Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: OEQWe3GlJ29VRR3WLODeHxs7WQjoinl9tHPIYupBguI=
Subject key identifier: 99:A4:DB:07:BF:4E:15:B4:D4:D6:48:B3:EA:91:7D:39:B6:53:F9:54
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01901EFD5B4FEE30ED31CE0D38A47ED52D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 11DB
Signing time: Sun 16 Jun 2024 03:00:38 +0000
Manifest this update: Sun 16 Jun 2024 03:00:38 +0000
Manifest next update: Mon 17 Jun 2024 03:00:38 +0000
Files and hashes: 1: FnAlRB9RreWw5G5J-xc04Usjrhk.roa (hash: jZfAk96tsDh9N3x1zt1EfC5xxg1vK+T4ZAcw1lE4TFA=)
2: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: bwi8/k5jMSpazPGkAnd5MmaUHAijkIF3HqLLw3msuoo=)
3: zm2LB8qXkzNs-l8x03siJbLISpQ.roa (hash: hY0ZfPib9FZGdOAdzQbWoLKB4GeAJRGaWAWk18QLt7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:fd:5b:4f:ee:30:ed:31:ce:0d:38:a4:7e:d5:2d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jun 16 03:00:38 2024 GMT
Not After : Jun 17 03:00:38 2024 GMT
Subject: CN=99a4db07bf4e15b4d4d648b3ea917d39b653f954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:f2:6f:4b:c8:a4:71:b0:c1:b2:2f:07:39:
38:43:f5:47:78:c7:9a:67:37:df:82:ba:19:d8:5b:
e6:0a:68:db:2e:6d:51:b0:30:12:cd:80:29:fe:5a:
9f:14:fc:ee:3d:b4:4f:15:81:67:b0:f6:74:23:4c:
5d:d5:74:48:46:1c:bc:dd:14:41:9a:88:f8:69:2d:
b0:d8:41:e1:f8:cd:78:dd:0f:fe:ca:98:c2:29:6d:
99:e8:bd:b6:91:8e:33:32:e9:1a:dd:ee:9a:89:87:
a0:d1:7e:41:db:31:41:90:a1:3c:09:9e:74:2a:c4:
d1:e4:29:e7:d0:0e:18:13:c3:88:18:88:d9:15:21:
d7:7c:d0:fc:4f:53:1b:00:f1:d8:51:c5:a1:4b:a5:
76:fe:5f:2b:b0:26:96:d5:4a:94:13:26:97:19:10:
1d:aa:1e:9f:41:b2:0d:54:9f:4b:71:1a:ff:c9:85:
18:d6:3a:c3:92:e8:96:e5:68:78:0c:f4:f5:0e:a4:
0f:bc:48:32:92:a1:69:7f:b0:7a:a4:54:f1:66:af:
61:17:07:ec:38:38:d0:26:a0:42:b3:86:cf:5c:46:
2f:6b:2c:e8:d3:2a:9f:fe:d2:50:b7:c0:94:20:64:
84:ed:57:eb:22:62:e5:ae:21:d7:d9:60:0d:51:c5:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:DB:07:BF:4E:15:B4:D4:D6:48:B3:EA:91:7D:39:B6:53:F9:54
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:ae:6f:31:b3:f1:93:bc:da:25:e9:60:8b:2a:c7:ce:0c:
ab:a9:fe:b5:81:79:85:2d:16:96:83:27:ba:b9:3b:d0:0e:ee:
71:05:76:7c:57:ee:5c:89:51:bd:4c:9f:99:5b:e2:4f:43:4d:
0f:28:31:9d:79:df:9e:64:c3:9a:ed:23:9d:8a:6f:f2:0c:98:
0f:e4:84:9c:5d:75:cf:b0:2f:f7:9d:9d:d6:be:7c:2b:5b:14:
27:64:b9:13:f7:93:4a:29:27:bc:14:d4:7d:83:21:d0:75:ea:
4d:92:c9:4e:8b:e7:98:8c:68:17:27:a7:0e:15:75:2a:05:d9:
d0:ee:4a:22:fd:5a:18:47:60:9e:cc:e9:21:43:c4:8e:15:2a:
36:17:3b:20:73:b8:09:65:6b:e5:12:ae:6d:9e:61:3d:22:4c:
94:18:51:20:48:cd:c6:03:ff:34:b9:71:8d:f9:86:43:a5:b7:
67:c6:dd:b2:15:2a:b4:10:15:55:38:b5:00:b5:11:da:65:c4:
02:cf:34:4c:49:33:93:50:6c:5e:99:92:f2:0f:ea:79:07:e9:
b7:7f:0b:90:9a:b7:bf:68:34:67:27:ed:67:e3:0c:98:d7:47:
40:26:d9:65:b4:a5:c2:f8:f2:75:9d:3f:9a:1a:88:fc:ef:f5:
04:9d:77:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/VtP7jDtMc4NOKR+1S0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjQwNjE2MDMwMDM4WhcNMjQwNjE3MDMwMDM4WjAzMTEwLwYDVQQD
Eyg5OWE0ZGIwN2JmNGUxNWI0ZDRkNjQ4YjNlYTkxN2QzOWI2NTNmOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyDyb0vIpHGwwbIvBzk4Q/VHeMea
ZzffgroZ2FvmCmjbLm1RsDASzYAp/lqfFPzuPbRPFYFnsPZ0I0xd1XRIRhy83RRB
moj4aS2w2EHh+M143Q/+ypjCKW2Z6L22kY4zMuka3e6aiYeg0X5B2zFBkKE8CZ50
KsTR5Cnn0A4YE8OIGIjZFSHXfND8T1MbAPHYUcWhS6V2/l8rsCaW1UqUEyaXGRAd
qh6fQbINVJ9LcRr/yYUY1jrDkuiW5Wh4DPT1DqQPvEgykqFpf7B6pFTxZq9hFwfs
ODjQJqBCs4bPXEYvayzo0yqf/tJQt8CUIGSE7VfrImLlriHX2WANUcUwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmk2we/ThW01NZIs+qRfTm2U/lUMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflaubzGz
8ZO82iXpYIsqx84Mq6n+tYF5hS0WloMnurk70A7ucQV2fFfuXIlRvUyfmVviT0NN
DygxnXnfnmTDmu0jnYpv8gyYD+SEnF11z7Av952d1r58K1sUJ2S5E/eTSiknvBTU
fYMh0HXqTZLJTovnmIxoFyenDhV1KgXZ0O5KIv1aGEdgnszpIUPEjhUqNhc7IHO4
CWVr5RKubZ5hPSJMlBhRIEjNxgP/NLlxjfmGQ6W3Z8bdshUqtBAVVTi1ALUR2mXE
As80TEkzk1BsXpmS8g/qeQfpt38LkJq3v2g0ZyftZ+MMmNdHQCbZZbSlwvjydZ0/
mhqI/O/1BJ13+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:08 2024 by rpki-client on console-fra.rpki-client.org