Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: GLcm5SijlzlNRuI4FaZjlAdLnGLc0/nJtMxyBY2kvPc=
Subject key identifier: EB:B8:73:CB:12:72:EE:7D:FD:40:99:B3:7E:BC:8C:66:19:44:14:07
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 018F89372C0E0FCAD36ECA3B24DBB6E9806A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 0E8F
Signing time: Sat 18 May 2024 01:00:45 +0000
Manifest this update: Sat 18 May 2024 01:00:45 +0000
Manifest next update: Sun 19 May 2024 01:00:45 +0000
Files and hashes: 1: a1yTuIfdjI6HN-GUTaMkz_bdx-A.roa (hash: ac3G8kfSeXLTjRxyKwmQVc1boKO8SS1dvSr4hEVpSo8=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: AE5CEc7DJxgDRh3OOYLa8OUCeK+Pztb1r2W4Ib3yHCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:2c:0e:0f:ca:d3:6e:ca:3b:24:db:b6:e9:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: May 18 01:00:45 2024 GMT
Not After : May 19 01:00:45 2024 GMT
Subject: CN=ebb873cb1272ee7dfd4099b37ebc8c6619441407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:af:9e:e7:36:ac:7f:c1:02:d7:8a:92:68:
bd:2d:fa:8c:27:56:f6:d2:57:34:00:64:79:5d:a3:
28:a3:b8:41:99:1a:7f:be:08:9d:01:a3:28:56:d0:
63:96:74:9f:11:da:bf:de:24:77:ff:45:df:96:7c:
8c:38:e9:7e:8c:08:f6:12:41:d1:e2:f9:9a:3c:c0:
64:6b:89:16:88:59:10:bc:8c:77:07:64:50:08:4f:
9a:50:5d:d8:15:23:2c:81:6a:0e:e8:d5:92:78:43:
45:a7:54:e5:68:0b:ba:4c:32:2f:03:d8:c1:2d:51:
9b:07:34:70:d7:e3:01:15:08:2a:6f:1f:fe:85:2c:
cc:38:6b:8d:e2:af:b0:65:5a:e4:7d:9d:67:a7:d0:
82:44:29:cf:18:ec:9c:ae:d1:83:cb:cf:a6:a0:2c:
cf:c5:4a:1a:56:fa:74:7b:34:bd:e3:5a:86:78:42:
6c:da:73:f5:87:57:6f:2a:db:7e:b5:b0:9d:ba:7a:
50:ec:d7:87:f7:7b:62:00:98:75:d2:50:0c:eb:33:
19:78:a2:7d:7e:1a:ae:5e:1e:c0:7f:1b:7b:50:db:
42:04:42:39:d4:be:60:d7:e8:6a:b5:1d:21:72:cf:
c2:b5:b0:66:0d:f0:8a:4f:8b:48:b5:62:43:9f:ab:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:73:CB:12:72:EE:7D:FD:40:99:B3:7E:BC:8C:66:19:44:14:07
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ed:45:ae:05:c3:96:54:34:97:6e:6e:62:9e:cc:f1:fb:00:
14:d9:3a:73:d5:a6:78:2c:56:d8:fe:01:3d:40:a0:a3:a9:6e:
91:00:94:ff:96:9d:59:73:30:f1:4c:ac:e1:5f:80:d0:a1:19:
f5:13:ec:af:4e:68:2d:39:4a:19:1b:8a:d5:d3:ae:38:92:2f:
ac:9a:e5:00:2c:99:f8:be:f6:60:2a:5d:bc:3a:06:d9:07:e1:
74:4f:31:91:f2:b8:09:ce:3d:3a:d3:58:0d:b4:6c:71:f8:88:
7a:49:b5:b1:75:d8:c2:9b:9a:d4:5d:aa:45:d6:b1:45:14:3f:
a2:98:65:07:0a:ed:32:c4:30:69:14:fb:35:5c:7d:4d:47:69:
19:3d:6c:cb:f2:51:85:24:47:49:04:d4:f2:55:54:c5:2c:62:
5b:a9:64:b7:49:c0:92:ef:09:87:e0:d9:2f:2c:6c:70:e0:7e:
65:b5:60:45:df:f2:02:a3:e8:c8:d2:fb:85:ea:88:d2:8b:73:
02:9f:82:a7:42:d5:21:69:4f:a4:77:41:32:b0:c6:aa:e3:d3:
19:84:ee:e9:87:f0:ce:81:8a:85:d2:72:2c:5d:66:c4:2c:06:
92:4c:37:2e:bc:50:e4:8f:80:04:ec:70:9c:a9:d6:fe:c7:2c:
7a:c9:48:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNywOD8rTbso7JNu26YBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3
MzMwMWYwHhcNMjQwNTE4MDEwMDQ1WhcNMjQwNTE5MDEwMDQ1WjAzMTEwLwYDVQQD
EyhlYmI4NzNjYjEyNzJlZTdkZmQ0MDk5YjM3ZWJjOGM2NjE5NDQxNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wyvnuc2rH/BAteKkmi9LfqMJ1b2
0lc0AGR5XaMoo7hBmRp/vgidAaMoVtBjlnSfEdq/3iR3/0XflnyMOOl+jAj2EkHR
4vmaPMBka4kWiFkQvIx3B2RQCE+aUF3YFSMsgWoO6NWSeENFp1TlaAu6TDIvA9jB
LVGbBzRw1+MBFQgqbx/+hSzMOGuN4q+wZVrkfZ1np9CCRCnPGOycrtGDy8+moCzP
xUoaVvp0ezS941qGeEJs2nP1h1dvKtt+tbCdunpQ7NeH93tiAJh10lAM6zMZeKJ9
fhquXh7Afxt7UNtCBEI51L5g1+hqtR0hcs/CtbBmDfCKT4tItWJDn6uKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu4c8sScu59/UCZs368jGYZRBQHMB8GA1UdIwQY
MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt
ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4
LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxu1FrgXD
llQ0l25uYp7M8fsAFNk6c9WmeCxW2P4BPUCgo6lukQCU/5adWXMw8Uys4V+A0KEZ
9RPsr05oLTlKGRuK1dOuOJIvrJrlACyZ+L72YCpdvDoG2QfhdE8xkfK4Cc49OtNY
DbRscfiIekm1sXXYwpua1F2qRdaxRRQ/ophlBwrtMsQwaRT7NVx9TUdpGT1sy/JR
hSRHSQTU8lVUxSxiW6lkt0nAku8Jh+DZLyxscOB+ZbVgRd/yAqPoyNL7heqI0otz
Ap+Cp0LVIWlPpHdBMrDGquPTGYTu6YfwzoGKhdJyLF1mxCwGkkw3LrxQ5I+ABOxw
nKnW/scseslIpQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:01:24 2024 by rpki-client on console-ams.rpki-client.org