Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: zXaSYY7pVLRgUtTun0/I8cCdIpcLa1PWOn7FAhzbF/4=
Subject key identifier: C2:C8:01:1A:65:B2:A9:A2:E6:19:E9:8F:31:83:3D:BC:6E:0A:F3:B2
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 018F87ED518F718EF78E4754C4F3A7917E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 05BB
Signing time: Fri 17 May 2024 19:00:28 +0000
Manifest this update: Fri 17 May 2024 19:00:28 +0000
Manifest next update: Sat 18 May 2024 19:00:28 +0000
Files and hashes: 1: FTDR2wfkCs037pb7wGon1vkbRT8.roa (hash: b4lx9XrjrAkui/v6MPs3lpfuakeptytvJJs8h5EQlLY=)
2: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: 1dIKlDPbUL29j4qRccHREb810bbim1C0+emoIMRJqVA=)
3: rRq1IelZCJi4hlgxG-hzgFcg-Fs.roa (hash: buuTLXygQxGWsKMZRpr6sIYckUvLmtpUFrQy12Fq8l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:51:8f:71:8e:f7:8e:47:54:c4:f3:a7:91:7e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: May 17 19:00:28 2024 GMT
Not After : May 18 19:00:28 2024 GMT
Subject: CN=c2c8011a65b2a9a2e619e98f31833dbc6e0af3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:7c:ea:62:94:67:16:be:bb:4b:7e:49:65:
13:3b:f1:fa:98:ef:27:04:ed:5f:d7:fa:22:fd:d6:
ca:00:86:ef:79:e1:60:d4:da:cb:b2:a5:60:90:d4:
86:f6:58:82:c1:3f:b9:a8:03:26:95:2d:ef:34:87:
86:f1:9c:71:51:5a:d6:3a:84:33:ca:08:75:be:95:
25:4f:a3:6a:4c:1e:71:3a:0c:4f:a8:5a:ef:1a:4b:
37:33:1d:bd:96:3b:b6:56:48:1a:43:1a:14:62:fe:
5d:16:6d:e5:ab:96:8a:d5:4a:12:b7:89:7c:cf:d6:
47:d5:b8:b4:0b:70:c7:37:0c:6c:92:87:77:ff:d6:
16:64:21:80:6c:b8:d1:17:b2:a1:48:9c:d0:ee:d1:
7b:fa:05:14:28:e0:4e:03:70:04:e0:90:86:fd:da:
cc:09:e6:30:ee:5b:9b:48:bb:c2:4a:33:08:b5:fe:
ae:e4:ae:7c:51:27:61:b0:b5:09:18:97:c8:6c:ca:
36:cc:2c:60:d8:45:9f:51:f2:77:15:03:6f:6f:41:
bf:b7:ff:f1:f5:b8:80:1f:00:9d:e0:33:5f:35:03:
33:61:8b:d9:57:a0:74:c3:d7:21:b3:72:23:01:45:
c2:2b:81:95:ff:bc:0b:06:8b:69:43:01:37:57:65:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:01:1A:65:B2:A9:A2:E6:19:E9:8F:31:83:3D:BC:6E:0A:F3:B2
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:7c:59:25:d6:4f:ed:e1:20:b2:21:a8:b8:03:d6:b5:4d:
89:b0:66:30:32:3c:f0:64:26:2e:fb:70:d8:3f:37:bc:6e:4b:
42:23:e5:5f:e4:eb:cd:ab:c8:28:b3:84:ef:e6:30:4d:81:46:
64:f5:9b:5e:8e:c9:7a:e8:9a:c2:9e:66:31:c4:20:87:73:62:
94:07:34:19:4e:f1:84:b5:a6:12:f9:a3:7e:b9:38:2e:5f:dd:
dc:91:9b:4b:97:81:97:2f:7c:71:a7:78:62:46:3c:db:56:59:
c4:ad:49:a5:df:a0:f6:e0:4b:cb:a2:c5:9e:bb:27:05:c9:83:
11:d9:9f:89:eb:67:aa:a2:7c:e5:4d:38:49:79:59:d1:89:f4:
b6:6f:28:23:86:59:8f:ee:4b:1f:1a:16:50:ca:ec:20:53:04:
39:24:f1:30:6f:b8:23:9d:1c:09:cd:4c:5f:74:92:80:a2:46:
97:4a:c0:83:4c:d0:b1:54:24:7e:fb:a0:25:bd:d0:e1:09:0f:
71:8c:f2:20:0d:f2:39:6d:85:31:bb:ed:4c:50:03:86:cc:78:
84:8e:5b:4a:a5:0a:64:e5:51:ee:3b:45:52:70:18:d2:14:75:
83:4d:f1:9f:16:86:58:c4:1a:34:45:24:5b:1f:56:30:bc:60:
6e:b2:01:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7VGPcY73jkdUxPOnkX5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjQwNTE3MTkwMDI4WhcNMjQwNTE4MTkwMDI4WjAzMTEwLwYDVQQD
EyhjMmM4MDExYTY1YjJhOWEyZTYxOWU5OGYzMTgzM2RiYzZlMGFmM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24l86mKUZxa+u0t+SWUTO/H6mO8n
BO1f1/oi/dbKAIbveeFg1NrLsqVgkNSG9liCwT+5qAMmlS3vNIeG8ZxxUVrWOoQz
ygh1vpUlT6NqTB5xOgxPqFrvGks3Mx29lju2VkgaQxoUYv5dFm3lq5aK1UoSt4l8
z9ZH1bi0C3DHNwxskod3/9YWZCGAbLjRF7KhSJzQ7tF7+gUUKOBOA3AE4JCG/drM
CeYw7lubSLvCSjMItf6u5K58USdhsLUJGJfIbMo2zCxg2EWfUfJ3FQNvb0G/t//x
9biAHwCd4DNfNQMzYYvZV6B0w9chs3IjAUXCK4GV/7wLBotpQwE3V2UCswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLIARplsqmi5hnpjzGDPbxuCvOyMB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirR8WSXW
T+3hILIhqLgD1rVNibBmMDI88GQmLvtw2D83vG5LQiPlX+TrzavIKLOE7+YwTYFG
ZPWbXo7Jeuiawp5mMcQgh3NilAc0GU7xhLWmEvmjfrk4Ll/d3JGbS5eBly98cad4
YkY821ZZxK1Jpd+g9uBLy6LFnrsnBcmDEdmfietnqqJ85U04SXlZ0Yn0tm8oI4ZZ
j+5LHxoWUMrsIFMEOSTxMG+4I50cCc1MX3SSgKJGl0rAg0zQsVQkfvugJb3Q4QkP
cYzyIA3yOW2FMbvtTFADhsx4hI5bSqUKZOVR7jtFUnAY0hR1g03xnxaGWMQaNEUk
Wx9WMLxgbrIBsw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:09:07 2024 by rpki-client on console-ams.rpki-client.org