Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: O4K39Vr01Lj1RhMGBit9tw/1J8ByyJ2AXPjaOIkfrWg=
Subject key identifier: 80:3F:44:FB:86:12:B8:87:7D:CA:DE:9C:A8:DE:B6:6A:66:28:43:D0
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0191FA476580145CF5FCDBF43FE90957B15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: E2
Signing time: Mon 16 Sep 2024 10:01:08 +0000
Manifest this update: Mon 16 Sep 2024 10:01:08 +0000
Manifest next update: Tue 17 Sep 2024 10:01:08 +0000
Files and hashes: 1: 8UsBPyZ54lZeSI9LrLWyg87Geok.roa (hash: sQdPQaP0vgT1WzF9oMvL0oBGBM7FbrjeSQxNiDpz/no=)
2: ZUn3d4nI4YLs60e6M_KYwzM6T1w.roa (hash: 4aq5kCFp1qttLbIVpxIZNlT9eGwcMJ+Y2j/unhxjMxQ=)
3: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: WFbcZnwmgBjaQvtSJokfX3+91ja3i9RHbC1G1bNdpn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:47:65:80:14:5c:f5:fc:db:f4:3f:e9:09:57:b1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Sep 16 10:01:08 2024 GMT
Not After : Sep 17 10:01:08 2024 GMT
Subject: CN=803f44fb8612b8877dcade9ca8deb66a662843d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:ce:ee:a8:f5:57:4d:27:12:8b:a6:a6:83:
79:0b:df:ac:a4:8d:0f:77:2b:5c:0f:22:33:d6:7c:
a6:60:4b:2e:2e:bd:27:b2:c1:5c:0e:ac:dc:6e:fb:
67:ef:99:c8:c3:44:7c:c3:7a:bd:e7:b2:e0:a9:f6:
8a:87:b4:be:ec:32:d5:47:e2:fe:23:af:4b:4b:a4:
30:27:7f:6e:eb:29:0c:cf:76:59:8a:4e:06:06:31:
26:ba:95:86:4b:1e:a6:ce:1e:cb:d0:de:2a:6d:27:
b7:9b:f9:e5:24:f7:bc:75:c0:b3:01:59:35:27:37:
30:c0:68:08:c7:4e:e6:c7:cc:19:0a:ff:20:55:c0:
a4:04:5e:8e:a5:af:54:31:eb:a7:d6:40:ee:81:78:
9f:a3:87:1d:a1:8b:93:ea:03:54:e5:1b:55:19:e9:
3a:c3:c2:45:61:38:91:33:b5:01:e2:c3:78:14:1c:
8d:72:ca:75:e1:2c:fb:04:86:13:e1:db:ac:2c:30:
19:40:2f:49:94:c0:11:1f:65:c5:60:9e:dc:bf:37:
27:b0:55:e6:5f:d3:2e:b7:25:9d:e1:e3:07:22:b4:
58:3e:22:56:2a:cd:d4:7c:08:b4:40:ba:31:43:c4:
28:83:ca:47:72:be:65:14:69:f5:30:03:20:d5:b9:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:44:FB:86:12:B8:87:7D:CA:DE:9C:A8:DE:B6:6A:66:28:43:D0
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4a:79:a9:9e:bb:a2:ff:ad:a3:48:14:dd:44:45:bc:ae:69:
21:77:cc:28:86:ff:ec:69:45:4b:08:b5:93:cd:0c:92:84:7d:
ae:25:c9:9e:08:75:8a:13:cd:4c:eb:db:a1:89:e0:11:3e:0c:
49:c9:34:14:ab:a0:64:31:3f:3f:a7:b1:2c:8c:37:c4:ac:3b:
24:38:90:56:62:c6:f6:b2:bd:30:7a:4f:c0:a8:2a:85:d7:60:
46:c1:4c:c7:5f:4f:05:51:f6:d8:a4:a8:88:17:db:6c:11:79:
9a:02:61:33:f9:06:49:2b:10:4c:c5:bf:e4:a0:b1:b3:b1:65:
b9:be:d2:ce:b7:6c:cc:9f:f9:f3:90:86:62:11:ba:05:41:72:
13:88:70:7a:16:a3:5a:48:e9:0f:da:66:99:d2:61:e6:6e:eb:
33:80:d0:5c:76:bf:d5:f5:8b:18:8f:ab:40:86:f4:ef:3e:81:
a3:15:95:d3:8b:cc:b8:44:76:69:3e:3a:2b:e9:d6:d4:6b:c9:
53:78:fa:57:4b:b9:15:d0:b6:46:b5:b6:7a:c3:6e:28:dd:1e:
50:5f:e5:b5:af:b9:17:f0:10:26:95:54:ad:7a:cf:68:27:2f:
6b:21:08:b7:96:53:17:cd:bc:23:39:9b:79:96:48:74:e6:00:
9f:a8:1a:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R2WAFFz1/Nv0P+kJV7FeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj
ZGQ5ZDAwHhcNMjQwOTE2MTAwMTA4WhcNMjQwOTE3MTAwMTA4WjAzMTEwLwYDVQQD
Eyg4MDNmNDRmYjg2MTJiODg3N2RjYWRlOWNhOGRlYjY2YTY2Mjg0M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ/O7qj1V00nEoumpoN5C9+spI0P
dytcDyIz1nymYEsuLr0nssFcDqzcbvtn75nIw0R8w3q957LgqfaKh7S+7DLVR+L+
I69LS6QwJ39u6ykMz3ZZik4GBjEmupWGSx6mzh7L0N4qbSe3m/nlJPe8dcCzAVk1
JzcwwGgIx07mx8wZCv8gVcCkBF6Opa9UMeun1kDugXifo4cdoYuT6gNU5RtVGek6
w8JFYTiRM7UB4sN4FByNcsp14Sz7BIYT4dusLDAZQC9JlMARH2XFYJ7cvzcnsFXm
X9MutyWd4eMHIrRYPiJWKs3UfAi0QLoxQ8Qog8pHcr5lFGn1MAMg1bnTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA/RPuGEriHfcrenKjetmpmKEPQMB8GA1UdIwQY
MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt
ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2
LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUp5qZ67
ov+to0gU3URFvK5pIXfMKIb/7GlFSwi1k80MkoR9riXJngh1ihPNTOvboYngET4M
Sck0FKugZDE/P6exLIw3xKw7JDiQVmLG9rK9MHpPwKgqhddgRsFMx19PBVH22KSo
iBfbbBF5mgJhM/kGSSsQTMW/5KCxs7Flub7SzrdszJ/585CGYhG6BUFyE4hwehaj
WkjpD9pmmdJh5m7rM4DQXHa/1fWLGI+rQIb07z6BoxWV04vMuER2aT46K+nW1GvJ
U3j6V0u5FdC2RrW2esNuKN0eUF/lta+5F/AQJpVUrXrPaCcvayEIt5ZTF828Izmb
eZZIdOYAn6gaGw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:13:26 2024 by rpki-client on console-ams.rpki-client.org