Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: 2BVvQXPxBERfLcXPXO9l1nl8GBXSPEn9D5w95t8PcvI=
Subject key identifier: DC:43:E3:8E:5D:BB:C9:41:91:D8:D0:A4:52:DB:D4:30:72:32:CF:39
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01901E5932ADEC25E06F9D8522800A4A25EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 11C4
Signing time: Sun 16 Jun 2024 00:01:20 +0000
Manifest this update: Sun 16 Jun 2024 00:01:20 +0000
Manifest next update: Mon 17 Jun 2024 00:01:20 +0000
Files and hashes: 1: 2m6VhdE18CMK2ixeyp6Gb7tQblo.roa (hash: fHj+RYPLJj1gt3d18nEI0g097dwGFrvObuE+qF2XqLg=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: v7hHCno49D/ZYv2696uwoR6+RTWl/857ll8KIUfCxfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:32:ad:ec:25:e0:6f:9d:85:22:80:0a:4a:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jun 16 00:01:20 2024 GMT
Not After : Jun 17 00:01:20 2024 GMT
Subject: CN=dc43e38e5dbbc94191d8d0a452dbd4307232cf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:07:3a:8c:dc:72:36:e8:c3:c9:db:5f:1f:
cf:a2:69:c3:5b:7b:d8:fc:b9:93:2a:21:51:37:91:
45:f6:b4:b5:ab:89:0c:8f:73:7b:09:ad:1c:59:6d:
ae:76:88:21:af:83:13:b3:0d:12:54:12:d5:3f:95:
98:d0:a0:9e:1f:d6:6e:77:aa:f5:fe:cc:e4:ee:d2:
ef:d1:48:3d:a3:22:b8:77:40:a1:6b:67:ca:38:3c:
53:02:0e:01:6b:8d:48:35:fd:11:1b:1b:b4:59:73:
6f:fb:a6:2d:b6:25:4f:22:09:b3:c9:51:69:ab:d6:
e7:d0:7c:b8:55:5d:26:5f:ae:bf:23:3c:ba:3c:d4:
5d:a1:e6:b3:02:a4:ba:96:91:43:dd:4d:fe:d3:ed:
1b:92:0f:eb:5c:60:4f:a1:f9:56:d5:a8:32:50:0d:
9a:81:52:5a:4e:86:4b:3e:0c:97:0f:51:eb:d9:7b:
64:eb:22:91:fb:bc:9c:ab:30:b9:d6:44:83:6c:59:
68:d9:21:0a:cc:01:0f:60:b3:e8:d6:d9:67:fc:f1:
e5:ba:36:28:af:6c:a4:4b:d5:c3:17:3f:27:2b:92:
fb:f1:f5:3f:d7:62:6e:0b:ea:85:17:25:5a:e5:15:
c8:bd:a4:b8:a4:71:ae:7f:33:4d:67:36:26:30:59:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:E3:8E:5D:BB:C9:41:91:D8:D0:A4:52:DB:D4:30:72:32:CF:39
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:e6:72:9b:1e:a4:93:66:e8:24:3c:a4:04:be:e7:a6:e7:
9a:2c:52:3f:7a:f2:05:b3:03:1b:a8:a8:0d:30:8e:2c:20:f7:
ff:80:0a:3c:6b:70:5a:67:e9:47:44:44:38:67:fb:60:25:dc:
48:e3:b3:d0:db:3c:00:41:99:e8:25:c8:0f:0d:59:23:cc:6a:
a7:f4:3c:b3:a3:b0:9e:5c:49:57:8e:5c:cf:79:ef:d2:ce:4f:
52:37:e3:18:88:1e:1b:ea:63:81:d2:a6:b8:da:8f:9c:0b:a1:
de:11:80:f1:88:c0:6f:80:c8:e2:fd:0f:04:1d:7e:f0:c7:9e:
c5:cf:2c:98:59:ce:f2:f7:6a:b1:2f:47:5a:0c:cb:e1:10:e3:
2e:02:51:17:c5:82:a9:c2:8e:8c:fc:fc:2b:46:ce:b9:5f:a6:
0f:08:7f:7f:00:69:1e:30:84:4f:93:e0:c2:ae:b8:91:ca:b7:
83:40:aa:46:fe:5c:b5:d5:6c:4e:e0:20:15:e0:09:08:fe:df:
47:58:7d:ff:9d:6e:21:0f:6e:d7:02:38:4a:ad:ba:bf:5c:22:
e6:0e:81:8c:c4:fb:01:9f:90:84:d8:31:e6:36:e3:dc:5f:db:
3d:d5:d9:da:91:a1:1b:8e:51:4a:59:47:e0:67:f8:00:bf:9d:
f8:fe:ca:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWTKt7CXgb52FIoAKSiXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk
M2EzNDcwHhcNMjQwNjE2MDAwMTIwWhcNMjQwNjE3MDAwMTIwWjAzMTEwLwYDVQQD
EyhkYzQzZTM4ZTVkYmJjOTQxOTFkOGQwYTQ1MmRiZDQzMDcyMzJjZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorQHOozccjbow8nbXx/PomnDW3vY
/LmTKiFRN5FF9rS1q4kMj3N7Ca0cWW2udoghr4MTsw0SVBLVP5WY0KCeH9Zud6r1
/szk7tLv0Ug9oyK4d0Cha2fKODxTAg4Ba41INf0RGxu0WXNv+6YttiVPIgmzyVFp
q9bn0Hy4VV0mX66/Izy6PNRdoeazAqS6lpFD3U3+0+0bkg/rXGBPoflW1agyUA2a
gVJaToZLPgyXD1Hr2Xtk6yKR+7ycqzC51kSDbFlo2SEKzAEPYLPo1tln/PHlujYo
r2ykS9XDFz8nK5L78fU/12JuC+qFFyVa5RXIvaS4pHGufzNNZzYmMFn0zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxD445du8lBkdjQpFLb1DByMs85MB8GA1UdIwQY
MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt
ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx
LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0Hmcpse
pJNm6CQ8pAS+56bnmixSP3ryBbMDG6ioDTCOLCD3/4AKPGtwWmfpR0REOGf7YCXc
SOOz0Ns8AEGZ6CXIDw1ZI8xqp/Q8s6OwnlxJV45cz3nv0s5PUjfjGIgeG+pjgdKm
uNqPnAuh3hGA8YjAb4DI4v0PBB1+8Meexc8smFnO8vdqsS9HWgzL4RDjLgJRF8WC
qcKOjPz8K0bOuV+mDwh/fwBpHjCET5Pgwq64kcq3g0CqRv5ctdVsTuAgFeAJCP7f
R1h9/51uIQ9u1wI4Sq26v1wi5g6BjMT7AZ+QhNgx5jbj3F/bPdXZ2pGhG45RSllH
4Gf4AL+d+P7KFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:16 2024 by rpki-client on console-fra.rpki-client.org