Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
File: 1OT0Avd6nWii_00VRYokoD3NB8c.mft (raw, json)
Hash identifier: 0ulgu7dso5fb1zW826pCA/cbnw88jbZKLbaegLs8v+I=
Subject key identifier: FF:97:61:EB:AA:65:ED:79:D8:8D:C0:1C:65:60:D8:C8:D2:A9:98:37
Authority key identifier: D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7
Certificate issuer: /CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
Certificate serial: 018F3E54CB58EA15FA83225CABEF6D619AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
Manifest number: 1151
Signing time: Fri 03 May 2024 12:01:35 +0000
Manifest this update: Fri 03 May 2024 12:01:35 +0000
Manifest next update: Sat 04 May 2024 12:01:35 +0000
Files and hashes: 1: 1OT0Avd6nWii_00VRYokoD3NB8c.crl (hash: MlOwbWY71Psl0+5DLuE4HBmMSD1dd57LVlGDkaCgVbo=)
2: BhOVPrkz9toZLp5QKMIq_QNipqY.roa (hash: 3zoy6+8GSjKPgYvI7u9JbFY3lHT7krvKwJlTbvx30bE=)
3: WPGyrWoC235yzU45vyz-bc6W1AQ.roa (hash: XehBAyjvCR8siiSvlhE/rO89Jr0BX5XW2XDv42Nv08E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:54:cb:58:ea:15:fa:83:22:5c:ab:ef:6d:61:9a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
Validity
Not Before: May 3 12:01:35 2024 GMT
Not After : May 4 12:01:35 2024 GMT
Subject: CN=ff9761ebaa65ed79d88dc01c6560d8c8d2a99837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:6a:d5:05:85:a9:8c:68:00:58:29:fb:3d:
35:d2:7f:5a:fe:d1:bc:3e:18:c5:72:fb:22:39:1c:
18:27:36:ef:ef:17:1d:e4:ee:48:65:d7:69:15:e0:
7e:16:1d:79:bb:91:2f:3b:93:56:8b:8f:df:c0:08:
0b:f5:54:8e:33:b2:8a:1e:fb:62:c1:93:48:53:c5:
0c:de:7d:31:b1:3a:ba:83:39:55:2c:5a:34:76:84:
51:96:95:f0:08:1c:ee:a5:3a:bb:5e:9e:63:c0:47:
c0:a9:c2:d5:45:62:3c:1b:71:ef:53:09:04:29:95:
24:8d:a2:24:64:50:29:40:98:d0:fa:67:a7:07:30:
f8:35:78:f3:54:6d:ed:b7:4a:fa:ca:0a:5d:59:35:
5b:ac:07:18:cb:0d:07:76:c0:47:27:a5:66:77:a7:
aa:ea:43:e5:f4:3e:82:fb:67:3a:32:be:bf:9c:91:
8f:03:bb:c0:5c:a7:ff:10:d6:d3:3b:de:3e:fe:db:
d1:04:d5:1c:1d:5f:0a:61:23:1a:1d:79:47:9c:34:
c4:7a:70:9c:ef:c8:ba:5a:66:38:88:1c:65:d6:f5:
24:8a:37:95:6b:da:63:78:4c:b4:67:15:e4:c2:e9:
5e:69:64:ed:82:be:85:f8:03:5d:37:2d:12:a8:ca:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:61:EB:AA:65:ED:79:D8:8D:C0:1C:65:60:D8:C8:D2:A9:98:37
X509v3 Authority Key Identifier:
keyid:D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:26:9f:5c:f3:a5:ec:0a:cf:26:2f:6f:f2:cf:10:1d:fe:ad:
69:8a:ca:1e:d1:e4:28:98:97:59:07:1a:2f:25:ba:ee:7a:d9:
bc:15:09:d9:f0:57:2f:76:e4:4b:ce:d8:48:6f:18:93:77:4f:
e8:f9:81:f0:ee:8c:7b:f2:d7:05:61:41:fa:aa:85:a9:31:fc:
48:8d:6f:67:47:b4:d2:e0:7d:b1:ca:04:f6:69:f9:f1:e9:b3:
d9:ee:7b:22:3a:41:5e:b5:a1:24:8c:f9:d1:d0:54:70:de:fa:
0a:f5:6f:51:1f:4e:b2:f5:84:a6:17:af:d6:70:ac:58:cd:d3:
2b:69:16:a4:c1:86:70:9e:95:f3:c0:32:65:79:8e:28:30:26:
0c:70:d5:52:31:e8:bc:27:f7:20:39:ca:7e:1b:ff:96:2c:74:
87:6d:bf:9d:df:cf:ee:62:53:19:37:3c:cb:bd:d4:28:1f:c7:
ce:29:c9:1e:75:f3:18:d2:8a:c5:71:d3:90:48:42:e9:9c:61:
62:fb:1a:f4:26:88:2d:ee:65:f7:1f:d4:80:ff:d4:ef:03:c0:
ee:3c:f7:ca:d9:6a:55:50:01:b7:b9:11:e5:f2:ad:6e:15:78:
9f:6b:43:ec:12:5d:7b:3e:ae:49:54:dd:58:87:a6:d7:56:aa:
5c:86:c5:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8+VMtY6hX6gyJcq+9tYZrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTRmNDAyZjc3YTlkNjhhMmZmNGQxNTQ1OGEyNGEwM2Rj
ZDA3YzcwHhcNMjQwNTAzMTIwMTM1WhcNMjQwNTA0MTIwMTM1WjAzMTEwLwYDVQQD
EyhmZjk3NjFlYmFhNjVlZDc5ZDg4ZGMwMWM2NTYwZDhjOGQyYTk5ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoZq1QWFqYxoAFgp+z010n9a/tG8
PhjFcvsiORwYJzbv7xcd5O5IZddpFeB+Fh15u5EvO5NWi4/fwAgL9VSOM7KKHvti
wZNIU8UM3n0xsTq6gzlVLFo0doRRlpXwCBzupTq7Xp5jwEfAqcLVRWI8G3HvUwkE
KZUkjaIkZFApQJjQ+menBzD4NXjzVG3tt0r6ygpdWTVbrAcYyw0HdsBHJ6Vmd6eq
6kPl9D6C+2c6Mr6/nJGPA7vAXKf/ENbTO94+/tvRBNUcHV8KYSMaHXlHnDTEenCc
78i6WmY4iBxl1vUkijeVa9pjeEy0ZxXkwuleaWTtgr6F+ANdNy0SqMosuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+XYeuqZe152I3AHGVg2MjSqZg3MB8GA1UdIwQY
MBaAFNTk9AL3ep1oov9NFUWKJKA9zQfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kN2QyOTYtMTZiNS00OTFkLTk1OGYt
MGYzODdhMDgxZGIwLzEvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kN2QyOTYtMTZiNS00OTFkLTk1OGYtMGYzODdhMDgxZGIw
LzEvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyafXPOl
7ArPJi9v8s8QHf6taYrKHtHkKJiXWQcaLyW67nrZvBUJ2fBXL3bkS87YSG8Yk3dP
6PmB8O6Me/LXBWFB+qqFqTH8SI1vZ0e00uB9scoE9mn58emz2e57IjpBXrWhJIz5
0dBUcN76CvVvUR9OsvWEphev1nCsWM3TK2kWpMGGcJ6V88AyZXmOKDAmDHDVUjHo
vCf3IDnKfhv/lix0h22/nd/P7mJTGTc8y73UKB/HzinJHnXzGNKKxXHTkEhC6Zxh
Yvsa9CaILe5l9x/UgP/U7wPA7jz3ytlqVVABt7kR5fKtbhV4n2tD7BJdez6uSVTd
WIem11aqXIbFYw==
-----END CERTIFICATE-----
Generated at Fri May 3 13:08:44 2024 by rpki-client on console-ams.rpki-client.org