Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: Z2CJw7AWXQzbTA4ohRCrZoS0lmVh69std1sigv+5Re0=
Subject key identifier: 37:C5:52:DD:2E:F8:48:4F:E9:C8:31:3E:59:C4:50:74:E2:6A:F2:02
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 018F88248EC1DD5B26BD64135BF5985F6D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 88
Signing time: Fri 17 May 2024 20:00:48 +0000
Manifest this update: Fri 17 May 2024 20:00:48 +0000
Manifest next update: Sat 18 May 2024 20:00:48 +0000
Files and hashes: 1: 03h7-9SxDq0PRtH161uaGptMvW0.roa (hash: BrscDSEj1RITwVaB2YnZPxeRu98tJl4kEIq3Lous9NI=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: kf7SoQjO8GzqxJG6loivZuZ1DApiNPbhjLpZEay3Xjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:8e:c1:dd:5b:26:bd:64:13:5b:f5:98:5f:6d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: May 17 20:00:48 2024 GMT
Not After : May 18 20:00:48 2024 GMT
Subject: CN=37c552dd2ef8484fe9c8313e59c45074e26af202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:78:b9:97:16:84:fc:f6:4f:72:5f:05:3b:
3c:2a:51:12:23:ac:01:b5:57:cd:c7:56:79:80:fa:
06:20:94:64:d6:21:94:fe:8f:e8:ad:7e:26:6f:f5:
e2:1e:62:87:f9:72:55:13:7f:0e:71:bb:1c:af:f5:
7a:9b:a4:79:85:9c:66:3d:a7:28:e8:3c:d8:42:c1:
39:fa:37:d5:ab:c6:4b:6f:01:8a:11:93:3e:cf:2d:
9c:ed:25:19:d6:a6:db:db:73:25:21:b8:77:88:17:
fc:bd:45:bb:68:58:6d:e5:42:53:6d:e6:6c:59:3a:
d3:03:21:b2:34:44:9d:e5:f5:cf:8c:b9:ae:a4:2f:
f7:05:8b:ea:bd:89:b2:8e:b9:8c:b5:85:c0:89:0d:
5f:d3:ff:f9:35:25:9e:b1:ff:b3:91:b2:43:26:f3:
ce:7d:d7:fa:23:0a:b7:83:f2:44:71:95:67:73:28:
49:cb:ed:e2:c5:6a:40:dd:b2:78:f7:1d:55:2d:24:
be:85:b3:e0:59:f1:4b:df:75:87:c7:4d:28:99:a5:
ea:80:bf:44:4a:d5:41:bf:e6:7c:cd:00:21:c0:46:
22:e2:c2:23:9a:c4:a9:f9:d9:18:3e:02:ba:0b:8e:
bc:b0:2b:86:f9:e9:49:68:c1:ba:11:2f:62:36:99:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:52:DD:2E:F8:48:4F:E9:C8:31:3E:59:C4:50:74:E2:6A:F2:02
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:03:d7:71:91:b7:41:5b:58:49:15:14:89:4a:92:dd:ed:
85:1a:a4:bd:e1:b2:05:5d:07:de:d6:a8:eb:c9:e5:79:97:5c:
66:0f:a6:73:1a:56:ac:6f:b8:cb:7a:b1:e1:8e:2b:92:b1:8f:
c8:92:c3:3b:32:90:bc:35:1f:ec:03:af:73:2c:90:89:84:4a:
25:73:e4:0b:73:05:fa:cf:c6:ee:54:3d:03:05:0b:d2:4b:5f:
26:7d:ab:7e:cd:9c:7c:2a:48:89:e5:08:b1:7a:c2:0f:c5:f3:
50:0e:2c:a0:7c:2e:31:21:a1:14:11:4a:61:a5:23:c3:f3:97:
7f:33:35:11:f2:59:7b:f1:ca:29:69:bd:0d:4a:57:11:09:d3:
9b:a9:5d:64:56:56:a2:2b:ab:51:cb:8d:6d:88:23:52:18:65:
30:d9:75:82:e9:ed:50:b3:f2:6a:9f:23:a8:46:fa:b9:3a:2b:
93:ee:1e:63:20:2c:fc:70:ba:68:0d:7e:90:04:75:24:c0:1f:
a7:e8:a0:01:8f:e1:70:b1:f0:3e:e0:b0:ae:9a:b9:9f:47:08:
79:6b:82:0b:85:21:ac:75:e5:b7:f6:06:0a:dd:41:ee:53:59:
e4:af:ef:7b:25:c2:6a:74:1f:0a:0c:20:00:b3:14:7b:7e:c2:
88:3f:ae:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJI7B3VsmvWQTW/WYX20YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjQwNTE3MjAwMDQ4WhcNMjQwNTE4MjAwMDQ4WjAzMTEwLwYDVQQD
EygzN2M1NTJkZDJlZjg0ODRmZTljODMxM2U1OWM0NTA3NGUyNmFmMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD54uZcWhPz2T3JfBTs8KlESI6wB
tVfNx1Z5gPoGIJRk1iGU/o/orX4mb/XiHmKH+XJVE38Ocbscr/V6m6R5hZxmPaco
6DzYQsE5+jfVq8ZLbwGKEZM+zy2c7SUZ1qbb23MlIbh3iBf8vUW7aFht5UJTbeZs
WTrTAyGyNESd5fXPjLmupC/3BYvqvYmyjrmMtYXAiQ1f0//5NSWesf+zkbJDJvPO
fdf6Iwq3g/JEcZVncyhJy+3ixWpA3bJ49x1VLSS+hbPgWfFL33WHx00omaXqgL9E
StVBv+Z8zQAhwEYi4sIjmsSp+dkYPgK6C468sCuG+elJaMG6ES9iNpmO/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfFUt0u+EhP6cgxPlnEUHTiavICMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIAD13GR
t0FbWEkVFIlKkt3thRqkveGyBV0H3tao68nleZdcZg+mcxpWrG+4y3qx4Y4rkrGP
yJLDOzKQvDUf7AOvcyyQiYRKJXPkC3MF+s/G7lQ9AwUL0ktfJn2rfs2cfCpIieUI
sXrCD8XzUA4soHwuMSGhFBFKYaUjw/OXfzM1EfJZe/HKKWm9DUpXEQnTm6ldZFZW
oiurUcuNbYgjUhhlMNl1guntULPyap8jqEb6uTork+4eYyAs/HC6aA1+kAR1JMAf
p+igAY/hcLHwPuCwrpq5n0cIeWuCC4UhrHXlt/YGCt1B7lNZ5K/veyXCanQfCgwg
ALMUe37CiD+uEQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:56:35 2024 by rpki-client on console-ams.rpki-client.org