Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: h9k1gfz92IWNZtY6LX4NZhKXPwqV2nvMmFx3xU4gA9s=
Subject key identifier: AF:35:02:BD:CB:25:CA:3B:3A:B3:9C:D5:9C:46:D3:4F:79:61:FA:85
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 01901E21B5851DD854BE3F70BC897338611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 04FA
Signing time: Sat 15 Jun 2024 23:00:43 +0000
Manifest this update: Sat 15 Jun 2024 23:00:43 +0000
Manifest next update: Sun 16 Jun 2024 23:00:43 +0000
Files and hashes: 1: X2OUTpbQfsZw-VIkUy7-7rL1GFM.roa (hash: eakXgaR2/mZNtoxszg3Zo1L0ErbEH4AY5ajuWmbZt3I=)
2: jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa (hash: 7B4yoGTkbwjXl6RRIOpoE3WoiYeXRd17dyl2U3Fe+7Y=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: 8mrlKEcsZVju3RjQnXQuehHzTj4jUAHLYzI4t4jEZOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:b5:85:1d:d8:54:be:3f:70:bc:89:73:38:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 15 23:00:43 2024 GMT
Not After : Jun 16 23:00:43 2024 GMT
Subject: CN=af3502bdcb25ca3b3ab39cd59c46d34f7961fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:89:3c:04:28:e2:85:2b:67:f7:b3:7a:02:
cf:db:a1:4a:b2:5b:73:53:fc:87:3f:b8:58:95:1e:
23:58:1e:e2:a3:6d:e9:f9:ef:eb:12:95:41:37:39:
3a:36:f3:7a:02:65:08:2c:66:8c:2f:bb:a6:c1:6a:
f8:8b:66:73:36:94:0f:8a:3e:ef:eb:58:44:3d:74:
d3:af:99:bf:de:e7:f2:33:7a:ae:30:e6:a0:7b:d9:
e2:31:ac:ed:95:44:07:ac:55:fd:42:29:ce:0c:84:
61:c0:4e:b6:14:58:4d:90:60:84:39:4d:f8:5c:fe:
89:eb:d6:e9:55:1a:08:76:30:33:e5:2a:0e:10:3c:
b4:b0:99:2e:39:64:7e:81:88:45:1a:07:30:b2:e7:
9e:32:f3:ca:f9:42:69:48:04:16:63:4a:b6:d1:a3:
ea:79:32:ce:b9:73:82:cc:f9:b8:6d:09:cb:ae:d4:
1c:d8:e9:9c:d1:92:ea:e5:32:78:dd:85:42:d2:f5:
38:77:45:04:76:79:e6:b7:6b:a2:c3:04:06:a8:6b:
79:fd:1c:8d:5f:0d:4c:0c:10:e6:8b:37:ab:1f:67:
53:bb:4b:0c:da:3e:e8:0e:1e:ce:38:c6:63:fa:bc:
cc:93:5e:d6:7a:9a:f3:6e:ae:86:cc:f9:12:11:95:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:02:BD:CB:25:CA:3B:3A:B3:9C:D5:9C:46:D3:4F:79:61:FA:85
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:2e:53:78:03:f1:f8:36:a8:4d:91:00:19:3d:53:42:2f:
be:4e:04:76:4c:a9:6e:2b:3a:77:7b:7a:49:53:e1:98:2f:53:
8c:67:04:0b:af:b9:5a:c0:15:4f:56:35:63:89:d9:d1:68:62:
29:7a:9c:34:74:00:c6:72:49:38:6b:70:dc:ed:b5:ac:e3:b9:
89:6d:70:f1:b1:a4:2d:80:13:64:59:a3:f2:c5:16:bf:06:b3:
06:1a:fc:17:cb:bd:d4:a6:4e:69:9a:fd:1b:e5:10:a5:5e:49:
8d:86:bd:32:ac:59:18:d8:0f:72:cc:54:e7:fd:b0:35:cb:d1:
68:26:b4:ed:b7:8f:09:ba:b8:cd:1b:6c:ae:b2:a4:c6:0f:4a:
72:ed:0b:af:21:6f:6b:99:47:e6:80:06:cc:d7:07:a1:56:6b:
10:14:b9:03:50:6d:01:d5:6e:d1:11:bd:33:12:a9:46:34:7e:
e1:9d:f7:7e:86:06:61:4c:79:00:35:dc:44:30:c0:f4:c1:56:
6b:4e:f5:68:f3:b7:ea:65:2f:9a:13:a2:41:c2:fa:7b:78:af:
2b:d8:a8:6d:03:61:66:d8:8f:a3:6b:34:9a:1c:eb:ad:a3:a0:
60:dc:30:bc:b2:5c:a5:69:77:dc:b0:b2:5d:a0:79:c3:5f:f9:
91:8a:e0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIbWFHdhUvj9wvIlzOGEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjQwNjE1MjMwMDQzWhcNMjQwNjE2MjMwMDQzWjAzMTEwLwYDVQQD
EyhhZjM1MDJiZGNiMjVjYTNiM2FiMzljZDU5YzQ2ZDM0Zjc5NjFmYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRaJPAQo4oUrZ/ezegLP26FKsltz
U/yHP7hYlR4jWB7io23p+e/rEpVBNzk6NvN6AmUILGaML7umwWr4i2ZzNpQPij7v
61hEPXTTr5m/3ufyM3quMOage9niMaztlUQHrFX9QinODIRhwE62FFhNkGCEOU34
XP6J69bpVRoIdjAz5SoOEDy0sJkuOWR+gYhFGgcwsueeMvPK+UJpSAQWY0q20aPq
eTLOuXOCzPm4bQnLrtQc2Omc0ZLq5TJ43YVC0vU4d0UEdnnmt2uiwwQGqGt5/RyN
Xw1MDBDmizerH2dTu0sM2j7oDh7OOMZj+rzMk17Weprzbq6GzPkSEZVu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK81Ar3LJco7OrOc1ZxG0095YfqFMB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBguU3gD
8fg2qE2RABk9U0Ivvk4Edkypbis6d3t6SVPhmC9TjGcEC6+5WsAVT1Y1Y4nZ0Whi
KXqcNHQAxnJJOGtw3O21rOO5iW1w8bGkLYATZFmj8sUWvwazBhr8F8u91KZOaZr9
G+UQpV5JjYa9MqxZGNgPcsxU5/2wNcvRaCa07bePCbq4zRtsrrKkxg9Kcu0LryFv
a5lH5oAGzNcHoVZrEBS5A1BtAdVu0RG9MxKpRjR+4Z33foYGYUx5ADXcRDDA9MFW
a071aPO36mUvmhOiQcL6e3ivK9iobQNhZtiPo2s0mhzrraOgYNwwvLJcpWl33LCy
XaB5w1/5kYrg/g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:47:31 2024 by rpki-client on console-fra.rpki-client.org