Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: m56m20FxI039GTTBYPobm2t/AezpvU+OwrZRNBNWK9c=
Subject key identifier: B3:CC:13:97:AE:52:80:F5:2D:C5:4C:DA:C8:64:46:E7:AD:64:E6:E9
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 018F86A4062A39B4E593F9F2EF7AD10E18A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 110B
Signing time: Fri 17 May 2024 13:00:47 +0000
Manifest this update: Fri 17 May 2024 13:00:47 +0000
Manifest next update: Sat 18 May 2024 13:00:47 +0000
Files and hashes: 1: KKJqDEOnbwwxc4zPn00ryCz7UZQ.roa (hash: 8NaBAh6p1xFVvqnqpNsYDG6RkM2P9WtSmMlIkx6YGYo=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: HZFN9NOWSGdkkWxkD3/p9qFaRLqXTMV/R5WHu8vJBCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a4:06:2a:39:b4:e5:93:f9:f2:ef:7a:d1:0e:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: May 17 13:00:47 2024 GMT
Not After : May 18 13:00:47 2024 GMT
Subject: CN=b3cc1397ae5280f52dc54cdac86446e7ad64e6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:5b:3a:2b:f3:e1:2d:82:2b:36:77:a2:aa:
75:d5:25:5d:3c:8a:09:ca:60:92:a4:1c:7a:ba:e4:
71:1a:6e:43:b2:6f:c1:05:39:f4:6a:49:12:e1:22:
06:5e:09:01:03:41:20:39:d7:9c:e0:d0:86:ff:72:
68:c4:07:2d:00:4c:54:7f:26:bf:f5:65:89:c3:36:
80:cf:65:7e:de:15:58:ae:fb:a8:e3:66:8e:6c:80:
55:68:07:5a:dd:57:9c:c4:f8:5b:d3:43:f6:8f:a8:
70:73:7e:4d:1b:66:06:d2:f4:d4:1e:61:d9:59:7a:
b4:f1:41:17:fa:bb:32:46:37:13:d7:7c:16:70:3d:
c3:4f:a2:bb:1d:6f:d7:8b:ab:7a:a1:0b:ca:77:65:
69:2e:80:f6:e5:df:3d:75:bc:53:0d:19:9e:2b:ac:
6e:e9:c6:3a:b4:bc:b3:f1:f6:e8:0e:1d:47:f5:54:
05:a6:36:4f:0b:6b:03:9d:1e:31:d1:35:00:fb:f6:
ec:81:9e:7b:65:f2:fc:77:82:4b:56:94:bf:2c:f1:
24:7a:ff:11:de:92:71:4e:a3:fc:95:0d:3a:dd:04:
de:00:59:9a:af:0c:7f:d1:65:33:e8:a4:29:e8:e9:
a8:33:cc:e7:7b:94:f8:c6:ec:f4:76:41:fb:b3:c2:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:13:97:AE:52:80:F5:2D:C5:4C:DA:C8:64:46:E7:AD:64:E6:E9
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c3:91:aa:7a:ea:f2:d9:c1:9f:6b:04:f8:4a:44:7a:f4:05:
46:20:a1:7c:c2:0f:a5:fa:78:3b:46:38:c7:ce:a4:5e:b0:0b:
ad:f0:9e:8c:13:30:ae:cf:de:46:af:46:4c:db:e3:04:ba:1f:
98:d1:a9:46:21:2d:52:cf:e9:45:38:53:bb:cb:2c:bb:03:2b:
20:76:62:2f:e6:d5:df:6c:c5:21:b7:06:e4:00:ca:f7:4f:64:
c5:90:c5:e9:dc:87:c1:4d:01:53:07:17:33:72:24:47:9b:27:
01:2f:39:1a:71:d2:51:f6:b4:5a:dc:87:80:9c:94:7c:ce:8c:
d5:e4:c8:d9:d8:5d:15:9b:84:af:5e:bf:c7:b3:15:71:a5:05:
32:c2:c4:c1:32:5e:e3:38:a5:c8:92:64:2d:03:5b:83:80:0a:
3a:d6:77:31:b7:5f:d3:cc:36:4f:0d:90:60:e6:34:20:b4:51:
1a:17:03:9d:1a:c1:ca:c1:8f:e1:5b:2e:13:d5:aa:c1:86:fc:
7f:7e:df:cf:ab:74:3c:e0:19:6c:05:53:19:89:27:ee:71:d1:
74:61:5a:ec:78:5a:54:6b:49:ea:0c:ff:8e:b2:78:5a:fb:8f:
df:82:51:4d:33:89:29:47:9a:10:a3:6c:59:2e:5f:fc:d2:ac:
32:14:7f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GpAYqObTlk/ny73rRDhigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmYzZDk2ZThhYTE0MWQyMmM0MjQyYWVmZjc4YWY3MWVm
OGIyNDQwHhcNMjQwNTE3MTMwMDQ3WhcNMjQwNTE4MTMwMDQ3WjAzMTEwLwYDVQQD
EyhiM2NjMTM5N2FlNTI4MGY1MmRjNTRjZGFjODY0NDZlN2FkNjRlNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMdbOivz4S2CKzZ3oqp11SVdPIoJ
ymCSpBx6uuRxGm5Dsm/BBTn0akkS4SIGXgkBA0EgOdec4NCG/3JoxActAExUfya/
9WWJwzaAz2V+3hVYrvuo42aObIBVaAda3VecxPhb00P2j6hwc35NG2YG0vTUHmHZ
WXq08UEX+rsyRjcT13wWcD3DT6K7HW/Xi6t6oQvKd2VpLoD25d89dbxTDRmeK6xu
6cY6tLyz8fboDh1H9VQFpjZPC2sDnR4x0TUA+/bsgZ57ZfL8d4JLVpS/LPEkev8R
3pJxTqP8lQ063QTeAFmarwx/0WUz6KQp6OmoM8zne5T4xuz0dkH7s8I7jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPME5euUoD1LcVM2shkRuetZObpMB8GA1UdIwQY
MBaAFL3/PZboqhQdIsQkKu/3ivce+LJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjct
M2M3OTg3YzQyYzE2LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MTFjN2YtYjEyNS00NzEyLTllZjctM2M3OTg3YzQyYzE2
LzEvdmY4OWx1aXFGQjBpeENRcTdfZUs5eDc0c2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsORqnrq
8tnBn2sE+EpEevQFRiChfMIPpfp4O0Y4x86kXrALrfCejBMwrs/eRq9GTNvjBLof
mNGpRiEtUs/pRThTu8ssuwMrIHZiL+bV32zFIbcG5ADK909kxZDF6dyHwU0BUwcX
M3IkR5snAS85GnHSUfa0WtyHgJyUfM6M1eTI2dhdFZuEr16/x7MVcaUFMsLEwTJe
4zilyJJkLQNbg4AKOtZ3Mbdf08w2Tw2QYOY0ILRRGhcDnRrBysGP4VsuE9WqwYb8
f37fz6t0POAZbAVTGYkn7nHRdGFa7HhaVGtJ6gz/jrJ4WvuP34JRTTOJKUeaEKNs
WS5f/NKsMhR/vQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:33:43 2024 by rpki-client on console-fra.rpki-client.org