Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: d4qNOZlTXoD/zQlzFuceFDyh/mtbwVdfdvXWzqul+10=
Subject key identifier: D8:1C:E8:EC:9A:52:C2:9A:A1:DA:83:71:CA:35:93:9C:73:67:08:B2
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01901BFC58C81C8B4371A1F28E6BE27350C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0AD3
Signing time: Sat 15 Jun 2024 13:00:40 +0000
Manifest this update: Sat 15 Jun 2024 13:00:40 +0000
Manifest next update: Sun 16 Jun 2024 13:00:40 +0000
Files and hashes: 1: DhzbxrxxN92CtZ0VP5lZLSVEGpg.roa (hash: ac6DaTRgGFxi5N/0nxkVMadrj+BDejeUbLiFQlU3g0Q=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: HT6f//sTJqczWVAy2TUptn4/gPCDQXs1JhHjw7tjYrU=)
3: kDQ9PXuroGFpLN8hfOCKCW8ttM8.roa (hash: wClquneI6GNCP0uc+CYVIMf6y+Cx++GfrJtUC7fvGE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fc:58:c8:1c:8b:43:71:a1:f2:8e:6b:e2:73:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jun 15 13:00:40 2024 GMT
Not After : Jun 16 13:00:40 2024 GMT
Subject: CN=d81ce8ec9a52c29aa1da8371ca35939c736708b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:72:f7:b6:10:56:21:01:45:bf:16:9b:84:
7b:c2:3e:84:5a:80:e8:1f:40:12:a7:7e:ea:56:3a:
45:3b:a1:7c:41:66:be:73:0c:aa:03:8a:ec:ee:3d:
ce:30:98:76:ef:4c:29:93:8e:a3:8e:18:68:5d:38:
71:a5:80:31:ba:3b:76:82:fc:e7:8f:f1:10:d3:5d:
9f:77:02:e2:de:04:c5:b8:31:be:4f:c8:16:af:c3:
ca:cb:f7:70:0b:96:85:ca:69:9a:76:e1:d2:08:b6:
4c:97:ef:41:45:92:b1:2f:3f:33:3a:79:a4:9d:54:
b5:af:0a:e5:c8:f8:1b:66:e0:ae:f1:6e:bd:2c:fc:
71:33:ef:38:39:2b:7c:6b:76:6c:6a:0e:aa:10:e7:
f7:ba:b4:37:04:a2:df:51:9a:cb:18:50:76:1b:7c:
f5:6d:bb:10:6a:7e:16:8a:2a:49:0c:65:31:46:1e:
b0:73:30:94:b2:15:ed:4e:be:f4:c5:4f:1b:53:8f:
1e:15:c9:d1:a3:53:22:bf:e4:5d:bd:08:ad:b4:bf:
27:fb:6d:05:b3:2e:46:16:49:6e:c5:d3:fa:88:67:
56:74:4c:64:29:01:4d:73:f4:06:85:d5:75:f2:91:
cd:3c:66:94:2a:6b:4f:63:75:c4:5b:9b:0f:37:96:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:E8:EC:9A:52:C2:9A:A1:DA:83:71:CA:35:93:9C:73:67:08:B2
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:65:6e:8e:30:f4:de:bb:ba:9c:7f:9f:1c:e9:f4:56:8b:3a:
af:58:85:d4:be:80:a8:44:f7:11:4f:4c:31:f2:b1:33:fe:4f:
5f:d2:08:a9:ca:1b:36:4f:b1:af:7a:d2:3f:8e:20:e1:9b:f3:
c6:a4:c0:73:b4:06:8a:9c:c2:6a:23:71:db:69:7d:42:08:db:
6e:ec:52:d8:da:63:6d:81:96:93:4c:77:07:85:a3:25:b3:b9:
2a:e2:e7:6d:6b:a0:8e:5c:91:25:37:e3:4c:ee:26:6f:db:69:
7c:e0:b7:ba:78:75:e8:e4:46:cc:1f:86:28:ed:22:d0:91:7a:
2e:52:91:07:6e:01:8c:16:f5:cc:e8:ef:26:f3:a6:b7:06:a5:
e1:63:e2:e1:42:39:6d:a4:10:74:9e:d2:ec:67:1d:d7:73:d8:
67:2b:db:25:b2:4e:25:0f:22:7a:09:83:9e:85:96:aa:4b:01:
ee:e4:69:26:d3:44:6c:c2:db:6e:7e:ba:4a:c6:26:96:68:be:
5b:ea:d0:d7:16:88:77:33:a7:81:81:4d:af:a2:b0:57:e7:21:
fd:c4:eb:f9:11:6c:04:20:5d:58:43:17:a2:0b:cb:46:07:00:
f6:e5:88:7d:ef:76:a8:6b:da:b7:d2:1f:ea:b8:f6:37:77:99:
df:cd:0f:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/FjIHItDcaHyjmvic1DJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1
MjU3OWMwHhcNMjQwNjE1MTMwMDQwWhcNMjQwNjE2MTMwMDQwWjAzMTEwLwYDVQQD
EyhkODFjZThlYzlhNTJjMjlhYTFkYTgzNzFjYTM1OTM5YzczNjcwOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Fy97YQViEBRb8Wm4R7wj6EWoDo
H0ASp37qVjpFO6F8QWa+cwyqA4rs7j3OMJh270wpk46jjhhoXThxpYAxujt2gvzn
j/EQ012fdwLi3gTFuDG+T8gWr8PKy/dwC5aFymmaduHSCLZMl+9BRZKxLz8zOnmk
nVS1rwrlyPgbZuCu8W69LPxxM+84OSt8a3Zsag6qEOf3urQ3BKLfUZrLGFB2G3z1
bbsQan4WiipJDGUxRh6wczCUshXtTr70xU8bU48eFcnRo1Miv+RdvQittL8n+20F
sy5GFkluxdP6iGdWdExkKQFNc/QGhdV18pHNPGaUKmtPY3XEW5sPN5ZycwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgc6OyaUsKaodqDcco1k5xzZwiyMB8GA1UdIwQY
MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt
MzJmZjMxY2VlYzhiLzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi
LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5GVujjD0
3ru6nH+fHOn0Vos6r1iF1L6AqET3EU9MMfKxM/5PX9IIqcobNk+xr3rSP44g4Zvz
xqTAc7QGipzCaiNx22l9QgjbbuxS2NpjbYGWk0x3B4WjJbO5KuLnbWugjlyRJTfj
TO4mb9tpfOC3unh16ORGzB+GKO0i0JF6LlKRB24BjBb1zOjvJvOmtwal4WPi4UI5
baQQdJ7S7Gcd13PYZyvbJbJOJQ8iegmDnoWWqksB7uRpJtNEbMLbbn66SsYmlmi+
W+rQ1xaIdzOngYFNr6KwV+ch/cTr+RFsBCBdWEMXogvLRgcA9uWIfe92qGvat9If
6rj2N3eZ380P6g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:27 2024 by rpki-client on console-fra.rpki-client.org