Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: HEm8NafZt2L1VXRLsvL4KaWbexBmNBhc3D3xc5exRmU=
Subject key identifier: 83:50:B6:F2:84:75:C2:16:7F:84:A1:42:61:5F:2F:08:30:FD:07:D0
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 018F86DA5FA6788B4ACE06480CC253B2C7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 0DAB
Signing time: Fri 17 May 2024 14:00:09 +0000
Manifest this update: Fri 17 May 2024 14:00:09 +0000
Manifest next update: Sat 18 May 2024 14:00:09 +0000
Files and hashes: 1: H_8RRu4X-CmicQuV7mUaFn0HP4A.roa (hash: pGDbI9djyKAvEWOI1/lEvd8/Yi/3HIC0wyvKyvv3AbU=)
2: NTTQXOe-KQNTX8GpVTq9DTybvwY.roa (hash: 7Q/izpjUfuI43NBSW+PFWtuOP1bn244NH82d5+luV8E=)
3: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: PWm6eRjSSUD2ljzfKNX31WtPgPHdSBLEoWzWSMBTliM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:5f:a6:78:8b:4a:ce:06:48:0c:c2:53:b2:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: May 17 14:00:09 2024 GMT
Not After : May 18 14:00:09 2024 GMT
Subject: CN=8350b6f28475c2167f84a142615f2f0830fd07d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:48:03:76:ed:c4:d2:a2:76:18:c6:8d:bc:
19:82:b1:7c:27:05:4e:ed:28:4c:4e:c9:85:d1:22:
b4:65:1f:f4:3c:99:d9:44:f2:2f:04:df:98:f0:6e:
d1:50:a3:7c:ab:f8:ee:24:da:2d:c6:b1:09:03:a0:
71:9b:98:bb:06:d4:cd:dd:66:22:f5:6c:1a:3d:60:
5b:8b:5e:ce:c5:17:be:44:a5:1d:b4:88:22:17:24:
95:82:a2:8f:27:7d:8a:ba:77:e9:51:51:68:19:66:
31:b7:26:d1:7f:d4:04:e6:68:5e:cc:88:9f:e7:a9:
a5:56:59:1b:fb:92:1d:76:ee:83:03:32:db:e3:a2:
96:e6:be:b2:8a:de:2f:35:6e:ef:ef:75:b6:11:21:
13:4d:5b:62:fe:3b:4c:68:5d:73:f0:0f:d6:6b:e2:
30:0c:d5:55:0a:9e:d7:2f:8d:e3:10:96:7f:49:13:
8f:3d:75:41:46:8c:65:1b:00:9f:5d:41:d1:be:d9:
27:44:5e:7a:c5:3f:9b:2b:f9:79:5e:89:55:d7:00:
ca:9d:29:41:c0:a4:5c:36:84:08:ef:36:ca:36:5d:
fa:db:18:ce:3f:40:6d:f0:ed:42:52:da:c3:01:8c:
a2:fc:15:8b:f0:4f:c3:4a:45:40:c6:a7:fd:dd:f1:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:B6:F2:84:75:C2:16:7F:84:A1:42:61:5F:2F:08:30:FD:07:D0
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bb:b7:e3:e1:d7:54:a4:ba:b8:ba:39:ef:2a:2a:55:a3:62:
fb:e4:4e:32:b7:c2:c9:f1:23:d5:1b:34:98:3a:6f:9c:47:ad:
70:71:b0:f1:14:71:84:cf:03:6c:f6:a8:96:c6:53:e1:ed:2c:
cc:55:20:85:a2:20:d7:f6:13:ca:7b:2f:60:57:f5:51:45:d2:
7a:46:c6:03:c0:7c:58:9e:bd:33:5e:e5:9f:cd:1f:d8:3e:fb:
5f:00:90:69:20:fa:66:0c:c2:d4:09:cf:f9:a3:44:ca:dc:24:
16:2a:b0:c6:8d:bf:4f:24:9c:3d:da:db:88:cc:89:e9:dc:02:
87:ff:24:b0:21:e8:69:97:a0:bb:24:b9:01:4b:df:c9:a1:6d:
80:ff:bc:f4:e3:ac:b8:5a:78:45:f0:f1:ab:3c:41:ad:7b:ed:
80:b0:1c:df:18:d9:58:18:f7:bd:a5:7d:67:b1:cb:85:d1:2f:
9a:74:8c:b3:91:d6:3c:01:42:48:1c:cb:7a:d1:f2:64:c3:b8:
d0:7d:67:53:e4:31:c4:6c:aa:be:de:90:80:bd:2b:d5:e1:fb:
36:da:47:23:dd:21:97:41:ba:e0:b9:05:3b:fc:38:4c:75:a4:
1d:e9:5e:70:f0:f6:a9:10:12:45:08:c0:66:71:82:86:73:33:
50:8a:8c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2l+meItKzgZIDMJTsse8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjQwNTE3MTQwMDA5WhcNMjQwNTE4MTQwMDA5WjAzMTEwLwYDVQQD
Eyg4MzUwYjZmMjg0NzVjMjE2N2Y4NGExNDI2MTVmMmYwODMwZmQwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM9IA3btxNKidhjGjbwZgrF8JwVO
7ShMTsmF0SK0ZR/0PJnZRPIvBN+Y8G7RUKN8q/juJNotxrEJA6Bxm5i7BtTN3WYi
9WwaPWBbi17OxRe+RKUdtIgiFySVgqKPJ32KunfpUVFoGWYxtybRf9QE5mhezIif
56mlVlkb+5Iddu6DAzLb46KW5r6yit4vNW7v73W2ESETTVti/jtMaF1z8A/Wa+Iw
DNVVCp7XL43jEJZ/SROPPXVBRoxlGwCfXUHRvtknRF56xT+bK/l5XolV1wDKnSlB
wKRcNoQI7zbKNl362xjOP0Bt8O1CUtrDAYyi/BWL8E/DSkVAxqf93fEgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINQtvKEdcIWf4ShQmFfLwgw/QfQMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLu34+HX
VKS6uLo57yoqVaNi++ROMrfCyfEj1Rs0mDpvnEetcHGw8RRxhM8DbPaolsZT4e0s
zFUghaIg1/YTynsvYFf1UUXSekbGA8B8WJ69M17ln80f2D77XwCQaSD6ZgzC1AnP
+aNEytwkFiqwxo2/TyScPdrbiMyJ6dwCh/8ksCHoaZeguyS5AUvfyaFtgP+89OOs
uFp4RfDxqzxBrXvtgLAc3xjZWBj3vaV9Z7HLhdEvmnSMs5HWPAFCSBzLetHyZMO4
0H1nU+QxxGyqvt6QgL0r1eH7NtpHI90hl0G64LkFO/w4THWkHelecPD2qRASRQjA
ZnGChnMzUIqMWw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:07:08 2024 by rpki-client on console-ams.rpki-client.org