Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: /Q02ijlIg4IhCgrg3Q9JO9SKHseoMiGLNulLAfIHQAg=
Subject key identifier: A1:EB:C4:DE:E4:29:B5:88:9E:D8:2B:3C:FB:36:38:33:4C:DB:58:68
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 018F7F5852CBA40BF49197C0544A129573FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1177
Signing time: Thu 16 May 2024 03:00:45 +0000
Manifest this update: Thu 16 May 2024 03:00:45 +0000
Manifest next update: Fri 17 May 2024 03:00:45 +0000
Files and hashes: 1: iYNqca58Jp0XGXOK5zQ5pXBUfPk.roa (hash: U8qJZdDgvF2JZ1PWKI3P/lUfSdBCcoPWNx2nJXlKNQc=)
2: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: hcJsPePnrl2cBv146PG/p24kjQ5YekzOXkqa8aZN8G0=)
3: rdkC52OLN8IVYRwbMfiwzDkXG08.roa (hash: 8sfqJQm3CizAfyIKlIVdYP71YBwYmKUrZQExaX1DPXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7f:58:52:cb:a4:0b:f4:91:97:c0:54:4a:12:95:73:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: May 16 03:00:45 2024 GMT
Not After : May 17 03:00:45 2024 GMT
Subject: CN=a1ebc4dee429b5889ed82b3cfb3638334cdb5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:75:7a:77:dc:b6:69:a4:66:0a:c7:04:01:
b8:85:86:64:3e:e7:c8:dc:b3:41:b1:1a:6a:0a:c3:
4b:41:f3:d8:3e:8b:7e:60:05:35:13:55:05:1a:60:
b2:b4:6c:46:d3:d4:56:57:2b:35:30:c7:f9:87:0f:
7f:76:3d:f6:eb:45:24:50:04:5c:c1:ae:94:04:73:
ec:3a:72:39:b0:61:76:f7:51:55:26:6d:e7:ef:46:
df:00:47:fe:79:39:91:f0:aa:a3:9c:92:77:45:31:
e8:90:66:69:14:12:17:50:27:fd:28:13:d7:df:af:
60:b9:f6:ff:b0:58:43:81:e8:12:a5:b2:59:e9:8f:
0e:f5:04:de:78:ec:bf:86:8b:64:92:f6:9f:e0:9f:
21:11:14:3d:b5:ad:47:9a:1d:09:78:fb:34:44:57:
b6:28:9b:e4:14:88:6a:1f:43:82:ba:b0:14:b2:08:
43:cd:da:a4:d4:2f:c1:af:3f:55:02:a4:46:36:31:
55:0f:35:a8:0f:c7:1d:11:2a:3a:e0:8e:04:6a:f9:
00:80:71:af:87:eb:16:31:52:da:56:12:fc:97:5b:
4a:ce:4d:eb:c6:4e:27:29:a8:ad:a6:a1:5c:90:b1:
0b:21:cb:b4:10:21:cc:19:5b:52:67:55:70:b7:e4:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:C4:DE:E4:29:B5:88:9E:D8:2B:3C:FB:36:38:33:4C:DB:58:68
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:b4:19:36:44:a6:67:84:3f:40:d7:1e:10:4c:3a:ab:23:
eb:2d:14:1d:2b:e3:91:21:12:4c:8c:dc:d0:a9:78:ec:fb:12:
af:b9:51:5e:69:19:c4:cf:0a:9e:40:a9:65:7b:a8:bf:7e:9e:
2d:c2:f7:07:48:6b:6d:b6:29:24:f0:0c:8d:a9:a4:ae:ff:37:
4b:b6:04:75:8f:ca:bf:85:09:dd:37:11:8b:18:b4:b4:57:40:
29:e5:bc:3c:4a:fb:15:84:40:01:f7:05:e4:ac:dd:2e:43:22:
cd:51:e7:a6:06:ca:1c:b3:3b:dc:25:47:0f:8a:d3:17:75:64:
70:28:cd:c2:cd:36:d6:b0:69:ef:9e:21:32:45:b5:ff:d2:68:
19:20:18:17:e9:d6:1d:e9:ce:4e:85:5b:a6:ca:4d:1f:b8:2a:
c5:d9:ba:fa:94:8f:69:a5:ca:48:f7:1a:24:78:b1:c6:6a:1b:
3a:33:e8:90:3a:c8:00:24:fe:78:20:c1:7c:0b:d0:1d:19:e9:
cc:3f:94:67:71:13:bb:b5:56:86:04:25:c7:d0:ca:c0:59:64:
34:67:0c:1b:76:f5:3f:19:96:5e:b7:22:c3:5f:ea:fb:06:68:
be:fe:a4:67:b5:0a:db:2b:8b:45:0a:53:79:e9:7b:0e:ea:e2:
5f:04:19:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9/WFLLpAv0kZfAVEoSlXP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjQwNTE2MDMwMDQ1WhcNMjQwNTE3MDMwMDQ1WjAzMTEwLwYDVQQD
EyhhMWViYzRkZWU0MjliNTg4OWVkODJiM2NmYjM2MzgzMzRjZGI1ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl391enfctmmkZgrHBAG4hYZkPufI
3LNBsRpqCsNLQfPYPot+YAU1E1UFGmCytGxG09RWVys1MMf5hw9/dj3260UkUARc
wa6UBHPsOnI5sGF291FVJm3n70bfAEf+eTmR8KqjnJJ3RTHokGZpFBIXUCf9KBPX
369gufb/sFhDgegSpbJZ6Y8O9QTeeOy/hotkkvaf4J8hERQ9ta1Hmh0JePs0RFe2
KJvkFIhqH0OCurAUsghDzdqk1C/Brz9VAqRGNjFVDzWoD8cdESo64I4EavkAgHGv
h+sWMVLaVhL8l1tKzk3rxk4nKaitpqFckLELIcu0ECHMGVtSZ1Vwt+QWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHrxN7kKbWIntgrPPs2ODNM21hoMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsG0GTZE
pmeEP0DXHhBMOqsj6y0UHSvjkSESTIzc0Kl47PsSr7lRXmkZxM8KnkCpZXuov36e
LcL3B0hrbbYpJPAMjamkrv83S7YEdY/Kv4UJ3TcRixi0tFdAKeW8PEr7FYRAAfcF
5KzdLkMizVHnpgbKHLM73CVHD4rTF3VkcCjNws021rBp754hMkW1/9JoGSAYF+nW
HenOToVbpspNH7gqxdm6+pSPaaXKSPcaJHixxmobOjPokDrIACT+eCDBfAvQHRnp
zD+UZ3ETu7VWhgQlx9DKwFlkNGcMG3b1PxmWXrciw1/q+wZovv6kZ7UK2yuLRQpT
eel7DuriXwQZ3A==
-----END CERTIFICATE-----
Generated at Thu May 16 03:48:48 2024 by rpki-client on console-ams.rpki-client.org