Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: 8DgPraKSIviGLNrM7p+d9lZEEbGcX1NwZnMHL/Ts7w0=
Subject key identifier: DA:C4:1B:8D:42:DF:B1:A0:8F:73:6C:31:30:2D:BB:9C:9E:EE:60:AC
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019045D442C28F862E44B4B6914D7E4F93B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 0FC2
Signing time: Sun 23 Jun 2024 16:00:56 +0000
Manifest this update: Sun 23 Jun 2024 16:00:56 +0000
Manifest next update: Mon 24 Jun 2024 16:00:56 +0000
Files and hashes: 1: jhZ7_mCRX57QUbnIcrSnYHZPQgg.roa (hash: q7wMIF+1g+NPKcxOz+H1iwr1RLtWBRLOtlY2QNZ3Occ=)
2: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: QYQzLyF6IqpDjnCSSpkcByjciMdPjrQNT8kliPYwh0I=)
3: yjnUJtyU_clRWAbrY3pAkPk7lhs.roa (hash: fWGcWyx2b/65zC+DhNbIww7B3eHkso2c/1hz9DHXzGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:42:c2:8f:86:2e:44:b4:b6:91:4d:7e:4f:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jun 23 16:00:56 2024 GMT
Not After : Jun 24 16:00:56 2024 GMT
Subject: CN=dac41b8d42dfb1a08f736c31302dbb9c9eee60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:7e:86:cc:ee:1a:63:1a:18:d0:4e:6d:3f:
e3:38:90:63:a1:ac:70:5d:12:f9:e8:17:8c:8f:f1:
78:4b:a3:11:44:9e:05:78:4a:e0:54:fb:bd:71:12:
85:e2:41:ec:66:a7:b3:3b:77:29:c7:52:c9:8b:52:
e3:61:2f:91:d5:c2:08:bb:1e:ae:10:3e:ae:c7:3a:
46:75:4c:b5:1b:d0:c2:8a:f2:e1:16:e0:1f:46:fe:
bd:1f:24:d2:6e:04:5d:31:1a:cf:8a:84:e3:b4:46:
59:46:b4:65:0e:3e:8d:e8:ec:4e:68:bb:56:33:ef:
62:7e:d1:5b:a8:bb:81:30:bd:84:5a:09:74:04:97:
d9:d5:40:96:15:11:f7:ee:ea:d2:82:00:b8:01:67:
0c:c0:92:10:39:8c:9c:db:a3:3d:63:06:2b:11:04:
25:f6:ce:4a:7b:1c:cc:bb:64:62:f1:99:e3:f5:46:
a4:9c:0d:42:f8:32:ca:7b:72:e2:82:0b:5a:1a:5d:
0e:d4:b3:40:74:ad:5f:a7:ef:8f:de:0f:f8:eb:ae:
e2:8e:56:06:ee:ef:a5:31:65:7b:43:2d:32:2f:5f:
7e:24:02:e3:59:b6:c8:c3:ff:c3:9d:85:79:57:96:
28:7f:03:8d:e6:01:be:b2:5c:08:28:9c:c4:3b:31:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:1B:8D:42:DF:B1:A0:8F:73:6C:31:30:2D:BB:9C:9E:EE:60:AC
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:27:b2:3e:22:49:c0:c2:18:b9:c7:32:09:1c:5c:56:74:c2:
3e:4e:36:89:19:ba:ba:4a:24:76:f7:26:58:55:6d:a3:f4:b0:
c5:6f:bc:78:b2:87:c7:1e:e6:2f:21:7c:7e:df:db:cb:ad:29:
2a:05:86:81:bb:6e:2c:c5:b2:81:38:3e:0b:87:7b:3b:f5:6b:
60:b6:dd:27:be:8a:6c:79:40:f5:ac:76:34:df:b4:9a:4b:ec:
a8:f8:2e:1d:0b:1d:2d:5f:da:23:a4:c8:08:49:c6:dc:71:80:
c9:cb:3f:a0:ed:0e:72:26:27:e8:ad:b0:7b:34:c9:18:a2:85:
df:ae:3b:71:f6:24:9c:12:6e:e6:d5:57:46:4a:ba:d4:7b:b7:
f7:4f:32:dd:cc:57:e6:99:ef:66:a8:f7:19:3b:d2:b2:a4:43:
40:46:48:4d:fa:91:38:9c:7a:60:2a:91:8e:30:92:71:aa:b8:
fb:fb:f0:15:8f:ef:ad:00:f6:ae:03:26:f9:ba:6d:78:8a:a8:
40:ee:23:64:5a:36:53:f3:25:99:dc:ea:00:d3:b1:09:70:28:
f2:27:b9:04:50:07:8f:9e:43:83:68:f4:61:19:02:0b:2a:09:
00:4f:42:77:6a:53:71:b9:3e:b6:3b:ea:b8:0a:88:61:ae:0d:
da:60:22:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1ELCj4YuRLS2kU1+T5O0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjQwNjIzMTYwMDU2WhcNMjQwNjI0MTYwMDU2WjAzMTEwLwYDVQQD
EyhkYWM0MWI4ZDQyZGZiMWEwOGY3MzZjMzEzMDJkYmI5YzllZWU2MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxot+hszuGmMaGNBObT/jOJBjoaxw
XRL56BeMj/F4S6MRRJ4FeErgVPu9cRKF4kHsZqezO3cpx1LJi1LjYS+R1cIIux6u
ED6uxzpGdUy1G9DCivLhFuAfRv69HyTSbgRdMRrPioTjtEZZRrRlDj6N6OxOaLtW
M+9iftFbqLuBML2EWgl0BJfZ1UCWFRH37urSggC4AWcMwJIQOYyc26M9YwYrEQQl
9s5KexzMu2Ri8Znj9UaknA1C+DLKe3LiggtaGl0O1LNAdK1fp++P3g/4667ijlYG
7u+lMWV7Qy0yL19+JALjWbbIw//DnYV5V5YofwON5gG+slwIKJzEOzHIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrEG41C37Ggj3NsMTAtu5ye7mCsMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyeyPiJJ
wMIYuccyCRxcVnTCPk42iRm6ukokdvcmWFVto/SwxW+8eLKHxx7mLyF8ft/by60p
KgWGgbtuLMWygTg+C4d7O/VrYLbdJ76KbHlA9ax2NN+0mkvsqPguHQsdLV/aI6TI
CEnG3HGAycs/oO0OciYn6K2wezTJGKKF3647cfYknBJu5tVXRkq61Hu3908y3cxX
5pnvZqj3GTvSsqRDQEZITfqROJx6YCqRjjCScaq4+/vwFY/vrQD2rgMm+bpteIqo
QO4jZFo2U/MlmdzqANOxCXAo8ie5BFAHj55Dg2j0YRkCCyoJAE9Cd2pTcbk+tjvq
uAqIYa4N2mAirQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:09 2024 by rpki-client on console-fra.rpki-client.org