Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
File: ha931EioETh6cVJ_wzTcxP9x3o8.mft (raw, json)
Hash identifier: XbcSreu0DHtolXWZDuqU6TrHKvRaIfLgtAQrtdPEuHQ=
Subject key identifier: 75:7B:8C:CA:1A:F5:81:D2:C8:A6:CF:8F:61:58:97:43:E2:3E:71:29
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Certificate issuer: /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial: 018F8F03EA7EDABF4ED2E5213C3A3625384D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
Manifest number: 0C67
Signing time: Sun 19 May 2024 04:02:29 +0000
Manifest this update: Sun 19 May 2024 04:02:29 +0000
Manifest next update: Mon 20 May 2024 04:02:29 +0000
Files and hashes: 1: 9228kPnIVjLwOCjbs1kcvuwCcsQ.roa (hash: FqDEolUQ3+a3IT06pDqbV3fA96hOIcKbdJhPCEb8S74=)
2: VBBzWe5SpTdzDV0BcDm-lI8HigE.roa (hash: E1zYiYAQtmcgmIEoOBfC7DxXV7UWd45FAvdAZbvFvVg=)
3: ha931EioETh6cVJ_wzTcxP9x3o8.crl (hash: 1tGeCkmyBQpiXtTHkCwm4gxs4zhHdQSsTsqlZKAvZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:03:ea:7e:da:bf:4e:d2:e5:21:3c:3a:36:25:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
Validity
Not Before: May 19 04:02:29 2024 GMT
Not After : May 20 04:02:29 2024 GMT
Subject: CN=757b8cca1af581d2c8a6cf8f61589743e23e7129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:02:20:a4:24:59:3e:ad:81:91:77:f5:a5:
d9:3e:d5:83:42:20:83:94:e2:c5:3b:32:a9:0a:32:
89:d6:07:ea:f7:a8:38:f5:0c:c1:ab:7d:f8:3c:0f:
21:69:b8:96:52:a2:11:fc:7d:2e:59:e8:e2:c9:74:
55:4e:c7:1d:44:eb:9c:03:a4:84:ec:12:cb:30:f3:
38:93:7a:83:a5:15:a4:40:3b:b7:20:a6:7e:f6:15:
85:c7:92:c0:ea:42:67:57:42:6e:5b:16:18:f0:36:
27:87:7b:d1:f8:33:6e:7e:fc:f3:e8:4a:d9:e3:c7:
49:4c:f3:76:7a:85:db:5a:91:70:5a:48:ef:c7:86:
13:7f:06:78:0f:c6:da:64:8a:4a:7c:66:75:24:6c:
e9:7f:75:8c:70:4d:31:83:5b:a7:cb:6b:d1:6f:36:
81:a5:96:7d:fd:7b:aa:86:f6:d0:42:00:07:73:2b:
1f:8f:dc:28:fc:33:ab:3d:2f:a0:b5:b3:fc:8c:a8:
2a:1f:df:56:0c:c0:d9:94:65:68:a3:39:cf:eb:cf:
4d:3b:6d:c1:d4:fe:4c:b0:82:f7:0f:39:10:e5:eb:
a1:07:21:09:f9:d1:05:56:4f:dd:f7:ca:b1:12:a2:
fb:0e:3d:e9:28:96:01:1f:35:7a:d6:97:f0:fa:67:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:8C:CA:1A:F5:81:D2:C8:A6:CF:8F:61:58:97:43:E2:3E:71:29
X509v3 Authority Key Identifier:
keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:b4:c3:1d:2e:00:69:9e:09:6e:4f:14:74:5a:50:2a:31:
ea:0d:e0:86:b3:22:6f:71:e5:07:31:9e:14:95:66:84:80:fc:
60:f7:54:60:28:8a:5d:8c:aa:00:f6:00:cd:3b:78:49:a3:dc:
87:c2:b8:e4:73:3e:09:b7:42:d5:c7:3f:13:17:84:d9:3b:56:
d3:29:15:77:ff:61:3f:8f:42:7c:10:4e:ec:87:30:d1:d1:58:
9a:56:73:03:c8:f9:4b:14:7a:2c:6a:c5:3b:91:22:a6:ea:52:
32:f2:6e:9c:2d:84:ce:12:bc:00:26:d2:c1:df:ef:0b:82:f5:
5e:da:be:3d:fa:f1:be:57:5f:65:6f:f9:2b:4a:69:fd:7a:f5:
6d:62:e8:b1:0e:cc:be:0a:0c:80:38:fb:d7:7f:95:23:d2:42:
a8:b9:5e:a1:0c:2d:09:59:4e:55:ee:81:df:74:f3:df:55:eb:
28:f0:e5:23:a3:a9:3a:19:ab:18:b4:a9:07:81:ae:05:16:22:
5e:a7:2a:7c:cb:bc:ca:3b:4f:5e:4b:d1:7f:91:dc:bf:a6:d4:
c0:f9:71:68:41:4d:85:2f:06:f1:0a:e7:7f:bb:d7:a9:81:dc:
58:0f:96:7a:ba:2f:41:0c:b0:59:c1:83:20:8a:5e:fb:47:e8:
28:94:8c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+PA+p+2r9O0uUhPDo2JThNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY3N2Q0NDhhODExMzg3YTcxNTI3ZmMzMzRkY2M0ZmY3
MWRlOGYwHhcNMjQwNTE5MDQwMjI5WhcNMjQwNTIwMDQwMjI5WjAzMTEwLwYDVQQD
Eyg3NTdiOGNjYTFhZjU4MWQyYzhhNmNmOGY2MTU4OTc0M2UyM2U3MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DgCIKQkWT6tgZF39aXZPtWDQiCD
lOLFOzKpCjKJ1gfq96g49QzBq334PA8habiWUqIR/H0uWejiyXRVTscdROucA6SE
7BLLMPM4k3qDpRWkQDu3IKZ+9hWFx5LA6kJnV0JuWxYY8DYnh3vR+DNufvzz6ErZ
48dJTPN2eoXbWpFwWkjvx4YTfwZ4D8baZIpKfGZ1JGzpf3WMcE0xg1uny2vRbzaB
pZZ9/XuqhvbQQgAHcysfj9wo/DOrPS+gtbP8jKgqH99WDMDZlGVooznP689NO23B
1P5MsIL3DzkQ5euhByEJ+dEFVk/d98qxEqL7Dj3pKJYBHzV61pfw+mepmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV7jMoa9YHSyKbPj2FYl0PiPnEpMB8GA1UdIwQY
MBaAFIWvd9RIqBE4enFSf8M03MT/cd6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQt
MjFkN2RlMjQ5OWRlLzEvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQtMjFkN2RlMjQ5OWRl
LzEvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP+0wx0u
AGmeCW5PFHRaUCox6g3ghrMib3HlBzGeFJVmhID8YPdUYCiKXYyqAPYAzTt4SaPc
h8K45HM+CbdC1cc/ExeE2TtW0ykVd/9hP49CfBBO7Icw0dFYmlZzA8j5SxR6LGrF
O5EipupSMvJunC2EzhK8ACbSwd/vC4L1Xtq+PfrxvldfZW/5K0pp/Xr1bWLosQ7M
vgoMgDj713+VI9JCqLleoQwtCVlOVe6B33Tz31XrKPDlI6OpOhmrGLSpB4GuBRYi
XqcqfMu8yjtPXkvRf5Hcv6bUwPlxaEFNhS8G8Qrnf7vXqYHcWA+WerovQQywWcGD
IIpe+0foKJSMbA==
-----END CERTIFICATE-----
Generated at Sun May 19 06:40:51 2024 by rpki-client on console-fra.rpki-client.org