Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: 6Pm5jsZ+QK6pxGvjw6weJWgsEmFye4/ZBPlSjOC8vrU=
Subject key identifier: 4A:1F:02:E4:CD:12:1C:68:86:DD:37:E6:ED:FC:68:12:36:69:20:F5
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 01901E21AAA8CADAA2A45EE0B46EF335FF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0559
Signing time: Sat 15 Jun 2024 23:00:41 +0000
Manifest this update: Sat 15 Jun 2024 23:00:41 +0000
Manifest next update: Sun 16 Jun 2024 23:00:41 +0000
Files and hashes: 1: O8GcUCOMcpFhgmDvznsjhi2Mz8s.roa (hash: LGAeWMmyRk3JoxYl7ioA0rMGxE7GNZm8h62aAoe5vlY=)
2: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: 3+fF4h+LYba6gn2w5qBxxojUE2znRgFi4nhsKnIrwNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:aa:a8:ca:da:a2:a4:5e:e0:b4:6e:f3:35:ff:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Jun 15 23:00:41 2024 GMT
Not After : Jun 16 23:00:41 2024 GMT
Subject: CN=4a1f02e4cd121c6886dd37e6edfc6812366920f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:8d:8a:18:85:61:78:6a:8a:2a:db:24:57:
db:8f:7d:a6:6b:c8:5f:1e:3f:59:69:bf:bf:36:03:
65:0b:cc:a9:b8:d5:d0:d3:92:67:1b:7c:ed:5b:f3:
35:bf:8e:3f:37:04:dc:98:3c:4f:0d:f7:0d:91:02:
99:43:8f:7f:26:40:61:7b:dd:86:af:f4:4a:aa:79:
d4:fa:f0:ce:40:07:92:8c:ca:2b:1c:fe:19:6a:aa:
58:f2:c1:07:90:ef:6f:85:e1:14:82:7a:07:34:a8:
ed:6a:5f:2a:6d:a1:82:d5:34:34:61:34:1d:85:91:
44:6b:1e:5b:d1:7c:cc:d1:66:4a:32:e9:51:7d:42:
4b:8a:24:63:ee:56:1c:9a:1e:7c:94:9b:04:3b:b2:
94:44:8f:4f:81:16:cd:22:97:e9:60:a7:68:cc:f9:
35:08:88:61:94:de:f1:4b:82:ba:b7:63:85:8f:82:
9c:4f:06:86:13:90:1a:4b:16:96:e2:d9:71:93:10:
64:3f:ee:7a:3b:f6:48:f5:3a:57:7f:b3:bd:c7:69:
22:bd:62:8c:ba:4f:e1:2f:ac:66:af:9c:a2:4b:9f:
12:b6:33:8b:4d:67:c9:49:64:92:a3:4a:9f:62:a8:
70:11:a3:ab:e4:3f:bb:c9:d8:17:75:6e:65:63:ef:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:02:E4:CD:12:1C:68:86:DD:37:E6:ED:FC:68:12:36:69:20:F5
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:db:9d:fa:92:8f:fd:7d:6e:fb:8e:dc:43:d9:2a:1c:6d:7f:
a3:0b:37:0a:49:ca:48:c7:45:de:0d:78:7a:61:da:b7:47:48:
08:a4:9b:ae:71:c5:89:88:03:e9:00:eb:35:75:aa:3e:eb:22:
c9:88:a2:3d:52:58:d5:dc:85:b1:5a:83:11:30:67:e7:2d:64:
55:85:4a:01:61:6c:81:b3:1e:6b:c4:ec:c5:74:a1:58:64:13:
29:64:5f:e3:77:f7:a5:fe:04:30:0e:63:1d:d7:9c:13:e3:e0:
cb:4a:82:e8:d8:5e:f1:f0:72:93:9d:25:96:a1:63:e6:17:0b:
6d:4d:b9:bb:0a:f7:1d:58:8a:c3:a2:d8:f0:c1:7f:b1:8f:0f:
22:af:3b:0e:45:76:d4:40:73:2b:0d:26:4f:41:d9:53:60:9f:
20:f8:10:5e:c6:74:5d:eb:86:0e:36:97:bf:81:35:74:b4:a5:
cd:90:d4:56:f3:17:84:f1:79:b4:de:a7:0f:b7:b8:53:b9:e1:
59:0a:a7:33:4c:50:0f:e2:da:ff:cd:e4:87:7a:89:f4:40:c4:
ad:55:ef:19:82:e4:cd:e9:99:c5:14:15:2f:54:14:c8:c0:a2:
b6:f0:c5:df:9d:f0:85:d6:76:7f:8b:56:a2:23:7e:35:8d:95:
81:38:a1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIaqoytqipF7gtG7zNf9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTZiZGU2NGE5YTliYmEzZmZhMTQzOGExOTdhYzNmOTQ5
ODlmYWYwHhcNMjQwNjE1MjMwMDQxWhcNMjQwNjE2MjMwMDQxWjAzMTEwLwYDVQQD
Eyg0YTFmMDJlNGNkMTIxYzY4ODZkZDM3ZTZlZGZjNjgxMjM2NjkyMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQeNihiFYXhqiirbJFfbj32ma8hf
Hj9Zab+/NgNlC8ypuNXQ05JnG3ztW/M1v44/NwTcmDxPDfcNkQKZQ49/JkBhe92G
r/RKqnnU+vDOQAeSjMorHP4ZaqpY8sEHkO9vheEUgnoHNKjtal8qbaGC1TQ0YTQd
hZFEax5b0XzM0WZKMulRfUJLiiRj7lYcmh58lJsEO7KURI9PgRbNIpfpYKdozPk1
CIhhlN7xS4K6t2OFj4KcTwaGE5AaSxaW4tlxkxBkP+56O/ZI9TpXf7O9x2kivWKM
uk/hL6xmr5yiS58StjOLTWfJSWSSo0qfYqhwEaOr5D+7ydgXdW5lY+8jLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEofAuTNEhxoht035u38aBI2aSD1MB8GA1UdIwQY
MBaAFI4WveZKmpu6P/oUOKGXrD+UmJ+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhhOTVrcWFtN29fLWhRNG9aZXNQNVNZbjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zOWFiMmUtZmVlYi00YTBlLTg3NDAt
NDUyOTZjMzJmMGEzLzEvamhhOTVrcWFtN29fLWhRNG9aZXNQNVNZbjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zOWFiMmUtZmVlYi00YTBlLTg3NDAtNDUyOTZjMzJmMGEz
LzEvamhhOTVrcWFtN29fLWhRNG9aZXNQNVNZbjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNud+pKP
/X1u+47cQ9kqHG1/ows3CknKSMdF3g14emHat0dICKSbrnHFiYgD6QDrNXWqPusi
yYiiPVJY1dyFsVqDETBn5y1kVYVKAWFsgbMea8TsxXShWGQTKWRf43f3pf4EMA5j
HdecE+Pgy0qC6Nhe8fByk50llqFj5hcLbU25uwr3HViKw6LY8MF/sY8PIq87DkV2
1EBzKw0mT0HZU2CfIPgQXsZ0XeuGDjaXv4E1dLSlzZDUVvMXhPF5tN6nD7e4U7nh
WQqnM0xQD+La/83kh3qJ9EDErVXvGYLkzemZxRQVL1QUyMCitvDF353whdZ2f4tW
oiN+NY2VgTihpg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:51 2024 by rpki-client on console-fra.rpki-client.org