Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: EKK1fju9knJzwCDPPV09yJPvaBaMZDmaiencgZZ5zTY=
Subject key identifier: D4:DA:74:E4:7C:9B:90:B5:AB:CB:A5:50:30:03:76:96:C0:D8:F1:5D
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 01901DED4452F20C3A7AF69693EE592B6977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 0D4C
Signing time: Sat 15 Jun 2024 22:03:26 +0000
Manifest this update: Sat 15 Jun 2024 22:03:26 +0000
Manifest next update: Sun 16 Jun 2024 22:03:26 +0000
Files and hashes: 1: 7GmN22H1fQJ0qV-smZS7xh35BF0.roa (hash: UhdcptFBTuyVsKLwrO2rnwU3/Qtr9pJL4cUOsvLPi6Y=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: qFdoEPIxHXIcqrWdQj+q1yJIsx8/Ld775kh/fXC4yAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:44:52:f2:0c:3a:7a:f6:96:93:ee:59:2b:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jun 15 22:03:26 2024 GMT
Not After : Jun 16 22:03:26 2024 GMT
Subject: CN=d4da74e47c9b90b5abcba55030037696c0d8f15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:d3:a6:88:6f:09:91:70:87:89:4c:d6:81:
ce:07:13:13:ce:e6:82:12:0e:ae:be:63:6c:7c:ac:
03:42:88:1e:b3:4b:a2:4b:d4:d7:df:3e:e0:bd:e1:
f6:98:8b:b4:fb:e4:fb:96:a6:41:d2:9c:24:41:10:
93:06:a7:1b:02:71:2d:14:d7:63:bd:b4:af:24:85:
6d:b4:fd:0f:57:d2:0b:c8:c8:72:7d:91:2c:c8:01:
1e:22:af:af:da:fb:8c:3b:74:10:7a:88:fa:a3:e9:
23:94:29:25:48:52:ff:8e:75:5a:53:8e:4c:32:48:
ba:f4:14:3b:dc:07:5e:4c:9c:76:9d:f2:d4:26:71:
f2:dc:01:2a:84:37:77:64:c8:5f:13:4c:ec:e5:ef:
32:85:b6:bb:37:ca:50:89:2b:b3:7e:55:b5:95:f9:
78:7f:3a:57:b7:6c:dd:ee:4e:87:d3:14:4a:82:5c:
dd:dc:e7:9e:66:47:a6:64:ba:f4:38:6f:fa:d9:16:
84:01:e2:72:a8:b6:80:9a:54:51:9e:32:61:5e:23:
32:28:85:5e:13:39:7d:5a:20:17:89:b3:03:aa:53:
98:81:b6:6c:60:e9:6f:7f:2e:1e:fb:76:9f:8f:1f:
51:de:44:78:a0:0f:a2:b2:11:3c:5a:8a:e5:2c:24:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DA:74:E4:7C:9B:90:B5:AB:CB:A5:50:30:03:76:96:C0:D8:F1:5D
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:4f:40:63:0d:66:e1:f4:19:bb:e9:a5:48:91:f5:c6:ff:
d6:92:66:20:17:80:44:43:3b:97:da:0e:34:93:fe:ff:72:9c:
fb:97:49:f1:03:da:68:91:80:ce:7f:1b:ba:b4:d3:8c:e2:00:
8b:f5:29:57:0c:c3:ed:eb:43:3d:f2:ad:9b:41:65:96:53:fc:
c9:11:79:13:53:78:9d:6f:1f:a0:32:6c:c7:f8:fd:d1:60:97:
6d:b5:a6:ac:c9:5d:8c:4f:12:04:11:09:1a:64:f8:85:53:a7:
5c:17:89:50:7c:73:33:5d:3b:98:ba:f4:0f:48:a9:da:c9:24:
86:c1:33:f4:eb:ad:ce:25:e0:9f:84:6c:e5:91:b4:3a:0a:46:
f2:9d:95:40:e5:55:8c:19:b2:e0:90:e0:d8:30:f7:bc:5d:1f:
28:9e:48:c4:1c:99:03:76:30:46:9b:9a:9c:aa:41:b4:97:03:
f8:58:e8:e2:1a:0c:75:71:1d:4f:19:c0:07:f6:3e:42:cd:85:
12:c8:9e:2b:ae:b2:fd:8b:0b:75:91:5f:c6:26:48:a1:fc:10:
e5:62:8a:f4:10:a4:85:f8:eb:49:66:bb:43:b4:37:14:ae:1d:
26:1a:54:4b:1f:5c:e2:c9:64:ab:24:66:01:b4:60:40:2d:c3:
30:af:86:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7URS8gw6evaWk+5ZK2l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTAzNWMzMTc3MzRmNjYxYmJmODVjMjE4NDE1NWExZjM2
MTZhZGQwHhcNMjQwNjE1MjIwMzI2WhcNMjQwNjE2MjIwMzI2WjAzMTEwLwYDVQQD
EyhkNGRhNzRlNDdjOWI5MGI1YWJjYmE1NTAzMDAzNzY5NmMwZDhmMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m/TpohvCZFwh4lM1oHOBxMTzuaC
Eg6uvmNsfKwDQoges0uiS9TX3z7gveH2mIu0++T7lqZB0pwkQRCTBqcbAnEtFNdj
vbSvJIVttP0PV9ILyMhyfZEsyAEeIq+v2vuMO3QQeoj6o+kjlCklSFL/jnVaU45M
Mki69BQ73AdeTJx2nfLUJnHy3AEqhDd3ZMhfE0zs5e8yhba7N8pQiSuzflW1lfl4
fzpXt2zd7k6H0xRKglzd3OeeZkemZLr0OG/62RaEAeJyqLaAmlRRnjJhXiMyKIVe
Ezl9WiAXibMDqlOYgbZsYOlvfy4e+3afjx9R3kR4oA+ishE8WorlLCSdRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTadOR8m5C1q8ulUDADdpbA2PFdMB8GA1UdIwQY
MBaAFIaQNcMXc09mG7+FwhhBVaHzYWrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEt
NjAyOGMyNjU0OTQwLzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEtNjAyOGMyNjU0OTQw
LzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFBPQGMN
ZuH0GbvppUiR9cb/1pJmIBeAREM7l9oONJP+/3Kc+5dJ8QPaaJGAzn8burTTjOIA
i/UpVwzD7etDPfKtm0FlllP8yRF5E1N4nW8foDJsx/j90WCXbbWmrMldjE8SBBEJ
GmT4hVOnXBeJUHxzM107mLr0D0ip2skkhsEz9OutziXgn4Rs5ZG0OgpG8p2VQOVV
jBmy4JDg2DD3vF0fKJ5IxByZA3YwRpuanKpBtJcD+Fjo4hoMdXEdTxnAB/Y+Qs2F
EsieK66y/YsLdZFfxiZIofwQ5WKK9BCkhfjrSWa7Q7Q3FK4dJhpUSx9c4slkqyRm
AbRgQC3DMK+GLA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:11 2024 by rpki-client on console-ams.rpki-client.org