Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: lrILBWdjH+mwgjNNQjXGEZnu7+9l202TLuiUVXC8q5I=
Subject key identifier: D2:02:1B:C3:A5:2A:F9:D5:A2:AB:70:3D:36:87:B2:09:35:FC:16:CF
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 018F373FB876FFBFB2CDDC442FC8AF1BF51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 114E
Signing time: Thu 02 May 2024 03:01:13 +0000
Manifest this update: Thu 02 May 2024 03:01:13 +0000
Manifest next update: Fri 03 May 2024 03:01:13 +0000
Files and hashes: 1: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: blhEBehsD7OYkJUlT6QQ95lmlP3d97WwciGWTAdb8z0=)
2: D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa (hash: No3GAt1AR9tXk2qzUzK70aRRFrqU2uMXjR5BgucMGgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:3f:b8:76:ff:bf:b2:cd:dc:44:2f:c8:af:1b:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: May 2 03:01:13 2024 GMT
Not After : May 3 03:01:13 2024 GMT
Subject: CN=d2021bc3a52af9d5a2ab703d3687b20935fc16cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:c9:6a:29:71:55:8a:55:98:fb:4f:41:8a:
e7:35:44:f2:5e:81:6b:fd:e2:ce:cd:e8:e0:69:87:
6f:58:9c:c1:25:8c:cc:76:11:24:81:09:ae:a8:3d:
a1:0f:34:f6:12:2e:54:db:d6:30:ec:c4:b9:08:68:
51:6f:c9:fb:7c:c1:8c:fb:ba:14:c3:e9:a1:6e:44:
29:69:c4:08:a3:0a:4b:be:39:13:ac:43:8d:42:b4:
6f:90:be:08:b5:27:9f:99:f6:58:50:24:b1:a5:7c:
30:aa:13:ac:06:e3:85:8a:01:d5:3b:63:ff:f0:55:
ea:6c:d9:2c:7e:df:ec:5c:e2:5b:14:8a:6a:68:68:
36:8e:6d:c3:23:52:ec:53:9b:30:60:41:c2:24:6a:
27:c0:23:0e:5d:00:e7:16:71:1a:0f:b1:ff:f7:c9:
69:ef:2c:4f:c8:47:82:a3:c4:34:2b:7d:f5:91:5a:
f8:7f:6f:90:85:d7:14:0c:e4:eb:2e:96:73:4a:1e:
a0:17:95:da:d8:7c:94:c2:dc:61:6f:2f:90:a4:a0:
39:25:a8:6e:b5:09:d2:82:46:d8:74:3f:ca:20:3a:
56:00:25:77:8d:f2:a9:38:12:68:81:b8:5f:e1:6f:
11:25:75:4f:6a:3e:b3:e8:41:71:80:d5:af:54:ed:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:1B:C3:A5:2A:F9:D5:A2:AB:70:3D:36:87:B2:09:35:FC:16:CF
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:bc:4f:70:21:15:33:f1:d0:25:21:78:3d:40:49:08:68:
0b:47:b8:38:10:b6:b0:af:9d:3e:53:28:1a:09:bf:70:93:a3:
c8:04:e3:d3:37:f7:9b:fb:ac:26:a2:74:7a:78:65:09:95:65:
41:a3:7e:9f:9f:c6:df:32:fe:37:53:7e:ba:ce:76:68:f2:b3:
ea:3f:82:50:04:e7:b3:83:15:de:f6:41:1f:73:45:3c:ac:4d:
60:69:a0:de:48:f1:c0:47:74:5a:6b:04:4d:1b:2e:10:00:25:
0d:a0:0d:ae:0d:11:cf:d1:a2:5b:97:32:0a:69:36:db:1a:20:
6f:a0:40:01:8c:9e:85:c8:37:df:b9:4d:3c:98:21:0b:b0:71:
02:bd:f4:f7:5c:be:d8:a9:ff:4b:0b:2e:e3:17:97:2b:89:85:
c4:3d:99:d1:52:3f:ff:cd:40:61:93:67:f1:1f:89:b5:54:26:
fc:01:39:75:d3:24:73:9c:a7:8d:22:59:81:ff:85:18:89:11:
1c:91:a1:7e:17:d4:1e:7c:d3:f0:71:38:5f:ff:d3:d3:06:39:
0d:23:4a:62:53:91:38:90:84:b7:51:6e:65:e1:18:50:2d:d0:
19:12:ca:c8:d1:b0:b8:55:16:c8:80:a2:77:a5:e9:0e:58:d2:
d9:ad:5c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83P7h2/7+yzdxEL8ivG/UfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjQwNTAyMDMwMTEzWhcNMjQwNTAzMDMwMTEzWjAzMTEwLwYDVQQD
EyhkMjAyMWJjM2E1MmFmOWQ1YTJhYjcwM2QzNjg3YjIwOTM1ZmMxNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPrJailxVYpVmPtPQYrnNUTyXoFr
/eLOzejgaYdvWJzBJYzMdhEkgQmuqD2hDzT2Ei5U29Yw7MS5CGhRb8n7fMGM+7oU
w+mhbkQpacQIowpLvjkTrEONQrRvkL4ItSefmfZYUCSxpXwwqhOsBuOFigHVO2P/
8FXqbNksft/sXOJbFIpqaGg2jm3DI1LsU5swYEHCJGonwCMOXQDnFnEaD7H/98lp
7yxPyEeCo8Q0K331kVr4f2+QhdcUDOTrLpZzSh6gF5Xa2HyUwtxhby+QpKA5Jahu
tQnSgkbYdD/KIDpWACV3jfKpOBJogbhf4W8RJXVPaj6z6EFxgNWvVO0P5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNICG8OlKvnVoqtwPTaHsgk1/BbPMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJi8T3Ah
FTPx0CUheD1ASQhoC0e4OBC2sK+dPlMoGgm/cJOjyATj0zf3m/usJqJ0enhlCZVl
QaN+n5/G3zL+N1N+us52aPKz6j+CUATns4MV3vZBH3NFPKxNYGmg3kjxwEd0WmsE
TRsuEAAlDaANrg0Rz9GiW5cyCmk22xogb6BAAYyehcg337lNPJghC7BxAr3091y+
2Kn/Swsu4xeXK4mFxD2Z0VI//81AYZNn8R+JtVQm/AE5ddMkc5ynjSJZgf+FGIkR
HJGhfhfUHnzT8HE4X//T0wY5DSNKYlOROJCEt1FuZeEYUC3QGRLKyNGwuFUWyICi
d6XpDljS2a1cRA==
-----END CERTIFICATE-----
Generated at Thu May 2 06:23:29 2024 by rpki-client on console-fra.rpki-client.org