Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: ouUzdXQapW88TaKfE3kCIcTw+t3IorbvK3KscO+gxMw=
Subject key identifier: 53:98:FA:E6:BC:BC:2A:66:15:BB:52:F4:4A:A9:7B:62:9D:E1:3C:92
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 018F874A05B8FD08E73138E8D280D4BC4285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1088
Signing time: Fri 17 May 2024 16:02:06 +0000
Manifest this update: Fri 17 May 2024 16:02:06 +0000
Manifest next update: Sat 18 May 2024 16:02:06 +0000
Files and hashes: 1: O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa (hash: pgmTaFJudaOPdu4xq5HXXii27fhwH417aICU6d74tSc=)
2: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: 43aQaJaAuqqGL6ztEUUwAREzp8Q0uDYba3J7YWk4FiQ=)
3: dAOzua8OV9Kl53YG_HqeOLpvKR8.roa (hash: 6Sk2TNdidKj1Cbz3OhIueNa1qW1T1m0HnqxKYC9w5g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:05:b8:fd:08:e7:31:38:e8:d2:80:d4:bc:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: May 17 16:02:06 2024 GMT
Not After : May 18 16:02:06 2024 GMT
Subject: CN=5398fae6bcbc2a6615bb52f44aa97b629de13c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:36:6b:24:7c:f7:a9:a4:be:93:7c:7d:fa:
87:e1:c1:b0:20:ad:84:02:bc:a3:69:a8:75:e8:9c:
dd:25:9a:21:8e:b7:07:8e:b1:37:9b:d2:51:e0:e1:
36:7c:73:0d:01:10:b7:4d:7a:32:bb:77:51:57:dd:
34:85:82:a6:aa:06:82:21:6a:99:a3:02:15:06:a1:
df:45:59:04:99:ac:3b:91:fe:05:44:2c:0e:b8:76:
02:a5:b8:af:c4:69:9f:67:98:1d:bc:ac:cc:1b:cb:
ce:95:69:b3:a7:b4:64:b1:d9:5d:a5:a7:6a:47:fd:
e5:55:df:ad:86:78:07:2d:55:1c:27:6d:5c:f1:3d:
5f:15:73:96:fd:ca:f9:f1:d9:2b:7d:47:56:fb:2c:
af:3d:56:2c:2c:db:28:f4:91:10:7c:86:f9:a7:88:
aa:3b:f6:4b:3b:5c:00:c9:e5:d7:bf:6f:62:48:6b:
2c:91:c1:08:6f:ef:d9:03:4f:95:2b:19:8c:ce:5a:
7d:49:9f:de:78:7e:e0:4b:47:f6:bd:0f:ea:85:82:
8c:c6:86:9d:1b:e7:96:71:03:99:d6:ec:e6:af:bc:
48:80:ef:bc:1c:21:40:5f:82:0e:92:39:36:c9:e1:
c2:6e:24:a9:b7:98:78:6e:7c:bf:6d:ae:87:a7:e1:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:FA:E6:BC:BC:2A:66:15:BB:52:F4:4A:A9:7B:62:9D:E1:3C:92
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:c4:d5:53:88:f6:03:2b:41:ba:da:20:4d:f9:50:5b:37:
21:ef:ce:93:08:5c:fd:04:27:02:79:39:40:be:b4:9c:3c:8d:
de:a9:1c:cd:91:41:a1:fc:a9:5a:ee:5d:28:1e:d7:b8:74:e4:
8b:f5:39:30:fb:21:61:d2:82:3b:a3:11:be:10:b8:8e:8d:fc:
48:68:26:a5:53:49:ed:d2:fd:e0:ea:1d:9c:1c:63:39:d7:38:
d4:25:2d:82:f1:f1:f1:04:d0:f7:34:ee:f1:a4:5c:3e:92:f7:
f4:a3:6d:60:35:aa:d3:c8:20:09:ac:08:68:4e:3e:0f:a2:de:
2b:f1:1f:39:ce:a8:19:f4:f0:40:66:c8:0e:bf:35:31:e5:8c:
59:05:44:a8:73:ca:a5:fe:27:a3:9e:3a:10:68:7c:a2:37:23:
ee:6c:0e:de:f8:4a:fe:73:ea:b8:16:1c:90:7e:48:d0:71:31:
b3:49:e8:34:81:3f:dd:30:52:c5:20:ad:be:d7:d1:80:c0:16:
59:ba:2f:e1:04:78:36:5d:19:65:e0:ad:a3:5e:fa:60:06:25:
0d:07:b4:93:35:b8:d2:97:a4:29:d6:32:26:16:36:1f:be:22:
7d:a8:f6:7e:0f:bf:d1:b5:2c:0a:6b:ce:11:0c:65:7a:4f:0a:
c9:60:c9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSgW4/QjnMTjo0oDUvEKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz
YzFkNTAwHhcNMjQwNTE3MTYwMjA2WhcNMjQwNTE4MTYwMjA2WjAzMTEwLwYDVQQD
Eyg1Mzk4ZmFlNmJjYmMyYTY2MTViYjUyZjQ0YWE5N2I2MjlkZTEzYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywM2ayR896mkvpN8ffqH4cGwIK2E
Aryjaah16JzdJZohjrcHjrE3m9JR4OE2fHMNARC3TXoyu3dRV900hYKmqgaCIWqZ
owIVBqHfRVkEmaw7kf4FRCwOuHYCpbivxGmfZ5gdvKzMG8vOlWmzp7Rksdldpadq
R/3lVd+thngHLVUcJ21c8T1fFXOW/cr58dkrfUdW+yyvPVYsLNso9JEQfIb5p4iq
O/ZLO1wAyeXXv29iSGsskcEIb+/ZA0+VKxmMzlp9SZ/eeH7gS0f2vQ/qhYKMxoad
G+eWcQOZ1uzmr7xIgO+8HCFAX4IOkjk2yeHCbiSpt5h4bny/ba6Hp+EDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOY+ua8vCpmFbtS9Eqpe2Kd4TySMB8GA1UdIwQY
MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt
NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy
LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHTE1VOI
9gMrQbraIE35UFs3Ie/Okwhc/QQnAnk5QL60nDyN3qkczZFBofypWu5dKB7XuHTk
i/U5MPshYdKCO6MRvhC4jo38SGgmpVNJ7dL94OodnBxjOdc41CUtgvHx8QTQ9zTu
8aRcPpL39KNtYDWq08ggCawIaE4+D6LeK/EfOc6oGfTwQGbIDr81MeWMWQVEqHPK
pf4no546EGh8ojcj7mwO3vhK/nPquBYckH5I0HExs0noNIE/3TBSxSCtvtfRgMAW
Wbov4QR4Nl0ZZeCto176YAYlDQe0kzW40pekKdYyJhY2H74ifaj2fg+/0bUsCmvO
EQxlek8KyWDJ9g==
-----END CERTIFICATE-----
Generated at Sat May 18 02:14:10 2024 by rpki-client on console-fra.rpki-client.org