Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: /zdQbnzGUtlY0JT9/+Ol15wmoh7bE26z4VfMS2SuSwA=
Subject key identifier: B2:12:CF:CA:AE:CD:D4:4A:A8:E3:95:53:C6:0E:E4:8A:0D:35:17:DC
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01901DEBCB1650703E11A06948F5D3CC4BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:01:50 +0000
Manifest this update: Sat 15 Jun 2024 22:01:50 +0000
Manifest next update: Sun 16 Jun 2024 22:01:50 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: 8me9iMnT7iCmP6Ll0p9IB5+vKmc9v/OW/WDZCe1korU=)
2: xBMFs5_0XPXWQqSLWrztsPWqV30.roa (hash: BSqrmkr+ZbcZ7eP/q9ESAdXMOjepY/0I6e28SPsX1Ew=)
3: yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa (hash: 3kqHSwst7AD+245Ow4MtVEsb0VKgzIt5qwfEI5tqP6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:cb:16:50:70:3e:11:a0:69:48:f5:d3:cc:4b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jun 15 22:01:50 2024 GMT
Not After : Jun 16 22:01:50 2024 GMT
Subject: CN=b212cfcaaecdd44aa8e39553c60ee48a0d3517dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:2b:41:39:ac:fa:93:66:99:ce:7a:4f:58:
88:a1:9a:67:c3:06:86:af:90:d0:7c:8e:0d:99:4c:
07:e9:6b:66:77:ab:cd:ef:f4:2a:20:29:ff:1f:66:
ec:ab:8d:03:68:be:58:54:0f:01:3c:0b:5b:8d:82:
b0:3e:85:43:79:06:bf:18:71:ba:43:a8:43:9c:f2:
7f:44:34:91:e7:d5:81:54:a5:13:93:e0:08:f7:85:
d2:ad:0e:e4:d5:57:b2:6a:44:71:4b:2d:22:ca:88:
71:80:13:ae:b5:6e:3e:5f:a2:c5:56:73:fc:1a:34:
0b:99:ae:b1:03:a4:c0:d1:48:85:6b:cf:b7:c0:a7:
45:0c:e2:55:31:07:a5:6b:ca:37:19:4e:de:9a:69:
bf:c2:fd:83:8b:48:60:60:62:a2:47:e8:84:66:cc:
dc:5e:01:de:50:e3:c2:9d:0e:34:af:59:27:df:b0:
1e:32:5b:de:ee:12:46:c1:05:8e:bf:83:ef:50:13:
e2:bd:75:f7:dd:2f:89:d6:4f:4a:de:d2:21:58:83:
19:5e:a8:6c:90:7a:ac:cb:5c:c7:1b:83:79:51:db:
06:c9:f3:ff:15:e3:11:ca:9a:48:24:59:3c:e9:8b:
c4:9a:88:ce:6b:b5:27:02:f4:0d:19:79:dc:52:aa:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:CF:CA:AE:CD:D4:4A:A8:E3:95:53:C6:0E:E4:8A:0D:35:17:DC
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:65:79:1e:70:f6:30:30:02:38:6a:e6:78:3c:a0:d1:af:48:
03:c2:cd:26:2f:dd:41:c5:e9:b3:2f:f9:59:e2:10:18:f5:16:
51:e5:55:ab:c7:97:f3:df:67:7a:18:90:8f:58:5e:77:bc:ad:
81:50:64:07:7f:1d:df:ae:57:4d:76:96:d8:a7:3a:c3:0d:37:
04:01:c9:8f:61:d1:76:9d:fc:60:2f:4c:45:92:42:13:98:dd:
7a:79:a8:dd:42:21:de:5a:4f:c8:36:33:d3:3b:60:0f:27:f3:
2c:a5:93:e5:bf:fb:9c:48:a5:bf:24:d5:1a:96:7c:07:6d:88:
cb:49:eb:5f:fd:7c:4f:ba:78:9f:71:28:43:43:b5:f8:d2:a1:
93:62:71:fc:27:8c:7f:63:86:8a:20:ac:ba:91:dc:60:91:7e:
25:c1:7e:92:64:06:ae:da:4e:64:68:5e:07:4e:a2:6d:a8:d1:
d9:e6:8d:51:16:e2:d2:ec:b1:6c:4a:d1:a6:41:f6:1f:de:c8:
1c:4d:2b:ae:b1:f6:6f:5a:6d:eb:41:5d:dc:b3:9d:80:b3:6d:
83:86:3b:fc:40:4d:db:17:55:22:b2:e0:74:4d:f8:2d:07:1d:
71:00:2a:13:f6:ce:a8:34:4f:01:d6:64:73:04:6b:b5:03:b1:
ca:92:87:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd68sWUHA+EaBpSPXTzEv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj
OTA1N2QwHhcNMjQwNjE1MjIwMTUwWhcNMjQwNjE2MjIwMTUwWjAzMTEwLwYDVQQD
EyhiMjEyY2ZjYWFlY2RkNDRhYThlMzk1NTNjNjBlZTQ4YTBkMzUxN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfkrQTms+pNmmc56T1iIoZpnwwaG
r5DQfI4NmUwH6Wtmd6vN7/QqICn/H2bsq40DaL5YVA8BPAtbjYKwPoVDeQa/GHG6
Q6hDnPJ/RDSR59WBVKUTk+AI94XSrQ7k1VeyakRxSy0iyohxgBOutW4+X6LFVnP8
GjQLma6xA6TA0UiFa8+3wKdFDOJVMQela8o3GU7emmm/wv2Di0hgYGKiR+iEZszc
XgHeUOPCnQ40r1kn37AeMlve7hJGwQWOv4PvUBPivXX33S+J1k9K3tIhWIMZXqhs
kHqsy1zHG4N5UdsGyfP/FeMRyppIJFk86YvEmojOa7UnAvQNGXncUqqaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLISz8quzdRKqOOVU8YO5IoNNRfcMB8GA1UdIwQY
MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt
OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4
LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWV5HnD2
MDACOGrmeDyg0a9IA8LNJi/dQcXpsy/5WeIQGPUWUeVVq8eX899nehiQj1hed7yt
gVBkB38d365XTXaW2Kc6ww03BAHJj2HRdp38YC9MRZJCE5jdenmo3UIh3lpPyDYz
0ztgDyfzLKWT5b/7nEilvyTVGpZ8B22Iy0nrX/18T7p4n3EoQ0O1+NKhk2Jx/CeM
f2OGiiCsupHcYJF+JcF+kmQGrtpOZGheB06ibajR2eaNURbi0uyxbErRpkH2H97I
HE0rrrH2b1pt60Fd3LOdgLNtg4Y7/EBN2xdVIrLgdE34LQcdcQAqE/bOqDRPAdZk
cwRrtQOxypKHFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:06 2024 by rpki-client on console-ams.rpki-client.org