Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
File: h1_IAkLS5p69DyK148xFdZSukKw.mft (raw, json)
Hash identifier: IHK5YKHoqAneJqbxDMYaz2RA9+ryBOTxJNs87/5+u44=
Subject key identifier: 6D:8B:07:2D:39:6B:C6:A2:C2:40:37:51:8B:7C:A9:5B:17:9D:B6:39
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 01901DB3BE83175699DD0EEDA6AE61382D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
Manifest number: 070E
Signing time: Sat 15 Jun 2024 21:00:37 +0000
Manifest this update: Sat 15 Jun 2024 21:00:37 +0000
Manifest next update: Sun 16 Jun 2024 21:00:37 +0000
Files and hashes: 1: 5rfCFk_bmdbujk_vtGklU-YAldI.roa (hash: 9YVUlrxmzjtmpqAr+WzkHZkrS/i6WbwXEvP2BUCBS0Q=)
2: YacFjvCwQm9rBsjgh3bLcuMU5mI.roa (hash: a6+9tnseMlBAWUH6LElCMFnpZN4bHojZG1uuSiXjUmo=)
3: h1_IAkLS5p69DyK148xFdZSukKw.crl (hash: jtzKyDD3o30i0PIPpJbKWH75p98QA9ZwHfL+cBK+EQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:b3:be:83:17:56:99:dd:0e:ed:a6:ae:61:38:2d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Jun 15 21:00:37 2024 GMT
Not After : Jun 16 21:00:37 2024 GMT
Subject: CN=6d8b072d396bc6a2c24037518b7ca95b179db639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:71:17:ef:05:51:ad:71:16:da:27:7a:b8:
89:53:be:85:ea:b2:8c:18:1f:64:89:55:f1:f7:2d:
51:1c:64:a3:0a:73:74:15:f3:7b:79:b1:94:1c:f8:
9a:24:59:e4:36:a9:00:9a:6e:23:0e:19:5a:f1:31:
b4:2a:2d:75:9f:2e:61:fd:3f:de:33:c8:f6:ce:e3:
c2:6a:38:a9:ac:09:af:41:bc:64:e4:fd:75:d2:bf:
85:8d:11:32:1b:e8:f2:84:ff:c2:df:ec:18:f3:09:
0c:91:51:c6:e3:44:8d:6c:ee:62:62:42:13:94:8f:
02:30:0a:e6:5e:49:05:c7:cb:16:f7:c2:29:6f:a5:
bc:5d:a4:89:7b:98:a8:92:15:7b:cf:67:24:66:d5:
26:e9:da:05:8a:48:a5:65:a0:c1:05:41:a7:7b:1a:
fd:39:27:9e:5a:27:13:c3:09:f5:c1:8d:86:1e:10:
25:08:16:ce:0f:73:fa:86:2e:3e:9b:e2:dc:53:76:
0a:f5:c0:a7:af:8c:47:e0:7f:35:f4:76:4d:c3:7e:
26:0d:1c:e1:67:b1:c1:bc:c8:40:22:a9:e2:10:5e:
01:8a:b3:fa:29:7f:f7:be:3e:2a:ce:49:2f:e6:02:
23:b1:12:93:9d:6b:16:20:e4:1a:70:f7:e3:ff:5e:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:07:2D:39:6B:C6:A2:C2:40:37:51:8B:7C:A9:5B:17:9D:B6:39
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:9b:14:72:6a:2d:81:03:87:81:14:c0:77:48:ee:4d:fb:
1e:c0:e8:a2:c5:eb:ef:bc:29:68:8b:81:77:4a:db:8d:ba:7f:
82:93:34:51:51:39:39:77:76:2c:1b:f6:f8:49:73:30:41:ed:
8c:dc:c7:84:c8:09:c0:88:56:40:17:44:98:45:9c:59:7f:1d:
3e:7f:1b:40:5a:0d:ae:4d:e5:f4:4a:32:42:f1:cc:2b:6b:59:
5e:5e:fa:e4:86:10:c3:9f:e6:f7:f4:95:d8:6a:cd:15:3b:2e:
60:57:1c:8b:67:ea:15:5a:6c:74:db:2b:69:66:06:fe:2e:60:
59:80:10:b7:c5:da:f1:0f:d3:84:a6:ad:43:54:9e:bb:ee:69:
06:af:9b:c1:c9:8f:4b:58:48:a8:05:e8:e0:a0:36:11:ef:d6:
4e:33:3c:fc:e7:cf:34:7d:18:85:ac:30:38:66:69:a7:79:0b:
9e:22:34:63:20:7e:53:b4:6e:62:e1:bd:ba:dc:2c:75:d7:9f:
a6:fc:52:e3:ad:d2:d0:2c:44:f1:e3:01:77:7c:c3:cf:2c:40:
27:d1:53:2a:93:56:48:0b:d8:0c:13:72:86:28:fd:16:ee:21:
ed:61:f1:dc:9c:b5:f2:7f:4b:85:ef:bc:43:15:45:80:5e:8f:
5c:27:f9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAds76DF1aZ3Q7tpq5hOC1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWZjODAyNDJkMmU2OWViZDBmMjJiNWUzY2M0NTc1OTRh
ZTkwYWMwHhcNMjQwNjE1MjEwMDM3WhcNMjQwNjE2MjEwMDM3WjAzMTEwLwYDVQQD
Eyg2ZDhiMDcyZDM5NmJjNmEyYzI0MDM3NTE4YjdjYTk1YjE3OWRiNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31xF+8FUa1xFtoneriJU76F6rKM
GB9kiVXx9y1RHGSjCnN0FfN7ebGUHPiaJFnkNqkAmm4jDhla8TG0Ki11ny5h/T/e
M8j2zuPCajiprAmvQbxk5P110r+FjREyG+jyhP/C3+wY8wkMkVHG40SNbO5iYkIT
lI8CMArmXkkFx8sW98Ipb6W8XaSJe5iokhV7z2ckZtUm6doFikilZaDBBUGnexr9
OSeeWicTwwn1wY2GHhAlCBbOD3P6hi4+m+LcU3YK9cCnr4xH4H819HZNw34mDRzh
Z7HBvMhAIqniEF4BirP6KX/3vj4qzkkv5gIjsRKTnWsWIOQacPfj/17ipQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2LBy05a8aiwkA3UYt8qVsXnbY5MB8GA1UdIwQY
MBaAFIdfyAJC0uaevQ8itePMRXWUrpCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAt
Y2M0OWU1MzRkYjAwLzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAtY2M0OWU1MzRkYjAw
LzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTibFHJq
LYEDh4EUwHdI7k37HsDoosXr77wpaIuBd0rbjbp/gpM0UVE5OXd2LBv2+ElzMEHt
jNzHhMgJwIhWQBdEmEWcWX8dPn8bQFoNrk3l9EoyQvHMK2tZXl765IYQw5/m9/SV
2GrNFTsuYFcci2fqFVpsdNsraWYG/i5gWYAQt8Xa8Q/ThKatQ1Seu+5pBq+bwcmP
S1hIqAXo4KA2Ee/WTjM8/OfPNH0YhawwOGZpp3kLniI0YyB+U7RuYuG9utwsddef
pvxS463S0CxE8eMBd3zDzyxAJ9FTKpNWSAvYDBNyhij9Fu4h7WHx3Jy18n9Lhe+8
QxVFgF6PXCf5CQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:54 2024 by rpki-client on console-fra.rpki-client.org