Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: NKuKjR70PDwzdSbPyAA/ZXvbbuXYw9ltI+84XmnyMVY=
Subject key identifier: 67:46:B4:1F:6B:D0:4D:51:F7:35:DE:21:D4:AB:EF:3A:89:97:FB:B8
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 018F24CB47EE65C4905A4B03CAC6556ACAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 0F33
Signing time: Sun 28 Apr 2024 13:00:52 +0000
Manifest this update: Sun 28 Apr 2024 13:00:52 +0000
Manifest next update: Mon 29 Apr 2024 13:00:52 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: E66OBM3G0edqFw0eo45+sRI7bdumOWmeP5VER9Oe5HQ=)
2: EsArNy07NU51EFNnDZZSvkBLgC0.roa (hash: lfPTfRYTq3XVuUEcKxZISTM3cC1AYuaMyjcgyq+hVlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:cb:47:ee:65:c4:90:5a:4b:03:ca:c6:55:6a:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Apr 28 13:00:52 2024 GMT
Not After : Apr 29 13:00:52 2024 GMT
Subject: CN=6746b41f6bd04d51f735de21d4abef3a8997fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:02:76:89:0b:38:f9:81:63:b5:e2:d7:57:
94:44:7c:14:c2:bb:c9:1c:65:c7:e4:50:3c:85:6d:
bf:12:ef:d6:07:4d:7e:49:04:40:79:a5:91:ea:39:
4c:3f:f9:87:19:ce:5c:45:95:b5:0b:1a:1e:d7:90:
64:e6:55:cc:a7:12:d0:e1:0e:33:f3:b9:76:11:7b:
70:c0:a6:d6:71:e1:9a:87:a8:29:3d:49:f6:e3:4f:
79:b5:b5:10:c5:44:f4:e6:83:a7:52:28:3f:25:94:
2d:47:40:f7:89:a3:4c:4c:cd:73:3d:1f:39:09:7d:
4a:aa:b7:05:63:ea:ce:cc:59:e2:26:04:85:97:e3:
ac:30:46:e5:75:3f:8a:47:36:97:42:e6:a5:24:fa:
a7:26:61:53:bb:49:7e:ab:90:14:85:e8:69:60:a1:
b4:b3:f7:4d:f4:28:e0:71:ce:07:37:3b:32:eb:78:
69:1d:34:a5:a7:60:33:31:9d:f1:6c:c7:b9:85:29:
08:97:60:f2:a9:9d:5f:5a:1f:0f:d1:9c:90:bf:03:
12:f4:4a:9d:7b:b9:08:c2:9f:7c:63:c8:f2:e1:36:
ad:c0:29:07:7f:70:87:88:36:68:b5:42:a2:a9:d5:
25:9b:59:94:67:0f:eb:04:5f:d3:23:cf:f1:56:c2:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:46:B4:1F:6B:D0:4D:51:F7:35:DE:21:D4:AB:EF:3A:89:97:FB:B8
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:55:6b:3e:d8:eb:91:c4:cd:26:a4:3c:b4:e4:db:d4:cb:d0:
89:63:68:51:1a:e6:38:73:2a:e9:2e:fa:f5:ec:ed:8f:19:77:
68:89:88:2a:46:2f:ab:99:59:61:80:50:5d:6a:46:f2:59:7d:
36:d2:a9:10:2a:b6:0d:c3:81:4b:af:8a:3f:4e:ab:75:55:32:
a4:97:32:49:1e:d4:67:1e:7b:c5:66:34:79:88:bb:cb:77:cb:
79:fb:df:a0:34:b1:8b:79:35:bb:40:52:dd:bc:f1:08:bf:1b:
8a:8c:43:07:d8:d5:eb:1d:d7:6b:09:5e:c8:25:85:98:0d:94:
0a:45:eb:c6:0c:25:df:af:9c:05:85:a0:c1:3d:5b:55:98:ee:
79:ff:f0:5c:b8:7b:60:86:86:e5:f0:2e:81:88:e1:bc:4c:5f:
68:0e:ce:b7:a2:ab:69:19:24:93:23:47:a8:70:9c:60:78:bd:
1f:93:ec:4b:f8:e8:b3:13:f2:90:af:95:e1:72:6b:7a:9f:f4:
7e:5f:23:cf:c1:dd:ee:02:b3:6d:f4:53:7a:11:e3:dd:d6:22:
08:2a:2c:6b:c1:3f:0f:bf:dd:76:f3:66:d7:a2:e5:9e:4f:11:
8c:72:55:6d:10:b0:81:7a:11:de:b0:6e:21:47:77:8e:4c:4f:
e7:20:47:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8ky0fuZcSQWksDysZVasq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTFkYjQ2NmNmODA4MjA2MjkzZDA3ZTY1ZjIxMjFmZWI0
OWEzM2UwHhcNMjQwNDI4MTMwMDUyWhcNMjQwNDI5MTMwMDUyWjAzMTEwLwYDVQQD
Eyg2NzQ2YjQxZjZiZDA0ZDUxZjczNWRlMjFkNGFiZWYzYTg5OTdmYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjowCdokLOPmBY7Xi11eURHwUwrvJ
HGXH5FA8hW2/Eu/WB01+SQRAeaWR6jlMP/mHGc5cRZW1Cxoe15Bk5lXMpxLQ4Q4z
87l2EXtwwKbWceGah6gpPUn24095tbUQxUT05oOnUig/JZQtR0D3iaNMTM1zPR85
CX1KqrcFY+rOzFniJgSFl+OsMEbldT+KRzaXQualJPqnJmFTu0l+q5AUhehpYKG0
s/dN9Cjgcc4HNzsy63hpHTSlp2AzMZ3xbMe5hSkIl2DyqZ1fWh8P0ZyQvwMS9Eqd
e7kIwp98Y8jy4TatwCkHf3CHiDZotUKiqdUlm1mUZw/rBF/TI8/xVsLP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdGtB9r0E1R9zXeIdSr7zqJl/u4MB8GA1UdIwQY
MBaAFNCh20Zs+AggYpPQfmXyEh/rSaM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMt
NDc2MmIwMTBlZjFlLzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xMWNkYWMtNjQxMS00NTRkLWI5NzMtNDc2MmIwMTBlZjFl
LzEvMEtIYlJtejRDQ0JpazlCLVpmSVNILXRKb3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlVrPtjr
kcTNJqQ8tOTb1MvQiWNoURrmOHMq6S769eztjxl3aImIKkYvq5lZYYBQXWpG8ll9
NtKpECq2DcOBS6+KP06rdVUypJcySR7UZx57xWY0eYi7y3fLefvfoDSxi3k1u0BS
3bzxCL8bioxDB9jV6x3XawleyCWFmA2UCkXrxgwl36+cBYWgwT1bVZjuef/wXLh7
YIaG5fAugYjhvExfaA7Ot6KraRkkkyNHqHCcYHi9H5PsS/josxPykK+V4XJrep/0
fl8jz8Hd7gKzbfRTehHj3dYiCCosa8E/D7/ddvNm16Llnk8RjHJVbRCwgXoR3rBu
IUd3jkxP5yBH4w==
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:46:08 2024 by rpki-client on console-ams.rpki-client.org