Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: wCn4sbrEdmY79gciQR9VMVFxq6s/Y9kjjeaamLvnX0c=
Subject key identifier: 8B:0E:D2:F4:5C:4B:65:68:44:F6:94:1A:0A:22:D3:71:90:E2:52:E2
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 0190448AAB0B6A98C9DA2F51093522200CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 11D7
Signing time: Sun 23 Jun 2024 10:00:56 +0000
Manifest this update: Sun 23 Jun 2024 10:00:56 +0000
Manifest next update: Mon 24 Jun 2024 10:00:56 +0000
Files and hashes: 1: G_SOq6NRAMRcBriUHeHkorwdp4U.roa (hash: cyQojAWob3Pye72o7SV/+bXEksDAUbMdX54sUh/K3mw=)
2: iYZ__kjlwqgvduakgJVSJo2oR74.roa (hash: pWyJKvedVOkJvXO5uczSSddz0ww7SO9rpP1GHlvbRLQ=)
3: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: XXM0Zmme8EXFo1pyy6izTyjCJlrmsLefEcWSAjgGaaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:ab:0b:6a:98:c9:da:2f:51:09:35:22:20:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jun 23 10:00:56 2024 GMT
Not After : Jun 24 10:00:56 2024 GMT
Subject: CN=8b0ed2f45c4b656844f6941a0a22d37190e252e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cd:9d:f9:dc:1e:dd:d1:68:45:90:db:1f:0f:
6f:72:e0:74:e6:27:0a:2f:3e:c2:19:35:7a:f7:1d:
c3:0f:cf:f0:72:7e:bc:2d:39:58:bf:68:ac:72:72:
1a:f2:6a:cc:32:f1:dd:2b:c1:30:bb:3a:4f:00:c8:
33:b5:68:20:63:51:ba:73:3d:21:69:b4:a8:c2:39:
9c:9f:1a:28:95:3f:70:7b:7e:da:40:8c:e9:ef:35:
e8:ea:77:62:39:ec:cb:4f:ba:db:11:a5:c5:56:10:
ab:f1:5d:f0:36:9c:a2:a7:9c:cd:e7:57:ff:6b:aa:
ef:7c:90:7f:3f:06:95:63:bf:aa:da:38:9e:af:8f:
ea:bf:18:d0:ce:07:ad:9c:6b:83:80:d0:46:b9:6d:
95:aa:00:21:44:64:19:7c:60:54:32:a8:bb:78:cd:
c5:f9:08:a4:e9:5d:9a:3b:1f:fa:0b:bf:1a:55:b8:
46:ba:c4:14:eb:f0:4d:01:dc:0a:a4:fe:ce:51:9c:
2b:fa:61:e7:6d:ea:96:29:5f:9e:82:80:08:50:de:
b3:65:d8:a8:be:fb:e4:2f:06:33:c0:f2:d2:35:8d:
ac:1c:27:af:bc:c8:51:17:c1:3c:e1:90:fb:1b:18:
28:7e:73:7c:34:85:f5:43:64:4d:9b:30:3f:2e:48:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:D2:F4:5C:4B:65:68:44:F6:94:1A:0A:22:D3:71:90:E2:52:E2
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f7:67:e2:a9:59:96:b0:fe:ad:28:26:98:69:fb:66:72:80:
6d:76:30:50:3d:c3:50:44:f6:15:86:c3:ea:19:66:c0:97:4a:
fd:52:6b:31:e1:34:52:5b:6d:6f:10:4a:fe:8a:38:fb:fc:b6:
8f:60:d1:09:3e:8c:d9:25:de:c3:70:ca:26:b7:92:ea:37:f4:
ab:87:95:42:78:c6:3a:8a:af:d9:c8:6f:d5:32:b8:b6:60:b8:
e0:c0:55:b9:ea:8f:52:00:e4:d4:91:5d:5a:9f:fd:e0:86:d2:
22:c0:a3:e0:e6:2c:63:47:b9:f9:98:03:9c:21:1c:14:47:29:
84:ab:9c:c9:c6:a5:97:42:26:11:b8:77:e8:6c:66:60:12:84:
5b:0e:77:75:db:8c:a5:4e:f1:b5:70:e3:08:66:05:f1:ae:9b:
48:8d:96:6e:31:56:0a:ac:04:6b:ce:77:e9:85:ae:e9:ec:75:
51:a8:7c:97:4f:4a:9a:eb:72:c5:be:d5:11:0c:2b:ee:c0:69:
f1:b0:75:c6:7b:91:18:54:f4:b5:16:44:31:28:05:dc:30:55:
91:d6:67:32:a6:bf:16:b2:10:a4:81:91:bd:34:bf:51:71:2d:
77:9a:88:8a:eb:ee:05:10:4b:23:25:5f:94:22:d2:65:3c:d5:
38:6b:14:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEiqsLapjJ2i9RCTUiIAzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjQwNjIzMTAwMDU2WhcNMjQwNjI0MTAwMDU2WjAzMTEwLwYDVQQD
Eyg4YjBlZDJmNDVjNGI2NTY4NDRmNjk0MWEwYTIyZDM3MTkwZTI1MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA982d+dwe3dFoRZDbHw9vcuB05icK
Lz7CGTV69x3DD8/wcn68LTlYv2iscnIa8mrMMvHdK8EwuzpPAMgztWggY1G6cz0h
abSowjmcnxoolT9we37aQIzp7zXo6ndiOezLT7rbEaXFVhCr8V3wNpyip5zN51f/
a6rvfJB/PwaVY7+q2jier4/qvxjQzgetnGuDgNBGuW2VqgAhRGQZfGBUMqi7eM3F
+Qik6V2aOx/6C78aVbhGusQU6/BNAdwKpP7OUZwr+mHnbeqWKV+egoAIUN6zZdio
vvvkLwYzwPLSNY2sHCevvMhRF8E84ZD7GxgofnN8NIX1Q2RNmzA/Lkj19QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsO0vRcS2VoRPaUGgoi03GQ4lLiMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfdn4qlZ
lrD+rSgmmGn7ZnKAbXYwUD3DUET2FYbD6hlmwJdK/VJrMeE0UlttbxBK/oo4+/y2
j2DRCT6M2SXew3DKJreS6jf0q4eVQnjGOoqv2chv1TK4tmC44MBVueqPUgDk1JFd
Wp/94IbSIsCj4OYsY0e5+ZgDnCEcFEcphKucycall0ImEbh36GxmYBKEWw53dduM
pU7xtXDjCGYF8a6bSI2WbjFWCqwEa8536YWu6ex1Uah8l09Kmutyxb7VEQwr7sBp
8bB1xnuRGFT0tRZEMSgF3DBVkdZnMqa/FrIQpIGRvTS/UXEtd5qIiuvuBRBLIyVf
lCLSZTzVOGsUCg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:05:12 2024 by rpki-client on console-fra.rpki-client.org