Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: 7jEMqjp88PjgHxc28LqGxjRZ7Qk4FYaeChTWss3Csoo=
Subject key identifier: 18:D9:CC:CA:F2:E8:70:EE:B3:C4:B0:88:8C:F8:0B:F6:C2:47:FE:86
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 018F4E35CEC9925A530433EE91696AE9C4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 0D43
Signing time: Mon 06 May 2024 14:01:40 +0000
Manifest this update: Mon 06 May 2024 14:01:40 +0000
Manifest next update: Tue 07 May 2024 14:01:40 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: sWMZz886pVBQxMlVKb1kZxsksv5HFNd2lkYChNPYXQ4=)
2: 98wdG89X1LQCZq2giFIGoawUsls.roa (hash: jFXstJENxRgOoomZU5MoHxX4kVz08u04ID99y5JwuWM=)
3: pTPJ6GuNhhTs0aoKJXcl2ijQh0s.roa (hash: aUz9ZM/ONFaENhwkPzdstIZwD6RklmNVXu0Dbwo8kUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:35:ce:c9:92:5a:53:04:33:ee:91:69:6a:e9:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: May 6 14:01:40 2024 GMT
Not After : May 7 14:01:40 2024 GMT
Subject: CN=18d9cccaf2e870eeb3c4b0888cf80bf6c247fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:53:b4:5a:1b:0f:f5:7b:2f:35:71:51:85:
97:d2:cd:34:20:cb:cd:5b:c2:ba:f2:0f:36:1b:9a:
1c:18:52:7f:2d:44:f7:a1:a4:88:d3:e7:b5:54:d1:
a0:5f:e8:89:c4:99:fb:76:12:b3:43:b7:f6:5c:8a:
d7:4f:2c:ef:94:20:07:62:be:f0:dd:93:4b:c5:45:
ef:66:4f:c8:a3:a5:42:ef:fc:cb:f6:e3:a0:b0:d2:
d9:c6:42:53:a7:ab:36:e8:43:75:35:72:58:d8:99:
b1:88:88:fb:3e:a3:a3:79:bb:a1:83:1d:dd:67:7a:
80:b9:52:79:c4:47:eb:b2:9e:13:06:0d:1e:5b:5d:
37:05:cb:a6:f1:0c:44:66:d7:3c:97:5d:da:a0:e8:
06:3a:9b:95:87:f6:ac:43:cb:63:36:47:d5:08:86:
d4:ba:f4:6b:75:8f:8c:83:1e:d2:53:cf:4a:61:8c:
3b:a3:96:8d:b5:0f:7d:e8:d5:5a:b6:32:10:7e:b9:
de:66:fd:b7:a4:97:54:f9:88:a8:e3:7e:b0:a0:14:
e7:77:ec:62:8c:a8:ab:8c:4f:c5:42:82:3c:7d:0b:
26:bc:71:07:80:a7:da:a6:8a:23:0c:57:7e:83:47:
1a:8e:2e:0d:98:24:99:51:4f:05:81:52:49:50:12:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:CC:CA:F2:E8:70:EE:B3:C4:B0:88:8C:F8:0B:F6:C2:47:FE:86
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:f4:95:e6:b1:a8:69:04:21:20:97:76:94:d7:46:f1:cd:
2a:47:d1:ac:54:6d:1f:5c:a5:f4:b4:23:61:7e:e1:ae:48:50:
17:37:6f:6c:21:b2:88:9b:da:db:79:58:f0:2d:42:9e:cb:b5:
22:af:3a:a4:e4:3d:bd:13:c6:10:fc:f1:a2:2c:f6:32:4c:c4:
a9:9b:9c:c0:c6:37:d1:8b:28:f6:c3:2e:5b:7e:2d:1a:e7:3a:
73:75:65:0d:09:83:64:ea:0f:6c:cb:ad:27:af:96:e2:dc:a6:
34:8b:8b:92:95:a6:e0:7d:b1:eb:e6:f3:4f:60:df:00:31:1b:
63:4b:b5:2c:d1:61:4b:cc:c4:ea:cc:b9:4d:57:3a:81:27:4b:
90:e6:35:c1:59:d9:33:9b:18:bf:1f:31:6c:ee:9d:4d:9d:50:
53:a6:f6:67:14:dd:47:43:84:46:89:7c:fe:16:63:c1:4f:9b:
2a:af:76:ec:c3:fe:ae:2d:74:9c:4a:00:a7:86:e4:bb:1c:fa:
be:68:b9:66:79:0d:86:d5:74:09:87:d0:66:ad:41:70:6a:a8:
07:0e:86:f1:b8:f2:ea:ba:97:a6:ba:51:78:5f:9e:2f:75:e7:
7e:5c:9a:69:21:29:95:3a:61:10:05:51:43:d8:a2:be:f5:75:
95:ab:a0:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ONc7JklpTBDPukWlq6cSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjQwNTA2MTQwMTQwWhcNMjQwNTA3MTQwMTQwWjAzMTEwLwYDVQQD
EygxOGQ5Y2NjYWYyZTg3MGVlYjNjNGIwODg4Y2Y4MGJmNmMyNDdmZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/dTtFobD/V7LzVxUYWX0s00IMvN
W8K68g82G5ocGFJ/LUT3oaSI0+e1VNGgX+iJxJn7dhKzQ7f2XIrXTyzvlCAHYr7w
3ZNLxUXvZk/Io6VC7/zL9uOgsNLZxkJTp6s26EN1NXJY2JmxiIj7PqOjebuhgx3d
Z3qAuVJ5xEfrsp4TBg0eW103Bcum8QxEZtc8l13aoOgGOpuVh/asQ8tjNkfVCIbU
uvRrdY+Mgx7SU89KYYw7o5aNtQ996NVatjIQfrneZv23pJdU+Yio436woBTnd+xi
jKirjE/FQoI8fQsmvHEHgKfapoojDFd+g0caji4NmCSZUU8FgVJJUBIWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjZzMry6HDus8SwiIz4C/bCR/6GMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4r0leax
qGkEISCXdpTXRvHNKkfRrFRtH1yl9LQjYX7hrkhQFzdvbCGyiJva23lY8C1Cnsu1
Iq86pOQ9vRPGEPzxoiz2MkzEqZucwMY30Yso9sMuW34tGuc6c3VlDQmDZOoPbMut
J6+W4tymNIuLkpWm4H2x6+bzT2DfADEbY0u1LNFhS8zE6sy5TVc6gSdLkOY1wVnZ
M5sYvx8xbO6dTZ1QU6b2ZxTdR0OERol8/hZjwU+bKq927MP+ri10nEoAp4bkuxz6
vmi5ZnkNhtV0CYfQZq1BcGqoBw6G8bjy6rqXprpReF+eL3XnflyaaSEplTphEAVR
Q9iivvV1laug5A==
-----END CERTIFICATE-----
Generated at Mon May 6 20:53:03 2024 by rpki-client on console-fra.rpki-client.org