Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.mft
File: 3KBEHlkX-ckJ821VrCQj4SSBTi8.mft (raw, json)
Hash identifier: 26O0Qpf+V1YXW1v8vo8oIEJbff9KhSehBBArWTCUjs0=
Subject key identifier: E0:7C:09:0E:4E:8F:75:69:77:67:12:C5:53:FF:39:81:A5:95:A1:9D
Authority key identifier: DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
Certificate issuer: /CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Certificate serial: 018F23817209916F2073F071FA655A2E6B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.mft
Manifest number: 075E
Signing time: Sun 28 Apr 2024 07:00:36 +0000
Manifest this update: Sun 28 Apr 2024 07:00:36 +0000
Manifest next update: Mon 29 Apr 2024 07:00:36 +0000
Files and hashes: 1: 3KBEHlkX-ckJ821VrCQj4SSBTi8.crl (hash: Yn/cYm5cmh9PKVIn22EvB9JELyh9UA/ZDs3r1xGnRQs=)
2: JLWXu9i8B1p8kGHEKvZ0jhX_jHE.roa (hash: LXzP4O7lBEDLZjxdcQCLRRKpHO+GUpGSkO1s2HADRf8=)
3: RLDNEURz_Fy-suJJzE7XsxxiNFQ.roa (hash: GXbNGvC6Gvkj0QhxymxPl5EGc9FzloQ9A96SSP86SKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:81:72:09:91:6f:20:73:f0:71:fa:65:5a:2e:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0441e5917f9c909f36d55ac2423e124814e2f
Validity
Not Before: Apr 28 07:00:36 2024 GMT
Not After : Apr 29 07:00:36 2024 GMT
Subject: CN=e07c090e4e8f7569776712c553ff3981a595a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:7b:b2:81:7d:6a:fd:ae:fe:a7:58:52:22:
6a:62:b2:ac:51:71:85:a0:d0:ac:40:e0:4e:9e:8b:
88:84:f9:f3:95:93:a7:ae:e5:15:16:b8:f6:33:cf:
47:eb:6b:00:eb:c7:f0:4d:1c:a5:93:1c:03:5b:54:
97:f4:6e:84:9b:b5:3d:c0:fa:ab:c4:8f:4d:71:ed:
ec:d0:3a:bc:90:3f:34:87:15:be:22:72:fc:3c:f0:
b9:e7:fb:5c:9f:f2:8a:d2:73:e4:06:aa:fd:41:19:
7d:5c:5b:ef:8e:31:5d:d4:2a:0b:45:30:82:2f:35:
30:2c:e0:18:73:35:3a:b9:d8:76:ed:b1:33:ce:8c:
21:67:c7:bd:34:db:42:d2:9c:05:94:7b:a8:2a:b4:
47:e8:c4:d1:58:6a:09:30:24:ba:8b:16:0b:f1:c8:
f4:e5:29:d7:e7:2a:4f:0f:10:39:73:a7:42:50:bb:
7a:dd:db:d7:4e:8a:ef:48:7d:ee:a2:fe:ab:90:0d:
a5:ba:21:fb:3c:d1:34:b7:9e:63:35:cd:c7:b5:f9:
f8:07:ef:54:56:17:18:c3:dd:f0:cb:2f:0d:3d:53:
a2:27:70:a7:71:5c:0e:e0:ba:d3:fd:66:d9:cf:96:
71:b2:4d:43:09:29:5c:7d:a0:fa:cc:7c:64:65:99:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:09:0E:4E:8F:75:69:77:67:12:C5:53:FF:39:81:A5:95:A1:9D
X509v3 Authority Key Identifier:
keyid:DC:A0:44:1E:59:17:F9:C9:09:F3:6D:55:AC:24:23:E1:24:81:4E:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KBEHlkX-ckJ821VrCQj4SSBTi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c2894c-a67d-4bac-b97f-1361e4aa91de/1/3KBEHlkX-ckJ821VrCQj4SSBTi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:52:ff:36:5b:8c:70:7e:d5:5c:3e:74:3c:2d:46:fb:45:ee:
17:19:17:33:07:54:ee:55:4b:89:f5:c6:75:e1:1d:af:19:7e:
b8:38:bb:19:08:2c:d3:72:c6:80:b3:6d:af:fd:26:10:43:ee:
d0:b6:c7:c8:e9:c5:9d:bf:5a:96:0e:ac:dd:6f:a4:af:8e:f6:
ae:13:84:02:91:80:e1:cc:06:a8:b6:9f:3a:eb:cc:38:71:bf:
d9:f6:d6:7f:44:11:83:22:79:f0:23:05:75:ae:ca:a9:6d:e0:
08:75:8f:80:0e:30:b8:c4:d7:e3:1a:74:25:69:fa:1b:b8:ff:
3f:17:b5:08:c9:1d:09:3f:a1:f8:41:6b:64:bb:3b:e2:fc:38:
0f:63:e1:35:29:27:66:f4:28:32:d1:8e:01:3a:f8:1e:72:b4:
79:1f:a1:0b:8c:40:94:7d:e2:ae:f4:1b:95:b2:57:21:26:14:
57:4f:f7:ea:84:13:7e:5b:ae:97:46:a0:4f:fd:7d:26:42:86:
30:fb:d1:af:c7:e8:cf:4f:49:8a:0f:fb:27:1f:26:af:57:8c:
0c:a2:3e:66:98:1c:be:42:aa:21:cc:24:de:ad:f5:51:cd:71:
17:45:23:bd:63:0a:a5:78:ed:65:61:27:ba:6d:82:95:b1:10:
48:41:87:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8jgXIJkW8gc/Bx+mVaLmsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTA0NDFlNTkxN2Y5YzkwOWYzNmQ1NWFjMjQyM2UxMjQ4
MTRlMmYwHhcNMjQwNDI4MDcwMDM2WhcNMjQwNDI5MDcwMDM2WjAzMTEwLwYDVQQD
EyhlMDdjMDkwZTRlOGY3NTY5Nzc2NzEyYzU1M2ZmMzk4MWE1OTVhMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6J7soF9av2u/qdYUiJqYrKsUXGF
oNCsQOBOnouIhPnzlZOnruUVFrj2M89H62sA68fwTRylkxwDW1SX9G6Em7U9wPqr
xI9Nce3s0Dq8kD80hxW+InL8PPC55/tcn/KK0nPkBqr9QRl9XFvvjjFd1CoLRTCC
LzUwLOAYczU6udh27bEzzowhZ8e9NNtC0pwFlHuoKrRH6MTRWGoJMCS6ixYL8cj0
5SnX5ypPDxA5c6dCULt63dvXTorvSH3uov6rkA2luiH7PNE0t55jNc3Htfn4B+9U
VhcYw93wyy8NPVOiJ3CncVwO4LrT/WbZz5Zxsk1DCSlcfaD6zHxkZZkRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB8CQ5Oj3Vpd2cSxVP/OYGllaGdMB8GA1UdIwQY
MBaAFNygRB5ZF/nJCfNtVawkI+EkgU4vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tCRUhsa1gtY2tKODIxVnJDUWo0U1NCVGk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMjg5NGMtYTY3ZC00YmFjLWI5N2Yt
MTM2MWU0YWE5MWRlLzEvM0tCRUhsa1gtY2tKODIxVnJDUWo0U1NCVGk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jMjg5NGMtYTY3ZC00YmFjLWI5N2YtMTM2MWU0YWE5MWRl
LzEvM0tCRUhsa1gtY2tKODIxVnJDUWo0U1NCVGk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVL/NluM
cH7VXD50PC1G+0XuFxkXMwdU7lVLifXGdeEdrxl+uDi7GQgs03LGgLNtr/0mEEPu
0LbHyOnFnb9alg6s3W+kr472rhOEApGA4cwGqLafOuvMOHG/2fbWf0QRgyJ58CMF
da7KqW3gCHWPgA4wuMTX4xp0JWn6G7j/Pxe1CMkdCT+h+EFrZLs74vw4D2PhNSkn
ZvQoMtGOATr4HnK0eR+hC4xAlH3irvQblbJXISYUV0/36oQTfluul0agT/19JkKG
MPvRr8foz09Jig/7Jx8mr1eMDKI+ZpgcvkKqIcwk3q31Uc1xF0UjvWMKpXjtZWEn
um2ClbEQSEGHDQ==
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:10:50 2024 by rpki-client on console-ams.rpki-client.org