQdG6XbaNA==
-----END CERTIFICATE-----
Generated at Tue Jul 9 11:43:54 2024 by rpki-client on console.sobornost.net