Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: SVsnPPwfZwtTwHqC5GX8woKnDXCInBw/ZbxrWTPnSzM=
Subject key identifier: EB:6F:5A:8B:44:70:60:CB:50:84:57:2C:32:D7:D2:D1:08:93:2D:4A
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 018FB3B4CAF0C4F6F6E24DAF51D47F7398C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 03DC
Signing time: Sun 26 May 2024 07:02:01 +0000
Manifest this update: Sun 26 May 2024 07:02:01 +0000
Manifest next update: Mon 27 May 2024 07:02:01 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: US1E0aYMOkQokx/ysg9EMlhMBt82HjAqfiED/QyzB3g=)
2: QML8pzL9Iu-fY699i8MX4_vOfog.roa (hash: Y4Ew0D9xxn+fFK0UC4D/O/SPpLzTfVMCs8gHL8EqCn0=)
3: xeQr3bO04zX9AYVQDOjyoZYZ_8E.roa (hash: nkYwdzzKsL/3jEDFZaz7Ig+Hwwx+i9W9EjvRBy13Yr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b4:ca:f0:c4:f6:f6:e2:4d:af:51:d4:7f:73:98:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: May 26 07:02:01 2024 GMT
Not After : May 27 07:02:01 2024 GMT
Subject: CN=eb6f5a8b447060cb5084572c32d7d2d108932d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:00:49:22:e8:89:4e:be:a6:51:77:69:7e:
ac:28:0b:06:1a:69:2a:3b:e5:16:93:b8:a8:bb:5c:
7f:1c:86:fa:db:12:71:48:ff:45:ce:eb:39:a3:2c:
15:8c:99:62:69:eb:65:30:d1:5c:b7:82:34:d5:da:
4a:cb:60:6d:99:96:1d:28:eb:24:dd:e1:34:70:07:
4d:5d:8e:b9:5e:2a:e8:e1:50:3b:eb:a7:63:61:04:
d6:08:cd:e8:98:45:42:5e:5c:22:cd:31:f6:42:13:
7a:81:6b:b3:58:ea:13:cd:27:68:0d:c6:ef:6c:41:
38:2f:6b:59:40:f8:99:a3:81:e7:0c:f2:86:04:43:
3c:27:ec:85:a3:fb:50:0c:1e:84:f3:4b:20:23:3b:
d3:fe:1d:c4:cf:c0:92:7f:9e:31:4c:73:e9:85:01:
8d:96:1a:16:30:d1:94:72:8a:2e:5d:6f:08:c0:26:
6b:f2:a1:2c:0d:9e:0f:1f:1c:d1:6d:18:17:85:33:
1e:f4:9a:97:0b:b1:65:e9:95:0f:c4:f7:71:57:1c:
2f:5f:bc:1f:0b:de:e5:42:05:c9:64:ee:57:bb:2c:
df:0f:5e:de:d3:4a:22:b2:4c:3e:d5:c0:e0:b3:18:
a2:d1:00:93:bc:9c:33:f7:0c:6e:7f:ec:4c:32:cf:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6F:5A:8B:44:70:60:CB:50:84:57:2C:32:D7:D2:D1:08:93:2D:4A
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fe:cd:e9:63:2a:ea:5a:9f:04:bf:5e:a4:d6:02:5c:ad:e0:
4e:a8:61:0e:0f:6f:2f:cf:a7:31:c5:4c:cf:ad:c5:a9:b0:19:
de:e2:07:d7:6b:a8:2b:f0:68:80:c1:ee:7e:58:85:42:60:72:
7b:e2:3b:b2:36:d1:70:90:1a:49:31:f5:1f:2d:88:4b:87:6d:
04:0e:a4:8b:00:79:e8:09:75:3d:ed:bc:77:0e:81:8c:86:14:
75:45:00:3b:b8:96:4c:15:cb:41:4e:ad:87:5e:2d:4f:c6:0d:
07:34:85:85:02:63:a2:4e:ed:62:20:6e:4c:0c:d3:ef:ed:6e:
f3:2c:2f:fc:56:1c:63:04:c8:59:09:b1:77:45:c5:40:92:b0:
63:d8:e4:7e:aa:e7:0b:5e:6e:b1:10:e5:c9:08:eb:b6:e3:1d:
55:59:59:fb:5d:ca:cc:55:ae:7e:a0:17:dc:1d:65:65:88:cf:
c1:6f:c8:79:fe:2d:13:ab:88:2a:ad:41:7e:db:f0:f1:e0:74:
54:bb:ce:fb:d6:79:3c:6c:36:75:08:49:fa:ec:ca:89:da:9d:
4c:2c:41:57:ee:3c:64:09:33:ba:cd:6d:9e:b8:74:8f:93:3f:
02:d5:ff:aa:91:a2:22:6a:50:b7:b1:f2:1d:ec:8d:eb:37:b3:
52:e0:08:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ztMrwxPb24k2vUdR/c5jJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4
MzRhMGIwHhcNMjQwNTI2MDcwMjAxWhcNMjQwNTI3MDcwMjAxWjAzMTEwLwYDVQQD
EyhlYjZmNWE4YjQ0NzA2MGNiNTA4NDU3MmMzMmQ3ZDJkMTA4OTMyZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVoASSLoiU6+plF3aX6sKAsGGmkq
O+UWk7iou1x/HIb62xJxSP9Fzus5oywVjJliaetlMNFct4I01dpKy2BtmZYdKOsk
3eE0cAdNXY65Xiro4VA766djYQTWCM3omEVCXlwizTH2QhN6gWuzWOoTzSdoDcbv
bEE4L2tZQPiZo4HnDPKGBEM8J+yFo/tQDB6E80sgIzvT/h3Ez8CSf54xTHPphQGN
lhoWMNGUcoouXW8IwCZr8qEsDZ4PHxzRbRgXhTMe9JqXC7Fl6ZUPxPdxVxwvX7wf
C97lQgXJZO5XuyzfD17e00oiskw+1cDgsxii0QCTvJwz9wxuf+xMMs/0VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtvWotEcGDLUIRXLDLX0tEIky1KMB8GA1UdIwQY
MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt
MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3
LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/7N6WMq
6lqfBL9epNYCXK3gTqhhDg9vL8+nMcVMz63FqbAZ3uIH12uoK/BogMHufliFQmBy
e+I7sjbRcJAaSTH1Hy2IS4dtBA6kiwB56Al1Pe28dw6BjIYUdUUAO7iWTBXLQU6t
h14tT8YNBzSFhQJjok7tYiBuTAzT7+1u8ywv/FYcYwTIWQmxd0XFQJKwY9jkfqrn
C15usRDlyQjrtuMdVVlZ+13KzFWufqAX3B1lZYjPwW/Ief4tE6uIKq1Bftvw8eB0
VLvO+9Z5PGw2dQhJ+uzKidqdTCxBV+48ZAkzus1tnrh0j5M/AtX/qpGiImpQt7Hy
HeyN6zezUuAIkQ==
-----END CERTIFICATE-----
Generated at Sun May 26 14:51:09 2024 by rpki-client on console-fra.rpki-client.org