Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier: DbHk6zC7KCC0F+jQRYO/1hZt4iU64vblu8G+p7MGCKE=
Subject key identifier: B6:C1:C6:61:97:B0:93:79:CC:ED:F3:7B:E2:E6:EB:19:63:A8:46:E3
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial: 01903B50FB4483E797D383A334C74D082B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number: 0D7D
Signing time: Fri 21 Jun 2024 15:01:21 +0000
Manifest this update: Fri 21 Jun 2024 15:01:21 +0000
Manifest next update: Sat 22 Jun 2024 15:01:21 +0000
Files and hashes: 1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: dqC592s8c6Im78Qshro1YRxh3VIrL/SViwbTOgSldIk=)
2: cEPe1d3YoskScGmDT-EhAwRX1Zg.roa (hash: 2HlSilBxto4Shnydtat8ccDlkora6d+s7b7hf7cB5z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:50:fb:44:83:e7:97:d3:83:a3:34:c7:4d:08:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Validity
Not Before: Jun 21 15:01:21 2024 GMT
Not After : Jun 22 15:01:21 2024 GMT
Subject: CN=b6c1c66197b09379ccedf37be2e6eb1963a846e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:1b:af:e5:5c:9d:18:17:6b:25:f8:e7:f0:
e0:13:e2:25:0e:1b:ff:e3:13:77:c3:ca:53:14:47:
10:b7:90:bd:3e:22:0e:46:e8:47:16:4f:d5:4a:d7:
d4:96:72:a4:1e:f7:23:0b:e0:f4:f3:aa:ac:32:9e:
87:89:6e:61:19:73:5c:e2:9d:21:06:2c:b9:ed:74:
1b:3e:21:73:b5:e0:dd:eb:aa:6d:82:9f:aa:c5:79:
aa:98:b5:39:db:f0:c3:36:bc:97:a6:92:ae:8a:3c:
52:5a:10:c7:9c:5a:82:96:35:a7:a1:53:ec:82:2c:
ea:33:54:14:c3:36:bc:56:5b:e5:6b:c0:b0:f5:0c:
4c:f8:05:19:d2:b5:b4:4e:92:b3:78:1c:69:18:d7:
ff:65:ee:43:29:4b:fe:62:4b:94:64:53:7d:3b:3a:
6a:50:f2:c9:9a:42:c2:82:34:6e:86:f5:73:ef:1d:
ce:45:fa:b0:78:5a:db:b8:59:ec:fa:cf:e0:92:c7:
af:9e:1f:42:f6:b7:5f:9c:22:76:95:81:2d:41:1c:
4e:f5:dc:64:24:ad:db:8e:1a:fe:cb:c2:da:8e:de:
33:bd:12:54:27:b4:76:47:82:62:f0:ce:26:d3:81:
2d:e0:03:3e:1f:f0:61:33:e1:7f:51:8f:8e:56:e8:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:C6:61:97:B0:93:79:CC:ED:F3:7B:E2:E6:EB:19:63:A8:46:E3
X509v3 Authority Key Identifier:
keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9b:f3:16:71:5e:6d:ad:a8:91:26:8d:b4:60:6a:91:fe:00:
55:11:79:c8:d3:61:2b:3f:04:b7:f3:5c:35:1b:a0:83:99:84:
2d:de:61:26:b0:a9:50:b7:81:a6:86:a8:ce:f4:b9:48:df:1a:
80:b6:59:42:c5:b1:0a:b0:0c:d9:2a:66:46:be:0d:66:bd:07:
17:f2:cb:23:b8:63:b3:7e:f6:38:63:e8:c8:68:a1:44:23:4a:
94:68:37:78:bf:80:c3:64:80:a9:25:af:71:40:0e:21:9b:fd:
89:d6:7f:a9:32:93:f0:a6:39:78:a2:d5:38:a1:bc:c8:4e:cd:
71:ea:f7:5a:25:97:57:b1:42:94:b4:78:73:c2:90:d5:c6:6e:
c5:e3:37:35:21:78:b6:51:5c:af:a8:9b:b1:89:1f:0c:0a:ff:
cb:dc:2c:b4:3f:81:3e:9c:9c:2d:d7:73:15:7c:8e:71:99:e7:
76:a8:9f:85:fe:cb:e5:85:b1:79:28:15:61:f0:fb:22:ec:c5:
62:c5:9f:c2:4d:b9:5a:21:f1:5b:d5:80:ee:72:7f:05:de:10:
44:39:de:9c:07:43:5a:40:3f:c0:c1:5b:03:d5:ad:15:59:8a:
2d:2e:92:39:80:e1:54:fe:98:7c:1e:66:9d:44:3c:ee:af:33:
db:e1:ea:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA7UPtEg+eX04OjNMdNCCs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw
YzdkM2QwHhcNMjQwNjIxMTUwMTIxWhcNMjQwNjIyMTUwMTIxWjAzMTEwLwYDVQQD
EyhiNmMxYzY2MTk3YjA5Mzc5Y2NlZGYzN2JlMmU2ZWIxOTYzYTg0NmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouYbr+VcnRgXayX45/DgE+IlDhv/
4xN3w8pTFEcQt5C9PiIORuhHFk/VStfUlnKkHvcjC+D086qsMp6HiW5hGXNc4p0h
Biy57XQbPiFzteDd66ptgp+qxXmqmLU52/DDNryXppKuijxSWhDHnFqCljWnoVPs
gizqM1QUwza8Vlvla8Cw9QxM+AUZ0rW0TpKzeBxpGNf/Ze5DKUv+YkuUZFN9Ozpq
UPLJmkLCgjRuhvVz7x3ORfqweFrbuFns+s/gksevnh9C9rdfnCJ2lYEtQRxO9dxk
JK3bjhr+y8Lajt4zvRJUJ7R2R4Ji8M4m04Et4AM+H/BhM+F/UY+OVugIfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbBxmGXsJN5zO3ze+Lm6xljqEbjMB8GA1UdIwQY
MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt
YWE4OTgxMzg5OTRjLzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj
LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5vzFnFe
ba2okSaNtGBqkf4AVRF5yNNhKz8Et/NcNRugg5mELd5hJrCpULeBpoaozvS5SN8a
gLZZQsWxCrAM2SpmRr4NZr0HF/LLI7hjs372OGPoyGihRCNKlGg3eL+Aw2SAqSWv
cUAOIZv9idZ/qTKT8KY5eKLVOKG8yE7Ncer3WiWXV7FClLR4c8KQ1cZuxeM3NSF4
tlFcr6ibsYkfDAr/y9wstD+BPpycLddzFXyOcZnndqifhf7L5YWxeSgVYfD7IuzF
YsWfwk25WiHxW9WA7nJ/Bd4QRDnenAdDWkA/wMFbA9WtFVmKLS6SOYDhVP6YfB5m
nUQ87q8z2+HqPA==
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:28:54 2024 by rpki-client on console-fra.rpki-client.org