Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: FfvnnZQciv6lnSUzVPR8VlEefcG4C35IaUyqJ28GR30=
Subject key identifier: BB:17:A2:9A:E7:F1:69:60:2A:CB:3C:F2:CE:BA:DC:95:A2:2B:C3:2F
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 018F874AEEAE290A153549AAA71DE0272BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 10BD
Signing time: Fri 17 May 2024 16:03:05 +0000
Manifest this update: Fri 17 May 2024 16:03:05 +0000
Manifest next update: Sat 18 May 2024 16:03:05 +0000
Files and hashes: 1: 2-NPGmV1S-I3jY3_F9QheqQfqG4.roa (hash: fCdExppHXkTvWPzYfpqOvFw8/6EVIc/KVeaYESiOtPI=)
2: 6txvKn1B3B25-VJzbmAPloN9ojM.roa (hash: /PsgMg94U/wVVyKk5BxzZrtG1MX0reiXy8mkZK5ZfA8=)
3: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: hZhLkPdM/TOh7LlZ+R5a6A9E1sGr/lS8cJ6jYjBJf5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:ee:ae:29:0a:15:35:49:aa:a7:1d:e0:27:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: May 17 16:03:05 2024 GMT
Not After : May 18 16:03:05 2024 GMT
Subject: CN=bb17a29ae7f169602acb3cf2cebadc95a22bc32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:a8:d0:2b:ac:c2:e3:c8:20:49:7f:ca:0c:
50:70:26:d5:89:60:6f:a7:fc:50:55:d8:62:0b:ff:
fe:04:5b:f6:fa:c1:e3:ac:78:73:b0:4f:54:70:cd:
f5:18:29:10:d9:23:a9:73:a7:37:0d:8f:b6:57:aa:
79:fe:21:2f:14:7c:fa:6c:db:2f:3d:47:23:7f:7a:
44:24:c4:3c:26:92:a5:c7:b6:cf:8b:a8:48:f5:a8:
8d:8c:40:e3:df:42:50:43:6e:90:19:ba:f4:66:ca:
64:07:bb:b7:da:27:52:c8:8f:54:27:cf:4b:50:65:
8c:82:85:15:f5:11:53:97:26:7d:3a:1f:91:2c:92:
81:7c:3b:d5:33:ee:a2:a8:5b:66:19:00:4c:be:70:
dc:4a:7e:71:6c:f4:ff:5b:22:7c:4e:42:a8:38:a6:
f6:cd:bd:40:d2:ee:89:bc:0a:21:a7:bc:5d:5a:5e:
2b:b2:74:a3:cb:be:a7:32:75:aa:a9:26:b2:63:75:
24:7b:3f:ac:6a:47:39:28:37:49:3c:1e:0a:aa:73:
af:4c:e4:bb:a4:ee:e6:db:b3:3e:76:27:d4:13:e4:
e0:2b:50:d4:15:61:07:f8:50:3a:bb:b7:4f:8b:48:
57:88:fd:0e:ad:08:0b:c4:5d:12:dc:46:5b:a6:81:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:A2:9A:E7:F1:69:60:2A:CB:3C:F2:CE:BA:DC:95:A2:2B:C3:2F
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:85:3a:f2:17:a6:c8:1f:d7:be:2a:0e:1a:a7:dc:a4:b1:cc:
b3:04:4d:f0:c7:5e:e7:89:15:d0:c3:f2:3b:dd:c9:a5:81:ef:
4a:f3:ec:18:f3:87:52:e0:c5:56:37:a0:1d:15:04:bb:8d:59:
3a:f7:52:a1:3a:72:6d:73:64:10:5b:e4:2d:18:2b:4d:88:1d:
76:6c:fd:17:14:d2:11:36:fa:dd:4b:aa:28:4e:e8:31:bc:d4:
5e:9f:9f:03:4e:d2:49:25:00:78:00:91:71:f6:79:4a:e4:ed:
d7:69:f5:14:de:bb:93:77:f4:1c:6e:40:1f:97:04:a7:44:33:
61:4e:9f:fd:c8:dd:16:d1:ae:2a:67:76:91:ef:9e:93:0b:8c:
15:2d:f0:b6:1d:68:b2:cd:8e:ea:f5:50:d6:9a:27:04:73:6f:
6e:49:f8:ae:55:a3:8f:e5:a5:72:0f:f0:27:6f:65:9c:11:d3:
49:fc:db:d0:1d:55:e6:88:cb:80:eb:f5:95:31:dc:b4:97:e4:
51:95:f9:02:ca:f0:39:ef:4f:9a:97:73:74:97:95:55:24:4c:
4d:57:fa:e1:da:75:6d:22:9f:0a:ae:32:7f:72:e8:83:95:79:
82:46:85:a5:9c:0d:95:16:9d:1e:69:90:fb:87:c8:86:f5:40:
89:a7:4e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSu6uKQoVNUmqpx3gJyu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw
NTBlMzQwHhcNMjQwNTE3MTYwMzA1WhcNMjQwNTE4MTYwMzA1WjAzMTEwLwYDVQQD
EyhiYjE3YTI5YWU3ZjE2OTYwMmFjYjNjZjJjZWJhZGM5NWEyMmJjMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7yo0CuswuPIIEl/ygxQcCbViWBv
p/xQVdhiC//+BFv2+sHjrHhzsE9UcM31GCkQ2SOpc6c3DY+2V6p5/iEvFHz6bNsv
PUcjf3pEJMQ8JpKlx7bPi6hI9aiNjEDj30JQQ26QGbr0ZspkB7u32idSyI9UJ89L
UGWMgoUV9RFTlyZ9Oh+RLJKBfDvVM+6iqFtmGQBMvnDcSn5xbPT/WyJ8TkKoOKb2
zb1A0u6JvAohp7xdWl4rsnSjy76nMnWqqSayY3Ukez+sakc5KDdJPB4KqnOvTOS7
pO7m27M+difUE+TgK1DUFWEH+FA6u7dPi0hXiP0OrQgLxF0S3EZbpoE0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsXoprn8WlgKss88s663JWiK8MvMB8GA1UdIwQY
MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct
Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli
LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoU68hem
yB/XvioOGqfcpLHMswRN8Mde54kV0MPyO93JpYHvSvPsGPOHUuDFVjegHRUEu41Z
OvdSoTpybXNkEFvkLRgrTYgddmz9FxTSETb63UuqKE7oMbzUXp+fA07SSSUAeACR
cfZ5SuTt12n1FN67k3f0HG5AH5cEp0QzYU6f/cjdFtGuKmd2ke+ekwuMFS3wth1o
ss2O6vVQ1ponBHNvbkn4rlWjj+Wlcg/wJ29lnBHTSfzb0B1V5ojLgOv1lTHctJfk
UZX5AsrwOe9PmpdzdJeVVSRMTVf64dp1bSKfCq4yf3Log5V5gkaFpZwNlRadHmmQ
+4fIhvVAiadOzg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:16:07 2024 by rpki-client on console-fra.rpki-client.org