Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: gMkt5nhQzuxLgsor9MGn2k0BVLWYwKqIvBu1WfiYlcQ=
Subject key identifier: B5:81:E0:38:41:09:92:CB:61:EA:D2:B8:BB:DD:CE:60:C6:16:F8:B3
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01903AE3F4A8BA33192BD6C3986ED43E1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 10C4
Signing time: Fri 21 Jun 2024 13:02:16 +0000
Manifest this update: Fri 21 Jun 2024 13:02:16 +0000
Manifest next update: Sat 22 Jun 2024 13:02:16 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: TpDa0DRihk1N+h43Q0KFrb4xr1bjRWbXQdNmvTy8LMY=)
2: TMOIz3dYs2s22uzvNy56L0Qb70g.roa (hash: nK7O4SU+HDHi4VS3ejbfkDOfJbuI8+Www1HRoj+t1bc=)
3: V3pFGwYOpkuPkFPZjputgvZ1AiE.roa (hash: WHTURTrTKg5wbHwcDr0BavUkDwLvDIXWbInCJeaWKls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e3:f4:a8:ba:33:19:2b:d6:c3:98:6e:d4:3e:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jun 21 13:02:16 2024 GMT
Not After : Jun 22 13:02:16 2024 GMT
Subject: CN=b581e038410992cb61ead2b8bbddce60c616f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:57:da:d5:17:83:8c:e4:a1:cd:b5:b2:d2:
d2:fe:72:2e:ca:4b:be:bc:22:93:f2:ac:14:66:b3:
ff:f0:d5:48:69:57:78:c8:a4:ef:16:73:ad:d2:f5:
35:68:15:58:18:93:a0:12:bd:3b:4e:99:f5:b5:99:
c2:f8:6a:7e:62:e7:3f:5c:f6:ad:b5:3a:82:6a:29:
69:93:2d:09:6c:7c:f9:5b:36:56:3b:a1:ac:63:19:
29:eb:9a:9a:2a:ce:47:27:27:6b:83:f9:86:30:8b:
ac:f2:e5:7e:0a:43:48:72:29:1d:06:e3:2c:c2:cb:
59:c9:72:b8:45:6c:5c:4f:82:a2:e7:1c:30:d8:f4:
4a:3d:7f:52:0e:ce:72:af:e2:00:36:10:c8:ed:6c:
65:0d:e6:07:19:d6:dd:4a:33:a3:d4:35:30:30:9c:
82:63:88:14:41:49:60:69:db:ec:e8:25:7a:ce:3e:
69:05:1e:e0:23:51:bb:e9:70:8d:b0:a1:e8:c3:9a:
10:b9:22:27:46:65:d1:f9:53:f2:74:4f:73:13:6e:
31:e0:d4:63:0f:a9:4b:84:d4:1e:c0:19:a9:07:81:
36:5f:ec:69:33:d2:67:d5:53:80:a1:f6:f8:d8:42:
19:98:38:20:f8:7c:f0:4b:39:e6:9c:4f:aa:24:d4:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:E0:38:41:09:92:CB:61:EA:D2:B8:BB:DD:CE:60:C6:16:F8:B3
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f4:4b:dc:12:66:ab:4d:57:71:06:4d:c6:d3:12:66:4a:1e:
46:ae:45:b5:6a:42:5c:55:a4:c8:d9:97:30:e2:ed:99:0f:53:
95:2a:5b:dd:2d:09:2b:3a:bc:9e:85:35:c6:82:65:c9:cf:20:
a8:ed:c3:76:a8:75:39:35:60:45:0f:9a:52:13:ef:27:c8:f5:
7e:70:10:44:2b:5c:3f:a6:72:18:64:67:30:93:da:81:35:1d:
20:cb:32:62:74:a4:06:2b:ff:7b:7c:09:d3:ef:c7:cd:ec:f5:
4e:f1:a3:0e:7e:ab:4c:d7:2c:2c:97:e9:84:69:a5:4d:10:cd:
1f:a7:18:ba:e2:1e:62:b7:33:b6:07:e1:71:30:c7:09:84:23:
44:c7:75:69:c6:c6:23:8a:b4:e0:40:9a:71:b9:9e:ca:7a:4d:
c0:9c:8b:b1:27:a2:38:00:4b:bf:d0:48:f3:29:cf:d7:39:57:
18:95:29:52:fb:06:db:d4:77:73:0c:2c:fe:c0:54:17:86:06:
78:5e:d2:e1:b6:fe:fb:9a:38:22:6f:6a:e2:8f:69:e1:2a:50:
10:15:37:57:27:0d:42:0a:6d:e5:e4:a1:b6:fd:ae:f1:65:ad:
08:ef:fd:a3:d7:c8:93:e8:f4:ac:6c:a7:f1:4b:ae:cf:5e:26:
7f:55:ca:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA64/SoujMZK9bDmG7UPh4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm
MDRmNjEwHhcNMjQwNjIxMTMwMjE2WhcNMjQwNjIyMTMwMjE2WjAzMTEwLwYDVQQD
EyhiNTgxZTAzODQxMDk5MmNiNjFlYWQyYjhiYmRkY2U2MGM2MTZmOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrpX2tUXg4zkoc21stLS/nIuyku+
vCKT8qwUZrP/8NVIaVd4yKTvFnOt0vU1aBVYGJOgEr07Tpn1tZnC+Gp+Yuc/XPat
tTqCailpky0JbHz5WzZWO6GsYxkp65qaKs5HJydrg/mGMIus8uV+CkNIcikdBuMs
wstZyXK4RWxcT4Ki5xww2PRKPX9SDs5yr+IANhDI7WxlDeYHGdbdSjOj1DUwMJyC
Y4gUQUlgadvs6CV6zj5pBR7gI1G76XCNsKHow5oQuSInRmXR+VPydE9zE24x4NRj
D6lLhNQewBmpB4E2X+xpM9Jn1VOAofb42EIZmDgg+HzwSznmnE+qJNQSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWB4DhBCZLLYerSuLvdzmDGFvizMB8GA1UdIwQY
MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt
MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk
LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPRL3BJm
q01XcQZNxtMSZkoeRq5FtWpCXFWkyNmXMOLtmQ9TlSpb3S0JKzq8noU1xoJlyc8g
qO3Ddqh1OTVgRQ+aUhPvJ8j1fnAQRCtcP6ZyGGRnMJPagTUdIMsyYnSkBiv/e3wJ
0+/Hzez1TvGjDn6rTNcsLJfphGmlTRDNH6cYuuIeYrcztgfhcTDHCYQjRMd1acbG
I4q04ECacbmeynpNwJyLsSeiOABLv9BI8ynP1zlXGJUpUvsG29R3cwws/sBUF4YG
eF7S4bb++5o4Im9q4o9p4SpQEBU3VycNQgpt5eShtv2u8WWtCO/9o9fIk+j0rGyn
8Uuuz14mf1XKaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:36:11 2024 by rpki-client on console-fra.rpki-client.org