Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: baVZOqeeZ8E9l7q9QUqqc4gJZfxl+NGq7znN304TMnU=
Subject key identifier: CF:AB:89:CA:FF:F9:08:AC:91:6C:67:B7:42:E6:77:09:C6:75:82:BD
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 01901E8FB176C943DDD2D7C8FC069B7AD1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0171
Signing time: Sun 16 Jun 2024 01:00:51 +0000
Manifest this update: Sun 16 Jun 2024 01:00:51 +0000
Manifest next update: Mon 17 Jun 2024 01:00:51 +0000
Files and hashes: 1: WaBgHFrZw0y6z5wijFnJQTUVeSg.roa (hash: w4OtV7N8CWfl7bUmM7sa94eVSRTZLDDKiitgv0wq1OI=)
2: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: aFOiYmA2sNJwtURZ+XClSloj6+KdxCYcyEdZ/kEJDA0=)
3: ikxdhqADZGBPuTR3h49gphvr41E.roa (hash: crQ4eVW3u/IgVMXkpwgetqR3+LliJy7lZt83fT5ZXf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:b1:76:c9:43:dd:d2:d7:c8:fc:06:9b:7a:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Jun 16 01:00:51 2024 GMT
Not After : Jun 17 01:00:51 2024 GMT
Subject: CN=cfab89cafff908ac916c67b742e67709c67582bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:d5:ba:fe:e8:19:51:74:6b:c7:dd:a2:bb:
e8:50:62:53:01:01:36:bb:42:89:dc:79:29:e9:14:
b2:3d:83:5b:ca:b4:10:10:3b:71:d7:42:43:6f:cf:
f9:7d:cb:8e:62:e0:06:e8:09:ad:9f:1c:81:00:b8:
ec:0b:87:d5:a5:f8:fc:93:29:d4:73:f9:d9:0b:2b:
32:4b:21:0b:49:6b:01:2c:17:2e:5c:9b:9a:6e:c5:
89:2e:a4:63:b2:e4:5d:02:82:2c:4d:d8:91:1d:8f:
b7:22:7e:ab:65:30:ed:ea:e6:5d:00:af:48:9a:04:
3b:b3:f2:42:b5:49:a1:84:c3:20:d6:55:ef:e6:0a:
5c:6a:cb:e9:98:65:f5:fc:f6:53:47:1c:c1:fa:00:
62:95:0e:6d:36:be:fd:0b:f0:a4:f5:aa:d9:ef:4c:
38:b8:dc:9d:6b:37:bf:81:48:9b:e9:76:01:33:7e:
29:c0:ae:8c:35:16:9c:43:05:3b:68:ed:8c:7c:d2:
0d:a2:a3:05:36:e6:58:fc:71:01:0d:3c:77:3f:2a:
0f:d5:ad:fd:c8:d3:9c:ba:cc:01:78:6d:15:19:f9:
54:6f:d2:a1:1b:9b:ab:48:b9:32:92:59:93:86:40:
7e:31:86:ca:11:7c:6a:f1:2c:e6:6e:b4:3a:85:2d:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:89:CA:FF:F9:08:AC:91:6C:67:B7:42:E6:77:09:C6:75:82:BD
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:2f:dd:ef:bb:b3:06:3d:5c:dd:13:7a:8d:26:c0:16:3d:
d3:89:2f:6c:3c:01:88:5e:24:62:99:4d:9b:77:88:c9:95:1b:
43:ef:f9:f1:89:f2:5e:88:fe:42:09:dd:15:8a:43:5f:5c:e5:
13:2d:d8:da:88:c9:6f:26:45:7f:00:a2:9c:53:45:af:be:6e:
33:f4:29:49:d7:61:5b:ba:25:f1:2f:53:af:a7:02:61:45:c5:
8f:c8:4e:e6:64:52:34:b4:48:06:fb:08:ad:87:ff:29:4e:56:
ac:bf:05:66:b8:70:a3:53:21:af:25:2e:ab:ee:c9:35:82:85:
26:ff:91:b4:e3:54:b0:95:cc:46:98:54:3b:1f:d3:71:ce:47:
19:86:58:97:5f:19:c9:f7:d5:fe:ac:5d:36:ac:20:77:8f:78:
2e:a7:79:86:90:9e:ba:14:6b:98:23:91:bf:58:f4:77:db:44:
a9:70:7b:72:72:1c:62:1c:83:fc:75:4e:a4:03:8a:80:01:95:
f8:97:c4:98:86:05:24:61:49:eb:35:7b:76:ba:aa:83:62:8b:
1c:9a:7b:40:6e:db:58:73:16:0c:c0:f1:47:41:d3:b2:ae:44:
aa:9d:9f:94:67:67:0b:6c:4e:b6:6e:9e:f0:c7:13:4a:83:39:
25:c1:d5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej7F2yUPd0tfI/AabetHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj
ODZiYTkwHhcNMjQwNjE2MDEwMDUxWhcNMjQwNjE3MDEwMDUxWjAzMTEwLwYDVQQD
EyhjZmFiODljYWZmZjkwOGFjOTE2YzY3Yjc0MmU2NzcwOWM2NzU4MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTrVuv7oGVF0a8fdorvoUGJTAQE2
u0KJ3Hkp6RSyPYNbyrQQEDtx10JDb8/5fcuOYuAG6AmtnxyBALjsC4fVpfj8kynU
c/nZCysySyELSWsBLBcuXJuabsWJLqRjsuRdAoIsTdiRHY+3In6rZTDt6uZdAK9I
mgQ7s/JCtUmhhMMg1lXv5gpcasvpmGX1/PZTRxzB+gBilQ5tNr79C/Ck9arZ70w4
uNydaze/gUib6XYBM34pwK6MNRacQwU7aO2MfNINoqMFNuZY/HEBDTx3PyoP1a39
yNOcuswBeG0VGflUb9KhG5urSLkyklmThkB+MYbKEXxq8SzmbrQ6hS1yowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+ricr/+QiskWxnt0LmdwnGdYK9MB8GA1UdIwQY
MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt
ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz
LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/Ev3e+7
swY9XN0Teo0mwBY904kvbDwBiF4kYplNm3eIyZUbQ+/58YnyXoj+QgndFYpDX1zl
Ey3Y2ojJbyZFfwCinFNFr75uM/QpSddhW7ol8S9Tr6cCYUXFj8hO5mRSNLRIBvsI
rYf/KU5WrL8FZrhwo1MhryUuq+7JNYKFJv+RtONUsJXMRphUOx/Tcc5HGYZYl18Z
yffV/qxdNqwgd494Lqd5hpCeuhRrmCORv1j0d9tEqXB7cnIcYhyD/HVOpAOKgAGV
+JfEmIYFJGFJ6zV7drqqg2KLHJp7QG7bWHMWDMDxR0HTsq5Eqp2flGdnC2xOtm6e
8McTSoM5JcHVuA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:28 2024 by rpki-client on console-ams.rpki-client.org