Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: pAPCXTi9yT9LgJEIzqKzSbGBkupyZR2XI8gdglxHHuM=
Subject key identifier: 71:CE:B7:31:47:D1:8C:6A:CF:E9:B3:0A:19:2A:76:8E:E9:CE:06:2E
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01901C6A659AA49D31B21B15180B72A83814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 15:00:53 +0000
Manifest this update: Sat 15 Jun 2024 15:00:53 +0000
Manifest next update: Sun 16 Jun 2024 15:00:53 +0000
Files and hashes: 1: 5O7EGZ-YPGS7LViYdkAWD94aKAo.roa (hash: yhe5yjeQiEWOuuL/WG8FI6Qh7BiD146+ixWJuLj8P9I=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: HmL7qKuAbGQ43xJNrpsjbDWE4GoDG0bTvvY+4Q86sjo=)
3: nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa (hash: 3Q/jn3FHXZUVQEH27wPd7CkcjgJ+DjfHku5Vp2ZgSk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:65:9a:a4:9d:31:b2:1b:15:18:0b:72:a8:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 15 15:00:53 2024 GMT
Not After : Jun 16 15:00:53 2024 GMT
Subject: CN=71ceb73147d18c6acfe9b30a192a768ee9ce062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:73:c7:ae:1f:26:43:09:15:a1:82:c4:6a:
c4:f4:2e:50:98:52:1e:d6:c5:51:35:ea:a0:22:48:
e7:a2:2a:0e:85:a5:34:80:4f:7f:2a:4e:91:af:4d:
24:d4:bf:91:c5:b2:86:a7:9b:9c:c4:76:b3:93:bb:
65:24:a4:02:60:0d:fa:3a:60:68:fc:d7:4c:2a:5b:
f0:3e:e6:d7:c3:1b:f6:31:0e:8b:d4:6c:f5:1e:db:
93:d6:be:2c:03:ae:ff:70:3c:88:48:a2:44:cc:38:
52:46:22:43:e3:e0:34:4f:5d:df:a6:82:d9:5b:e0:
4f:d6:58:36:ee:2a:e4:01:85:39:53:35:17:ff:1a:
ef:88:8d:74:de:cb:f6:5e:94:b9:15:22:6a:44:11:
cd:e1:5b:29:d3:5e:60:ec:97:7b:0c:75:49:1f:0d:
9b:12:83:ab:c8:56:1d:12:3f:e1:c0:56:17:b6:7d:
c3:8c:be:dc:4c:59:97:3c:5b:48:59:65:db:61:e2:
fe:29:f9:c7:4c:b6:27:f0:f8:ee:60:5c:61:59:12:
63:aa:8e:51:6a:30:b8:34:06:6c:2a:eb:d8:c0:56:
19:62:3b:5e:fe:3b:b6:71:27:18:6b:0a:3c:a2:d3:
ce:f6:dd:99:68:2c:6d:44:28:8d:5f:9e:68:b5:61:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:B7:31:47:D1:8C:6A:CF:E9:B3:0A:19:2A:76:8E:E9:CE:06:2E
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e7:de:84:04:1d:8b:0d:57:14:01:2b:1c:0b:f5:26:14:03:
a3:50:6f:4b:93:9d:0d:04:60:07:4f:cf:2c:96:a4:42:9d:8e:
3d:e3:1d:c6:fd:a4:85:64:a0:1e:34:2b:b0:ab:84:2c:8f:ac:
19:69:b7:97:59:21:84:02:8e:c4:e6:9d:7c:ac:93:47:e6:91:
54:69:a0:85:95:fd:c1:0f:9b:6d:24:f0:60:61:c5:c5:9c:05:
b3:6c:0d:4d:3a:0c:dc:a5:38:06:a0:ec:13:bd:4e:b3:8d:e7:
d2:2c:81:6a:a7:c9:2e:5e:27:ea:34:cb:e2:c3:8c:b5:04:bc:
7f:da:22:49:83:43:9d:45:ad:ac:8d:a3:86:5d:44:55:d5:23:
fc:90:e8:5e:0a:d9:af:79:43:c0:d7:2e:53:b6:c5:1c:f3:35:
2a:6a:7d:8f:fd:b8:fc:2e:3e:66:7d:f4:f2:80:8c:6b:ac:75:
a1:50:ec:6c:44:85:24:ba:9f:68:ff:13:94:a1:b0:15:c3:b9:
44:bc:40:12:4b:af:ea:a7:e0:06:45:f2:33:f0:8d:d6:95:7a:
91:76:a5:bf:12:8b:9a:49:cf:dd:ec:2b:b1:5c:07:7b:eb:c7:
cc:4d:9f:af:bd:60:21:14:15:e2:48:40:76:a2:9f:e7:72:13:
14:d7:34:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcamWapJ0xshsVGAtyqDgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw
ODkwNDMwHhcNMjQwNjE1MTUwMDUzWhcNMjQwNjE2MTUwMDUzWjAzMTEwLwYDVQQD
Eyg3MWNlYjczMTQ3ZDE4YzZhY2ZlOWIzMGExOTJhNzY4ZWU5Y2UwNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPBzx64fJkMJFaGCxGrE9C5QmFIe
1sVRNeqgIkjnoioOhaU0gE9/Kk6Rr00k1L+RxbKGp5ucxHazk7tlJKQCYA36OmBo
/NdMKlvwPubXwxv2MQ6L1Gz1HtuT1r4sA67/cDyISKJEzDhSRiJD4+A0T13fpoLZ
W+BP1lg27irkAYU5UzUX/xrviI103sv2XpS5FSJqRBHN4Vsp015g7Jd7DHVJHw2b
EoOryFYdEj/hwFYXtn3DjL7cTFmXPFtIWWXbYeL+KfnHTLYn8PjuYFxhWRJjqo5R
ajC4NAZsKuvYwFYZYjte/ju2cScYawo8otPO9t2ZaCxtRCiNX55otWE40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHOtzFH0Yxqz+mzChkqdo7pzgYuMB8GA1UdIwQY
MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt
N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0
LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgefehAQd
iw1XFAErHAv1JhQDo1BvS5OdDQRgB0/PLJakQp2OPeMdxv2khWSgHjQrsKuELI+s
GWm3l1khhAKOxOadfKyTR+aRVGmghZX9wQ+bbSTwYGHFxZwFs2wNTToM3KU4BqDs
E71Os43n0iyBaqfJLl4n6jTL4sOMtQS8f9oiSYNDnUWtrI2jhl1EVdUj/JDoXgrZ
r3lDwNcuU7bFHPM1Kmp9j/24/C4+Zn308oCMa6x1oVDsbESFJLqfaP8TlKGwFcO5
RLxAEkuv6qfgBkXyM/CN1pV6kXalvxKLmknP3ewrsVwHe+vHzE2fr71gIRQV4khA
dqKf53ITFNc0sQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:55:11 2024 by rpki-client on console-fra.rpki-client.org