Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: hUYNukrpKLrs7oudBmu6ITgZi3xRO+A98s2/QqlMR4w=
Subject key identifier: 23:C3:5C:CC:00:D2:1E:97:5C:FC:CF:22:84:C3:82:0B:A7:71:7C:89
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 018F3063CA0F8CCAF2E46D4573AF1A9ABB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 07A6
Signing time: Tue 30 Apr 2024 19:03:17 +0000
Manifest this update: Tue 30 Apr 2024 19:03:17 +0000
Manifest next update: Wed 01 May 2024 19:03:17 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: 0hCfuQLvyi4oHuM/Te6iHuXZFmHiy+2tlUgxLfxUu3c=)
2: caPsD24tJ5uXrh81cq4cK0Vooic.roa (hash: i7KFZiaVPJCcK/63b9j1FUOlwvTaacYq0FP4fJxGP6s=)
3: rmTw4bo4YPxI3-oLW9DEHu3wUwI.roa (hash: oz9l5/UHiBxbKnkQImNW14CCzH/+iZEybxkAkjFgxZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:63:ca:0f:8c:ca:f2:e4:6d:45:73:af:1a:9a:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Apr 30 19:03:17 2024 GMT
Not After : May 1 19:03:17 2024 GMT
Subject: CN=23c35ccc00d21e975cfccf2284c3820ba7717c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:4e:61:4a:7a:3f:f2:53:06:9e:a7:d5:af:
c3:08:be:e9:d5:74:0c:85:c7:7d:f8:02:6e:2f:99:
67:01:28:60:93:4f:4d:66:5a:d9:f0:87:31:f6:06:
8f:6d:ab:05:7e:65:e6:74:5b:58:84:10:b4:a6:5e:
60:1e:b2:03:99:c9:32:1a:f1:fc:83:79:59:f8:0d:
36:03:e9:14:79:60:64:92:e9:fe:99:ec:e1:52:17:
e4:13:c2:6c:e4:63:a1:90:30:b1:4d:06:b8:30:90:
c6:22:bf:b3:7a:bd:83:f8:e1:ce:cf:4d:00:53:78:
77:18:9e:54:7a:18:46:21:ce:42:4a:b3:1c:b0:02:
7e:54:a7:3f:78:09:11:70:c9:1c:d1:cf:dd:c2:c8:
3e:cd:93:29:57:f4:35:d2:35:ce:2b:6c:47:3d:89:
07:d7:9a:04:33:91:ec:70:1c:05:fa:4f:23:ef:74:
51:19:e1:3b:82:c4:e6:2e:43:64:d7:0c:00:ae:55:
07:80:79:a8:7d:81:8c:ac:b2:34:7d:3b:31:a4:30:
50:43:44:f1:09:56:2c:ee:bf:59:29:64:6d:f9:0b:
ed:8e:94:93:00:90:76:52:ef:ee:0b:da:f0:cd:50:
af:5b:dc:aa:3c:d9:67:c2:9a:dd:36:df:c1:a7:1a:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:5C:CC:00:D2:1E:97:5C:FC:CF:22:84:C3:82:0B:A7:71:7C:89
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:dd:bc:66:3f:51:4f:e3:fe:12:3f:65:a2:21:4e:65:c6:
46:18:e4:e2:e2:59:17:bb:b0:2c:a2:0d:18:c1:29:ce:a3:19:
ad:9a:76:bf:5c:c0:b3:f2:22:65:65:e0:db:9d:fc:89:2f:8c:
08:49:80:ac:2d:29:59:98:49:56:9a:10:f7:d6:94:d7:13:25:
55:73:b9:c2:34:c1:07:48:37:72:26:dd:8e:7f:05:b4:e0:fd:
6a:52:7f:2f:af:85:37:6e:df:dc:59:da:32:15:b5:ee:78:2a:
9a:fd:08:96:ad:c2:f4:5d:0f:9a:d3:87:d4:16:f1:ac:0c:02:
c7:33:ad:70:d9:37:b5:63:4e:bb:22:d8:88:ab:a7:8b:66:d2:
21:a3:60:55:28:52:9c:fa:9d:a7:16:26:3a:7d:6b:bf:77:0f:
a6:4a:ad:6a:51:04:af:b6:e4:da:77:14:11:53:9a:25:1b:51:
1d:9e:90:7e:e5:58:6e:87:be:03:c4:d0:16:f5:2b:ad:12:ea:
ed:b7:02:d3:fd:41:20:09:18:d2:8d:05:b0:df:b2:db:9a:d8:
96:71:54:83:a3:1c:36:81:18:6f:47:00:98:b5:0a:72:ef:df:
10:13:1b:d4:93:ac:60:42:14:11:11:11:4d:92:e3:25:be:50:
d1:8a:b8:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8wY8oPjMry5G1Fc68amruGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjQwNDMwMTkwMzE3WhcNMjQwNTAxMTkwMzE3WjAzMTEwLwYDVQQD
EygyM2MzNWNjYzAwZDIxZTk3NWNmY2NmMjI4NGMzODIwYmE3NzE3Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn5OYUp6P/JTBp6n1a/DCL7p1XQM
hcd9+AJuL5lnAShgk09NZlrZ8Icx9gaPbasFfmXmdFtYhBC0pl5gHrIDmckyGvH8
g3lZ+A02A+kUeWBkkun+mezhUhfkE8Js5GOhkDCxTQa4MJDGIr+zer2D+OHOz00A
U3h3GJ5UehhGIc5CSrMcsAJ+VKc/eAkRcMkc0c/dwsg+zZMpV/Q10jXOK2xHPYkH
15oEM5HscBwF+k8j73RRGeE7gsTmLkNk1wwArlUHgHmofYGMrLI0fTsxpDBQQ0Tx
CVYs7r9ZKWRt+QvtjpSTAJB2Uu/uC9rwzVCvW9yqPNlnwprdNt/BpxrDYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPDXMwA0h6XXPzPIoTDgguncXyJMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWndvGY/
UU/j/hI/ZaIhTmXGRhjk4uJZF7uwLKINGMEpzqMZrZp2v1zAs/IiZWXg2538iS+M
CEmArC0pWZhJVpoQ99aU1xMlVXO5wjTBB0g3cibdjn8FtOD9alJ/L6+FN27f3Fna
MhW17ngqmv0Ilq3C9F0PmtOH1BbxrAwCxzOtcNk3tWNOuyLYiKuni2bSIaNgVShS
nPqdpxYmOn1rv3cPpkqtalEEr7bk2ncUEVOaJRtRHZ6QfuVYboe+A8TQFvUrrRLq
7bcC0/1BIAkY0o0FsN+y25rYlnFUg6McNoEYb0cAmLUKcu/fEBMb1JOsYEIUERER
TZLjJb5Q0Yq47A==
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:50:47 2024 by rpki-client on console-fra.rpki-client.org