Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: uNpQlYTzaG/VSGwmaiE/1DWxyvpjluWEOOp+93v+UCY=
Subject key identifier: C0:35:34:91:F0:A4:D3:FF:51:EE:60:8D:9B:E1:A8:9B:36:E6:E9:56
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 0192376F5DB1CA54A818386D161A14D3649B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 12DB
Signing time: Sat 28 Sep 2024 07:01:38 +0000
Manifest this update: Sat 28 Sep 2024 07:01:38 +0000
Manifest next update: Sun 29 Sep 2024 07:01:38 +0000
Files and hashes: 1: 20EsF4h7NF0t6O13Zc0rFlmRExM.roa (hash: yGEEg7xI06AyMa2/EBex0kiGbwzFCiaZEm7KBRLebh8=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: qor9MXhlsIYQzZbRAynrJf8Blooj2hRJ+/D6ZRMYHHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:6f:5d:b1:ca:54:a8:18:38:6d:16:1a:14:d3:64:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Sep 28 07:01:38 2024 GMT
Not After : Sep 29 07:01:38 2024 GMT
Subject: CN=c0353491f0a4d3ff51ee608d9be1a89b36e6e956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:3b:11:51:fe:64:a3:6f:7c:44:2d:a6:c7:
d8:ae:9d:20:9a:47:dc:99:3a:75:13:87:95:9b:a3:
8e:36:7d:1c:39:02:91:0c:2e:09:e9:e0:f9:03:36:
c5:50:2b:59:6c:d9:bf:0d:69:a8:28:af:37:7a:34:
17:23:60:90:92:73:13:32:73:e8:53:42:2c:46:ae:
09:a7:2a:60:b1:25:c8:09:05:c5:79:6e:74:8d:71:
8d:b7:ba:66:50:09:73:89:99:0b:93:5e:92:ea:c5:
0e:04:69:f1:55:7a:38:0b:0d:88:64:b4:df:ca:01:
40:9e:b5:d8:f6:69:a5:3d:79:b2:9a:88:99:06:66:
21:99:89:25:f8:7a:a0:e6:0f:be:f1:65:54:93:e6:
0a:88:c7:b1:83:20:bb:aa:73:dc:96:18:95:51:2d:
c3:3d:20:05:37:79:58:47:c5:92:88:37:e0:36:1f:
57:fb:f2:c0:ed:60:cb:bc:be:2a:27:d3:07:6f:3e:
08:e6:f7:09:bb:c2:36:76:f9:bb:12:63:41:f9:d1:
26:e7:5a:99:5a:29:24:55:b7:08:1a:2d:fe:ee:d7:
f2:eb:e9:a9:1c:f1:9d:0a:eb:75:d8:dd:8a:af:b1:
55:a9:ed:3f:77:7e:fe:6a:39:df:a3:f0:81:41:e3:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:34:91:F0:A4:D3:FF:51:EE:60:8D:9B:E1:A8:9B:36:E6:E9:56
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:be:44:fc:d8:eb:41:47:dd:12:43:a5:3d:aa:5a:e2:7b:
e4:ce:44:33:25:74:09:5c:00:b9:2b:43:08:13:93:af:80:09:
64:66:91:23:a7:20:44:6a:14:7c:56:9f:6e:81:ac:b0:67:83:
8a:af:b0:3d:a0:ca:f7:37:7c:95:b2:69:10:e6:ea:4c:7e:ad:
00:88:6f:21:ea:b3:90:74:76:db:f3:38:79:c0:f1:3a:28:10:
79:9b:16:84:16:41:62:d5:f9:ef:43:d4:a2:f2:ec:89:c9:7f:
d5:1e:bd:68:1e:e3:57:df:47:e6:7d:ec:f5:6a:bf:05:ac:09:
9d:9e:6f:4d:5d:0a:02:47:cd:51:3f:7f:f9:f0:08:11:ce:2e:
84:3b:b7:bd:c1:18:c2:a0:e4:9c:f7:b1:a5:aa:c6:28:50:4d:
e7:2d:7c:98:d0:2a:1d:65:ae:53:f0:07:f3:49:b2:6a:94:ad:
8e:0f:a6:83:66:9f:45:4c:ba:88:1a:2e:89:68:8c:3d:5a:34:
4a:cc:bb:c8:c0:24:ce:b2:a9:8b:47:62:fa:95:34:0c:ff:29:
33:30:25:a4:92:7b:51:83:db:d8:67:01:d6:81:a1:32:f2:96:
cf:f8:c8:bc:2c:36:7a:9a:6b:2f:8e:5f:a2:1a:22:bb:a0:eb:
81:e6:6c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI3b12xylSoGDhtFhoU02SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMzkzNDNjYzZkNTFkZGI4ZTM2MzgyOTlhMWJiNDk1ZjQ1
ODA5MjEwHhcNMjQwOTI4MDcwMTM4WhcNMjQwOTI5MDcwMTM4WjAzMTEwLwYDVQQD
EyhjMDM1MzQ5MWYwYTRkM2ZmNTFlZTYwOGQ5YmUxYTg5YjM2ZTZlOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL87EVH+ZKNvfEQtpsfYrp0gmkfc
mTp1E4eVm6OONn0cOQKRDC4J6eD5AzbFUCtZbNm/DWmoKK83ejQXI2CQknMTMnPo
U0IsRq4JpypgsSXICQXFeW50jXGNt7pmUAlziZkLk16S6sUOBGnxVXo4Cw2IZLTf
ygFAnrXY9mmlPXmymoiZBmYhmYkl+Hqg5g++8WVUk+YKiMexgyC7qnPclhiVUS3D
PSAFN3lYR8WSiDfgNh9X+/LA7WDLvL4qJ9MHbz4I5vcJu8I2dvm7EmNB+dEm51qZ
WikkVbcIGi3+7tfy6+mpHPGdCut12N2Kr7FVqe0/d37+ajnfo/CBQePHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA1NJHwpNP/Ue5gjZvhqJs25ulWMB8GA1UdIwQY
MBaAFPM5NDzG1R3bjjY4KZobtJX0WAkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHprMFBNYlZIZHVPTmpncG1odTBsZlJZQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZGU2ZGYtY2U0Zi00YjA5LTgyZDIt
Mzc3ZDI1YmU1OTRkLzEvOHprMFBNYlZIZHVPTmpncG1odTBsZlJZQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81ZGU2ZGYtY2U0Zi00YjA5LTgyZDItMzc3ZDI1YmU1OTRk
LzEvOHprMFBNYlZIZHVPTmpncG1odTBsZlJZQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmW+RPzY
60FH3RJDpT2qWuJ75M5EMyV0CVwAuStDCBOTr4AJZGaRI6cgRGoUfFafboGssGeD
iq+wPaDK9zd8lbJpEObqTH6tAIhvIeqzkHR22/M4ecDxOigQeZsWhBZBYtX570PU
ovLsicl/1R69aB7jV99H5n3s9Wq/BawJnZ5vTV0KAkfNUT9/+fAIEc4uhDu3vcEY
wqDknPexparGKFBN5y18mNAqHWWuU/AH80myapStjg+mg2afRUy6iBouiWiMPVo0
Ssy7yMAkzrKpi0di+pU0DP8pMzAlpJJ7UYPb2GcB1oGhMvKWz/jIvCw2epprL45f
ohoiu6DrgeZsVA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:34:09 2024 by rpki-client on console-ams.rpki-client.org