Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: uO8eIOY13dNXSzY/fxVes7dzfx/JsJQK/xWOq7n5NkQ=
Subject key identifier: C7:99:2B:99:29:99:E2:7D:4C:30:9F:4E:63:D2:7D:49:7F:BC:E9:EB
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 018F97294DBB8FC4627CFDAE8D3E27F86B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1181
Signing time: Mon 20 May 2024 18:00:17 +0000
Manifest this update: Mon 20 May 2024 18:00:17 +0000
Manifest next update: Tue 21 May 2024 18:00:17 +0000
Files and hashes: 1: DpCYQ_AdrJ3PXENmRN3irWstoBo.roa (hash: +CH4AcrCDAJtmJM6OBhfkjXYvp1Nx4ffXdqoJAQ1X9A=)
2: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: gCTQlO+EGFw8334/l+aILgGjV7usDFlIt9fY7HY2Jdk=)
3: vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa (hash: YNtFwzEzetSBzEDppTjx17TTaq6el8+eLC5sCRF+AVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:29:4d:bb:8f:c4:62:7c:fd:ae:8d:3e:27:f8:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: May 20 18:00:17 2024 GMT
Not After : May 21 18:00:17 2024 GMT
Subject: CN=c7992b992999e27d4c309f4e63d27d497fbce9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:e0:87:39:6c:e2:1d:f3:24:4b:e4:d9:55:
cf:29:1c:f2:68:4c:fd:25:33:7c:84:93:57:95:6d:
c3:aa:df:df:0b:3c:42:20:6c:1a:82:d1:c5:b7:b0:
6d:02:8c:a5:61:3e:f3:10:27:bc:79:a7:b2:45:c9:
e2:2d:a8:41:75:15:25:45:38:88:20:6b:b2:68:b1:
ac:88:1f:24:0d:b0:b7:3a:21:0a:8f:79:3a:50:66:
1c:3c:ea:ad:11:86:f2:b7:28:11:24:41:e6:a8:a8:
5f:d0:d7:51:f0:ed:b9:06:89:94:c7:10:2d:c4:e0:
8b:db:b7:a0:41:78:0b:01:f5:f3:f2:63:8f:33:09:
d9:cd:ab:ba:12:a2:54:d9:20:f8:5c:07:ac:cf:ed:
60:5f:84:b0:27:ae:2e:77:27:ce:62:b5:24:98:7b:
16:0d:ed:7a:e4:5f:a7:2f:d5:76:c0:ed:1a:19:30:
d9:be:ae:52:23:22:f5:69:6d:55:06:14:c5:ff:ff:
e6:49:6d:ca:63:02:29:24:f0:89:59:fc:1d:f5:52:
68:42:c5:43:1a:dd:7e:0b:5a:cb:40:7d:ce:22:dd:
2d:6b:4d:79:eb:47:c2:dd:96:4c:80:0d:0d:13:dc:
14:6f:a6:be:01:e5:b6:37:c6:57:00:73:e9:99:30:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:2B:99:29:99:E2:7D:4C:30:9F:4E:63:D2:7D:49:7F:BC:E9:EB
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:7a:ae:fc:20:fc:49:d9:bc:ff:08:42:a0:79:28:de:0c:
87:36:48:d8:20:e7:1f:a3:dc:e0:1a:a6:2b:a8:a7:95:35:c6:
0d:cf:3b:0f:ec:c6:7d:10:59:fe:c0:3e:99:83:e7:a0:3f:ea:
61:f0:31:e9:85:4d:a8:04:81:7f:73:ce:28:19:64:37:0e:95:
46:87:b1:5e:b1:0d:8c:7d:6e:0d:f0:45:ff:6b:49:fb:75:1e:
1d:ee:9b:0a:49:47:eb:ab:b7:62:9d:b7:f8:7e:f7:c7:c2:52:
f4:a4:3b:ee:45:a3:3d:22:f1:13:1f:5e:c5:3f:4e:ad:2c:ba:
7d:80:50:4a:7f:97:4a:67:38:14:4f:ad:98:59:28:f4:ea:b6:
55:3f:af:df:7a:3c:12:3a:bc:16:e4:19:ce:b2:5a:f6:b0:f7:
da:14:d5:45:4a:18:d6:b2:86:da:84:43:15:96:ba:28:fc:3c:
7d:47:d3:82:30:58:0c:db:28:d3:95:3f:92:d6:ee:93:78:bc:
6b:3a:8b:0c:f1:9f:4a:34:b1:f1:6f:f5:32:f4:d5:9d:bc:51:
77:95:17:8b:ca:92:83:d6:dc:da:15:95:e7:aa:06:67:5c:0a:
dd:95:76:43:39:03:5f:82:81:12:3d:54:c9:88:4d:d6:e2:c7:
a0:8f:39:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+XKU27j8RifP2ujT4n+GtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4
ZDI1YTUwHhcNMjQwNTIwMTgwMDE3WhcNMjQwNTIxMTgwMDE3WjAzMTEwLwYDVQQD
EyhjNzk5MmI5OTI5OTllMjdkNGMzMDlmNGU2M2QyN2Q0OTdmYmNlOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugHghzls4h3zJEvk2VXPKRzyaEz9
JTN8hJNXlW3Dqt/fCzxCIGwagtHFt7BtAoylYT7zECe8eaeyRcniLahBdRUlRTiI
IGuyaLGsiB8kDbC3OiEKj3k6UGYcPOqtEYbytygRJEHmqKhf0NdR8O25BomUxxAt
xOCL27egQXgLAfXz8mOPMwnZzau6EqJU2SD4XAesz+1gX4SwJ64udyfOYrUkmHsW
De165F+nL9V2wO0aGTDZvq5SIyL1aW1VBhTF///mSW3KYwIpJPCJWfwd9VJoQsVD
Gt1+C1rLQH3OIt0ta01560fC3ZZMgA0NE9wUb6a+AeW2N8ZXAHPpmTDUUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeZK5kpmeJ9TDCfTmPSfUl/vOnrMB8GA1UdIwQY
MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt
MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi
LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDp6rvwg
/EnZvP8IQqB5KN4MhzZI2CDnH6Pc4BqmK6inlTXGDc87D+zGfRBZ/sA+mYPnoD/q
YfAx6YVNqASBf3POKBlkNw6VRoexXrENjH1uDfBF/2tJ+3UeHe6bCklH66u3Yp23
+H73x8JS9KQ77kWjPSLxEx9exT9OrSy6fYBQSn+XSmc4FE+tmFko9Oq2VT+v33o8
Ejq8FuQZzrJa9rD32hTVRUoY1rKG2oRDFZa6KPw8fUfTgjBYDNso05U/ktbuk3i8
azqLDPGfSjSx8W/1MvTVnbxRd5UXi8qSg9bc2hWV56oGZ1wK3ZV2QzkDX4KBEj1U
yYhN1uLHoI85og==
-----END CERTIFICATE-----
Generated at Mon May 20 19:24:30 2024 by rpki-client on console-fra.rpki-client.org