Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: 4mi2Nw8TSNnUzWQMmGCuDeyE1RQzznd9lS3MNcjB1hc=
Subject key identifier: 1B:B8:68:62:C1:2C:7D:5E:81:8C:16:C2:98:B1:A4:54:94:B3:E2:8C
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01901DEB66B72F8D4B3613C43964140ED5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:01:24 +0000
Manifest this update: Sat 15 Jun 2024 22:01:24 +0000
Manifest next update: Sun 16 Jun 2024 22:01:24 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: oQzGGYEE2Mv227fVKkITpYJ4Zl1VsixaO0+fDYt812U=)
2: nWj4PfN2M8BUxW5Ml0967E-27Ec.roa (hash: qTXFNk3hX8blYVqEV5OYWZApboMzx0f/Hd4KICNgc3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:66:b7:2f:8d:4b:36:13:c4:39:64:14:0e:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jun 15 22:01:24 2024 GMT
Not After : Jun 16 22:01:24 2024 GMT
Subject: CN=1bb86862c12c7d5e818c16c298b1a45494b3e28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:27:8b:e4:45:5d:a2:79:06:84:9c:ea:c8:
11:6c:44:96:6b:4c:97:c5:ae:1d:3f:45:f3:fe:67:
7a:77:64:cb:7d:c4:aa:44:b5:4a:e1:2c:73:a0:32:
9f:3b:e3:27:41:31:4d:c0:38:07:da:80:8b:82:58:
63:66:60:aa:b7:4d:f6:97:8f:e2:5b:5c:47:31:a3:
cc:c6:f2:1a:b6:75:8e:22:0f:53:47:c2:21:39:82:
25:ea:65:62:d8:78:00:95:bd:aa:ba:e0:5b:06:6f:
93:60:87:b9:88:45:f0:36:71:2d:10:97:00:46:a5:
4f:df:ac:d5:7d:f2:0b:b1:7d:1d:60:46:21:55:63:
5c:8e:38:a2:52:53:e4:2a:19:f1:02:3f:2c:de:40:
78:04:30:31:76:1f:cb:5d:93:31:7d:fa:cb:71:7d:
1a:46:bc:d6:e5:b0:b2:f5:21:67:87:50:fc:c9:3d:
ab:38:99:cc:52:0d:1d:53:df:4a:e6:c6:a8:d3:82:
e0:59:2e:9d:60:84:b5:76:46:63:20:51:fb:25:b7:
46:d8:8f:50:f7:99:16:6f:4a:ee:cc:b9:9d:f7:3c:
64:59:d6:2b:81:51:02:85:fa:33:63:7c:73:cf:4e:
db:f2:bc:8d:8c:cb:9d:9e:74:e9:f5:c9:57:25:5d:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:68:62:C1:2C:7D:5E:81:8C:16:C2:98:B1:A4:54:94:B3:E2:8C
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:00:67:99:9f:f5:8c:b8:60:a4:01:ff:c6:0a:f1:5c:90:11:
c5:15:46:cb:13:fe:de:11:5c:f4:22:5a:f2:21:f4:b8:f8:a2:
ef:bd:bc:15:75:dd:3f:48:d6:c9:15:2d:99:ff:18:4d:a4:e3:
90:72:64:37:13:cd:34:dd:50:57:0f:ad:5f:06:fa:99:e4:80:
7c:ca:d3:b7:68:28:4a:cb:8a:5d:07:f0:55:8d:61:c1:9c:a8:
2e:9a:59:8c:66:26:8f:d0:25:52:ab:0c:18:c5:90:f1:95:3d:
a0:13:1e:2f:e7:3f:b1:4b:69:46:4a:49:6e:b8:1e:ad:18:89:
eb:9c:79:59:4e:2c:e6:9a:04:8a:58:7d:de:67:bd:91:52:5e:
c1:88:2e:dd:2a:3e:d7:c2:ac:0d:b9:73:8c:0b:ae:68:9e:e4:
c6:7e:d8:11:48:bd:4a:0f:24:d2:75:16:3d:b7:18:6f:0c:95:
ae:d5:b6:43:a6:a9:c1:d3:68:43:8f:4a:f4:fd:86:29:13:28:
1e:c9:aa:1a:dd:8a:26:19:92:f8:12:4a:a3:8d:43:0a:fa:82:
e0:3a:b9:4f:6f:a1:36:4e:09:37:6d:c5:96:ee:69:7c:5a:03:
7e:e8:ec:62:cf:24:e2:1f:79:f8:42:2b:0a:51:de:9f:1a:e3:
6d:d1:8f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd62a3L41LNhPEOWQUDtXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzVmMTg5NmU5YTQ0MzU3YzlkNzhhY2YzN2Q0OGY0Nzgw
NTIwZDkwHhcNMjQwNjE1MjIwMTI0WhcNMjQwNjE2MjIwMTI0WjAzMTEwLwYDVQQD
EygxYmI4Njg2MmMxMmM3ZDVlODE4YzE2YzI5OGIxYTQ1NDk0YjNlMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnYni+RFXaJ5BoSc6sgRbESWa0yX
xa4dP0Xz/md6d2TLfcSqRLVK4SxzoDKfO+MnQTFNwDgH2oCLglhjZmCqt032l4/i
W1xHMaPMxvIatnWOIg9TR8IhOYIl6mVi2HgAlb2quuBbBm+TYIe5iEXwNnEtEJcA
RqVP36zVffILsX0dYEYhVWNcjjiiUlPkKhnxAj8s3kB4BDAxdh/LXZMxffrLcX0a
RrzW5bCy9SFnh1D8yT2rOJnMUg0dU99K5sao04LgWS6dYIS1dkZjIFH7JbdG2I9Q
95kWb0ruzLmd9zxkWdYrgVEChfozY3xzz07b8ryNjMudnnTp9clXJV3nVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu4aGLBLH1egYwWwpixpFSUs+KMMB8GA1UdIwQY
MBaAFH7F8YlumkQ1fJ14rPN9SPR4BSDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUt
YjQzNmQ3NmRhZDY1LzEvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUtYjQzNmQ3NmRhZDY1
LzEvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgBnmZ/1
jLhgpAH/xgrxXJARxRVGyxP+3hFc9CJa8iH0uPii7728FXXdP0jWyRUtmf8YTaTj
kHJkNxPNNN1QVw+tXwb6meSAfMrTt2goSsuKXQfwVY1hwZyoLppZjGYmj9AlUqsM
GMWQ8ZU9oBMeL+c/sUtpRkpJbrgerRiJ65x5WU4s5poEilh93me9kVJewYgu3So+
18KsDblzjAuuaJ7kxn7YEUi9Sg8k0nUWPbcYbwyVrtW2Q6apwdNoQ49K9P2GKRMo
HsmqGt2KJhmS+BJKo41DCvqC4Dq5T2+hNk4JN23Flu5pfFoDfujsYs8k4h95+EIr
ClHenxrjbdGP+g==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:00 2024 by rpki-client on console-ams.rpki-client.org