Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: emCosmO6OuVYN+YaE/8z3yUdQAAtyqF0nR7tfh0l3zE=
Subject key identifier: AC:36:DE:49:35:E0:26:1B:C6:4A:CF:E4:EA:F9:44:66:01:BA:7C:66
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019072E61FB4374508D3588A6E4521C9B51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 11F2
Signing time: Tue 02 Jul 2024 10:03:22 +0000
Manifest this update: Tue 02 Jul 2024 10:03:22 +0000
Manifest next update: Wed 03 Jul 2024 10:03:22 +0000
Files and hashes: 1: 1-ZDgT-gF4KDx05lRCarMeH5Ata4.roa (hash: qNudejNB/2nxjDwatLOLSkWe7j0U0dy2K0RuVN1zePI=)
2: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: 91wetRQfhNJAD5whxfnSmgnjktofp203++uM2wBhRdg=)
3: zhBMjU7aAPmsZFzS4cIxrtvuYdE.roa (hash: 8U50t4Q0Qi2qbMttkkIiCo7yAr7olh8ufyeW4fOZHwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:e6:1f:b4:37:45:08:d3:58:8a:6e:45:21:c9:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jul 2 10:03:22 2024 GMT
Not After : Jul 3 10:03:22 2024 GMT
Subject: CN=ac36de4935e0261bc64acfe4eaf9446601ba7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:97:f6:2e:24:ca:04:13:3e:2e:12:80:36:
ec:6c:d2:bc:9c:f0:c0:4f:5c:1a:6a:09:d3:58:fc:
87:c6:ef:10:2b:96:aa:d1:b6:26:12:8f:3e:3b:2a:
c0:76:61:f0:9a:0c:1a:63:31:13:97:c0:ba:65:09:
28:c1:72:93:57:6b:4b:a2:33:54:23:db:9e:47:3c:
af:24:2b:5d:f9:b8:0b:fe:f9:23:d0:be:3a:23:b9:
25:02:b2:ea:62:b0:99:f8:40:16:cc:5f:27:86:07:
58:5b:8f:08:c9:60:97:ce:e6:a0:e2:b0:63:7f:03:
d1:8a:b3:eb:4c:71:dd:3a:fc:6e:71:04:31:8d:49:
f9:f5:64:e5:01:6c:00:1b:22:72:56:1b:25:45:07:
6c:6a:02:45:be:66:73:e3:52:2a:63:51:ea:ac:92:
73:7b:90:76:42:c2:a3:4d:a8:d2:dc:f4:a1:ba:84:
40:c8:b6:72:31:55:b1:b0:73:1e:a7:7f:9e:4d:1c:
4d:cb:bd:d1:2c:51:0c:bb:47:c5:33:e4:5e:a5:14:
0b:3b:e5:8c:6c:43:bb:3f:f3:98:8d:1e:75:6d:6e:
03:58:9c:bb:01:b2:f3:cd:0c:65:f8:43:e2:8a:f4:
59:ec:6e:04:8a:ac:96:07:b9:13:1a:94:1f:20:9e:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:DE:49:35:E0:26:1B:C6:4A:CF:E4:EA:F9:44:66:01:BA:7C:66
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1f:6b:a0:c7:21:bf:39:a2:c2:c8:02:8c:83:b6:a8:68:53:
38:b5:8f:8f:64:3b:ce:35:b0:4a:26:38:ab:ba:0a:0b:4f:de:
96:04:1a:38:28:66:70:5e:91:6a:53:d3:85:dd:16:05:ee:93:
cb:24:91:ac:40:6b:8f:21:3d:89:cd:69:09:7c:14:10:3f:52:
5d:b0:da:c1:38:13:d0:b9:cf:69:98:dc:a1:2e:fd:ff:8f:be:
79:43:64:e0:ae:a4:3c:3b:6c:25:39:2f:2a:88:b0:b6:4c:f8:
b1:5b:b8:f5:e3:7f:aa:80:08:10:53:4b:13:14:6f:02:c6:cb:
6e:53:7e:17:69:da:3e:4b:00:2f:c3:59:b4:d9:1e:e0:68:d4:
40:39:f7:ec:46:1a:18:f1:30:37:2d:49:68:e1:f8:c6:9b:fd:
55:f4:21:60:a0:f0:47:93:c3:14:93:d8:2e:06:09:b1:0a:04:
41:ea:9a:fa:2e:4d:3b:70:62:db:ef:0c:d3:c4:2a:aa:f7:ce:
c8:54:63:d7:00:bb:da:36:81:54:37:f2:44:60:c2:62:31:ba:
2c:31:dc:82:77:5a:ad:d9:3d:67:b1:e6:79:8b:2e:2c:30:bd:
9d:9a:a2:79:7f:53:69:23:92:e6:25:48:15:0d:0e:f6:2c:40:
28:14:7f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBy5h+0N0UI01iKbkUhybUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw
ZDZmMTUwHhcNMjQwNzAyMTAwMzIyWhcNMjQwNzAzMTAwMzIyWjAzMTEwLwYDVQQD
EyhhYzM2ZGU0OTM1ZTAyNjFiYzY0YWNmZTRlYWY5NDQ2NjAxYmE3YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEyX9i4kygQTPi4SgDbsbNK8nPDA
T1waagnTWPyHxu8QK5aq0bYmEo8+OyrAdmHwmgwaYzETl8C6ZQkowXKTV2tLojNU
I9ueRzyvJCtd+bgL/vkj0L46I7klArLqYrCZ+EAWzF8nhgdYW48IyWCXzuag4rBj
fwPRirPrTHHdOvxucQQxjUn59WTlAWwAGyJyVhslRQdsagJFvmZz41IqY1HqrJJz
e5B2QsKjTajS3PShuoRAyLZyMVWxsHMep3+eTRxNy73RLFEMu0fFM+RepRQLO+WM
bEO7P/OYjR51bW4DWJy7AbLzzQxl+EPiivRZ7G4EiqyWB7kTGpQfIJ4m7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw23kk14CYbxkrP5Or5RGYBunxmMB8GA1UdIwQY
MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt
NGI2OGIxNWQzMDFhLzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh
LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABB9roMch
vzmiwsgCjIO2qGhTOLWPj2Q7zjWwSiY4q7oKC0/elgQaOChmcF6RalPThd0WBe6T
yySRrEBrjyE9ic1pCXwUED9SXbDawTgT0LnPaZjcoS79/4++eUNk4K6kPDtsJTkv
Koiwtkz4sVu49eN/qoAIEFNLExRvAsbLblN+F2naPksAL8NZtNke4GjUQDn37EYa
GPEwNy1JaOH4xpv9VfQhYKDwR5PDFJPYLgYJsQoEQeqa+i5NO3Bi2+8M08QqqvfO
yFRj1wC72jaBVDfyRGDCYjG6LDHcgndardk9Z7HmeYsuLDC9nZqieX9TaSOS5iVI
FQ0O9ixAKBR/iw==
-----END CERTIFICATE-----
Generated at Tue Jul 2 12:57:21 2024 by rpki-client on console-fra.rpki-client.org