Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: gefSFRPRzPlU/63fsJws6tzwyOMsPbN7lZOQQQBFB8A=
Subject key identifier: 66:A9:02:3F:8C:34:68:1A:68:E6:F2:46:9E:99:75:80:2B:BD:B3:4A
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 0190489E20A2D5F0D5A1E7E95A545017692F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: BB
Signing time: Mon 24 Jun 2024 05:00:40 +0000
Manifest this update: Mon 24 Jun 2024 05:00:40 +0000
Manifest next update: Tue 25 Jun 2024 05:00:40 +0000
Files and hashes: 1: YHcFrXFelERSArTHrxUQcD6akX4.roa (hash: 33kvu4RPWeZHWYBLV//TE25xX38Sxaz4fLGJh49+nyc=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: We41PJiIW8DRCJbVnrF2tSNqx24LKQQzw5XW5PiiiBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:9e:20:a2:d5:f0:d5:a1:e7:e9:5a:54:50:17:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Jun 24 05:00:40 2024 GMT
Not After : Jun 25 05:00:40 2024 GMT
Subject: CN=66a9023f8c34681a68e6f2469e9975802bbdb34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:0f:20:35:2a:d8:11:25:a2:32:8d:e9:66:
4a:74:0d:f9:10:62:20:43:94:d1:33:dd:39:67:ab:
d7:64:7e:1b:62:d7:f2:6f:b2:e4:10:ee:c1:72:45:
dc:1a:0c:42:e4:73:d1:db:02:e8:7c:02:56:e4:37:
82:cd:af:59:c7:8b:52:f3:5b:ad:b6:bf:9c:e1:2f:
db:2e:24:5b:34:c1:50:39:38:19:69:c8:81:71:29:
71:97:4c:d9:33:97:7c:71:50:6b:f6:26:7d:1f:61:
3b:86:07:23:cf:10:97:0f:b9:fa:c7:f7:a5:9b:10:
cc:b2:0e:e8:3c:62:90:40:93:68:e8:f9:b3:38:e5:
53:1e:48:60:6b:33:25:de:b3:33:ca:ec:d8:b8:4d:
6c:4e:8b:ca:70:c7:4b:c5:61:ca:31:a7:eb:56:57:
77:99:b7:ea:93:a2:68:2b:b7:20:9b:84:7e:6a:ea:
a1:33:f8:a2:79:4e:66:99:f2:97:96:d3:f7:6f:ab:
c7:e6:b5:d6:8f:60:96:d6:53:ab:ee:a3:8b:7a:f0:
38:c2:e4:9c:55:01:f1:00:a9:ab:a4:6c:62:72:67:
59:5a:0e:e7:5a:7a:b5:18:30:75:ac:0a:5a:aa:54:
66:ca:f5:b0:4e:f5:b5:ce:56:d5:0e:37:2e:61:ae:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:02:3F:8C:34:68:1A:68:E6:F2:46:9E:99:75:80:2B:BD:B3:4A
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8b:5e:f2:cf:03:77:e6:b0:cc:89:1b:94:e3:e5:fc:a3:45:
b6:92:2f:25:bf:b2:ae:f8:b6:32:2e:01:3f:6b:15:67:12:2d:
b8:cc:f4:98:0b:93:bd:5c:96:0e:cc:c0:19:e2:44:f5:e7:1f:
7c:de:1f:c3:b5:0f:f2:a9:7f:cb:0a:b4:d9:fc:18:31:34:77:
cc:45:4d:e5:bd:e0:75:32:9e:8f:1f:b8:58:d9:ad:81:fc:81:
d6:b7:d5:b3:04:d1:c2:ef:be:f7:0e:18:80:7b:93:f7:3f:eb:
4e:cf:b8:5b:8a:b7:47:8e:0f:48:0d:c4:3e:d8:16:45:98:d9:
ba:3d:6a:9c:2f:c3:a7:6e:9c:59:9c:1c:9b:84:25:af:6d:94:
b8:40:e5:7e:fa:9b:e0:73:04:11:67:d2:de:ee:fc:cb:35:ee:
a1:79:c8:e2:71:33:c5:0b:9e:68:c6:77:f1:ed:ec:6a:f2:19:
fa:27:81:b4:3c:31:bc:64:ec:27:38:66:bf:89:d1:68:d0:00:
61:e9:4e:ab:25:93:4b:ef:7a:04:3a:9e:28:ac:c5:f1:03:ad:
94:c4:b0:12:58:a9:67:e1:63:aa:e6:a7:f5:ac:38:11:d4:64:
9a:ff:e7:0f:55:0a:8e:95:83:93:ea:73:7a:31:28:cf:72:d4:
1b:3f:ee:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIniCi1fDVoefpWlRQF2kvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTJhMDYwOTBmMDE2OTQwZDMxZWIxYjA5YmFlMTJkOTRi
MTk1YjAwHhcNMjQwNjI0MDUwMDQwWhcNMjQwNjI1MDUwMDQwWjAzMTEwLwYDVQQD
Eyg2NmE5MDIzZjhjMzQ2ODFhNjhlNmYyNDY5ZTk5NzU4MDJiYmRiMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUEPIDUq2BElojKN6WZKdA35EGIg
Q5TRM905Z6vXZH4bYtfyb7LkEO7BckXcGgxC5HPR2wLofAJW5DeCza9Zx4tS81ut
tr+c4S/bLiRbNMFQOTgZaciBcSlxl0zZM5d8cVBr9iZ9H2E7hgcjzxCXD7n6x/el
mxDMsg7oPGKQQJNo6PmzOOVTHkhgazMl3rMzyuzYuE1sTovKcMdLxWHKMafrVld3
mbfqk6JoK7cgm4R+auqhM/iieU5mmfKXltP3b6vH5rXWj2CW1lOr7qOLevA4wuSc
VQHxAKmrpGxicmdZWg7nWnq1GDB1rApaqlRmyvWwTvW1zlbVDjcuYa6aIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGapAj+MNGgaaObyRp6ZdYArvbNKMB8GA1UdIwQY
MBaAFMWSoGCQ8BaUDTHrGwm64S2UsZWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEt
YzQ1NjIwMzI2NDkxLzEveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEtYzQ1NjIwMzI2NDkx
LzEveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIte8s8D
d+awzIkblOPl/KNFtpIvJb+yrvi2Mi4BP2sVZxItuMz0mAuTvVyWDszAGeJE9ecf
fN4fw7UP8ql/ywq02fwYMTR3zEVN5b3gdTKejx+4WNmtgfyB1rfVswTRwu++9w4Y
gHuT9z/rTs+4W4q3R44PSA3EPtgWRZjZuj1qnC/Dp26cWZwcm4Qlr22UuEDlfvqb
4HMEEWfS3u78yzXuoXnI4nEzxQueaMZ38e3savIZ+ieBtDwxvGTsJzhmv4nRaNAA
YelOqyWTS+96BDqeKKzF8QOtlMSwElipZ+Fjquan9aw4EdRkmv/nD1UKjpWDk+pz
ejEoz3LUGz/uwg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:11:36 2024 by rpki-client on console-fra.rpki-client.org