Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
File: 23FTu7PqntnOuAPm5_GSqr2a2jQ.mft (raw, json)
Hash identifier: 3UE9C4ueVs9L+DnnJWtUox+Fdja7qyuto8j8Fn7NSHU=
Subject key identifier: 4E:C7:89:71:0C:64:B2:58:02:6C:9C:BA:D2:12:A6:DF:15:16:02:D8
Authority key identifier: DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34
Certificate issuer: /CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
Certificate serial: 018F4D5C5FB829CF1E159AEC5D1F7DBD0397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
Manifest number: 081A
Signing time: Mon 06 May 2024 10:04:10 +0000
Manifest this update: Mon 06 May 2024 10:04:10 +0000
Manifest next update: Tue 07 May 2024 10:04:10 +0000
Files and hashes: 1: 23FTu7PqntnOuAPm5_GSqr2a2jQ.crl (hash: NIVV4fr2NpGJvKhxNf9O/1nAD/U0hYxQyFMgToqYB10=)
2: G8aISUlQ4cirH_s8lo_clVmVBmQ.roa (hash: 4EvOxmq0oBROrVGkevmxGaJEhs84CY8l14e6RBTeCWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5c:5f:b8:29:cf:1e:15:9a:ec:5d:1f:7d:bd:03:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
Validity
Not Before: May 6 10:04:10 2024 GMT
Not After : May 7 10:04:10 2024 GMT
Subject: CN=4ec789710c64b258026c9cbad212a6df151602d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:e7:d9:82:8b:d6:d4:3d:30:93:36:1c:ea:
e2:b5:30:68:78:30:11:51:5c:8d:ef:c8:6d:86:94:
70:ef:6d:e8:e1:88:aa:48:2c:a4:a7:b1:5f:d7:34:
31:da:d6:f7:91:68:e5:3e:31:f4:14:60:1d:2f:0b:
eb:65:a7:49:5c:e8:f1:61:65:cc:c2:8e:c7:00:7c:
7c:b1:f3:a0:cd:31:0a:ef:ea:b6:13:fb:44:d2:ce:
08:be:b7:3e:26:fc:00:26:bf:1e:2a:f5:09:50:dc:
5b:66:23:6c:f0:78:5d:69:ae:5c:49:a7:24:42:dc:
69:bf:07:24:5c:fa:29:eb:bd:f5:ec:4e:26:1c:44:
34:4b:bb:c8:8e:51:4b:2e:37:cd:b7:93:44:5b:19:
49:5a:a7:e6:e2:35:a5:68:6c:e4:df:7e:bb:d6:5b:
3e:d2:a7:3b:d7:2d:d0:8d:04:bd:0b:7e:f0:4b:ed:
ca:bb:77:f2:03:4a:8a:b5:a0:04:8d:0a:6a:3f:05:
57:76:03:72:a4:f5:29:0b:88:b9:5d:1b:f6:79:cd:
92:36:a3:7f:f3:9b:41:18:fb:bf:85:5f:b2:23:09:
0e:33:02:20:b5:65:35:6a:dc:e1:3e:8f:15:29:58:
00:b1:e9:4f:e5:b1:5f:4b:7d:b2:9d:60:38:7c:df:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:89:71:0C:64:B2:58:02:6C:9C:BA:D2:12:A6:DF:15:16:02:D8
X509v3 Authority Key Identifier:
keyid:DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f2:97:e4:46:b4:34:2b:5c:4a:14:55:46:b5:9d:85:c4:d4:
75:55:46:26:4f:40:90:e7:a7:a1:27:c0:3b:6c:5b:66:ea:0e:
89:3f:72:b0:67:e6:8f:61:94:a6:27:6b:1e:ab:22:f3:9a:ab:
a2:ef:df:2b:4d:70:a9:33:27:1d:8e:dc:55:e5:e0:24:13:af:
da:09:21:02:11:a1:87:38:14:94:64:c8:b0:12:ad:16:21:a1:
7c:dd:ed:ac:a8:2d:ed:4b:71:0a:20:1a:59:95:31:e7:6f:d3:
8a:e8:25:49:b6:f0:8a:14:4a:2f:40:c4:e1:88:8e:b8:c6:77:
aa:f3:8b:bb:29:bc:4f:cd:8e:34:05:56:9a:2a:6f:6f:8f:0f:
75:b5:d6:a6:78:5e:cc:0d:d1:eb:7d:2b:4c:c9:37:27:82:7d:
2f:d2:58:29:8e:11:c6:db:ad:a5:5e:cd:f3:72:51:f4:d0:f8:
ad:47:df:e3:cc:49:22:f4:eb:b6:b3:b4:12:ac:8e:ff:a0:73:
32:ed:50:6c:67:f4:c3:92:51:80:5d:6f:1d:af:d0:b5:77:7c:
ca:fe:4c:de:db:66:6a:57:f4:bb:5a:7a:f4:f3:20:6c:2a:48:
c3:e5:f8:21:0e:6b:ed:57:3f:92:32:46:8c:26:95:63:86:c3:
6a:a3:96:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9NXF+4Kc8eFZrsXR99vQOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNzE1M2JiYjNlYTllZDljZWI4MDNlNmU3ZjE5MmFhYmQ5
YWRhMzQwHhcNMjQwNTA2MTAwNDEwWhcNMjQwNTA3MTAwNDEwWjAzMTEwLwYDVQQD
Eyg0ZWM3ODk3MTBjNjRiMjU4MDI2YzljYmFkMjEyYTZkZjE1MTYwMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26nn2YKL1tQ9MJM2HOritTBoeDAR
UVyN78hthpRw723o4YiqSCykp7Ff1zQx2tb3kWjlPjH0FGAdLwvrZadJXOjxYWXM
wo7HAHx8sfOgzTEK7+q2E/tE0s4Ivrc+JvwAJr8eKvUJUNxbZiNs8Hhdaa5cSack
QtxpvwckXPop67317E4mHEQ0S7vIjlFLLjfNt5NEWxlJWqfm4jWlaGzk33671ls+
0qc71y3QjQS9C37wS+3Ku3fyA0qKtaAEjQpqPwVXdgNypPUpC4i5XRv2ec2SNqN/
85tBGPu/hV+yIwkOMwIgtWU1atzhPo8VKVgAselP5bFfS32ynWA4fN+5aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7HiXEMZLJYAmycutISpt8VFgLYMB8GA1UdIwQY
MBaAFNtxU7uz6p7ZzrgD5ufxkqq9mto0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjNGVHU3UHFudG5PdUFQbTVfR1NxcjJhMmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xNGZhOWItYThkMS00NzgxLThkZWIt
OWU0NjQ0OTlmNGZjLzEvMjNGVHU3UHFudG5PdUFQbTVfR1NxcjJhMmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xNGZhOWItYThkMS00NzgxLThkZWItOWU0NjQ0OTlmNGZj
LzEvMjNGVHU3UHFudG5PdUFQbTVfR1NxcjJhMmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfKX5Ea0
NCtcShRVRrWdhcTUdVVGJk9AkOenoSfAO2xbZuoOiT9ysGfmj2GUpidrHqsi85qr
ou/fK01wqTMnHY7cVeXgJBOv2gkhAhGhhzgUlGTIsBKtFiGhfN3trKgt7UtxCiAa
WZUx52/TiuglSbbwihRKL0DE4YiOuMZ3qvOLuym8T82ONAVWmipvb48PdbXWpnhe
zA3R630rTMk3J4J9L9JYKY4RxtutpV7N83JR9ND4rUff48xJIvTrtrO0EqyO/6Bz
Mu1QbGf0w5JRgF1vHa/QtXd8yv5M3ttmalf0u1p69PMgbCpIw+X4IQ5r7Vc/kjJG
jCaVY4bDaqOWQA==
-----END CERTIFICATE-----
Generated at Mon May 6 17:55:54 2024 by rpki-client on console-ams.rpki-client.org