Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: VUafIWsryeFLgTNgyKGv7Yd5h9bRd7zm16scf2AZxCw=
Subject key identifier: 14:FB:BF:0B:09:99:BA:B5:45:AF:99:6C:8E:A8:16:C8:09:D5:58:49
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 0190712C053EED64E29CE76B18047917B687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: A3
Signing time: Tue 02 Jul 2024 02:00:28 +0000
Manifest this update: Tue 02 Jul 2024 02:00:28 +0000
Manifest next update: Wed 03 Jul 2024 02:00:28 +0000
Files and hashes: 1: FTiBJr18tsm_GQOfs6xvm_gBoOY.roa (hash: 96Np2d+yXVEORSUtJbWOWFZVAdQZFU8vvi0XiRBeZ8w=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: pKs91vkYD7MndRqIiLOASkHi4qELOlqn879vrPu10OU=)
3: gVQBxfLnZPnjico_NgbsmkLKXh4.roa (hash: CZnnuA/umfuB1bSzhyQYaJicrU6nxPubU2e7uizG/u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:71:2c:05:3e:ed:64:e2:9c:e7:6b:18:04:79:17:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jul 2 02:00:28 2024 GMT
Not After : Jul 3 02:00:28 2024 GMT
Subject: CN=14fbbf0b0999bab545af996c8ea816c809d55849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:54:5a:19:95:88:54:1f:4c:a0:2a:a2:b5:
3f:93:5b:78:64:29:5a:52:25:67:02:c8:7b:ab:5d:
ff:26:79:c9:a5:90:e2:20:26:46:ff:05:bc:4e:9c:
21:e7:99:89:9c:fd:24:6e:e4:67:3c:03:54:b3:f6:
3a:29:4b:c0:be:00:dd:70:87:f3:91:1e:ae:de:10:
61:3c:ed:14:20:2c:2f:fa:0f:ce:23:68:ca:4e:fc:
2e:24:8c:e3:4a:56:c5:23:86:00:b4:ae:01:ff:9c:
ed:cf:5e:e8:82:5d:e8:69:47:a6:b9:9b:72:92:6e:
03:dd:9b:f9:18:ab:77:c0:c8:54:54:4c:d8:98:79:
60:2a:02:e7:1e:b9:05:f2:cb:48:ca:10:14:6a:69:
44:31:4b:27:61:45:96:ef:4d:1a:26:9d:4a:a4:f4:
14:ac:36:89:26:38:77:70:d3:e9:53:d4:34:84:3e:
78:3b:b7:ea:f4:c2:ba:30:ff:5a:0a:74:28:21:3c:
0b:d9:c4:f7:dd:2d:88:b9:3a:8d:56:95:33:87:bb:
fa:18:93:3a:2f:32:27:59:2c:81:f8:a1:2b:e6:1d:
5f:e4:06:c7:03:c6:b2:89:01:4a:53:cd:04:e1:e7:
32:d3:82:6d:f9:ab:ad:f7:b3:63:bb:4f:30:a1:08:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FB:BF:0B:09:99:BA:B5:45:AF:99:6C:8E:A8:16:C8:09:D5:58:49
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:6f:b8:17:95:88:3b:cd:70:7f:5e:36:0a:6b:ff:89:55:
f3:f0:e0:e1:aa:78:51:1b:ee:4e:cf:66:2d:b5:10:41:ec:48:
28:60:c7:1f:76:87:66:55:ac:2a:eb:47:f4:21:19:ac:1d:57:
d1:44:d8:f0:95:ad:b6:ef:f9:77:31:b3:7f:53:ea:e1:dd:6e:
95:c5:f8:00:be:69:dd:45:4e:79:00:58:46:b5:18:7b:98:9c:
7f:e6:6b:9a:5b:16:4b:02:51:1a:33:91:e9:1c:1d:34:bb:82:
14:4b:ca:a2:a5:3e:be:7f:d8:62:3b:8d:2b:74:d8:f6:d0:e2:
ec:4b:da:05:36:d0:e0:05:0a:fb:83:f6:07:b7:49:a8:ff:93:
a4:cb:e9:16:18:ee:23:35:92:52:bc:c3:2a:5f:0d:95:ae:41:
f6:2c:3a:02:f0:30:44:b5:d2:67:1b:e2:fd:f3:18:c4:2f:2d:
09:24:3d:4c:eb:55:fd:74:c5:ed:c4:e9:d4:ef:09:9c:dc:b1:
d1:bd:79:f1:56:29:af:79:b1:65:5d:d4:5a:87:af:89:35:7b:
70:a8:b4:3b:80:64:46:32:76:dc:0b:f1:2e:55:66:b4:25:df:
6c:4d:5c:bb:88:8a:09:fd:3d:d6:7c:f1:91:01:c4:8b:63:67:
8e:e9:69:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBxLAU+7WTinOdrGAR5F7aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl
NDc2NDYwHhcNMjQwNzAyMDIwMDI4WhcNMjQwNzAzMDIwMDI4WjAzMTEwLwYDVQQD
EygxNGZiYmYwYjA5OTliYWI1NDVhZjk5NmM4ZWE4MTZjODA5ZDU1ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknZUWhmViFQfTKAqorU/k1t4ZCla
UiVnAsh7q13/JnnJpZDiICZG/wW8Tpwh55mJnP0kbuRnPANUs/Y6KUvAvgDdcIfz
kR6u3hBhPO0UICwv+g/OI2jKTvwuJIzjSlbFI4YAtK4B/5ztz17ogl3oaUemuZty
km4D3Zv5GKt3wMhUVEzYmHlgKgLnHrkF8stIyhAUamlEMUsnYUWW700aJp1KpPQU
rDaJJjh3cNPpU9Q0hD54O7fq9MK6MP9aCnQoITwL2cT33S2IuTqNVpUzh7v6GJM6
LzInWSyB+KEr5h1f5AbHA8ayiQFKU80E4ecy04Jt+aut97Nju08woQhXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT7vwsJmbq1Ra+ZbI6oFsgJ1VhJMB8GA1UdIwQY
MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt
MjAwMjQ5MThlZTY2LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2
LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjclvuBeV
iDvNcH9eNgpr/4lV8/Dg4ap4URvuTs9mLbUQQexIKGDHH3aHZlWsKutH9CEZrB1X
0UTY8JWttu/5dzGzf1Pq4d1ulcX4AL5p3UVOeQBYRrUYe5icf+ZrmlsWSwJRGjOR
6RwdNLuCFEvKoqU+vn/YYjuNK3TY9tDi7EvaBTbQ4AUK+4P2B7dJqP+TpMvpFhju
IzWSUrzDKl8Nla5B9iw6AvAwRLXSZxvi/fMYxC8tCSQ9TOtV/XTF7cTp1O8JnNyx
0b158VYpr3mxZV3UWoeviTV7cKi0O4BkRjJ23AvxLlVmtCXfbE1cu4iKCf091nzx
kQHEi2Nnjulpeg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 10:31:01 2024 by rpki-client on console-ams.rpki-client.org