Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: DRdeEDr7zIRU+A1YN2Yu8SELk5r2TCXD7iCptuKtE2Q=
Subject key identifier: 10:52:60:98:E5:13:5F:92:18:AE:0E:A3:2C:98:B1:97:E9:4A:58:FB
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 01901BFF694D5FEE90EC7A81F307B2AB3C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1155
Signing time: Sat 15 Jun 2024 13:04:01 +0000
Manifest this update: Sat 15 Jun 2024 13:04:01 +0000
Manifest next update: Sun 16 Jun 2024 13:04:01 +0000
Files and hashes: 1: cEqMbci7qlz4eYyWOj_0b4bLBnQ.roa (hash: vTDcFvOG/YUBG9j5gGkMvS6rWzJ+Eez7Ev1HH3E/n/U=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: Ke4ZU9v8p/rVyznD9DVxv0ZLZkZdHg6sB15ydPy4ecM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:ff:69:4d:5f:ee:90:ec:7a:81:f3:07:b2:ab:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jun 15 13:04:01 2024 GMT
Not After : Jun 16 13:04:01 2024 GMT
Subject: CN=10526098e5135f9218ae0ea32c98b197e94a58fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:33:2e:38:ad:e6:d8:1a:12:67:9b:08:4b:
a9:3d:77:b8:97:52:7a:d2:60:4f:e8:35:79:09:8e:
a5:af:27:0d:0e:57:31:c5:c8:72:5d:75:df:23:e4:
df:27:65:e5:bb:8d:57:3d:c4:40:7b:33:fd:fa:25:
a7:b0:7c:2b:d7:59:63:d1:50:cb:b0:36:d0:01:c8:
a9:59:13:68:e9:0e:d9:77:d4:41:fe:49:8e:14:90:
99:be:4b:8f:3e:a4:64:58:83:42:64:14:ab:ad:f8:
6d:c7:ea:6b:a9:66:91:70:05:80:b6:2d:3f:85:66:
ea:84:00:a9:25:f3:cb:87:30:d5:93:37:00:80:af:
2c:87:3e:0d:cd:b8:7f:c0:55:be:31:6d:66:65:5a:
dc:b8:e8:b0:16:c3:b1:6a:03:6c:f1:59:c2:03:81:
2c:aa:11:b0:23:00:1f:33:41:a5:49:12:62:3d:46:
f7:69:30:65:9d:5c:28:5b:8d:86:7a:2c:33:c0:12:
97:f8:f8:d0:82:62:17:d7:bb:48:ee:17:3e:10:b5:
e4:b3:ba:cc:5a:54:d2:10:14:53:9e:56:08:b8:22:
4a:2e:aa:23:3b:7a:c2:1a:df:7b:8c:a5:c4:2e:68:
93:fa:eb:0e:cc:de:2a:d4:50:92:78:04:8c:c8:b9:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:60:98:E5:13:5F:92:18:AE:0E:A3:2C:98:B1:97:E9:4A:58:FB
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:66:83:66:16:b9:dc:96:f0:3b:f0:b6:4e:0a:46:24:71:af:
c7:b6:46:12:35:98:47:89:08:89:ef:fd:89:66:20:82:d3:92:
ea:47:94:3a:39:02:9f:fb:58:43:2e:fe:33:d2:de:f1:db:ab:
bb:d2:ff:ba:48:e7:11:b3:9a:3c:a7:f1:a8:91:45:7d:7c:36:
11:97:1e:c5:67:96:13:d3:9f:d6:24:c5:e7:7b:cd:1a:1f:0e:
cd:47:e4:c1:25:99:39:38:69:5f:b0:d0:0f:2a:29:dc:27:be:
8a:a5:c0:67:19:9a:59:6c:c6:8b:a2:d0:3e:a4:19:e0:e4:29:
39:d3:a0:e4:10:25:fc:87:fd:18:e4:1e:67:dc:31:9a:4c:7b:
28:dc:53:af:f4:3d:f4:1e:db:f2:44:93:4b:a5:78:29:e3:57:
a4:1b:e8:f6:b5:fa:ec:de:a0:5b:26:17:0d:17:fc:64:11:cb:
be:f4:3e:c1:52:7b:c7:57:e5:09:89:8a:93:d8:e6:6f:da:7a:
6c:a8:61:3a:b9:f7:27:df:31:82:de:bf:47:31:dd:81:7b:8a:
f4:6c:83:dd:52:f3:43:fe:e5:43:68:02:ee:23:20:25:f2:c9:
2e:cb:9e:00:a6:02:2d:a4:e9:b6:bb:90:1c:e9:7c:50:8f:22:
7e:4a:c6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/2lNX+6Q7HqB8weyqzwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzg1NmU5NTZjNGFkZGI2MTU5OGYzYzI0ODlmMmJkZjZl
ZDFkMTgwHhcNMjQwNjE1MTMwNDAxWhcNMjQwNjE2MTMwNDAxWjAzMTEwLwYDVQQD
EygxMDUyNjA5OGU1MTM1ZjkyMThhZTBlYTMyYzk4YjE5N2U5NGE1OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXczLjit5tgaEmebCEupPXe4l1J6
0mBP6DV5CY6lrycNDlcxxchyXXXfI+TfJ2Xlu41XPcRAezP9+iWnsHwr11lj0VDL
sDbQAcipWRNo6Q7Zd9RB/kmOFJCZvkuPPqRkWINCZBSrrfhtx+prqWaRcAWAti0/
hWbqhACpJfPLhzDVkzcAgK8shz4Nzbh/wFW+MW1mZVrcuOiwFsOxagNs8VnCA4Es
qhGwIwAfM0GlSRJiPUb3aTBlnVwoW42GeiwzwBKX+PjQgmIX17tI7hc+ELXks7rM
WlTSEBRTnlYIuCJKLqojO3rCGt97jKXELmiT+usOzN4q1FCSeASMyLnGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBSYJjlE1+SGK4OoyyYsZfpSlj7MB8GA1UdIwQY
MBaAFLPIVulWxK3bYVmPPCSJ8r327R0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMt
MWIwZWY0NGY3ODg0LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMtMWIwZWY0NGY3ODg0
LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2aDZha5
3JbwO/C2TgpGJHGvx7ZGEjWYR4kIie/9iWYggtOS6keUOjkCn/tYQy7+M9Le8dur
u9L/ukjnEbOaPKfxqJFFfXw2EZcexWeWE9Of1iTF53vNGh8OzUfkwSWZOThpX7DQ
Dyop3Ce+iqXAZxmaWWzGi6LQPqQZ4OQpOdOg5BAl/If9GOQeZ9wxmkx7KNxTr/Q9
9B7b8kSTS6V4KeNXpBvo9rX67N6gWyYXDRf8ZBHLvvQ+wVJ7x1flCYmKk9jmb9p6
bKhhOrn3J98xgt6/RzHdgXuK9GyD3VLzQ/7lQ2gC7iMgJfLJLsueAKYCLaTptruQ
HOl8UI8ifkrGaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:05:51 2024 by rpki-client on console-fra.rpki-client.org