Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: NOn8U4ARinSOzT+lTyEEbCSCoVTBOltuFFqfxtrfA0c=
Subject key identifier: 11:C5:74:AD:D3:F3:DF:CC:99:40:AB:01:FD:FC:16:79:58:46:BA:FF
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 018F3C9CC2D018D6A1B218E7092DEB26BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0764
Signing time: Fri 03 May 2024 04:00:57 +0000
Manifest this update: Fri 03 May 2024 04:00:57 +0000
Manifest next update: Sat 04 May 2024 04:00:57 +0000
Files and hashes: 1: AFMCKJxZ8R1Y1JuKceyw7pmH-AM.roa (hash: EwDQ0DZ80n4w4MnXt/5Mp8bTz2OggfoVPxonCCMDbjs=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: GQQHWr+c8rFdMjF4FSelFQeWBI1fD3t1TYE6YNDraN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9c:c2:d0:18:d6:a1:b2:18:e7:09:2d:eb:26:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: May 3 04:00:57 2024 GMT
Not After : May 4 04:00:57 2024 GMT
Subject: CN=11c574add3f3dfcc9940ab01fdfc16795846baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:58:2b:cd:df:62:f5:56:e7:a7:49:dd:b9:
95:aa:3a:11:7c:0b:e2:f7:c9:99:a1:6c:22:50:2b:
e5:cb:c4:74:94:66:96:20:6d:4c:a2:0c:12:89:7e:
83:a4:4e:6f:49:2a:1f:e9:2d:95:56:c6:0b:ed:61:
43:3b:7a:68:dd:36:ca:53:54:36:e1:65:c2:13:f9:
6c:c3:3a:a2:a5:d1:48:52:50:f1:21:96:c6:ab:ef:
70:9b:b4:62:10:08:aa:94:67:ae:d6:7c:4a:b0:17:
c7:fb:5d:2c:10:6c:3c:6a:76:8c:7e:6e:a9:1d:c2:
02:9d:46:82:b5:6e:62:fd:1f:a3:e9:ec:fd:1f:68:
ba:e0:d7:84:21:c5:00:2b:33:8d:39:a1:8e:0b:c3:
6f:8c:bb:05:aa:09:e7:f7:56:47:d6:a3:39:f0:fa:
2f:6f:fb:d0:58:b8:e3:a3:46:94:48:f5:39:b1:43:
70:9a:0c:b8:65:c2:78:f0:a8:36:1e:24:ae:21:2c:
9a:b9:83:3d:a4:52:37:fd:cb:7f:9b:1b:52:01:f5:
d4:2e:b3:33:78:c2:8a:5b:26:bc:cc:b9:ce:ce:07:
9e:e1:68:41:df:77:62:82:74:1d:ed:93:aa:12:69:
ab:98:b8:d6:82:59:50:46:e0:72:ca:f9:f7:39:78:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:74:AD:D3:F3:DF:CC:99:40:AB:01:FD:FC:16:79:58:46:BA:FF
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:e6:7e:72:96:9b:b5:f9:38:65:8b:25:32:80:6d:d5:45:
44:23:38:c9:32:1d:6c:53:e8:cc:b5:73:f0:33:b3:14:aa:e7:
79:61:24:b7:b3:e6:b4:1e:fe:3a:cc:06:e2:03:4b:b5:cd:ed:
56:59:b5:69:28:6f:8c:ff:cf:fc:32:6e:32:69:b7:61:b0:d3:
71:f6:07:eb:f6:f9:ca:4d:38:9d:2e:dc:f7:10:ac:5e:cf:9a:
54:16:fb:7c:53:d3:cc:c5:79:48:6d:5f:a1:fa:fc:99:d1:5d:
bd:3c:00:40:b5:2d:f7:8c:ee:c5:21:be:0b:ad:eb:e3:19:dd:
60:2a:96:1a:b0:90:1c:07:5b:2e:1d:f7:e2:d1:e0:fd:c2:4f:
09:0d:f7:c3:ac:e0:31:01:ae:e0:06:91:5d:b2:1c:13:cd:b4:
65:1d:1d:6a:21:54:b8:0a:1f:6e:aa:0f:92:32:af:4d:0c:ba:
17:c0:c6:4a:0a:58:c8:53:36:61:47:26:a8:77:68:05:e2:8d:
be:0c:38:28:ce:05:ec:1d:f6:5d:fe:9a:7d:8d:62:e0:9d:23:
82:d1:f2:62:91:ed:5d:41:35:09:88:08:db:2f:13:3d:97:2e:
7a:dc:81:d2:28:56:cd:b0:ba:92:ef:e0:5c:66:ea:6c:e6:a6:
1b:da:45:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88nMLQGNahshjnCS3rJryyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw
N2FjN2QwHhcNMjQwNTAzMDQwMDU3WhcNMjQwNTA0MDQwMDU3WjAzMTEwLwYDVQQD
EygxMWM1NzRhZGQzZjNkZmNjOTk0MGFiMDFmZGZjMTY3OTU4NDZiYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf1YK83fYvVW56dJ3bmVqjoRfAvi
98mZoWwiUCvly8R0lGaWIG1MogwSiX6DpE5vSSof6S2VVsYL7WFDO3po3TbKU1Q2
4WXCE/lswzqipdFIUlDxIZbGq+9wm7RiEAiqlGeu1nxKsBfH+10sEGw8anaMfm6p
HcICnUaCtW5i/R+j6ez9H2i64NeEIcUAKzONOaGOC8NvjLsFqgnn91ZH1qM58Pov
b/vQWLjjo0aUSPU5sUNwmgy4ZcJ48Kg2HiSuISyauYM9pFI3/ct/mxtSAfXULrMz
eMKKWya8zLnOzgee4WhB33dignQd7ZOqEmmrmLjWgllQRuByyvn3OXiUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHFdK3T89/MmUCrAf38FnlYRrr/MB8GA1UdIwQY
MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct
ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1
LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZHmfnKW
m7X5OGWLJTKAbdVFRCM4yTIdbFPozLVz8DOzFKrneWEkt7PmtB7+OswG4gNLtc3t
Vlm1aShvjP/P/DJuMmm3YbDTcfYH6/b5yk04nS7c9xCsXs+aVBb7fFPTzMV5SG1f
ofr8mdFdvTwAQLUt94zuxSG+C63r4xndYCqWGrCQHAdbLh334tHg/cJPCQ33w6zg
MQGu4AaRXbIcE820ZR0daiFUuAofbqoPkjKvTQy6F8DGSgpYyFM2YUcmqHdoBeKN
vgw4KM4F7B32Xf6afY1i4J0jgtHyYpHtXUE1CYgI2y8TPZcuetyB0ihWzbC6ku/g
XGbqbOamG9pFew==
-----END CERTIFICATE-----
Generated at Fri May 3 10:56:25 2024 by rpki-client on console-ams.rpki-client.org