Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: sFP/IbCJmxlWfC1/3bXxT41muXTvdMNccum4g2XiVo4=
Subject key identifier: E8:3A:64:E1:BC:79:AA:D8:F2:8C:54:C7:12:32:91:A4:5A:E4:66:CE
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01906F091A2FFCE6A0C393DABC316305378B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 11F1
Signing time: Mon 01 Jul 2024 16:03:05 +0000
Manifest this update: Mon 01 Jul 2024 16:03:05 +0000
Manifest next update: Tue 02 Jul 2024 16:03:05 +0000
Files and hashes: 1: BXFe2oF7KnpbmmM-bYc666JVFq4.roa (hash: 55HkQlQzuvF2JQXQHSMtKuMWG0PTEtbhx5cfmyDNnio=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: LHCbcbC7TFVwWLfk+j0J0nm7URikGG836V2zkIUuD1E=)
3: dOaS8ndmLlEMjOm3HY8teklVlfg.roa (hash: Cc+T9h0S0xsD8Dx5UokR1tovTeylG7Cy3ezEkiTLKaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:09:1a:2f:fc:e6:a0:c3:93:da:bc:31:63:05:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jul 1 16:03:05 2024 GMT
Not After : Jul 2 16:03:05 2024 GMT
Subject: CN=e83a64e1bc79aad8f28c54c7123291a45ae466ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:68:34:cd:92:47:31:d6:5b:73:6f:1d:73:
1a:45:97:75:44:d5:49:e0:60:23:b7:9f:90:7c:60:
ac:41:d4:c2:48:f8:b2:5c:7e:2d:03:93:4a:a6:ea:
ee:31:6a:d9:2f:1c:29:21:26:b8:6b:55:7d:c4:da:
35:a2:47:81:a9:67:f0:5e:f0:35:fd:a0:ba:db:7f:
a9:27:5f:46:a2:ae:66:3a:d7:ad:7b:ea:2e:fa:00:
bc:cf:ce:17:83:08:27:ab:6b:a5:74:e6:ab:d4:5f:
45:d7:81:81:92:99:02:f3:34:8c:89:a7:7f:78:43:
69:06:c9:71:87:6e:09:3f:55:92:a6:eb:80:fc:e9:
2b:4f:93:35:2c:22:63:01:23:03:cb:63:eb:73:5e:
0f:1e:eb:7d:58:f1:a3:dd:88:5e:11:ca:b4:0e:a9:
69:ce:66:5d:c3:3f:1c:ae:b2:c5:68:ca:41:8f:94:
25:1d:09:f0:e3:f8:a3:6a:88:d3:d7:38:77:f3:ba:
bb:cf:a5:c1:ad:1e:9a:2f:b3:37:4a:55:14:5f:68:
d7:fc:e1:3c:f7:32:a4:ab:2c:ff:49:43:7f:ae:b8:
35:e2:8a:48:70:83:5d:2a:3d:65:cd:02:8d:f8:ae:
f1:57:40:8d:3f:4d:e7:ef:de:cf:7e:ea:e2:05:b5:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:64:E1:BC:79:AA:D8:F2:8C:54:C7:12:32:91:A4:5A:E4:66:CE
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:e6:9b:19:22:7a:a3:d2:51:eb:3f:86:75:b7:60:cb:84:
07:c1:21:62:47:4e:fa:c0:1a:3c:ed:3c:cf:3c:94:6f:32:7d:
95:82:2f:73:64:cd:68:7b:e4:4c:6d:3d:d7:7f:3b:6e:57:6b:
ec:f2:77:32:b3:6a:7d:94:3c:13:d3:d8:79:5b:b3:0d:d2:32:
33:5c:e0:fd:e0:94:13:a9:5f:1e:87:c8:2f:00:52:86:a2:95:
81:ee:e1:4f:ad:f0:24:75:8b:e2:e0:f6:f0:a5:51:93:52:8c:
b4:a6:95:02:b8:f7:ee:4d:f7:27:cf:fb:ef:42:2f:f6:90:a0:
43:40:48:b1:41:c6:78:ce:b1:16:a1:30:10:9b:1c:28:23:46:
4c:d9:fb:fa:9d:66:11:b9:93:a1:13:10:b1:8d:41:8b:21:89:
4e:80:ec:e0:d5:ed:fb:da:3d:a9:f9:42:a3:8f:42:72:4a:67:
3e:0d:a4:79:87:20:b6:0d:fa:67:53:59:bd:5e:29:c7:80:7f:
6e:cc:f8:a9:2a:51:6c:43:4f:9d:13:1e:cf:74:05:56:c7:e7:
b5:17:df:bc:bd:aa:ad:0c:b8:38:63:2a:03:b5:7c:69:e4:7c:
8f:2c:87:35:1e:cf:72:4f:b0:10:ea:f0:2b:06:40:fa:9e:be:
f4:c0:5d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBvCRov/Oagw5PavDFjBTeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3
ZjAyYTIwHhcNMjQwNzAxMTYwMzA1WhcNMjQwNzAyMTYwMzA1WjAzMTEwLwYDVQQD
EyhlODNhNjRlMWJjNzlhYWQ4ZjI4YzU0YzcxMjMyOTFhNDVhZTQ2NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGpoNM2SRzHWW3NvHXMaRZd1RNVJ
4GAjt5+QfGCsQdTCSPiyXH4tA5NKpuruMWrZLxwpISa4a1V9xNo1okeBqWfwXvA1
/aC623+pJ19Goq5mOtete+ou+gC8z84Xgwgnq2uldOar1F9F14GBkpkC8zSMiad/
eENpBslxh24JP1WSpuuA/OkrT5M1LCJjASMDy2Prc14PHut9WPGj3YheEcq0Dqlp
zmZdwz8crrLFaMpBj5QlHQnw4/ijaojT1zh387q7z6XBrR6aL7M3SlUUX2jX/OE8
9zKkqyz/SUN/rrg14opIcINdKj1lzQKN+K7xV0CNP03n797PfuriBbV9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg6ZOG8earY8oxUxxIykaRa5GbOMB8GA1UdIwQY
MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct
MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1
LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb27mmxki
eqPSUes/hnW3YMuEB8EhYkdO+sAaPO08zzyUbzJ9lYIvc2TNaHvkTG091387bldr
7PJ3MrNqfZQ8E9PYeVuzDdIyM1zg/eCUE6lfHofILwBShqKVge7hT63wJHWL4uD2
8KVRk1KMtKaVArj37k33J8/770Iv9pCgQ0BIsUHGeM6xFqEwEJscKCNGTNn7+p1m
EbmToRMQsY1BiyGJToDs4NXt+9o9qflCo49CckpnPg2keYcgtg36Z1NZvV4px4B/
bsz4qSpRbENPnRMez3QFVsfntRffvL2qrQy4OGMqA7V8aeR8jyyHNR7Pck+wEOrw
KwZA+p6+9MBdsg==
-----END CERTIFICATE-----
Generated at Mon Jul 1 17:42:51 2024 by rpki-client on console-ams.rpki-client.org