Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: BnLUd+W4dmXmo6k+D5mZc0AAC7NAbd2DjcFNoMdLE6Y=
Subject key identifier: 5B:C8:4D:41:E2:35:7E:13:4E:62:3A:6C:89:11:C6:0B:B4:10:5F:37
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 018FB981E8F34A1200188F63D677343C39F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 0D7E
Signing time: Mon 27 May 2024 10:04:09 +0000
Manifest this update: Mon 27 May 2024 10:04:09 +0000
Manifest next update: Tue 28 May 2024 10:04:09 +0000
Files and hashes: 1: 0zttnUwcisQjkckLW6EIbpUbobs.roa (hash: n9y9JjNO6LnNNE6XAfwPARanyrp87r0naRByvo0BdO4=)
2: 18VWCQlISKjgnNFShnUEviO5Mtg.roa (hash: GmAGlXvn75m4SwBbrAisbA3Wa0iSPFOubY4UkkNm+ng=)
3: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 9xNqAsOrczbyMJB6KnN71gTHhlUvMgo7V/nwvHsm45Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:81:e8:f3:4a:12:00:18:8f:63:d6:77:34:3c:39:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: May 27 10:04:09 2024 GMT
Not After : May 28 10:04:09 2024 GMT
Subject: CN=5bc84d41e2357e134e623a6c8911c60bb4105f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:98:b0:91:28:ff:ac:9a:02:dd:dc:0a:26:
a7:62:eb:63:88:46:1a:95:40:d9:22:99:67:6e:98:
e5:74:fb:a2:61:d6:3b:33:6f:d3:d0:8f:25:68:dc:
f1:0f:c8:9d:85:21:ba:5b:d7:4c:32:02:7d:80:ae:
7e:4e:d5:2e:99:1e:fd:dd:c7:a9:59:01:f5:90:9e:
28:86:74:d4:71:ac:7f:5e:c6:da:69:ba:20:5b:73:
27:72:2e:81:a5:46:e5:9e:5f:bf:75:34:79:6a:f3:
23:ce:b6:7c:31:a2:6e:7d:37:bf:97:72:13:9d:2b:
b7:5f:e3:1d:9f:a5:c4:dd:f6:8e:ea:7f:7d:09:2e:
4b:5d:1a:ba:67:f0:88:ac:ee:e0:15:5a:e3:fb:ec:
91:e0:38:c7:06:21:2a:0f:0c:02:b2:52:d1:b4:f6:
38:84:15:b1:f2:37:54:3c:50:b5:59:e2:df:ef:29:
ab:6b:24:7b:26:c9:36:ee:3a:21:90:39:2c:0d:2b:
b8:33:11:8e:7b:58:b8:39:6c:2d:9c:af:d2:88:4d:
80:09:b9:d4:13:e3:5f:d9:4d:74:88:b4:bb:90:bb:
d6:9c:f9:69:ac:b4:29:93:3d:13:58:3c:1b:aa:25:
57:81:55:41:7c:9b:62:8d:ec:d3:65:e9:bb:7e:3e:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:4D:41:E2:35:7E:13:4E:62:3A:6C:89:11:C6:0B:B4:10:5F:37
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:23:5d:86:3e:46:f0:12:48:73:8b:42:d7:27:41:6d:a7:
84:f7:99:81:b9:a6:17:ac:f4:bd:e4:12:e9:75:aa:10:d9:36:
93:15:35:be:b4:c7:15:3f:25:a8:90:4f:fb:ad:63:c1:c4:95:
4f:34:f2:44:3b:df:cb:34:c9:e3:35:4f:bd:a7:e9:d3:7f:af:
aa:62:9f:69:27:ec:f6:36:bb:2e:e8:9a:be:e9:26:b4:53:88:
67:87:39:47:6c:b7:19:9e:e5:50:37:4d:4e:29:c0:41:98:db:
36:25:ae:51:42:e4:36:d4:57:4f:69:a6:2f:66:de:54:b3:7b:
97:0c:b0:2e:9f:1a:52:39:64:02:0d:1f:56:af:ec:80:67:a2:
1c:d9:7d:d7:ac:e1:3b:8f:c4:87:6a:31:f1:29:3b:f3:2d:fc:
16:48:b2:f2:a3:22:8c:65:6c:12:df:6a:59:23:4a:7e:fb:da:
43:8c:ab:44:2d:ff:1e:6d:ae:ff:5b:68:0a:79:8c:a7:f9:fb:
dc:e8:37:42:db:35:9d:32:85:1a:49:a7:8b:a8:19:29:d3:d2:
43:8c:96:5d:0f:3e:10:8b:9e:4e:87:6c:b1:13:31:20:f1:4f:
22:71:bd:ea:d1:cc:e7:ad:89:51:2d:37:cf:42:45:2f:9b:52:
e2:c1:e6:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+5gejzShIAGI9j1nc0PDn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjQwNTI3MTAwNDA5WhcNMjQwNTI4MTAwNDA5WjAzMTEwLwYDVQQD
Eyg1YmM4NGQ0MWUyMzU3ZTEzNGU2MjNhNmM4OTExYzYwYmI0MTA1ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnESYsJEo/6yaAt3cCianYutjiEYa
lUDZIplnbpjldPuiYdY7M2/T0I8laNzxD8idhSG6W9dMMgJ9gK5+TtUumR793cep
WQH1kJ4ohnTUcax/XsbaabogW3Mnci6BpUblnl+/dTR5avMjzrZ8MaJufTe/l3IT
nSu3X+Mdn6XE3faO6n99CS5LXRq6Z/CIrO7gFVrj++yR4DjHBiEqDwwCslLRtPY4
hBWx8jdUPFC1WeLf7ymrayR7Jsk27johkDksDSu4MxGOe1i4OWwtnK/SiE2ACbnU
E+Nf2U10iLS7kLvWnPlprLQpkz0TWDwbqiVXgVVBfJtijezTZem7fj6yYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvITUHiNX4TTmI6bIkRxgu0EF83MB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvEjXYY+
RvASSHOLQtcnQW2nhPeZgbmmF6z0veQS6XWqENk2kxU1vrTHFT8lqJBP+61jwcSV
TzTyRDvfyzTJ4zVPvafp03+vqmKfaSfs9ja7LuiavukmtFOIZ4c5R2y3GZ7lUDdN
TinAQZjbNiWuUULkNtRXT2mmL2beVLN7lwywLp8aUjlkAg0fVq/sgGeiHNl916zh
O4/Eh2ox8Sk78y38Fkiy8qMijGVsEt9qWSNKfvvaQ4yrRC3/Hm2u/1toCnmMp/n7
3Og3Qts1nTKFGkmni6gZKdPSQ4yWXQ8+EIueTodssRMxIPFPInG96tHM562JUS03
z0JFL5tS4sHmUA==
-----END CERTIFICATE-----
Generated at Mon May 27 13:07:21 2024 by rpki-client on console-fra.rpki-client.org