Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: jH04oFhriHMa0HXH7YboK87551YxIeHvThppBmae62Y=
Subject key identifier: 22:A3:67:1F:71:BD:33:14:C9:E1:61:63:89:34:BE:4B:DE:D7:57:EC
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 018F836C4BDB810CC83CD9C99A9D8DDAA9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0293
Signing time: Thu 16 May 2024 22:01:03 +0000
Manifest this update: Thu 16 May 2024 22:01:03 +0000
Manifest next update: Fri 17 May 2024 22:01:03 +0000
Files and hashes: 1: Is49VjIl9Spx4sccyOy4NLVibOE.roa (hash: ptZYwlwC44VDmxvmMEdXgfPwwKxZZhSyrfkPLPU3BPQ=)
2: eQ8B4pnnrqWhTtzeAnN4jWlbG3o.roa (hash: A5x6syDtyMEuhpTmVp6CacysWSujpJQJdxs8o7PKhx0=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: DVRHK/1dU57xXg+WInBxuLd2oCpBd/TQgmwfof3O00I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:6c:4b:db:81:0c:c8:3c:d9:c9:9a:9d:8d:da:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: May 16 22:01:03 2024 GMT
Not After : May 17 22:01:03 2024 GMT
Subject: CN=22a3671f71bd3314c9e161638934be4bded757ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:74:bd:81:ff:f2:d6:7a:33:fb:fe:69:0e:
6b:3e:8d:69:1e:ed:d0:3f:fc:45:48:6c:e3:e4:29:
38:62:62:f2:20:0f:c8:08:c7:86:35:a1:14:b9:2c:
93:fa:d5:9e:e2:f0:bb:86:73:67:b1:87:d0:91:e3:
24:54:e7:8b:cc:25:4f:4a:76:00:bf:2f:d7:9d:79:
0e:61:46:29:61:65:42:f4:ef:8a:12:9a:4f:02:23:
e6:44:1f:a4:26:29:ab:ae:39:40:26:70:94:0d:3c:
c8:54:56:c0:32:72:e8:93:4b:f8:8f:74:d6:11:16:
66:29:07:4b:ef:89:72:bd:fb:4b:98:5c:9e:cc:5b:
7d:51:85:d3:8a:dc:1f:06:9e:37:b5:e2:2d:87:a6:
2a:08:01:43:b5:49:22:65:3e:13:f3:4b:63:4f:64:
1c:19:e9:30:3e:69:dd:03:1e:3c:0c:a2:d1:a8:32:
db:37:bf:73:b4:76:ab:41:0a:57:7b:d6:e7:c1:74:
4b:53:b2:25:d3:c7:22:35:b9:3d:a0:a3:ee:86:00:
ac:c0:39:e8:03:6a:2b:d3:ab:f5:b0:9e:0a:08:ed:
4d:7e:36:c6:2c:eb:6f:2d:71:cc:0b:8d:46:be:bf:
3f:a4:46:c1:cb:85:e8:b1:f3:30:3f:0d:5a:83:2e:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:67:1F:71:BD:33:14:C9:E1:61:63:89:34:BE:4B:DE:D7:57:EC
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:3b:0f:f6:f1:0b:3b:2f:99:3a:7e:7f:0b:13:db:7d:d8:
4a:f3:ec:e7:11:01:26:cb:36:19:4b:5c:df:47:12:60:35:9b:
ac:44:b7:59:5b:be:84:b2:0e:29:5b:55:e5:96:ab:a5:c4:4e:
a1:06:0b:a5:30:43:a9:bc:8c:fa:4d:1c:fd:b6:a2:eb:08:d4:
f4:0f:ba:8c:fb:80:e6:fa:2c:ad:dc:e9:ab:9a:b5:f3:ad:db:
42:58:9e:6c:27:57:24:67:4e:0d:78:94:14:75:af:72:4c:39:
c4:23:f7:50:06:29:30:40:bd:ee:89:7e:a5:d0:00:18:f8:d6:
6b:76:3e:d8:58:3b:86:f8:df:bc:a7:09:94:a5:b8:fb:90:07:
21:c1:ee:3e:51:2f:80:66:f8:21:71:ae:be:3e:26:f6:45:11:
6a:dd:df:ef:e8:1d:fc:63:c0:93:49:62:87:ab:a8:0a:47:bc:
c2:82:17:48:37:10:7f:a4:1f:05:e8:44:09:0c:56:cd:64:ae:
44:7a:54:bc:87:ec:78:8c:be:ee:41:9e:b8:2a:d9:1d:14:ec:
46:a6:87:9b:9c:02:11:fb:35:68:94:0a:1b:f4:b8:e4:e2:7c:
7f:9f:68:c9:75:24:3c:29:d6:1b:56:26:fb:6c:60:26:b8:46:
f9:05:67:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DbEvbgQzIPNnJmp2N2qm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl
MGVhZTYwHhcNMjQwNTE2MjIwMTAzWhcNMjQwNTE3MjIwMTAzWjAzMTEwLwYDVQQD
EygyMmEzNjcxZjcxYmQzMzE0YzllMTYxNjM4OTM0YmU0YmRlZDc1N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygV0vYH/8tZ6M/v+aQ5rPo1pHu3Q
P/xFSGzj5Ck4YmLyIA/ICMeGNaEUuSyT+tWe4vC7hnNnsYfQkeMkVOeLzCVPSnYA
vy/XnXkOYUYpYWVC9O+KEppPAiPmRB+kJimrrjlAJnCUDTzIVFbAMnLok0v4j3TW
ERZmKQdL74lyvftLmFyezFt9UYXTitwfBp43teIth6YqCAFDtUkiZT4T80tjT2Qc
GekwPmndAx48DKLRqDLbN79ztHarQQpXe9bnwXRLU7Il08ciNbk9oKPuhgCswDno
A2or06v1sJ4KCO1NfjbGLOtvLXHMC41Gvr8/pEbBy4XosfMwPw1agy74PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKjZx9xvTMUyeFhY4k0vkve11fsMB8GA1UdIwQY
MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt
YjUxYWRmZmM2ZWVjLzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj
LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxA7D/bx
CzsvmTp+fwsT233YSvPs5xEBJss2GUtc30cSYDWbrES3WVu+hLIOKVtV5ZarpcRO
oQYLpTBDqbyM+k0c/bai6wjU9A+6jPuA5vosrdzpq5q1863bQliebCdXJGdODXiU
FHWvckw5xCP3UAYpMEC97ol+pdAAGPjWa3Y+2Fg7hvjfvKcJlKW4+5AHIcHuPlEv
gGb4IXGuvj4m9kURat3f7+gd/GPAk0lih6uoCke8woIXSDcQf6QfBehECQxWzWSu
RHpUvIfseIy+7kGeuCrZHRTsRqaHm5wCEfs1aJQKG/S45OJ8f59oyXUkPCnWG1Ym
+2xgJrhG+QVnxA==
-----END CERTIFICATE-----
Generated at Fri May 17 06:20:31 2024 by rpki-client on console-fra.rpki-client.org