Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: /V5dMw9zvo4ZYUBQ5Qxuangtj3YWBFS3akGNpfpKQ3k=
Subject key identifier: FF:37:B0:43:0C:4E:38:A4:90:80:F6:CC:0B:83:F1:52:11:92:88:F2
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01904869030D5D88F9555FE0B09B4D717B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 04D7
Signing time: Mon 24 Jun 2024 04:02:39 +0000
Manifest this update: Mon 24 Jun 2024 04:02:39 +0000
Manifest next update: Tue 25 Jun 2024 04:02:39 +0000
Files and hashes: 1: QNyewvS-F17NCLjEq6z3mq3ZCaI.roa (hash: gx/TBHydwcRghd8W1JBz2YBY39vTn2o7F9RXvUgngIQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: s9w9TUMLJiBM+drUJRk9+PI+6jYsnGvXL2SmwbqInJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:69:03:0d:5d:88:f9:55:5f:e0:b0:9b:4d:71:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jun 24 04:02:39 2024 GMT
Not After : Jun 25 04:02:39 2024 GMT
Subject: CN=ff37b0430c4e38a49080f6cc0b83f152119288f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:78:99:ad:17:a0:bf:62:36:9f:b1:3d:da:
40:e1:bd:b3:fe:bc:df:8a:91:f6:a6:3f:bf:a0:d7:
16:02:cd:68:b3:ae:f5:f5:d6:ac:b7:51:8d:e5:76:
51:e1:04:9b:a4:76:99:d5:44:5c:e8:60:f2:a7:b5:
d4:e1:71:72:78:9d:f9:40:c4:5c:52:a8:8d:a0:c7:
bf:27:7b:aa:cf:4c:55:f4:fb:2d:60:de:3b:bb:5f:
7a:23:75:ca:80:eb:d6:99:d0:3d:d4:e8:24:8a:33:
1a:42:3a:c3:a4:09:ac:fa:c8:76:d5:f7:36:8d:d9:
91:24:df:5a:18:91:85:49:a0:6a:32:38:a1:8e:d8:
f1:5a:48:38:04:65:f9:74:72:38:56:92:48:5a:1b:
e2:86:f0:c6:5a:8b:f9:18:9d:d6:30:65:73:86:e1:
ae:00:dc:58:e3:50:33:62:32:22:d9:54:6b:c6:68:
bd:2b:64:29:c7:a2:a9:0c:d8:d8:41:57:34:e3:95:
89:5c:27:6e:1f:46:1b:b8:46:96:70:a4:74:06:6c:
fd:58:a3:f8:82:e1:0b:e0:97:09:c3:d3:5f:3d:0f:
16:e6:e7:6c:00:7f:90:9f:21:45:96:55:4b:99:e8:
64:72:9e:49:ea:ca:15:99:72:11:67:34:3f:86:15:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:B0:43:0C:4E:38:A4:90:80:F6:CC:0B:83:F1:52:11:92:88:F2
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9d:14:a6:92:8d:20:50:d4:82:86:ad:44:6a:ec:56:71:3b:
c6:2f:d1:0f:86:9c:c1:3c:09:a8:aa:69:ce:98:08:13:2c:64:
49:2d:84:1d:70:d9:74:19:88:e5:ae:fa:21:86:53:bb:62:23:
8d:31:52:f4:ad:a1:0b:63:a9:2c:32:f9:6a:c1:e8:42:17:30:
9a:48:1d:77:b8:de:19:20:5d:90:61:fc:ea:de:df:2d:99:81:
24:f2:8b:d0:67:7b:52:49:5a:84:a5:2b:f3:db:0f:9b:02:a6:
13:aa:73:1b:37:69:68:dd:d6:96:ee:0a:f7:39:4d:1b:cf:0a:
e2:a9:37:b1:de:a5:88:0c:7e:d8:4c:e4:3b:c4:91:3c:91:bb:
9b:a7:8c:1f:d4:cb:23:67:6b:64:be:83:c3:34:62:0e:7b:ff:
31:0a:d4:0a:ff:3c:09:27:87:fa:90:32:22:d7:87:7c:34:4f:
ec:da:4a:a0:2a:db:11:0a:01:fe:d4:08:08:47:35:33:8f:12:
90:3f:57:59:0a:89:a2:d3:19:0d:42:32:36:ce:74:14:74:6b:
be:47:38:8a:72:b5:c7:7c:37:f2:14:78:9d:82:46:80:33:fc:
65:ee:e9:42:6c:42:b9:ee:7e:53:16:42:d6:d8:7c:74:eb:33:
21:a2:14:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaQMNXYj5VV/gsJtNcXs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjQwNjI0MDQwMjM5WhcNMjQwNjI1MDQwMjM5WjAzMTEwLwYDVQQD
EyhmZjM3YjA0MzBjNGUzOGE0OTA4MGY2Y2MwYjgzZjE1MjExOTI4OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+V4ma0XoL9iNp+xPdpA4b2z/rzf
ipH2pj+/oNcWAs1os6719dast1GN5XZR4QSbpHaZ1URc6GDyp7XU4XFyeJ35QMRc
UqiNoMe/J3uqz0xV9PstYN47u196I3XKgOvWmdA91OgkijMaQjrDpAms+sh21fc2
jdmRJN9aGJGFSaBqMjihjtjxWkg4BGX5dHI4VpJIWhvihvDGWov5GJ3WMGVzhuGu
ANxY41AzYjIi2VRrxmi9K2Qpx6KpDNjYQVc045WJXCduH0YbuEaWcKR0Bmz9WKP4
guEL4JcJw9NfPQ8W5udsAH+QnyFFllVLmehkcp5J6soVmXIRZzQ/hhU+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP83sEMMTjikkID2zAuD8VIRkojyMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ0UppKN
IFDUgoatRGrsVnE7xi/RD4acwTwJqKppzpgIEyxkSS2EHXDZdBmI5a76IYZTu2Ij
jTFS9K2hC2OpLDL5asHoQhcwmkgdd7jeGSBdkGH86t7fLZmBJPKL0Gd7UklahKUr
89sPmwKmE6pzGzdpaN3Wlu4K9zlNG88K4qk3sd6liAx+2EzkO8SRPJG7m6eMH9TL
I2drZL6DwzRiDnv/MQrUCv88CSeH+pAyIteHfDRP7NpKoCrbEQoB/tQICEc1M48S
kD9XWQqJotMZDUIyNs50FHRrvkc4inK1x3w38hR4nYJGgDP8Ze7pQmxCue5+UxZC
1th8dOszIaIUzQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:16:40 2024 by rpki-client on console-fra.rpki-client.org