Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: lo1VJWcMUi6tzkV55XFGjSFb0pCLdz2aQsbFgIMSUb8=
Subject key identifier: 49:DD:94:DB:B9:EC:7C:DF:83:79:BA:A4:DD:64:56:23:D4:A8:C7:96
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 0191FA10865ECCC046DEDC3C00019553D200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0130
Signing time: Mon 16 Sep 2024 09:01:12 +0000
Manifest this update: Mon 16 Sep 2024 09:01:12 +0000
Manifest next update: Tue 17 Sep 2024 09:01:12 +0000
Files and hashes: 1: 9gF5D7CTTHbLtaMD9vkV_I8CEls.roa (hash: IE323o8+FF6uiL2YPE4R/Yq9DL1rbGu97qEdF8mx/z4=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: jeWWlZaYPFgghmldcmIE9b2vQCd8gIB8Rs7ljqYFF30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:10:86:5e:cc:c0:46:de:dc:3c:00:01:95:53:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Sep 16 09:01:12 2024 GMT
Not After : Sep 17 09:01:12 2024 GMT
Subject: CN=49dd94dbb9ec7cdf8379baa4dd645623d4a8c796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:dc:07:f5:47:b5:32:e4:65:a1:33:cc:0e:
26:33:50:5d:d8:e8:a8:fc:26:79:06:25:60:63:8e:
65:ab:72:2d:5c:b8:c6:20:02:26:dd:ba:5e:bd:51:
3d:38:23:83:5c:31:f6:9c:97:88:74:da:56:13:13:
f3:f1:cc:ec:1a:9e:f7:f6:b3:ea:74:18:ab:21:a6:
b5:db:79:c1:dd:32:97:1d:6e:d7:dd:99:51:43:68:
ad:5e:0d:a5:0a:75:ed:31:87:ed:cd:7a:7e:56:bf:
8e:f3:b7:36:bf:61:35:23:92:d2:00:90:2f:d7:c0:
6a:4a:44:6f:5e:b3:f2:44:b2:a9:fc:d2:b2:5d:2a:
b9:4f:88:37:c4:03:4c:dc:ee:9c:15:3e:7c:8f:ac:
bb:0d:b7:11:65:77:0f:1e:b7:38:db:78:04:65:6b:
eb:e0:63:0b:60:96:49:21:c1:fd:93:8e:f4:f5:66:
1e:27:50:9a:fa:9b:9a:f5:eb:4a:39:e2:98:d8:01:
06:2a:47:d0:72:a2:ad:c9:51:78:c6:27:5b:13:c0:
7f:65:2a:97:1d:5d:5a:0f:5c:d6:78:f4:28:9f:8c:
f1:e8:53:f9:84:f7:28:e2:0a:ae:d2:86:91:95:8f:
f2:7d:a8:f9:95:b7:f3:34:af:86:27:fc:5b:2e:73:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:94:DB:B9:EC:7C:DF:83:79:BA:A4:DD:64:56:23:D4:A8:C7:96
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ab:a8:40:53:27:69:e4:a8:ce:7b:f9:6c:2e:58:37:f8:f7:
16:f2:82:5c:42:60:2b:03:fe:60:d2:56:c8:86:ce:78:19:d4:
9d:20:74:50:54:73:64:43:ad:09:38:7f:17:58:8d:7a:c0:8d:
5c:91:c2:a9:b3:10:f7:1f:6b:6a:74:64:df:c9:2f:66:35:00:
03:79:e7:12:25:8e:07:14:cc:79:c0:aa:a5:92:6e:67:b5:fe:
63:45:2d:54:eb:5d:bd:ae:2d:7d:89:4f:67:03:05:b5:49:9c:
a5:38:04:6a:76:4c:ec:54:3a:99:e6:01:b1:11:c2:98:91:a0:
29:9b:61:07:0f:74:1a:13:d6:f4:e9:20:c2:5f:23:b7:0a:e0:
2d:2f:d1:0f:44:6b:a8:d6:fa:69:95:1b:f0:22:fd:42:49:66:
38:6f:dd:41:ef:db:dd:28:f8:d0:b7:07:3e:d8:13:c4:bb:31:
d4:bd:da:aa:21:55:ea:98:6b:53:a1:43:cd:3a:6d:3c:09:88:
2a:98:eb:5b:b9:07:1e:5b:f9:73:0b:19:07:3f:c3:fb:3e:e6:
19:2b:86:f8:e0:4b:29:5a:25:ad:ff:a7:a0:a0:52:34:2a:ff:
5a:3c:e0:27:91:13:c3:fe:79:a3:83:e8:9a:ca:53:ac:b7:97:
df:90:a6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6EIZezMBG3tw8AAGVU9IAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm
MjhjNzcwHhcNMjQwOTE2MDkwMTEyWhcNMjQwOTE3MDkwMTEyWjAzMTEwLwYDVQQD
Eyg0OWRkOTRkYmI5ZWM3Y2RmODM3OWJhYTRkZDY0NTYyM2Q0YThjNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosfcB/VHtTLkZaEzzA4mM1Bd2Oio
/CZ5BiVgY45lq3ItXLjGIAIm3bpevVE9OCODXDH2nJeIdNpWExPz8czsGp739rPq
dBirIaa123nB3TKXHW7X3ZlRQ2itXg2lCnXtMYftzXp+Vr+O87c2v2E1I5LSAJAv
18BqSkRvXrPyRLKp/NKyXSq5T4g3xANM3O6cFT58j6y7DbcRZXcPHrc423gEZWvr
4GMLYJZJIcH9k4709WYeJ1Ca+pua9etKOeKY2AEGKkfQcqKtyVF4xidbE8B/ZSqX
HV1aD1zWePQon4zx6FP5hPco4gqu0oaRlY/yfaj5lbfzNK+GJ/xbLnOeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEndlNu57Hzfg3m6pN1kViPUqMeWMB8GA1UdIwQY
MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt
MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi
LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASquoQFMn
aeSoznv5bC5YN/j3FvKCXEJgKwP+YNJWyIbOeBnUnSB0UFRzZEOtCTh/F1iNesCN
XJHCqbMQ9x9ranRk38kvZjUAA3nnEiWOBxTMecCqpZJuZ7X+Y0UtVOtdva4tfYlP
ZwMFtUmcpTgEanZM7FQ6meYBsRHCmJGgKZthBw90GhPW9Okgwl8jtwrgLS/RD0Rr
qNb6aZUb8CL9QklmOG/dQe/b3Sj40LcHPtgTxLsx1L3aqiFV6phrU6FDzTptPAmI
KpjrW7kHHlv5cwsZBz/D+z7mGSuG+OBLKVolrf+noKBSNCr/WjzgJ5ETw/55o4Po
mspTrLeX35Cm6g==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:17:58 2024 by rpki-client on console-ams.rpki-client.org