Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: pv7/hOHjC8u1yA5E/130w547MWo+ZFBceEIvAiKuTMs=
Subject key identifier: C9:74:DF:34:1C:51:25:BC:6B:DC:65:DE:B3:C0:48:68:47:04:E1:5E
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 01903472B72A221510BC5DA6A89AA491F869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0B3B
Signing time: Thu 20 Jun 2024 07:00:51 +0000
Manifest this update: Thu 20 Jun 2024 07:00:51 +0000
Manifest next update: Fri 21 Jun 2024 07:00:51 +0000
Files and hashes: 1: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: d4Lios1YQFF2+1/UHnN1wKZlJxLicqX0zU59D9C47fs=)
2: nvkzdavijW348d7Xc0F4OjvXmHg.roa (hash: 9Ts1UL6Jffy6m/WLN3vnaRgS9Re8nZTkXVuxHCq+3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:72:b7:2a:22:15:10:bc:5d:a6:a8:9a:a4:91:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jun 20 07:00:51 2024 GMT
Not After : Jun 21 07:00:51 2024 GMT
Subject: CN=c974df341c5125bc6bdc65deb3c048684704e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:51:77:0f:09:33:d2:a1:35:a8:9c:86:07:6b:
b7:db:cf:81:56:77:c5:29:7d:09:8a:0f:2a:1a:4b:
0f:c6:09:47:7f:8f:8f:37:ee:b7:55:90:e6:5f:3c:
81:80:1d:4e:8b:a0:76:1e:a7:9d:27:8f:b1:17:a6:
77:5e:00:2e:da:fa:4a:8f:5c:75:c3:c3:c7:75:44:
1f:bf:9f:d0:0b:a8:fc:ca:96:35:ea:20:7c:90:38:
bd:79:5c:26:17:f5:b6:75:83:2e:2a:c7:c0:38:6b:
78:78:a5:5d:ff:73:91:fa:7c:22:af:1e:95:6a:4c:
60:95:ec:ea:e8:53:49:88:e5:31:2f:7f:80:8e:5a:
47:8e:72:1d:e1:db:0e:7b:32:ba:16:5f:8b:b5:cc:
de:9b:fa:3f:26:0c:f1:43:f0:0d:d4:31:38:ef:29:
6e:f8:20:19:90:99:d5:ed:23:ff:e7:83:c6:d0:96:
3a:26:72:23:99:43:48:88:92:94:6b:66:d8:08:be:
fb:a2:b1:b2:98:50:bc:06:1f:a0:d2:87:7f:5e:d0:
5b:de:02:13:30:a5:1d:b1:33:07:93:c7:83:0b:50:
10:e3:d6:43:85:99:a2:b6:07:94:7f:61:e0:f1:ad:
b8:6e:17:5a:f5:04:7c:0a:b6:d4:df:4e:6d:f7:df:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:DF:34:1C:51:25:BC:6B:DC:65:DE:B3:C0:48:68:47:04:E1:5E
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:85:66:11:ad:88:02:d8:fd:35:8c:21:73:c9:66:ee:e7:
12:d3:17:d8:6b:06:c3:fc:18:bb:be:c2:9c:c5:b0:53:39:4b:
1f:f8:cd:82:1c:45:f6:f4:08:8d:a7:18:f1:9a:43:81:5c:1d:
71:34:0a:4b:22:70:11:64:bb:ac:c9:87:da:b1:38:e6:a6:82:
c8:9d:9e:78:b9:c0:9c:3f:1b:fd:97:7c:bf:8e:f5:e1:0a:8d:
04:84:af:b6:4d:ce:e6:00:db:7a:a4:16:b0:5b:b0:f0:4d:75:
82:0a:68:ee:7b:c7:66:fe:d1:af:23:54:1a:1b:60:a4:f0:e3:
c1:d8:ea:ea:93:86:5a:d3:d0:79:27:0a:d8:1e:85:43:e7:e1:
13:40:68:be:11:a3:70:0d:2f:d5:48:6d:bc:d2:28:08:4c:53:
5a:96:c0:e6:d1:8a:c6:f9:1e:87:c8:71:1b:24:a4:a3:a4:a3:
d3:70:39:1e:6e:ce:88:a4:e2:0d:c6:8e:f6:1b:9b:02:14:79:
be:4e:03:46:bd:4e:73:c4:52:51:ae:25:10:6c:97:31:d3:c6:
c9:dd:34:1d:00:c3:94:ec:33:25:9c:6f:7a:1f:61:89:21:b8:
25:0c:61:f4:94:a1:45:77:2d:50:be:a8:2b:ae:a0:d3:96:22:
ff:d6:2f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0crcqIhUQvF2mqJqkkfhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDljMDczYjRmNzA2OTdlMjE3NWMxYTk1NWY2Y2E4YzNh
NjI0NmIwHhcNMjQwNjIwMDcwMDUxWhcNMjQwNjIxMDcwMDUxWjAzMTEwLwYDVQQD
EyhjOTc0ZGYzNDFjNTEyNWJjNmJkYzY1ZGViM2MwNDg2ODQ3MDRlMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lF3Dwkz0qE1qJyGB2u328+BVnfF
KX0Jig8qGksPxglHf4+PN+63VZDmXzyBgB1Oi6B2HqedJ4+xF6Z3XgAu2vpKj1x1
w8PHdUQfv5/QC6j8ypY16iB8kDi9eVwmF/W2dYMuKsfAOGt4eKVd/3OR+nwirx6V
akxglezq6FNJiOUxL3+AjlpHjnId4dsOezK6Fl+Ltczem/o/JgzxQ/AN1DE47ylu
+CAZkJnV7SP/54PG0JY6JnIjmUNIiJKUa2bYCL77orGymFC8Bh+g0od/XtBb3gIT
MKUdsTMHk8eDC1AQ49ZDhZmitgeUf2Hg8a24bhda9QR8CrbU305t998WuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl03zQcUSW8a9xl3rPASGhHBOFeMB8GA1UdIwQY
MBaAFHTZwHO09waX4hdcGpVfbKjDpiRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQt
YzE5MTQxMGRjODg5LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQtYzE5MTQxMGRjODg5
LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9SFZhGt
iALY/TWMIXPJZu7nEtMX2GsGw/wYu77CnMWwUzlLH/jNghxF9vQIjacY8ZpDgVwd
cTQKSyJwEWS7rMmH2rE45qaCyJ2eeLnAnD8b/Zd8v4714QqNBISvtk3O5gDbeqQW
sFuw8E11ggpo7nvHZv7RryNUGhtgpPDjwdjq6pOGWtPQeScK2B6FQ+fhE0BovhGj
cA0v1UhtvNIoCExTWpbA5tGKxvkeh8hxGySko6Sj03A5Hm7OiKTiDcaO9hubAhR5
vk4DRr1Oc8RSUa4lEGyXMdPGyd00HQDDlOwzJZxveh9hiSG4JQxh9JShRXctUL6o
K66g05Yi/9YvAg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 13:22:06 2024 by rpki-client on console-fra.rpki-client.org