Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: K8yl1ql8Gm4PNfMfgN+S4Hn1krOEYtjCF6tucZPG1vc=
Subject key identifier: EB:A7:17:3F:FC:91:2E:9A:12:D0:DC:3D:BF:58:DA:26:9F:67:89:72
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 01901E58985918E5E418195167F5EF1F0967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 0ECC
Signing time: Sun 16 Jun 2024 00:00:40 +0000
Manifest this update: Sun 16 Jun 2024 00:00:40 +0000
Manifest next update: Mon 17 Jun 2024 00:00:40 +0000
Files and hashes: 1: 1-3iJAwN8UeYlcb22v46GaV6SHlg.roa (hash: KaSrfZL2GYEy2jhaMyE71pbUOojJd0IYLbRtkqNDCGg=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: 1o503zQ9MQGTt/Hs1f9GwhsfjgHE8Xcl2ptcSejXsKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:98:59:18:e5:e4:18:19:51:67:f5:ef:1f:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Jun 16 00:00:40 2024 GMT
Not After : Jun 17 00:00:40 2024 GMT
Subject: CN=eba7173ffc912e9a12d0dc3dbf58da269f678972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:45:8e:63:17:16:28:5e:b5:21:d1:cc:00:
5b:c0:a7:e8:c2:70:11:5a:ba:90:5f:cc:71:cc:71:
93:dd:1b:cd:7a:d2:c5:31:18:6e:cf:c7:c6:25:18:
08:cd:21:af:3c:ee:a7:87:6f:88:ac:90:60:89:67:
64:fb:f2:7c:1d:22:cb:a0:4d:df:7e:e7:c3:8f:db:
d5:14:21:83:26:5e:09:c8:a9:bf:98:0f:c2:af:04:
bd:32:2f:2c:09:3e:cf:46:22:3e:c2:cc:0a:92:71:
e5:fe:f8:af:59:b8:7e:e9:f1:4c:4e:12:e6:9b:a3:
0a:12:6a:50:21:ab:5e:e9:b1:7a:a5:76:fc:73:c1:
da:c0:2d:97:fd:83:76:9e:99:47:f2:02:e6:36:d5:
18:72:4a:da:cb:7f:dd:1e:ed:aa:23:6a:65:e0:ae:
14:49:b1:52:22:0f:a5:cc:c2:38:0b:a1:92:bd:a0:
61:76:53:70:74:7b:b1:79:4e:43:4d:40:7f:73:27:
42:55:a3:33:4e:b9:80:17:3b:3f:11:fe:21:f1:52:
e4:e0:79:b1:3b:c5:49:73:10:ee:4b:cf:64:81:72:
ed:85:39:4a:10:c4:f9:e7:c9:d1:c2:ef:01:de:cf:
56:4b:4e:fc:4d:41:9c:27:68:e5:3b:a1:f3:c4:2b:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:17:3F:FC:91:2E:9A:12:D0:DC:3D:BF:58:DA:26:9F:67:89:72
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:53:cf:0e:10:f7:3f:cb:9b:22:05:32:df:d2:1b:7d:1b:36:
c4:21:a6:ee:b9:04:73:11:79:4e:e5:0b:b9:5b:32:b4:33:2a:
2a:b8:b0:0e:ac:c1:57:f2:fe:df:90:22:d9:5b:7c:98:6f:7f:
8b:de:22:ba:1e:7b:67:df:13:f7:88:15:e2:52:84:bd:c4:9a:
0b:32:cd:79:bf:15:00:22:16:30:18:23:4d:f2:e0:ce:95:a6:
27:e7:91:f9:ae:bd:76:eb:66:6f:19:a6:f4:ee:00:1b:01:80:
e7:18:be:87:21:84:7f:30:04:c5:a5:34:3a:e9:19:b0:71:12:
26:de:2e:9e:ab:37:12:29:84:0c:7b:0e:06:36:df:57:54:d9:
e5:31:81:20:db:2a:be:56:8e:62:50:15:33:4a:62:33:75:99:
0e:3f:aa:4a:d0:4b:d8:63:f6:1c:4d:ce:20:80:d3:51:57:c6:
c4:e2:50:d6:ca:85:4b:12:87:b8:2e:f8:e0:6c:32:4f:cc:a4:
f5:db:9c:91:aa:99:89:93:6a:20:4e:9b:2d:8b:54:25:d0:a1:
a7:f3:90:5e:30:c1:02:03:eb:cc:ca:76:49:41:94:54:ee:fe:
e8:a8:9f:70:29:f2:75:ff:45:2d:2d:2d:21:5d:ec:eb:9f:99:
54:e1:d7:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWJhZGOXkGBlRZ/XvHwlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5
ZmJkMzUwHhcNMjQwNjE2MDAwMDQwWhcNMjQwNjE3MDAwMDQwWjAzMTEwLwYDVQQD
EyhlYmE3MTczZmZjOTEyZTlhMTJkMGRjM2RiZjU4ZGEyNjlmNjc4OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdFjmMXFihetSHRzABbwKfownAR
WrqQX8xxzHGT3RvNetLFMRhuz8fGJRgIzSGvPO6nh2+IrJBgiWdk+/J8HSLLoE3f
fufDj9vVFCGDJl4JyKm/mA/CrwS9Mi8sCT7PRiI+wswKknHl/vivWbh+6fFMThLm
m6MKEmpQIate6bF6pXb8c8HawC2X/YN2nplH8gLmNtUYckray3/dHu2qI2pl4K4U
SbFSIg+lzMI4C6GSvaBhdlNwdHuxeU5DTUB/cydCVaMzTrmAFzs/Ef4h8VLk4Hmx
O8VJcxDuS89kgXLthTlKEMT558nRwu8B3s9WS078TUGcJ2jlO6HzxCvCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOunFz/8kS6aEtDcPb9Y2iafZ4lyMB8GA1UdIwQY
MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt
OGE5NjYwNGM4MjZkLzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk
LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilPPDhD3
P8ubIgUy39IbfRs2xCGm7rkEcxF5TuULuVsytDMqKriwDqzBV/L+35Ai2Vt8mG9/
i94iuh57Z98T94gV4lKEvcSaCzLNeb8VACIWMBgjTfLgzpWmJ+eR+a69dutmbxmm
9O4AGwGA5xi+hyGEfzAExaU0OukZsHESJt4unqs3EimEDHsOBjbfV1TZ5TGBINsq
vlaOYlAVM0piM3WZDj+qStBL2GP2HE3OIIDTUVfGxOJQ1sqFSxKHuC744GwyT8yk
9duckaqZiZNqIE6bLYtUJdChp/OQXjDBAgPrzMp2SUGUVO7+6KifcCnydf9FLS0t
IV3s65+ZVOHXxw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:51 2024 by rpki-client on console-ams.rpki-client.org