Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: DvT5D/gY+iXDGxjKODw5SxoqfIkImycfNFbkQ27rxcE=
Subject key identifier: 22:A7:E4:65:D6:0C:05:16:E3:26:CB:29:EF:87:36:84:8E:B9:35:99
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 018F41C4B09EF94A718AA888287CA9C5B50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 0DE8
Signing time: Sat 04 May 2024 04:02:40 +0000
Manifest this update: Sat 04 May 2024 04:02:40 +0000
Manifest next update: Sun 05 May 2024 04:02:40 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: r/8SEKAw2uDDbiIyRgmV5h/PO6n7jC8f38mjt8DadhA=)
2: lE1Mz2J2yJoagw4LmSWuS9aXoV0.roa (hash: X6s2D8G6tFJVPzibOMwbGeVuSKw1fBB+fdofdV58vPI=)
3: wH9jzcOpQiolXL5SlnX7kZf7hfA.roa (hash: X/gwHX5+4DtD7hWJWaJgWlt0VnLzoQZmG+G0uDaRpOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:c4:b0:9e:f9:4a:71:8a:a8:88:28:7c:a9:c5:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: May 4 04:02:40 2024 GMT
Not After : May 5 04:02:40 2024 GMT
Subject: CN=22a7e465d60c0516e326cb29ef8736848eb93599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:02:9f:86:cb:41:ed:e0:04:bc:85:ea:34:
c5:1e:3d:58:3f:8a:93:e7:0e:e6:fd:24:50:1e:f3:
21:71:c9:93:62:b6:93:69:4f:47:df:1d:c9:a4:c0:
69:8c:e8:4a:e0:0b:71:03:97:c5:01:b4:9c:3b:77:
a2:a2:92:80:be:55:15:77:30:bb:87:83:df:30:80:
94:eb:ab:14:3d:b1:16:81:da:04:59:03:53:c8:fc:
06:0f:95:48:7c:d3:37:16:d1:2d:a9:f5:87:88:25:
1b:c5:ba:b9:1a:3e:94:ac:e2:45:92:7a:60:fd:d9:
e4:95:27:29:e3:1d:d4:72:f9:b6:3d:ab:85:d3:76:
20:3a:26:ab:f3:44:87:78:a0:00:c8:cf:08:12:7f:
f8:d5:e8:20:50:df:0b:dd:56:1f:8c:7e:63:69:19:
3c:63:be:ef:82:67:cf:96:60:0e:7a:75:7c:4c:ac:
e3:ba:67:f7:cf:d5:e7:d5:69:7b:97:7b:f2:95:21:
2b:64:81:67:ae:95:f7:43:84:a6:46:0f:4d:ce:22:
77:7c:25:a7:58:53:17:dc:e3:65:a0:63:18:42:ff:
10:91:98:aa:40:18:37:f1:06:c8:58:a3:cd:d3:cb:
79:d7:6e:94:46:f5:6d:12:e8:92:a5:1c:32:f4:d6:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:E4:65:D6:0C:05:16:E3:26:CB:29:EF:87:36:84:8E:B9:35:99
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9a:82:53:8e:f9:ac:33:06:67:48:49:a9:35:59:84:ce:27:
49:9b:fa:3a:fc:54:47:f0:ba:ff:a3:0d:06:1d:f5:91:79:d2:
a6:c0:4e:64:44:35:9d:84:ae:14:ee:2e:35:93:4a:74:26:57:
f2:99:75:37:46:2d:08:67:59:16:63:b8:60:18:6e:e8:cc:a2:
b5:70:90:98:bd:6e:3d:0f:af:48:f5:ea:1d:6c:b7:e7:37:8c:
b9:3d:ea:55:b4:46:32:fa:22:24:83:81:2e:bb:7b:aa:4c:f3:
64:12:30:66:22:92:1b:c7:52:0e:36:0d:0e:8b:7f:94:29:85:
95:94:ee:18:3d:1e:ac:be:53:1a:7e:f3:5d:17:51:11:6e:d8:
3b:a1:3a:e5:de:86:f1:ad:60:db:62:5b:29:62:a3:37:10:4a:
c4:d2:e1:5b:39:4b:05:a7:17:8d:31:b0:65:14:4a:8d:31:39:
7c:f4:b6:49:f7:87:1c:56:8c:d8:27:8f:2f:c0:96:a0:1e:a1:
b3:c5:ab:7a:5f:dd:d3:1c:15:44:ba:b2:9a:5f:60:d7:5c:73:
d8:6a:08:bf:f4:d8:e8:8a:76:26:9c:8a:f3:49:c5:c5:ee:03:
40:60:8a:82:b8:7d:f5:a5:00:c8:f0:b3:a3:16:39:98:bb:69:
58:a4:81:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxLCe+UpxiqiIKHypxbUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGU5YWM2NDUxMGZhMzkxODQ2YmIxMzlhYjUyYjgwMDFk
NTgwMzgwHhcNMjQwNTA0MDQwMjQwWhcNMjQwNTA1MDQwMjQwWjAzMTEwLwYDVQQD
EygyMmE3ZTQ2NWQ2MGMwNTE2ZTMyNmNiMjllZjg3MzY4NDhlYjkzNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSECn4bLQe3gBLyF6jTFHj1YP4qT
5w7m/SRQHvMhccmTYraTaU9H3x3JpMBpjOhK4AtxA5fFAbScO3eiopKAvlUVdzC7
h4PfMICU66sUPbEWgdoEWQNTyPwGD5VIfNM3FtEtqfWHiCUbxbq5Gj6UrOJFknpg
/dnklScp4x3Ucvm2PauF03YgOiar80SHeKAAyM8IEn/41eggUN8L3VYfjH5jaRk8
Y77vgmfPlmAOenV8TKzjumf3z9Xn1Wl7l3vylSErZIFnrpX3Q4SmRg9NziJ3fCWn
WFMX3ONloGMYQv8QkZiqQBg38QbIWKPN08t5126URvVtEuiSpRwy9NbNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKn5GXWDAUW4ybLKe+HNoSOuTWZMB8GA1UdIwQY
MBaAFCMOmsZFEPo5GEa7E5q1K4AB1YA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQt
ZWE5MmQ4MGFiMTg4LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQtZWE5MmQ4MGFiMTg4
LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJqCU475
rDMGZ0hJqTVZhM4nSZv6OvxUR/C6/6MNBh31kXnSpsBOZEQ1nYSuFO4uNZNKdCZX
8pl1N0YtCGdZFmO4YBhu6MyitXCQmL1uPQ+vSPXqHWy35zeMuT3qVbRGMvoiJIOB
Lrt7qkzzZBIwZiKSG8dSDjYNDot/lCmFlZTuGD0erL5TGn7zXRdREW7YO6E65d6G
8a1g22JbKWKjNxBKxNLhWzlLBacXjTGwZRRKjTE5fPS2SfeHHFaM2CePL8CWoB6h
s8Wrel/d0xwVRLqyml9g11xz2GoIv/TY6Ip2JpyK80nFxe4DQGCKgrh99aUAyPCz
oxY5mLtpWKSBvg==
-----END CERTIFICATE-----
Generated at Sat May 4 08:53:03 2024 by rpki-client on console-fra.rpki-client.org