Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: XZ5WLWTgPMMz4LGBrHIf4lrE57iW745OUHGFLvDbhTw=
Subject key identifier: 38:8B:CE:A8:21:0F:99:69:B2:0C:97:3B:24:B3:25:6F:8D:42:D2:19
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 01905133704A157FC76CB9C4BD706CF09E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0BC6
Signing time: Tue 25 Jun 2024 21:00:43 +0000
Manifest this update: Tue 25 Jun 2024 21:00:43 +0000
Manifest next update: Wed 26 Jun 2024 21:00:43 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: ocOriAyenUhZv79nYl+5ixDjTqegNQQcEGLdqsVQycA=)
2: Qpt_WE7u7qPmZQvhid6Wdj14J-Q.roa (hash: +cZhAWwD80FbGGP1sJdoVLy5zcq2Q13OMjQP9BRud4A=)
3: WsXo6KzMdkKbb0SJeF67fmXx1UY.roa (hash: Uqr8i/vkCMRK6A1aMGnGd681unOZfqOxTg7fohwjogE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:33:70:4a:15:7f:c7:6c:b9:c4:bd:70:6c:f0:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jun 25 21:00:43 2024 GMT
Not After : Jun 26 21:00:43 2024 GMT
Subject: CN=388bcea8210f9969b20c973b24b3256f8d42d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:c7:e4:6d:3a:37:43:3b:32:93:95:98:c3:
75:9f:b9:2e:d6:51:13:b3:63:7f:4a:9b:fe:e2:46:
fe:38:b5:ac:7b:37:e8:ea:27:c3:21:ad:1f:3b:0c:
65:71:f2:34:70:14:b7:91:d6:e6:04:d9:eb:38:70:
50:ba:95:00:a6:80:9f:92:69:50:86:0d:e5:c4:fe:
f4:05:17:73:aa:26:3c:d5:47:ec:55:bd:61:66:9e:
af:12:0f:aa:64:89:4b:e5:48:cf:8a:a0:01:88:55:
57:61:c7:d7:42:5e:ed:c2:0f:fc:ae:3e:37:e8:5f:
ac:f5:bc:a0:59:fe:22:e2:54:e5:9f:af:1d:63:71:
2b:dc:b4:30:4b:ea:ff:f6:d4:b4:94:bc:d8:8f:1c:
61:25:89:49:14:31:4c:06:ba:02:86:da:08:24:71:
3c:a6:35:36:07:c2:ce:83:04:b7:4e:95:f1:7e:c6:
a4:7f:5b:f3:0d:0b:4d:46:be:db:85:52:a7:3f:25:
59:aa:3a:5d:c9:44:35:ad:31:7b:f0:6e:a7:cc:f3:
78:5b:8d:82:1b:12:bb:8c:57:fe:f7:05:55:c3:3e:
f5:5b:d7:1a:a7:65:37:3d:ae:2e:46:62:5f:ef:ca:
00:a8:44:ed:8d:ee:a0:a9:0c:ca:69:a9:8a:35:94:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:CE:A8:21:0F:99:69:B2:0C:97:3B:24:B3:25:6F:8D:42:D2:19
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:e7:8e:19:f6:24:21:c6:d4:d2:0f:44:66:a1:27:be:37:
bc:d7:f9:80:c6:9a:47:6f:92:4e:2d:2f:76:79:03:f6:58:bb:
46:10:52:1b:24:1d:5c:6f:98:f7:d5:b0:e1:f7:e2:74:13:73:
3c:02:c0:7d:fa:d7:39:93:3c:4a:51:75:49:4e:a3:6c:ec:cb:
57:91:c5:d0:de:81:e5:c0:83:b9:80:df:e4:6c:13:da:b2:bf:
97:c6:b8:d4:96:8c:e5:4b:93:95:b9:b0:27:0a:b1:69:d4:3c:
cd:14:bc:a4:be:e0:84:21:ae:de:13:91:2e:93:2b:c4:f5:f0:
70:c4:3e:59:f7:e3:cf:ec:61:e0:24:62:09:16:c6:e0:2f:45:
cc:30:74:2b:d1:ca:76:5f:2f:03:c4:31:45:34:97:e6:97:72:
f5:80:08:53:8a:fc:b0:95:d3:0d:65:1d:0e:de:04:67:d2:74:
79:d4:b0:5d:52:bc:c4:70:81:38:62:c9:8d:83:15:00:00:4a:
65:9f:23:08:ec:0c:45:d2:b1:40:00:64:54:6e:da:74:d4:16:
41:ba:ec:0b:6c:15:e8:ef:36:e1:14:4f:28:9a:12:5c:63:cf:
b7:09:e1:20:a4:92:51:09:91:43:4d:d5:00:d2:0c:f3:03:70:
2e:a5:e8:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBRM3BKFX/HbLnEvXBs8J5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjQwNjI1MjEwMDQzWhcNMjQwNjI2MjEwMDQzWjAzMTEwLwYDVQQD
EygzODhiY2VhODIxMGY5OTY5YjIwYzk3M2IyNGIzMjU2ZjhkNDJkMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNHH5G06N0M7MpOVmMN1n7ku1lET
s2N/Spv+4kb+OLWsezfo6ifDIa0fOwxlcfI0cBS3kdbmBNnrOHBQupUApoCfkmlQ
hg3lxP70BRdzqiY81UfsVb1hZp6vEg+qZIlL5UjPiqABiFVXYcfXQl7twg/8rj43
6F+s9bygWf4i4lTln68dY3Er3LQwS+r/9tS0lLzYjxxhJYlJFDFMBroChtoIJHE8
pjU2B8LOgwS3TpXxfsakf1vzDQtNRr7bhVKnPyVZqjpdyUQ1rTF78G6nzPN4W42C
GxK7jFf+9wVVwz71W9cap2U3Pa4uRmJf78oAqETtje6gqQzKaamKNZTWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiLzqghD5lpsgyXOySzJW+NQtIZMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUbnjhn2
JCHG1NIPRGahJ743vNf5gMaaR2+STi0vdnkD9li7RhBSGyQdXG+Y99Ww4ffidBNz
PALAffrXOZM8SlF1SU6jbOzLV5HF0N6B5cCDuYDf5GwT2rK/l8a41JaM5UuTlbmw
JwqxadQ8zRS8pL7ghCGu3hORLpMrxPXwcMQ+Wffjz+xh4CRiCRbG4C9FzDB0K9HK
dl8vA8QxRTSX5pdy9YAIU4r8sJXTDWUdDt4EZ9J0edSwXVK8xHCBOGLJjYMVAABK
ZZ8jCOwMRdKxQABkVG7adNQWQbrsC2wV6O824RRPKJoSXGPPtwnhIKSSUQmRQ03V
ANIM8wNwLqXolA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:12:23 2024 by rpki-client on console-fra.rpki-client.org