Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: hZ4rmFLDtZYLYmMGLXyujKaI+Qi0CkXw+3AwE5AL8ms=
Subject key identifier: C9:EC:4A:00:AA:EB:E2:68:AA:D7:DA:87:D5:D3:A0:2F:B3:42:A0:4F
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 018F51A45BA69BF9046031F1B4798B0F8AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 06D1
Signing time: Tue 07 May 2024 06:01:16 +0000
Manifest this update: Tue 07 May 2024 06:01:16 +0000
Manifest next update: Wed 08 May 2024 06:01:16 +0000
Files and hashes: 1: 7liiT1kpK0XsC6w9G7nbT7RQEec.roa (hash: GZXyxNpGrXW23dQXTgmEH8evQu+aECdhk7v9BJZZhgA=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: bGgerSSS9i5YBPq6MZpXNqm1qAl2Zfg6wiHTi+8Dv+U=)
3: ygYHbSPe3mygJ4hOBzqJdBXgBQY.roa (hash: OG29UiHThV9rQrBAYAd8Vm9GWSQbrmT42YsieXPSYVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:a4:5b:a6:9b:f9:04:60:31:f1:b4:79:8b:0f:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: May 7 06:01:16 2024 GMT
Not After : May 8 06:01:16 2024 GMT
Subject: CN=c9ec4a00aaebe268aad7da87d5d3a02fb342a04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:6d:81:20:43:68:d8:b6:db:80:97:fb:ba:
89:b7:ce:86:4e:9a:b5:82:90:52:87:1b:08:e0:86:
9d:a2:c8:94:e6:76:6d:be:42:d5:4a:30:39:a4:f1:
4b:18:3c:cc:de:69:f1:7c:a4:71:44:4d:88:c6:6c:
fa:d8:48:17:9d:48:95:43:20:d8:86:85:b4:93:1d:
f0:5a:1f:87:5e:b4:95:7f:b8:0c:58:de:c2:48:6b:
bc:ef:dd:bf:fa:71:6b:66:a7:6a:5e:df:f5:8d:65:
b0:72:d6:86:1e:b5:3d:2f:b1:bd:c5:d9:ce:53:b7:
c7:21:fb:39:97:e9:ab:40:f7:32:be:0e:0e:0c:85:
e7:41:80:5a:bf:da:24:9c:c9:46:38:c1:c5:4e:2d:
72:96:ba:80:85:da:2f:5b:e8:c7:98:52:c5:44:8a:
84:91:ef:ce:98:d1:fb:94:7b:e1:94:d3:22:b4:d5:
c6:f3:9c:ae:ba:c3:96:ee:30:ce:50:c1:ea:a0:54:
51:43:3d:51:33:b7:7b:31:c9:ba:ba:fb:1e:d6:9f:
1a:84:33:e5:13:64:60:d3:af:be:b9:df:ae:c5:89:
7e:f9:f4:58:bd:13:e4:f1:8f:ea:4b:b8:27:1f:ab:
4c:f5:bc:9c:12:75:7a:26:f0:1d:9f:76:db:01:50:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:4A:00:AA:EB:E2:68:AA:D7:DA:87:D5:D3:A0:2F:B3:42:A0:4F
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:31:be:11:f7:9f:97:cc:9b:ed:e1:fd:0f:bd:b8:11:8e:
74:b2:f6:99:ae:a3:78:36:15:f6:99:80:2e:6f:8e:fb:95:3a:
d9:2c:cd:3d:27:1e:dc:bd:5f:cc:f7:6a:25:d0:c0:be:b7:55:
75:62:2a:8a:91:4f:cb:98:26:f2:46:58:47:11:43:d3:8f:49:
06:7e:f8:2e:96:80:08:ba:ce:5d:1e:5d:de:d6:69:83:50:68:
73:d9:91:7d:59:b8:e5:3f:c6:82:50:67:e4:89:b7:e4:fe:6c:
27:35:3a:a0:35:40:be:5f:8b:68:d1:85:ad:ae:ee:df:0c:75:
d7:b1:8e:c4:d5:cc:bd:72:3d:f1:01:65:cc:92:cb:e6:7c:22:
07:46:ff:95:a3:ad:af:c4:0c:1a:c9:f7:b3:c9:67:3f:81:83:
49:e1:a5:df:ad:cb:69:a0:d4:a5:2f:ef:4e:a2:f1:ab:04:00:
30:59:15:a5:58:db:79:b1:c6:41:6d:0e:88:df:fe:59:46:19:
37:db:96:20:dc:0e:cc:70:f7:15:4d:a0:46:f6:03:66:97:b9:
cf:f0:42:99:c9:42:b8:b0:1d:77:cc:81:c0:7f:e5:24:a0:eb:
71:b3:d4:97:d7:c9:6e:c7:52:7b:4d:87:ae:c6:eb:b9:98:02:
ae:da:4f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9RpFumm/kEYDHxtHmLD4q1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjQwNTA3MDYwMTE2WhcNMjQwNTA4MDYwMTE2WjAzMTEwLwYDVQQD
EyhjOWVjNGEwMGFhZWJlMjY4YWFkN2RhODdkNWQzYTAyZmIzNDJhMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMFtgSBDaNi224CX+7qJt86GTpq1
gpBShxsI4IadosiU5nZtvkLVSjA5pPFLGDzM3mnxfKRxRE2Ixmz62EgXnUiVQyDY
hoW0kx3wWh+HXrSVf7gMWN7CSGu8792/+nFrZqdqXt/1jWWwctaGHrU9L7G9xdnO
U7fHIfs5l+mrQPcyvg4ODIXnQYBav9oknMlGOMHFTi1ylrqAhdovW+jHmFLFRIqE
ke/OmNH7lHvhlNMitNXG85yuusOW7jDOUMHqoFRRQz1RM7d7Mcm6uvse1p8ahDPl
E2Rg06++ud+uxYl++fRYvRPk8Y/qS7gnH6tM9bycEnV6JvAdn3bbAVA3ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnsSgCq6+Joqtfah9XToC+zQqBPMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFIxvhH3
n5fMm+3h/Q+9uBGOdLL2ma6jeDYV9pmALm+O+5U62SzNPSce3L1fzPdqJdDAvrdV
dWIqipFPy5gm8kZYRxFD049JBn74LpaACLrOXR5d3tZpg1Boc9mRfVm45T/GglBn
5Im35P5sJzU6oDVAvl+LaNGFra7u3wx117GOxNXMvXI98QFlzJLL5nwiB0b/laOt
r8QMGsn3s8lnP4GDSeGl363LaaDUpS/vTqLxqwQAMFkVpVjbebHGQW0OiN/+WUYZ
N9uWINwOzHD3FU2gRvYDZpe5z/BCmclCuLAdd8yBwH/lJKDrcbPUl9fJbsdSe02H
rsbruZgCrtpPzw==
-----END CERTIFICATE-----
Generated at Tue May 7 12:52:17 2024 by rpki-client on console-fra.rpki-client.org