Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: 1lCLwAPH/qCEN+PrAjVxMX+sDX2M7n/n2Kypg6dJeO8=
Subject key identifier: DB:34:11:A7:FD:24:32:BA:2C:0E:E7:97:2A:F1:7C:A3:0B:47:F2:99
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 01901CD85FE4624A1FF47ADC0F0DDDC6DCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 09F3
Signing time: Sat 15 Jun 2024 17:01:00 +0000
Manifest this update: Sat 15 Jun 2024 17:01:00 +0000
Manifest next update: Sun 16 Jun 2024 17:01:00 +0000
Files and hashes: 1: HcoFNIlZ6uBUW19-ug2tvUEK7qA.roa (hash: DRXtWUcE5+q578i4hR1mN5bHB6TnUUkBdm47fq/SCPg=)
2: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: Pt92lFWvQCq7vlEva2QVtVpFjND7bTYAubBAWB35YH0=)
3: bVhUbkg4UqIcwFpUWMEw-9tcZyw.roa (hash: Yz6KOJ28MbFXWeKP1QaysipVQiXXeXgRoXTOUfQkhO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:5f:e4:62:4a:1f:f4:7a:dc:0f:0d:dd:c6:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jun 15 17:01:00 2024 GMT
Not After : Jun 16 17:01:00 2024 GMT
Subject: CN=db3411a7fd2432ba2c0ee7972af17ca30b47f299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:33:5f:a1:e1:4a:3d:00:a3:1f:95:cf:df:
3a:7c:92:8e:f5:91:7c:2a:53:4f:dc:25:92:d9:30:
22:4d:9d:3b:bc:f2:0d:78:36:45:53:8a:30:32:4d:
e1:a3:20:2e:b8:0b:3d:9a:e6:29:60:2f:36:4a:84:
28:4f:20:b9:74:89:ac:98:b8:e9:a3:3e:01:2a:c5:
ee:8b:e4:f3:43:72:c3:3f:9c:54:de:74:8c:e5:4d:
27:61:8f:7f:54:4a:89:43:c8:49:2f:5a:36:f4:57:
6b:06:4e:b2:08:5b:9f:ac:26:83:66:37:3c:6a:79:
7a:41:9e:37:45:bd:2e:a0:69:45:78:da:23:13:1d:
02:30:6f:ea:52:2c:47:4e:42:ff:00:62:07:fd:28:
1a:e4:54:76:24:81:67:d0:fb:16:e6:24:9a:85:b6:
cc:c2:a6:b6:66:bd:fc:ba:cb:75:1b:5a:a4:ae:00:
9c:39:a2:26:f2:2a:3e:b3:78:ae:69:82:06:ee:fa:
6f:b0:76:c7:45:7a:d2:48:c8:0d:f8:78:eb:a3:f4:
97:c3:3a:57:6c:46:22:19:c4:ff:05:30:85:45:10:
4d:50:5f:7e:fc:37:e5:dd:c4:bf:6e:eb:0a:fd:34:
00:85:8e:06:d8:80:f9:07:31:85:a0:83:b3:87:f7:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:11:A7:FD:24:32:BA:2C:0E:E7:97:2A:F1:7C:A3:0B:47:F2:99
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4a:5c:b8:21:08:8d:87:2e:0a:74:dc:5b:39:b7:20:9d:84:
f0:e2:6e:a7:15:69:e8:90:05:fa:37:e1:1c:d4:3c:3d:90:bd:
d1:00:78:aa:99:29:87:e9:70:c9:b3:93:34:32:29:f6:5c:a4:
63:1c:8b:20:9b:c9:9d:c7:c2:76:9a:53:e3:24:13:08:35:cf:
e3:0a:de:d1:6d:a4:2f:45:df:e8:ed:1e:c4:4b:86:52:88:06:
f7:6b:10:36:99:91:6c:c4:88:3c:bb:17:15:3d:f3:0b:8a:03:
57:b3:74:6e:a2:c1:a3:af:b8:2e:ca:b4:72:10:2f:2a:79:b0:
ef:14:b6:9e:7f:65:7e:c8:9b:b8:22:64:59:e6:e5:5f:38:4f:
fe:4b:ce:1c:64:14:f3:78:f0:e9:e4:3d:60:6b:6f:88:27:4f:
ad:87:0e:a4:51:34:65:c3:a8:b4:2a:67:b9:ed:22:d4:1d:2d:
db:43:61:91:89:68:05:09:a7:35:65:e9:67:f3:7b:72:86:23:
89:33:e1:d1:45:6c:a5:5c:8b:a6:df:13:1a:cb:3f:7b:d5:a3:
38:29:43:12:4c:35:3b:9e:35:0e:87:ea:2a:97:37:2f:0a:51:
08:d1:14:bd:cd:76:dd:90:56:e7:3e:ae:06:b8:b0:e3:29:27:
25:b0:e4:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2F/kYkof9HrcDw3dxtz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi
NWM1OWEwHhcNMjQwNjE1MTcwMTAwWhcNMjQwNjE2MTcwMTAwWjAzMTEwLwYDVQQD
EyhkYjM0MTFhN2ZkMjQzMmJhMmMwZWU3OTcyYWYxN2NhMzBiNDdmMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt74zX6HhSj0Aox+Vz986fJKO9ZF8
KlNP3CWS2TAiTZ07vPINeDZFU4owMk3hoyAuuAs9muYpYC82SoQoTyC5dImsmLjp
oz4BKsXui+TzQ3LDP5xU3nSM5U0nYY9/VEqJQ8hJL1o29FdrBk6yCFufrCaDZjc8
anl6QZ43Rb0uoGlFeNojEx0CMG/qUixHTkL/AGIH/Sga5FR2JIFn0PsW5iSahbbM
wqa2Zr38ust1G1qkrgCcOaIm8io+s3iuaYIG7vpvsHbHRXrSSMgN+Hjro/SXwzpX
bEYiGcT/BTCFRRBNUF9+/Dfl3cS/busK/TQAhY4G2ID5BzGFoIOzh/cstwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs0Eaf9JDK6LA7nlyrxfKMLR/KZMB8GA1UdIwQY
MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt
OWY0NDI5ZjMzODFlLzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl
LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkpcuCEI
jYcuCnTcWzm3IJ2E8OJupxVp6JAF+jfhHNQ8PZC90QB4qpkph+lwybOTNDIp9lyk
YxyLIJvJncfCdppT4yQTCDXP4wre0W2kL0Xf6O0exEuGUogG92sQNpmRbMSIPLsX
FT3zC4oDV7N0bqLBo6+4Lsq0chAvKnmw7xS2nn9lfsibuCJkWeblXzhP/kvOHGQU
83jw6eQ9YGtviCdPrYcOpFE0ZcOotCpnue0i1B0t20NhkYloBQmnNWXpZ/N7coYj
iTPh0UVspVyLpt8TGss/e9WjOClDEkw1O541DofqKpc3LwpRCNEUvc123ZBW5z6u
Briw4yknJbDk0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:06:24 2024 by rpki-client on console-fra.rpki-client.org