Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: xK4y8PWztOmB87hZShwpWnrQQXpb8hl4tExEA9UzHHI=
Subject key identifier: 3C:CD:C9:8A:81:8E:33:07:32:32:1C:86:E3:01:5B:20:E4:B2:FD:19
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 018F87B6633173DAE79026C7CA5BBB09F32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 10A3
Signing time: Fri 17 May 2024 18:00:28 +0000
Manifest this update: Fri 17 May 2024 18:00:28 +0000
Manifest next update: Sat 18 May 2024 18:00:28 +0000
Files and hashes: 1: P2L_RJvPks-8bQcldav_ZYu4taw.roa (hash: SJvjlfXzYZP3ItXngrorufGj6flbaobFdCQUoK+yEzA=)
2: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: FI6tefnQpouWjNplRGgf5xI6hZnOyIVHM52QsZlgQOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:63:31:73:da:e7:90:26:c7:ca:5b:bb:09:f3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: May 17 18:00:28 2024 GMT
Not After : May 18 18:00:28 2024 GMT
Subject: CN=3ccdc98a818e330732321c86e3015b20e4b2fd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:77:b1:14:55:a5:3a:e8:26:e3:ef:31:6b:
e8:36:4e:51:74:c8:e5:5a:e6:d9:5d:bb:97:2b:79:
35:de:93:26:8c:11:02:41:8b:67:a5:d6:53:e4:82:
a0:62:1a:83:4e:08:92:26:2b:00:53:d3:82:fe:f6:
14:b7:ed:94:01:7b:c9:c6:d9:ff:36:b9:7c:98:46:
d2:03:66:7b:77:89:cc:18:6c:1d:61:fc:66:2d:4b:
05:c4:2a:1a:10:71:4b:b1:65:14:5c:8e:a4:c2:3c:
a5:8d:29:cc:88:41:65:df:fb:13:81:22:98:69:c9:
12:bb:74:2e:fa:70:ad:ee:58:55:49:d1:e1:9b:d8:
02:bf:5b:95:e9:f3:39:a8:f7:73:18:3d:dd:25:f0:
7d:11:51:bc:cb:b9:01:99:d9:2b:fa:99:8e:60:8f:
5f:79:9e:7f:b5:f3:16:28:4f:1c:b8:cf:2e:75:9a:
9e:1d:cb:48:e1:ff:53:ec:c4:79:46:8c:9b:b3:22:
00:b9:d3:1f:7a:d6:76:51:ad:ba:11:a9:1a:f7:e9:
50:c5:03:79:18:9a:61:8a:2c:0c:8a:da:a3:6a:07:
63:21:b1:b5:da:ad:ce:a6:b4:78:2d:ab:ec:dc:cf:
b4:f4:be:b9:67:57:c2:94:33:70:be:bc:1b:c4:13:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CD:C9:8A:81:8E:33:07:32:32:1C:86:E3:01:5B:20:E4:B2:FD:19
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:ec:aa:1d:f1:a6:66:c2:f7:5c:5d:ba:16:47:cc:f8:5a:
3b:23:2d:fd:13:73:55:04:c9:93:2a:e5:cc:74:b4:47:6f:a9:
a1:49:ef:42:fe:cb:ca:4a:4e:01:b6:6c:fe:59:ca:5b:39:5a:
48:d6:42:d8:9b:76:e0:50:7d:fc:47:f8:12:98:52:cf:f7:cd:
81:d0:03:44:9c:db:6e:e7:6e:a2:87:62:ee:e0:22:9d:4e:12:
ef:8f:91:79:5c:12:c9:ec:f4:a8:18:25:95:c2:f6:3a:75:de:
79:33:7d:52:36:5a:2b:15:7c:d1:52:e0:09:1b:0f:fa:1d:cc:
82:69:04:9c:b4:50:8d:31:16:80:6d:17:ea:56:41:9f:0a:55:
28:e2:20:01:12:de:54:bd:96:3e:fb:8a:64:8d:09:28:a3:86:
ee:90:66:9a:92:f1:c5:56:51:e5:aa:04:9b:8f:45:7f:81:f8:
23:65:9c:cf:24:9e:e5:d3:d9:f1:d2:d7:71:28:06:b7:a1:b1:
e7:d4:b2:62:02:1e:bd:91:fd:0d:8f:41:f6:bc:68:b0:e6:c1:
be:16:6d:65:bb:79:1d:03:77:18:7c:7b:ae:48:bf:4c:ea:9b:
9d:89:18:f5:a2:fb:bd:8a:95:ad:84:df:58:cb:82:19:a2:ba:
af:c6:5c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmMxc9rnkCbHylu7CfMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy
YmQ4NmEwHhcNMjQwNTE3MTgwMDI4WhcNMjQwNTE4MTgwMDI4WjAzMTEwLwYDVQQD
EygzY2NkYzk4YTgxOGUzMzA3MzIzMjFjODZlMzAxNWIyMGU0YjJmZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jp3sRRVpTroJuPvMWvoNk5RdMjl
WubZXbuXK3k13pMmjBECQYtnpdZT5IKgYhqDTgiSJisAU9OC/vYUt+2UAXvJxtn/
Nrl8mEbSA2Z7d4nMGGwdYfxmLUsFxCoaEHFLsWUUXI6kwjyljSnMiEFl3/sTgSKY
ackSu3Qu+nCt7lhVSdHhm9gCv1uV6fM5qPdzGD3dJfB9EVG8y7kBmdkr+pmOYI9f
eZ5/tfMWKE8cuM8udZqeHctI4f9T7MR5RoybsyIAudMfetZ2Ua26Eaka9+lQxQN5
GJphiiwMitqjagdjIbG12q3OprR4Lavs3M+09L65Z1fClDNwvrwbxBO6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzNyYqBjjMHMjIchuMBWyDksv0ZMB8GA1UdIwQY
MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut
ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl
LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhXsqh3x
pmbC91xduhZHzPhaOyMt/RNzVQTJkyrlzHS0R2+poUnvQv7LykpOAbZs/lnKWzla
SNZC2Jt24FB9/Ef4EphSz/fNgdADRJzbbuduoodi7uAinU4S74+ReVwSyez0qBgl
lcL2OnXeeTN9UjZaKxV80VLgCRsP+h3MgmkEnLRQjTEWgG0X6lZBnwpVKOIgARLe
VL2WPvuKZI0JKKOG7pBmmpLxxVZR5aoEm49Ff4H4I2WczySe5dPZ8dLXcSgGt6Gx
59SyYgIevZH9DY9B9rxosObBvhZtZbt5HQN3GHx7rki/TOqbnYkY9aL7vYqVrYTf
WMuCGaK6r8Zc2Q==
-----END CERTIFICATE-----
Generated at Sat May 18 02:13:21 2024 by rpki-client on console-ams.rpki-client.org