Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: ZqQocywl9i/HPk4ku9suwHzLoAjkDcM4YuS8RZw+SsM=
Subject key identifier: D9:7B:3F:6C:51:AE:F2:33:97:44:45:62:2F:9C:42:B8:A6:99:8A:F6
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018F61F3A21EEBCD28463FAAF3BA2573107D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 120A
Signing time: Fri 10 May 2024 10:01:47 +0000
Manifest this update: Fri 10 May 2024 10:01:47 +0000
Manifest next update: Sat 11 May 2024 10:01:47 +0000
Files and hashes: 1: 5OP5ndR10GHZW07nd31gCw7yNH4.roa (hash: 7ZfEeiMkCAOOWG/UpR1SCHfiZXSKo3MGHtevyRDA2Go=)
2: OMfxh4JmqMpejXInh7SzHALuXOc.roa (hash: 3Foug8V7Ad28sOTJpHfS/ph89OQPz2LbQ7w6ix1Iv7Q=)
3: QUEGbcdRVlCBBGhR7kvXnzLCe1Q.roa (hash: rhpFPWVSOuNNRsFu8jRdpR/0eGg69bKsJTDAM34KxdU=)
4: Yn06Ef93NXcIFnbftWxDYTK2Ya4.roa (hash: eSXlHcUut/6Soyao61LoA6BJlt7ff0ouRGTIO0WU3h8=)
5: _AXWezBs9vjBwIqxl2n6HkCgPvI.roa (hash: wYHCsNvvwxV1ZuOCMghAu+XGWZSmBrUriITwP4FZJ9g=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: 9vTdD/GGOso9symfXeCaaQDhq+Q1FwGSEp4qBVT+3QM=)
7: t8U_TQSH9rMbMr9tdF-FNDElb5Q.roa (hash: SERe9eZCoiYDVhyZf52IBB+DxhtZRHtWTLkr4YOBX5w=)
8: xYWUygTHRqNFV4RDaCXX5KPcR4Y.roa (hash: pJlI2bLeR3GkV04H5fL3g6hK8NexsOU+oHvnmva6ntw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:f3:a2:1e:eb:cd:28:46:3f:aa:f3:ba:25:73:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 10 10:01:47 2024 GMT
Not After : May 11 10:01:47 2024 GMT
Subject: CN=d97b3f6c51aef233974445622f9c42b8a6998af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:1a:79:6e:80:93:9d:1e:62:fb:88:b6:39:
19:0f:4a:3b:41:66:40:3b:13:e9:1d:54:c2:34:45:
68:5b:34:70:1b:01:10:f1:7e:f8:86:7c:41:ac:75:
01:97:a9:67:c3:c7:81:69:2c:8f:e1:3c:d7:cb:a3:
32:3a:c4:16:d6:4d:43:f5:64:8e:9f:93:f8:cc:48:
75:64:68:23:36:3b:ed:17:2d:6d:88:39:7d:d6:d7:
15:be:7f:a2:61:05:90:fc:b4:8d:42:b9:b7:46:5a:
8c:2f:d7:3d:be:53:3b:6b:03:40:36:86:ef:4a:51:
c6:46:ee:bd:1b:7b:85:4a:79:bc:fe:d7:54:fe:61:
69:09:21:e0:d2:ad:1a:d5:ce:91:54:ba:13:a1:15:
8e:2f:71:16:70:c5:c8:d0:3b:3e:21:87:00:33:78:
ea:73:58:34:7a:89:c4:a9:3f:47:9a:8f:f1:e1:5e:
46:f1:b7:fe:1d:1a:35:34:e5:c3:5d:eb:a9:66:d8:
53:29:a7:5c:fd:92:43:fb:83:17:d0:80:bb:2d:31:
81:51:2b:fe:7b:68:26:cc:8a:72:18:9e:47:75:f5:
33:61:4b:fc:2b:34:49:d7:d6:5c:b5:1b:e1:95:7f:
5f:57:a2:4a:47:5a:20:2e:01:e8:53:c2:60:6a:76:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:3F:6C:51:AE:F2:33:97:44:45:62:2F:9C:42:B8:A6:99:8A:F6
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:18:8f:b6:78:a2:f3:da:73:e0:7f:72:ff:4a:0d:6d:3e:ef:
30:4b:0f:3e:e9:c1:93:1f:37:4c:b3:4b:c6:29:51:3f:84:8c:
50:a8:6a:d7:0c:59:89:07:0c:00:20:93:4f:b9:d1:58:96:4e:
2b:89:37:4f:58:d1:8b:4c:29:3d:c2:56:5c:0f:9b:57:8f:68:
8b:1b:2d:5a:4c:12:99:45:34:2f:62:51:5e:5c:c8:38:e4:c7:
d3:62:42:ef:e6:8f:0f:76:21:fb:09:5c:cb:15:3f:37:46:93:
d1:71:37:33:23:7a:7e:39:17:70:8b:17:8a:5a:0f:e1:1a:1f:
05:cf:33:21:cd:20:da:e3:8f:ad:a1:be:73:3c:0c:b5:d9:a9:
7f:15:bc:8b:67:52:71:f3:9e:77:39:73:35:a6:0c:80:bc:27:
8d:02:a9:b1:de:f2:ae:04:a2:96:ab:f5:e6:b0:eb:f0:e9:08:
db:94:14:e2:d6:dd:e3:25:2f:e2:58:ba:a9:e5:d0:35:a8:d7:
23:39:6b:40:e0:c3:2d:15:4a:76:f8:18:13:2d:c4:79:6e:6d:
bc:be:ec:5b:49:d5:08:c1:6c:c8:0e:91:7a:a6:0e:12:33:fa:
2e:b4:62:26:16:5e:1b:bb:cb:d7:a9:03:b7:02:96:ff:89:ae:
15:c5:5c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9h86Ie680oRj+q87olcxB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjQwNTEwMTAwMTQ3WhcNMjQwNTExMTAwMTQ3WjAzMTEwLwYDVQQD
EyhkOTdiM2Y2YzUxYWVmMjMzOTc0NDQ1NjIyZjljNDJiOGE2OTk4YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22EaeW6Ak50eYvuItjkZD0o7QWZA
OxPpHVTCNEVoWzRwGwEQ8X74hnxBrHUBl6lnw8eBaSyP4TzXy6MyOsQW1k1D9WSO
n5P4zEh1ZGgjNjvtFy1tiDl91tcVvn+iYQWQ/LSNQrm3RlqML9c9vlM7awNANobv
SlHGRu69G3uFSnm8/tdU/mFpCSHg0q0a1c6RVLoToRWOL3EWcMXI0Ds+IYcAM3jq
c1g0eonEqT9Hmo/x4V5G8bf+HRo1NOXDXeupZthTKadc/ZJD+4MX0IC7LTGBUSv+
e2gmzIpyGJ5HdfUzYUv8KzRJ19ZctRvhlX9fV6JKR1ogLgHoU8JganZ2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl7P2xRrvIzl0RFYi+cQrimmYr2MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhiPtnii
89pz4H9y/0oNbT7vMEsPPunBkx83TLNLxilRP4SMUKhq1wxZiQcMACCTT7nRWJZO
K4k3T1jRi0wpPcJWXA+bV49oixstWkwSmUU0L2JRXlzIOOTH02JC7+aPD3Yh+wlc
yxU/N0aT0XE3MyN6fjkXcIsXiloP4RofBc8zIc0g2uOPraG+czwMtdmpfxW8i2dS
cfOedzlzNaYMgLwnjQKpsd7yrgSilqv15rDr8OkI25QU4tbd4yUv4li6qeXQNajX
IzlrQODDLRVKdvgYEy3EeW5tvL7sW0nVCMFsyA6ReqYOEjP6LrRiJhZeG7vL16kD
twKW/4muFcVc8g==
-----END CERTIFICATE-----
Generated at Fri May 10 15:00:02 2024 by rpki-client on console-fra.rpki-client.org