Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json)
Hash identifier: 4q+WJ84Ytlwp05NpAB4CqN8BgbF7pTW6nj+wOn5Hig4=
Subject key identifier: F1:BE:9F:A9:0F:04:87:D0:A9:8F:70:54:CC:1A:F3:2B:72:95:BC:F4
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018F88241444ECB090B1109ED9368A605595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
Manifest number: 10DE
Signing time: Fri 17 May 2024 20:00:16 +0000
Manifest this update: Fri 17 May 2024 20:00:16 +0000
Manifest next update: Sat 18 May 2024 20:00:16 +0000
Files and hashes: 1: 7jgOp-Pa45fk2e0qNyl3w_AJzTc.roa (hash: +H65YEWVaPKEF44wHOtfYZNp5JgrYOo4LwxT53fTZsU=)
2: 7zAn1vWlt1tNqbbrPVdptBjOHJw.roa (hash: 3SgMD/a5lXvcOcSnfwK2/xT1v/rB+kX4VzpyJK6yaT4=)
3: 9IIsoMMnpikvHBcuZSVkO4nrJKk.roa (hash: cSUdlP+G2mhJPfIQXK1yix+6qYdP2dph/ar8GExRPuM=)
4: DSoHPTExQ2GPu49Q8ITWNFncI_Y.roa (hash: GTBm2Zn+cabRU10m7zKFPc/wroUHi+LD9Nug1yXUkuo=)
5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: 9oZP58tCnBdhEf59SAHWKg3A3xCd6Qubgz4rYRdZeK8=)
6: j9Wn70r2LCuq043U7DB0eM4wNfQ.roa (hash: msanrrotk/IsyRJaqpc+/f2s3iAQ0p11heca5q0ntZM=)
7: lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa (hash: Rup0ioyoCeKO4bl3gu1plhaZy+FR134Kh8wcWKANp/0=)
8: qXHHkW-ruRBplMU7atKw7gOlLWs.roa (hash: J5vojE6NCOQeuxjbasIcKQe32e1wr3Z8HYvZ+ZUtHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:14:44:ec:b0:90:b1:10:9e:d9:36:8a:60:55:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: May 17 20:00:16 2024 GMT
Not After : May 18 20:00:16 2024 GMT
Subject: CN=f1be9fa90f0487d0a98f7054cc1af32b7295bcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:0a:bb:2e:78:de:6f:8d:2e:a5:56:f3:77:
6d:0c:e8:88:9e:64:0b:4d:50:f4:d1:66:ed:d9:7f:
ac:e2:b4:f2:09:b9:52:31:56:d1:5b:2e:68:b9:71:
c4:64:13:33:34:c8:ab:d4:fb:79:14:0f:f5:6e:be:
96:a2:65:f7:0c:bb:0b:89:4b:83:57:ca:c0:aa:bc:
19:f3:17:6a:5d:2e:26:fd:ad:8f:9e:73:8d:a9:fb:
99:c4:49:6e:86:0f:fa:c2:fb:80:b1:50:6a:3e:d4:
29:6c:c6:10:f4:7f:7e:0d:82:18:72:23:f0:29:2c:
19:de:51:fe:23:51:b3:e9:b5:00:31:29:1b:73:8c:
4e:b0:bf:f2:0f:5c:ba:53:53:48:42:bf:80:09:da:
25:be:04:10:81:82:16:48:33:cb:1d:5b:de:9c:cb:
9a:84:9d:06:ac:45:23:76:3e:c0:cd:21:8b:54:1c:
d2:0d:16:61:d1:f6:cd:e3:6f:2f:e0:5a:58:36:5d:
cf:de:df:68:91:3c:ba:24:74:1f:69:8d:6c:19:89:
a7:4d:10:4e:fe:4e:be:29:e9:f0:82:82:a6:3e:8f:
98:f5:e0:81:5e:b3:b7:f3:13:e4:4c:1e:e0:30:a8:
3d:c5:49:70:d8:7b:1f:77:ea:c1:1e:a5:7c:2f:23:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BE:9F:A9:0F:04:87:D0:A9:8F:70:54:CC:1A:F3:2B:72:95:BC:F4
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:30:6a:86:78:59:00:71:ba:7f:ad:73:5b:e9:e2:b4:08:
2b:2e:de:fd:3d:0a:79:89:a5:77:61:54:f4:51:8d:dd:c9:a9:
22:80:b6:52:2c:f1:53:a4:34:e1:68:38:a2:de:61:52:41:eb:
44:ed:e6:d7:c8:96:8c:1a:3b:4c:ca:d7:12:f1:9b:16:02:7a:
80:a2:db:ee:6e:ad:6f:6f:69:52:24:fa:3a:4c:a8:73:fd:16:
6c:71:d6:8b:8a:60:dd:43:5a:7a:3e:aa:a7:d4:ea:dd:dc:e4:
04:5c:5f:af:e5:b0:0d:12:2e:25:fa:51:ca:22:63:e3:31:49:
d7:58:12:8c:b1:bf:93:86:71:82:3f:95:61:f7:1e:16:23:16:
8c:63:38:d2:23:0b:29:a1:e1:5d:42:cc:88:60:62:28:bf:b2:
05:b8:66:68:10:59:d1:5f:cf:df:a0:da:da:f0:1c:20:e7:5b:
b4:63:c8:74:39:44:80:5c:37:5e:52:3d:73:ea:e3:49:98:dc:
6b:a5:1d:23:d2:17:89:33:56:81:37:b5:b9:84:8d:22:f1:52:
64:08:d0:6e:1e:10:7e:ab:ff:21:58:c7:7a:34:d1:63:6a:0e:
dd:68:14:06:8f:1a:b5:13:36:38:a8:10:09:aa:dd:98:0c:2f:
93:cd:b7:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJBRE7LCQsRCe2TaKYFWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx
NTNjYmEwHhcNMjQwNTE3MjAwMDE2WhcNMjQwNTE4MjAwMDE2WjAzMTEwLwYDVQQD
EyhmMWJlOWZhOTBmMDQ4N2QwYTk4ZjcwNTRjYzFhZjMyYjcyOTViY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YAKuy543m+NLqVW83dtDOiInmQL
TVD00Wbt2X+s4rTyCblSMVbRWy5ouXHEZBMzNMir1Pt5FA/1br6WomX3DLsLiUuD
V8rAqrwZ8xdqXS4m/a2PnnONqfuZxEluhg/6wvuAsVBqPtQpbMYQ9H9+DYIYciPw
KSwZ3lH+I1Gz6bUAMSkbc4xOsL/yD1y6U1NIQr+ACdolvgQQgYIWSDPLHVvenMua
hJ0GrEUjdj7AzSGLVBzSDRZh0fbN428v4FpYNl3P3t9okTy6JHQfaY1sGYmnTRBO
/k6+KenwgoKmPo+Y9eCBXrO38xPkTB7gMKg9xUlw2Hsfd+rBHqV8LyOSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG+n6kPBIfQqY9wVMwa8ytylbz0MB8GA1UdIwQY
MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt
NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk
LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6wwaoZ4
WQBxun+tc1vp4rQIKy7e/T0KeYmld2FU9FGN3cmpIoC2UizxU6Q04Wg4ot5hUkHr
RO3m18iWjBo7TMrXEvGbFgJ6gKLb7m6tb29pUiT6Okyoc/0WbHHWi4pg3UNaej6q
p9Tq3dzkBFxfr+WwDRIuJfpRyiJj4zFJ11gSjLG/k4Zxgj+VYfceFiMWjGM40iML
KaHhXULMiGBiKL+yBbhmaBBZ0V/P36Da2vAcIOdbtGPIdDlEgFw3XlI9c+rjSZjc
a6UdI9IXiTNWgTe1uYSNIvFSZAjQbh4Qfqv/IVjHejTRY2oO3WgUBo8atRM2OKgQ
CardmAwvk823Xw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:13:41 2024 by rpki-client on console-ams.rpki-client.org