Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: 8PM1EAlnh2N5Cpk/fKuxCJNFyCAjatJ5hcJ8/8gDfso=
Subject key identifier: 54:01:13:73:0C:DA:98:E8:40:8F:CB:14:2D:F2:FA:DA:37:F8:EA:C0
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 0190343C0B8BBE3DCD4AF08237057C69026D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 018C
Signing time: Thu 20 Jun 2024 06:01:08 +0000
Manifest this update: Thu 20 Jun 2024 06:01:08 +0000
Manifest next update: Fri 21 Jun 2024 06:01:08 +0000
Files and hashes: 1: 1-kVxXKCX8r8lEHzLjoF0WJoOyhU.roa (hash: QY7hcpGbjIGkN2W6J6pHKJ8xn7x7OPaCHqIDQ+bYo3I=)
2: AQOi8QKsZz_B5un0p7e6XzDHnNE.roa (hash: OYnvhGob/ToM0UqIlUNbEfI2hzmlrxbSbBuB97PcaHA=)
3: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: Z4TbA4ixQ+dUiK+6V3032bWIeYAgcfUmixRgSZ8dbeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:3c:0b:8b:be:3d:cd:4a:f0:82:37:05:7c:69:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jun 20 06:01:08 2024 GMT
Not After : Jun 21 06:01:08 2024 GMT
Subject: CN=540113730cda98e8408fcb142df2fada37f8eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:2c:e9:cc:5b:9d:f4:7b:f2:68:18:95:8c:
3d:ca:01:0c:4e:71:d5:da:c2:99:e1:b3:a4:b4:d4:
66:a9:26:bf:9f:65:2f:8d:4d:dc:bd:ba:f4:24:80:
52:40:ba:a4:b8:78:63:c7:6e:02:4c:20:c7:e4:9d:
8b:d6:ea:98:0e:ba:11:b7:0a:67:19:19:cf:c1:35:
23:d3:8f:6a:80:f9:2f:81:98:5f:90:66:6b:fd:52:
31:16:b3:61:40:9f:c1:00:cf:80:51:0b:7d:53:50:
03:b9:3d:95:86:f0:36:53:9b:db:be:2a:0d:1d:9e:
bb:b7:76:e2:51:d1:1a:e1:95:ff:93:d4:a3:79:75:
4c:51:82:93:5f:a9:e5:78:fb:28:c7:ed:81:7f:5c:
15:58:46:47:94:ed:a7:f5:48:87:b7:82:fb:4b:1f:
77:84:09:1a:25:f3:55:af:15:53:f6:47:30:09:2c:
ed:d4:30:17:f0:37:44:a4:33:98:b4:95:6e:ad:3d:
a3:cf:ef:3b:27:bf:67:ff:ef:9f:43:da:4e:e1:14:
03:2f:f0:aa:bd:0a:26:06:87:8f:88:b8:10:29:b5:
03:fb:8c:af:d0:2d:ab:c0:40:4d:64:31:7b:04:b6:
e7:69:d2:67:7d:6f:71:f9:50:df:bd:f0:76:04:ba:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:13:73:0C:DA:98:E8:40:8F:CB:14:2D:F2:FA:DA:37:F8:EA:C0
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e8:5b:6a:d3:75:ce:2e:29:cb:5b:4e:3b:bb:80:fb:00:7f:
8c:1b:07:ff:bb:67:88:42:1e:82:db:76:dc:2f:9a:d2:99:d5:
bc:19:df:e5:93:f4:5c:fc:1e:f1:d0:df:df:94:2b:d9:52:f4:
cb:3a:7e:30:e6:20:ef:e5:4b:04:c7:68:6d:71:5a:18:bc:81:
98:8c:b5:64:7e:cf:bb:1a:5c:d8:42:83:0f:76:86:7e:89:a3:
64:4e:27:b2:ad:e3:b3:eb:d0:65:d0:3e:b0:05:c3:11:be:a7:
01:dc:c2:9f:8e:c1:b5:30:58:76:ed:f1:fd:ac:65:65:12:f7:
39:12:89:4c:f7:de:97:19:1a:30:d3:e5:2f:33:50:18:4c:e1:
91:6d:29:e6:12:5e:4c:c6:5a:12:9c:80:56:33:a0:f8:7d:35:
7c:48:6b:9a:f1:7e:3c:bd:7c:6a:a1:b1:b8:24:8b:a3:7b:46:
e6:38:b5:39:e0:e9:c1:c6:83:67:4c:31:df:76:97:4e:23:d3:
dd:15:4a:68:af:e1:3f:71:13:ef:bf:17:d2:bd:85:d8:c0:f5:
38:32:a0:42:d6:d6:15:5a:75:92:ef:3f:4d:77:72:02:f5:98:
b1:fd:c5:8c:b0:2c:c5:93:c1:31:be:35:c1:e9:62:d6:af:c0:
c3:18:c7:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0PAuLvj3NSvCCNwV8aQJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5
ZmJlMzkwHhcNMjQwNjIwMDYwMTA4WhcNMjQwNjIxMDYwMTA4WjAzMTEwLwYDVQQD
Eyg1NDAxMTM3MzBjZGE5OGU4NDA4ZmNiMTQyZGYyZmFkYTM3ZjhlYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgs6cxbnfR78mgYlYw9ygEMTnHV
2sKZ4bOktNRmqSa/n2UvjU3cvbr0JIBSQLqkuHhjx24CTCDH5J2L1uqYDroRtwpn
GRnPwTUj049qgPkvgZhfkGZr/VIxFrNhQJ/BAM+AUQt9U1ADuT2VhvA2U5vbvioN
HZ67t3biUdEa4ZX/k9SjeXVMUYKTX6nlePsox+2Bf1wVWEZHlO2n9UiHt4L7Sx93
hAkaJfNVrxVT9kcwCSzt1DAX8DdEpDOYtJVurT2jz+87J79n/++fQ9pO4RQDL/Cq
vQomBoePiLgQKbUD+4yv0C2rwEBNZDF7BLbnadJnfW9x+VDfvfB2BLq9mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQBE3MM2pjoQI/LFC3y+to3+OrAMB8GA1UdIwQY
MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt
Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2
LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOhbatN1
zi4py1tOO7uA+wB/jBsH/7tniEIegtt23C+a0pnVvBnf5ZP0XPwe8dDf35Qr2VL0
yzp+MOYg7+VLBMdobXFaGLyBmIy1ZH7Puxpc2EKDD3aGfomjZE4nsq3js+vQZdA+
sAXDEb6nAdzCn47BtTBYdu3x/axlZRL3ORKJTPfelxkaMNPlLzNQGEzhkW0p5hJe
TMZaEpyAVjOg+H01fEhrmvF+PL18aqGxuCSLo3tG5ji1OeDpwcaDZ0wx33aXTiPT
3RVKaK/hP3ET778X0r2F2MD1ODKgQtbWFVp1ku8/TXdyAvWYsf3FjLAsxZPBMb41
weli1q/AwxjHlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 20 14:11:56 2024 by rpki-client on console-fra.rpki-client.org