Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: enfq/P//uYULN6yaqeGGvEAo7h2Tc3Hw6qwPDye85Ik=
Subject key identifier: BD:0D:F8:30:B5:BF:E3:EC:F3:4E:F3:12:E9:06:ED:A1:2B:35:D0:0F
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 0191FA47D0D407D75C40A38EC796C1E70FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: EF
Signing time: Mon 16 Sep 2024 10:01:36 +0000
Manifest this update: Mon 16 Sep 2024 10:01:36 +0000
Manifest next update: Tue 17 Sep 2024 10:01:36 +0000
Files and hashes: 1: 1-AD6xrpHPVULiz97ZmC-3qVr3U0.roa (hash: eluDtCjAVJ+qlga7bbXVWbNhUlzIJdZUxAnTYm61MbQ=)
2: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: Dsz1h90lfHGTN2ygaMrQxmAgNT30PG2KCSp1QBU9hPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:47:d0:d4:07:d7:5c:40:a3:8e:c7:96:c1:e7:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Sep 16 10:01:36 2024 GMT
Not After : Sep 17 10:01:36 2024 GMT
Subject: CN=bd0df830b5bfe3ecf34ef312e906eda12b35d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:90:a0:d9:42:9f:7b:1c:ac:82:07:ed:b0:
45:ab:02:01:66:5f:79:1e:79:de:51:c5:9d:37:cb:
ed:b8:16:e3:13:5a:59:a7:64:b7:ef:c9:7d:d6:85:
4a:7a:0d:60:ea:e8:1d:7a:fc:ca:57:4f:77:94:cd:
3a:ce:a6:b0:97:4d:6e:1a:53:fb:17:ae:a1:e2:1f:
c9:08:3d:20:c9:e7:80:6d:25:f5:99:05:d2:26:e4:
b6:58:82:81:d1:d7:fb:c9:de:5c:08:54:b4:00:b2:
c8:07:1b:2f:e3:d4:17:ff:f8:d3:c7:7e:d2:2a:81:
63:53:e7:5d:71:bb:1d:23:84:9c:ef:26:47:c0:44:
b4:2d:df:d0:66:a3:27:de:02:26:84:0e:7c:de:65:
c3:1b:48:86:f4:31:48:2b:4f:dc:bd:6f:05:73:6e:
28:b5:fe:7e:a6:9b:00:dc:b3:d4:4b:c0:15:b3:05:
ed:cf:30:ca:33:fe:d2:95:b7:cb:7c:44:50:68:c8:
ae:26:d1:89:16:6f:1d:79:81:89:5a:aa:1a:de:82:
9c:9e:c4:ba:f1:b5:b7:47:a9:4d:b5:af:05:ed:1b:
27:74:71:32:11:b9:a3:b6:a6:a3:54:7f:b3:33:5c:
43:62:59:94:2f:18:db:71:a1:0c:a6:25:af:2c:fb:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:F8:30:B5:BF:E3:EC:F3:4E:F3:12:E9:06:ED:A1:2B:35:D0:0F
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:3f:38:49:65:af:f0:ad:7d:cb:98:52:67:0f:06:bb:6b:
8b:eb:0f:ee:f9:6d:a5:76:c9:c6:6e:07:8a:a9:9a:63:d2:d8:
71:bf:df:e3:e1:9d:7c:69:bb:51:b3:1f:b6:13:6e:ac:b2:ee:
f8:12:c6:75:f5:75:11:f1:fd:25:e5:cc:2d:a5:1d:1c:7a:f9:
26:ed:81:7b:5f:a7:44:5e:e7:f2:1d:19:d8:21:ee:80:bb:b4:
26:76:bc:b0:96:23:48:64:5a:a6:d1:83:63:3e:5e:1d:86:0e:
1e:5f:a9:a2:97:07:32:bb:c8:57:da:7a:9f:66:97:29:42:57:
86:7a:38:64:33:0a:d3:0b:0b:3b:a0:c5:9b:1f:26:d7:37:85:
d7:0a:99:15:a0:ab:ac:7b:f8:6f:9b:5d:db:17:58:49:59:df:
60:37:38:3c:43:5e:1e:62:5d:58:22:aa:38:fd:80:9d:40:7a:
a2:95:a8:af:f1:9b:bf:a7:90:cf:d9:61:df:77:1a:a8:a0:37:
e0:ba:ff:1f:99:9f:9b:b5:1e:45:8e:8e:65:67:21:a3:f1:2a:
52:40:3c:ab:67:51:6e:1f:c9:98:c9:bf:a0:d2:22:72:5b:ee:
ae:a0:f0:1a:76:22:69:0d:36:36:f7:f9:f3:f5:3a:21:e7:87:
ac:a0:2a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R9DUB9dcQKOOx5bB5w/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDIyNDA4NjQ4N2VjODY2NmJhNjE1YzE1ZGM4ZjQ3OWRm
NmE0OGQwHhcNMjQwOTE2MTAwMTM2WhcNMjQwOTE3MTAwMTM2WjAzMTEwLwYDVQQD
EyhiZDBkZjgzMGI1YmZlM2VjZjM0ZWYzMTJlOTA2ZWRhMTJiMzVkMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/OQoNlCn3scrIIH7bBFqwIBZl95
HnneUcWdN8vtuBbjE1pZp2S378l91oVKeg1g6ugdevzKV093lM06zqawl01uGlP7
F66h4h/JCD0gyeeAbSX1mQXSJuS2WIKB0df7yd5cCFS0ALLIBxsv49QX//jTx37S
KoFjU+ddcbsdI4Sc7yZHwES0Ld/QZqMn3gImhA583mXDG0iG9DFIK0/cvW8Fc24o
tf5+ppsA3LPUS8AVswXtzzDKM/7SlbfLfERQaMiuJtGJFm8deYGJWqoa3oKcnsS6
8bW3R6lNta8F7RsndHEyEbmjtqajVH+zM1xDYlmULxjbcaEMpiWvLPthRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0N+DC1v+Ps807zEukG7aErNdAPMB8GA1UdIwQY
MBaAFA3SJAhkh+yGZrphXBXcj0ed9qSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDkt
Mjk3MTgwMDc5NDIyLzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NWEzYWQtNGI0Yy00YWFhLTk2ZDktMjk3MTgwMDc5NDIy
LzEvRGRJa0NHU0g3SVptdW1GY0ZkeVBSNTMycEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrg/OEll
r/CtfcuYUmcPBrtri+sP7vltpXbJxm4HiqmaY9LYcb/f4+GdfGm7UbMfthNurLLu
+BLGdfV1EfH9JeXMLaUdHHr5Ju2Be1+nRF7n8h0Z2CHugLu0Jna8sJYjSGRaptGD
Yz5eHYYOHl+popcHMrvIV9p6n2aXKUJXhno4ZDMK0wsLO6DFmx8m1zeF1wqZFaCr
rHv4b5td2xdYSVnfYDc4PENeHmJdWCKqOP2AnUB6opWor/Gbv6eQz9lh33caqKA3
4Lr/H5mfm7UeRY6OZWcho/EqUkA8q2dRbh/JmMm/oNIiclvurqDwGnYiaQ02Nvf5
8/U6IeeHrKAqNA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:06 2024 by rpki-client on console-fra.rpki-client.org