Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 1TdS3UZy7QYdZGxpQbvG1gFi64r3/wZb9CDJMT9WUAk=
Subject key identifier: BD:F6:7E:A7:86:59:D5:53:90:E3:B5:2C:3A:07:1A:3B:B2:A8:49:88
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 0190332AE998C4859BB4C011CA43E1C9C462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0BEF
Signing time: Thu 20 Jun 2024 01:02:48 +0000
Manifest this update: Thu 20 Jun 2024 01:02:48 +0000
Manifest next update: Fri 21 Jun 2024 01:02:48 +0000
Files and hashes: 1: 9cHarc6Yj8mBOdxObQCm_KlU9RE.roa (hash: xonWpNbX4IHYQg5oNLZFcF63tyuWI+Qyy9oyr/k/mos=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: 8HOPR4fwvkdfWAlCSJ5katNNTVtVafuSwfhA3DaGXrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:2a:e9:98:c4:85:9b:b4:c0:11:ca:43:e1:c9:c4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jun 20 01:02:48 2024 GMT
Not After : Jun 21 01:02:48 2024 GMT
Subject: CN=bdf67ea78659d55390e3b52c3a071a3bb2a84988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:72:f7:a6:0d:e8:58:90:63:d9:bb:22:31:
a0:6f:ed:79:0a:bd:b4:8d:b6:1b:c0:a3:55:7b:e6:
eb:68:a6:1c:38:73:8a:4a:58:bc:8f:65:6d:0f:4a:
2b:14:9b:5a:78:7e:37:fc:e4:c4:7e:ff:4c:6d:86:
ae:93:6a:89:21:fb:71:83:e9:4f:0a:c0:a6:49:56:
aa:5e:78:ea:89:1b:01:c9:d1:36:7a:74:0d:06:37:
11:66:92:1e:d2:17:da:58:2a:75:0d:82:15:5c:85:
e2:9f:39:b6:ae:7e:54:9d:1b:33:9e:d2:68:1e:f2:
63:0c:5f:98:66:60:31:6a:02:45:b8:d5:88:0c:4c:
14:75:d5:43:2d:50:7d:d4:ec:3c:c9:fa:ef:fd:60:
ea:7e:da:66:8d:6c:93:b8:bb:31:8a:d0:01:94:5a:
77:5b:a7:28:b5:5d:fb:c9:29:d9:a4:7d:50:f5:94:
bb:86:1d:23:5d:f2:06:49:fa:de:77:42:4c:3f:e0:
b2:62:ec:67:a1:5f:b7:0e:fd:87:c7:8d:cc:0a:98:
b0:2f:65:c1:5d:53:dc:95:10:77:da:d4:5a:04:b8:
67:8c:f5:de:91:c0:aa:b8:bd:4e:60:13:9c:84:aa:
0d:07:d8:a2:5e:0f:6c:a9:19:7f:e6:b2:d5:6f:66:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:7E:A7:86:59:D5:53:90:E3:B5:2C:3A:07:1A:3B:B2:A8:49:88
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:51:e2:28:ab:82:d5:b0:e3:05:87:25:71:c6:2a:67:f7:b8:
57:7d:61:ab:7f:0e:fa:20:d9:d5:74:94:2f:2c:02:b9:3c:2b:
52:5c:fb:d5:67:43:d2:8d:78:48:81:1a:07:b2:aa:cf:ae:29:
98:14:ab:e1:98:15:53:01:8a:21:16:39:c1:98:e2:76:3a:0b:
cc:84:42:45:ca:42:fd:a3:22:3e:91:eb:5a:35:76:45:7b:d6:
70:85:fb:1c:f6:ae:47:89:06:c2:47:fe:ec:32:ba:4a:3c:d8:
ad:19:59:dd:4e:a3:b1:b9:d0:9b:7f:34:c3:fc:b9:8b:a9:d2:
8e:6d:97:c8:41:6f:84:6b:8e:7f:80:b4:8b:b0:60:81:3d:1c:
e9:96:ab:c0:66:46:dc:dd:47:e1:8f:77:df:34:d9:1a:52:ff:
ad:64:ac:89:fa:29:c9:c9:e5:f8:99:a9:01:7b:5e:c3:cd:13:
9a:ea:b6:a7:9e:05:21:0a:40:87:8f:4d:c3:1d:fe:f8:04:fa:
41:52:02:e1:da:9e:c5:98:4f:50:13:00:3c:bf:b7:d9:6c:a9:
7b:4e:cf:f4:3e:df:0f:cc:a3:66:c3:ad:d4:6b:a7:4b:90:6e:
96:bf:1f:9f:41:07:e0:18:67:10:ed:fc:28:21:82:4d:c3:63:
11:50:d3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzKumYxIWbtMARykPhycRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj
NTYwMjYwHhcNMjQwNjIwMDEwMjQ4WhcNMjQwNjIxMDEwMjQ4WjAzMTEwLwYDVQQD
EyhiZGY2N2VhNzg2NTlkNTUzOTBlM2I1MmMzYTA3MWEzYmIyYTg0OTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGRy96YN6FiQY9m7IjGgb+15Cr20
jbYbwKNVe+braKYcOHOKSli8j2VtD0orFJtaeH43/OTEfv9MbYauk2qJIftxg+lP
CsCmSVaqXnjqiRsBydE2enQNBjcRZpIe0hfaWCp1DYIVXIXinzm2rn5UnRszntJo
HvJjDF+YZmAxagJFuNWIDEwUddVDLVB91Ow8yfrv/WDqftpmjWyTuLsxitABlFp3
W6cotV37ySnZpH1Q9ZS7hh0jXfIGSfred0JMP+CyYuxnoV+3Dv2Hx43MCpiwL2XB
XVPclRB32tRaBLhnjPXekcCquL1OYBOchKoNB9iiXg9sqRl/5rLVb2ZzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL32fqeGWdVTkOO1LDoHGjuyqEmIMB8GA1UdIwQY
MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt
Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm
LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVHiKKuC
1bDjBYclccYqZ/e4V31hq38O+iDZ1XSULywCuTwrUlz71WdD0o14SIEaB7Kqz64p
mBSr4ZgVUwGKIRY5wZjidjoLzIRCRcpC/aMiPpHrWjV2RXvWcIX7HPauR4kGwkf+
7DK6SjzYrRlZ3U6jsbnQm380w/y5i6nSjm2XyEFvhGuOf4C0i7BggT0c6ZarwGZG
3N1H4Y933zTZGlL/rWSsifopycnl+JmpAXtew80Tmuq2p54FIQpAh49Nwx3++AT6
QVIC4dqexZhPUBMAPL+32Wype07P9D7fD8yjZsOt1GunS5Bulr8fn0EH4BhnEO38
KCGCTcNjEVDTsA==
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:52:52 2024 by rpki-client on console-fra.rpki-client.org