Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: emMq5TlDiA60mmq9X2tP6Q1le91275USYSlpn2Xei/s=
Subject key identifier: 98:3F:92:20:4A:95:22:64:32:7B:2A:4E:FD:44:A8:25:B1:AC:D0:91
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 01903D764844E2B02BB61FE305BA40DB27A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0BA2
Signing time: Sat 22 Jun 2024 01:01:19 +0000
Manifest this update: Sat 22 Jun 2024 01:01:19 +0000
Manifest next update: Sun 23 Jun 2024 01:01:19 +0000
Files and hashes: 1: M6RW6idGBD-evnGI7BOk-W5wwL0.roa (hash: Qm+zY0nmlZ9X2kDEDIFWigH5Lc7wJTA9+p++GBa+yRA=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: G0iXI8dkXDFKB/54jEpRoIUPdzNmtOX3FAeV3w+22HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:76:48:44:e2:b0:2b:b6:1f:e3:05:ba:40:db:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Jun 22 01:01:19 2024 GMT
Not After : Jun 23 01:01:19 2024 GMT
Subject: CN=983f92204a952264327b2a4efd44a825b1acd091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:45:e1:04:89:81:ec:ce:3f:12:4a:e8:69:
5b:25:f7:3f:ec:89:c5:2f:f2:59:35:0e:9c:32:61:
df:84:50:be:78:00:30:0a:44:14:cb:d9:b3:f3:d0:
ba:ec:4a:d8:40:5a:7c:c9:52:56:50:5c:61:98:73:
ff:5a:6d:1f:45:a2:22:14:77:7f:0b:45:f5:4a:87:
fd:ca:90:9b:20:1c:88:29:16:46:98:82:43:b3:3a:
0a:8d:57:d2:f5:bb:cc:9e:f7:a7:2f:60:0d:94:a5:
82:e2:4d:9d:53:e6:a6:ce:9d:53:ad:90:5b:89:a9:
55:dd:5e:d8:5b:14:3f:f5:c9:50:2f:f8:7b:5f:30:
2c:72:b0:28:2c:53:55:f9:2c:40:8d:77:6d:60:e9:
d3:36:22:87:21:ed:96:64:2e:80:f1:18:a7:45:4a:
4d:d7:49:e1:9c:b6:78:9d:69:0f:e1:45:07:1c:c7:
8e:cc:b4:8c:09:bd:e5:8a:a9:47:28:e2:5d:9a:27:
cc:c7:67:bd:e4:32:13:29:01:55:4c:16:09:02:b0:
a2:6c:c9:40:63:a9:9a:97:90:3b:f9:dc:23:dd:9e:
21:1f:db:72:2e:d1:59:e8:06:36:26:ee:3d:64:cc:
d5:07:91:37:41:05:45:5e:57:c1:01:20:26:81:cb:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:92:20:4A:95:22:64:32:7B:2A:4E:FD:44:A8:25:B1:AC:D0:91
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:e8:35:02:73:27:5d:57:b9:07:d0:a8:75:5f:23:b4:9d:
6c:ad:c6:53:55:3f:9d:35:bd:f8:aa:56:2b:fc:e1:4c:ed:1f:
77:25:61:04:34:c1:28:d1:a7:1d:c8:bc:a3:de:4d:af:67:53:
da:03:e8:15:cd:01:bb:0f:52:a7:09:d2:4d:4f:7d:9a:4d:5c:
68:2b:39:cb:62:77:4e:8e:be:fb:76:3d:3a:5c:63:76:15:c8:
2f:20:49:d7:af:f3:05:61:38:31:91:a0:95:54:95:d6:58:0c:
28:e6:da:8d:ec:9a:97:d3:da:ae:a8:09:46:0d:a0:90:46:a3:
78:45:5c:02:90:b7:2b:a7:85:9d:22:8e:37:fa:9c:25:2b:bd:
74:1e:f4:ce:51:70:e5:61:fb:d2:1a:5c:1b:c3:d0:38:9f:dd:
93:60:a3:d8:c9:82:e9:cc:7d:10:0d:75:5b:13:3c:69:ad:d9:
08:66:9a:82:04:29:60:ac:97:f2:a8:84:ec:f5:bd:89:8c:5b:
8c:9f:8e:6f:b5:6d:83:cd:79:d5:50:3c:21:fa:d8:5c:0b:86:
c9:b3:19:ec:8a:60:15:84:12:93:ca:b3:6d:13:6a:33:fd:a3:
37:f7:97:03:57:74:9d:1b:cf:88:c6:9b:8b:5d:9d:76:d7:08:
6e:06:d9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA9dkhE4rArth/jBbpA2yegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi
ZTczOGQwHhcNMjQwNjIyMDEwMTE5WhcNMjQwNjIzMDEwMTE5WjAzMTEwLwYDVQQD
Eyg5ODNmOTIyMDRhOTUyMjY0MzI3YjJhNGVmZDQ0YTgyNWIxYWNkMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5F4QSJgezOPxJK6GlbJfc/7InF
L/JZNQ6cMmHfhFC+eAAwCkQUy9mz89C67ErYQFp8yVJWUFxhmHP/Wm0fRaIiFHd/
C0X1Sof9ypCbIByIKRZGmIJDszoKjVfS9bvMnvenL2ANlKWC4k2dU+amzp1TrZBb
ialV3V7YWxQ/9clQL/h7XzAscrAoLFNV+SxAjXdtYOnTNiKHIe2WZC6A8RinRUpN
10nhnLZ4nWkP4UUHHMeOzLSMCb3liqlHKOJdmifMx2e95DITKQFVTBYJArCibMlA
Y6mal5A7+dwj3Z4hH9tyLtFZ6AY2Ju49ZMzVB5E3QQVFXlfBASAmgct9cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg/kiBKlSJkMnsqTv1EqCWxrNCRMB8GA1UdIwQY
MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt
MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3
LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTfoNQJz
J11XuQfQqHVfI7SdbK3GU1U/nTW9+KpWK/zhTO0fdyVhBDTBKNGnHci8o95Nr2dT
2gPoFc0Buw9SpwnSTU99mk1caCs5y2J3To6++3Y9OlxjdhXILyBJ16/zBWE4MZGg
lVSV1lgMKObajeyal9ParqgJRg2gkEajeEVcApC3K6eFnSKON/qcJSu9dB70zlFw
5WH70hpcG8PQOJ/dk2Cj2MmC6cx9EA11WxM8aa3ZCGaaggQpYKyX8qiE7PW9iYxb
jJ+Ob7Vtg8151VA8IfrYXAuGybMZ7IpgFYQSk8qzbRNqM/2jN/eXA1d0nRvPiMab
i12ddtcIbgbZwA==
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:11:42 2024 by rpki-client on console-fra.rpki-client.org