Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: cOm+vmjYnkFaN9nHVCT6kjRHAbjghkAtxOwjxPoIbS4=
Subject key identifier: 28:BA:84:3E:C0:DD:E7:CC:AC:F4:B9:26:EF:2D:C7:13:52:D3:25:26
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 018F874A15467DD9BFE8FA1121E13B421BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 0CDC
Signing time: Fri 17 May 2024 16:02:10 +0000
Manifest this update: Fri 17 May 2024 16:02:10 +0000
Manifest next update: Sat 18 May 2024 16:02:10 +0000
Files and hashes: 1: j7qFrFM4EvvpY7CC8WMOOnKfLeg.roa (hash: tQezG6Wp+kFbdeCShC5RSBQl68Oc+2kcdNSij4ddMSw=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: gAjakCf0zeE4naSBoaVgbKhukUoW4xXIUzl0EekFrf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:15:46:7d:d9:bf:e8:fa:11:21:e1:3b:42:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: May 17 16:02:10 2024 GMT
Not After : May 18 16:02:10 2024 GMT
Subject: CN=28ba843ec0dde7ccacf4b926ef2dc71352d32526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:20:b2:44:18:b6:a4:84:59:c2:3a:98:c8:
f5:72:39:6c:c1:ed:3d:0a:f3:cd:9d:f6:95:09:84:
1b:0a:2d:7b:e2:56:b9:fc:50:06:a0:07:16:d5:4a:
8c:1a:44:79:8b:98:dd:c6:78:bd:7a:cc:cd:2d:a4:
05:40:80:60:2f:75:37:6a:a6:15:24:38:c3:2d:61:
de:2e:80:a6:86:1a:15:a2:be:97:24:50:d6:f6:8c:
3f:de:ff:f2:ab:1b:c6:da:af:11:1b:a0:16:c7:49:
30:f3:7c:ae:4c:ae:08:2d:93:15:83:0c:b3:58:11:
6c:d3:70:c7:46:35:56:fa:2a:f3:0c:95:f5:7f:be:
e7:3a:98:96:5d:8e:55:6e:6c:b6:7a:e2:2b:e2:58:
a3:d4:28:ff:fa:08:ed:03:dc:ed:08:c1:ce:05:14:
50:fe:2e:85:15:5a:94:8e:aa:2a:6e:39:92:79:40:
53:54:bb:15:d8:c5:a3:14:ec:2e:81:54:19:bc:25:
9b:04:fa:e5:e9:d8:6f:af:f7:d2:0c:76:64:a3:c7:
5c:66:3e:8d:49:49:85:d7:c3:6b:43:f6:2f:b4:44:
30:3e:12:4f:a2:ed:23:cb:40:df:eb:d5:9c:e6:23:
a6:ca:ea:2a:7a:20:c3:e8:55:7c:13:2a:0e:d4:24:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:84:3E:C0:DD:E7:CC:AC:F4:B9:26:EF:2D:C7:13:52:D3:25:26
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:eb:7d:ae:48:35:96:65:dd:a2:81:f6:12:76:48:6b:ac:b1:
28:1a:13:f3:41:d9:1c:45:2d:94:94:80:d5:d6:4c:f1:6e:4b:
d7:88:1d:08:73:2c:1f:d5:69:36:95:ad:a3:a8:bf:20:57:4f:
a8:4b:52:39:67:56:02:45:38:c7:43:21:36:06:40:a9:6d:ed:
d2:4d:ee:7a:76:60:7d:e1:98:48:ee:14:8d:22:f5:cc:e6:e7:
5b:91:22:4b:81:50:3f:db:51:dc:82:f0:f7:78:ff:d4:f7:39:
72:e8:3d:19:0a:ee:bb:0c:3b:25:3c:10:6e:46:63:c9:2d:86:
1e:6b:f3:7f:8a:f3:36:41:fc:19:37:44:5c:21:b7:ad:81:30:
4d:eb:98:15:99:cc:bf:f1:a4:06:31:9d:0e:2b:6e:9a:bd:07:
a6:3f:3f:4f:e3:74:97:8a:9b:02:34:e8:e4:b4:43:a7:a9:34:
df:ef:8f:00:94:0a:ce:04:3a:2b:cf:29:e1:92:54:3f:79:31:
e0:1d:9e:ec:c1:32:83:9b:84:3b:6d:60:d4:51:46:df:d5:0b:
22:41:f3:60:e5:f4:10:4d:e8:83:a2:e1:51:2c:13:c9:97:07:
ec:25:e6:c2:21:8a:0e:89:46:06:b3:3e:e5:e6:74:bb:ef:9e:
c9:02:da:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HShVGfdm/6PoRIeE7QhvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2Q0MzAxYjI4OTVmMWQ5OGE4NTBlNTg5Y2U3YzA2M2M1
MzlmNGQwHhcNMjQwNTE3MTYwMjEwWhcNMjQwNTE4MTYwMjEwWjAzMTEwLwYDVQQD
EygyOGJhODQzZWMwZGRlN2NjYWNmNGI5MjZlZjJkYzcxMzUyZDMyNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTMgskQYtqSEWcI6mMj1cjlswe09
CvPNnfaVCYQbCi174la5/FAGoAcW1UqMGkR5i5jdxni9eszNLaQFQIBgL3U3aqYV
JDjDLWHeLoCmhhoVor6XJFDW9ow/3v/yqxvG2q8RG6AWx0kw83yuTK4ILZMVgwyz
WBFs03DHRjVW+irzDJX1f77nOpiWXY5Vbmy2euIr4lij1Cj/+gjtA9ztCMHOBRRQ
/i6FFVqUjqoqbjmSeUBTVLsV2MWjFOwugVQZvCWbBPrl6dhvr/fSDHZko8dcZj6N
SUmF18NrQ/YvtEQwPhJPou0jy0Df69Wc5iOmyuoqeiDD6FV8EyoO1CSKiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi6hD7A3efMrPS5Ju8txxNS0yUmMB8GA1UdIwQY
MBaAFKLNQwGyiV8dmKhQ5YnOfAY8U59NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjkt
NThmM2YzN2NjZGQ5LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zODQ4NmMtOWRlMy00NGVmLWFiMjktNThmM2YzN2NjZGQ5
LzEvb3MxREFiS0pYeDJZcUZEbGljNThCanhUbjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOt9rkg1
lmXdooH2EnZIa6yxKBoT80HZHEUtlJSA1dZM8W5L14gdCHMsH9VpNpWto6i/IFdP
qEtSOWdWAkU4x0MhNgZAqW3t0k3uenZgfeGYSO4UjSL1zObnW5EiS4FQP9tR3ILw
93j/1Pc5cug9GQruuww7JTwQbkZjyS2GHmvzf4rzNkH8GTdEXCG3rYEwTeuYFZnM
v/GkBjGdDitumr0Hpj8/T+N0l4qbAjTo5LRDp6k03++PAJQKzgQ6K88p4ZJUP3kx
4B2e7MEyg5uEO21g1FFG39ULIkHzYOX0EE3og6LhUSwTyZcH7CXmwiGKDolGBrM+
5eZ0u++eyQLa5Q==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:58 2024 by rpki-client on console-ams.rpki-client.org