Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: vrKZU402fWlV0N+C4io90r/YhbRdYYA+HinD9xgzAog=
Subject key identifier: D1:59:EE:29:03:61:24:0D:97:87:F8:18:28:03:F6:8C:97:F8:80:00
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 018F8DEF52E145984072A566E6E2DDE6C525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0448
Signing time: Sat 18 May 2024 23:00:22 +0000
Manifest this update: Sat 18 May 2024 23:00:22 +0000
Manifest next update: Sun 19 May 2024 23:00:22 +0000
Files and hashes: 1: 9_YiNW7fLxM2xl4RTGuHlD7bgQU.roa (hash: R2Xy7CQEGShLfmm0V/7Hl8oYZmpZneXnlQumj3A+m40=)
2: X1m9vAvIN0DOpD9BTzhuqz4g_LM.roa (hash: MlwmePJhB+oQac3JMcEjRqnJlKLeZ8rgzrP80u1h0lw=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: a/WjuGfn9U11zA7+WeU8wfvf/yLPhbWkTFQIvCDrvZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:ef:52:e1:45:98:40:72:a5:66:e6:e2:dd:e6:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: May 18 23:00:22 2024 GMT
Not After : May 19 23:00:22 2024 GMT
Subject: CN=d159ee290361240d9787f8182803f68c97f88000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:47:d2:de:ec:8d:ac:6f:d3:70:cc:fd:a0:
13:79:c6:28:a1:c8:d1:f0:f9:75:f2:72:b7:6f:0d:
33:f1:03:48:33:02:03:11:04:d7:94:de:c7:20:1d:
7e:cc:e8:f2:b3:f0:ac:e6:bd:1c:92:27:b6:18:92:
4d:bb:37:31:8a:18:a1:10:dc:b0:14:d6:94:94:35:
69:32:69:27:a8:56:4b:9f:a4:5a:b2:c3:9e:ab:b8:
a6:73:5f:d8:78:d4:cb:a7:15:76:d4:8d:c8:49:d5:
45:79:47:d0:17:56:4b:63:50:ee:3d:66:89:e9:57:
e2:69:f0:13:59:36:1d:30:43:71:89:39:fc:98:ac:
5f:2e:14:69:e3:3e:23:71:f1:a4:9e:bf:06:9e:35:
81:2e:a4:8b:9d:fe:76:a0:3c:d2:54:ab:d7:99:42:
1f:97:09:3e:48:3c:cf:45:22:97:1c:2a:69:bd:53:
01:13:f4:52:03:87:a3:93:ef:7f:e8:91:e5:26:60:
9d:43:56:28:b4:25:38:0d:f2:42:43:1f:9f:9b:1e:
3b:59:8c:a7:82:a4:0f:5a:5e:14:54:a2:8a:55:13:
ef:9c:56:19:53:13:29:64:ac:70:ab:fc:ba:15:3b:
3b:be:c3:75:17:3d:8e:4e:d8:dc:6a:a0:56:2b:c1:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:EE:29:03:61:24:0D:97:87:F8:18:28:03:F6:8C:97:F8:80:00
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6e:2a:c2:65:dc:f9:b1:db:70:46:bf:99:ff:9b:f2:4c:89:
43:d9:c9:92:92:83:91:97:f1:f6:d6:53:fa:9d:9e:53:6b:12:
1c:6a:dc:ec:6d:86:2d:e1:3c:8f:f3:3e:21:13:5d:ab:81:3e:
8b:a4:71:13:ff:61:35:bd:09:63:a9:1a:dc:ed:d0:60:90:7a:
50:33:d7:31:6f:94:87:7a:b5:d2:82:ab:26:e7:a2:48:53:26:
d7:fc:c6:fe:1f:67:27:43:3d:b1:da:74:3d:ab:aa:75:98:d2:
36:d4:da:fa:eb:03:7b:26:f0:50:96:be:3a:92:b0:5d:c8:0d:
d0:ad:50:1a:e7:9d:0d:45:bb:bc:53:02:50:25:60:a7:53:d7:
8c:c9:8a:3a:8f:8c:ff:a4:6b:34:13:90:21:ef:e2:04:78:91:
b6:20:b9:15:0c:8d:51:43:50:5b:1a:54:7e:6f:32:f9:f1:db:
f3:06:ab:9d:37:9e:34:4a:50:0a:b9:fb:33:cf:d6:9f:54:1f:
cb:df:4e:a6:ce:53:28:64:bb:59:f5:b4:95:80:df:01:ec:78:
e7:77:10:3d:9c:25:18:72:b3:9a:6d:8a:07:74:a9:08:72:e2:
c5:2d:4c:be:ab:d0:47:bc:97:24:f4:82:06:3f:02:8e:d1:bb:
62:fa:99:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+N71LhRZhAcqVm5uLd5sUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx
N2E1YTQwHhcNMjQwNTE4MjMwMDIyWhcNMjQwNTE5MjMwMDIyWjAzMTEwLwYDVQQD
EyhkMTU5ZWUyOTAzNjEyNDBkOTc4N2Y4MTgyODAzZjY4Yzk3Zjg4MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbVH0t7sjaxv03DM/aATecYoocjR
8Pl18nK3bw0z8QNIMwIDEQTXlN7HIB1+zOjys/Cs5r0ckie2GJJNuzcxihihENyw
FNaUlDVpMmknqFZLn6RassOeq7imc1/YeNTLpxV21I3ISdVFeUfQF1ZLY1DuPWaJ
6VfiafATWTYdMENxiTn8mKxfLhRp4z4jcfGknr8GnjWBLqSLnf52oDzSVKvXmUIf
lwk+SDzPRSKXHCppvVMBE/RSA4ejk+9/6JHlJmCdQ1YotCU4DfJCQx+fmx47WYyn
gqQPWl4UVKKKVRPvnFYZUxMpZKxwq/y6FTs7vsN1Fz2OTtjcaqBWK8FW1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFZ7ikDYSQNl4f4GCgD9oyX+IAAMB8GA1UdIwQY
MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt
NDI5OTUzMjNjMDNkLzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk
LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsW4qwmXc
+bHbcEa/mf+b8kyJQ9nJkpKDkZfx9tZT+p2eU2sSHGrc7G2GLeE8j/M+IRNdq4E+
i6RxE/9hNb0JY6ka3O3QYJB6UDPXMW+Uh3q10oKrJueiSFMm1/zG/h9nJ0M9sdp0
PauqdZjSNtTa+usDeybwUJa+OpKwXcgN0K1QGuedDUW7vFMCUCVgp1PXjMmKOo+M
/6RrNBOQIe/iBHiRtiC5FQyNUUNQWxpUfm8y+fHb8warnTeeNEpQCrn7M8/Wn1Qf
y99Ops5TKGS7WfW0lYDfAex453cQPZwlGHKzmm2KB3SpCHLixS1MvqvQR7yXJPSC
Bj8CjtG7YvqZyA==
-----END CERTIFICATE-----
Generated at Sun May 19 06:09:14 2024 by rpki-client on console-fra.rpki-client.org