Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: ao5FI0jsY5tnqsVvFLgLfwYiNEUDvOoKKqqnYhvpXRY=
Subject key identifier: 27:3A:C1:75:B0:3B:50:36:9C:4C:D1:2A:93:A3:EF:42:2E:B9:36:B3
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 019074D300320509477C68DE51C5914129F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 11F3
Signing time: Tue 02 Jul 2024 19:01:43 +0000
Manifest this update: Tue 02 Jul 2024 19:01:43 +0000
Manifest next update: Wed 03 Jul 2024 19:01:43 +0000
Files and hashes: 1: VS0gO8BOasj_0bGzBIye2YhBZBY.roa (hash: V/mV3LCECrL2e4nzeSLwmMwd8ebPkM0DWMkmbNr1zKI=)
2: roXuBj2F3PMj9MvAMYEF0qrBBII.roa (hash: xU6/6565AtMws03BatqK6ZswgYcYPbC74rziwHcRmGE=)
3: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: xQZ2Xb9KXTZI6VjpqFs2OX9Bryus3LrIfzr63LL90Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:d3:00:32:05:09:47:7c:68:de:51:c5:91:41:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Jul 2 19:01:43 2024 GMT
Not After : Jul 3 19:01:43 2024 GMT
Subject: CN=273ac175b03b50369c4cd12a93a3ef422eb936b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:2e:ef:dd:e9:8c:9b:99:49:78:44:57:d0:
05:88:ce:b7:3e:be:6f:f5:b7:94:13:8c:2f:d2:3e:
03:64:26:62:0f:69:c2:dd:ff:c8:88:af:16:89:e4:
c9:a9:72:80:5a:c4:32:ae:62:1e:10:a6:79:4e:08:
0e:b8:c8:95:82:c5:39:2a:2f:95:49:35:13:a2:d7:
8a:ea:6c:96:b1:c3:55:1e:fb:3d:03:9a:0e:45:65:
16:12:df:fc:ef:5f:f9:33:89:b9:78:36:b1:58:c6:
f6:b1:57:35:b8:d0:8c:ae:9b:60:6e:6c:dd:ef:84:
99:64:9c:ce:f6:b8:72:3f:f0:4c:ce:9c:2b:29:fb:
c1:c4:3e:dc:37:ba:37:7f:25:79:21:fa:08:92:ba:
1e:a0:ad:c1:92:0f:41:ee:55:bc:44:51:04:b5:99:
fc:1f:39:9d:6d:30:1a:5b:68:5c:70:d3:3c:52:d4:
1c:20:22:25:a0:5a:eb:f8:f0:e7:97:bc:ef:35:9f:
6e:b6:a0:f5:40:cd:72:2f:20:a2:0f:33:25:21:cf:
dc:e3:75:b0:04:8e:d7:71:9e:0c:fd:82:dd:11:7a:
31:5e:bb:2b:33:4f:4e:0a:c6:5e:dc:fb:11:59:4c:
f4:5b:c0:79:24:12:9e:d9:d2:0d:fd:bf:24:67:7e:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3A:C1:75:B0:3B:50:36:9C:4C:D1:2A:93:A3:EF:42:2E:B9:36:B3
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:c3:e0:99:db:f0:d0:65:f5:94:e2:e2:8b:7f:53:23:50:
91:52:6b:65:12:99:b4:a9:30:26:6e:34:b7:c3:53:69:3b:65:
78:0c:8a:f0:23:d3:af:da:cd:83:27:c1:b6:0d:6f:dd:d7:68:
58:80:fa:8b:2b:21:37:ed:f5:8a:2e:c5:3b:e1:70:5f:df:ed:
04:31:34:b2:8c:a9:d9:22:b3:62:2d:74:25:8d:2a:9d:ad:b4:
89:2f:ae:56:1c:37:14:86:d4:72:03:ab:87:c5:7e:b7:92:ae:
e3:0c:2c:96:12:0a:f1:e2:45:a8:d5:25:22:67:9d:01:dc:4b:
f4:e0:d2:d2:b8:ae:86:ff:36:09:26:e6:af:ae:58:46:33:59:
0a:1f:da:ad:75:41:18:02:3c:4c:f7:46:67:5e:63:ba:85:39:
98:2a:16:1d:6e:e2:63:84:86:02:ca:bc:ed:a5:93:18:9d:0d:
b4:46:04:da:5d:96:9e:b7:92:3f:c6:49:92:ec:5c:ee:13:7b:
4a:2e:62:2d:9b:2f:ad:cd:84:e8:26:35:22:86:70:88:ab:2f:
e0:c2:0a:64:d3:af:ff:d9:2f:d1:ac:89:47:26:75:e5:2f:6f:
8d:df:e0:da:b0:52:44:aa:45:ef:de:14:8d:0f:25:3c:21:64:
93:61:aa:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZB00wAyBQlHfGjeUcWRQSn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh
ZjgwNGQwHhcNMjQwNzAyMTkwMTQzWhcNMjQwNzAzMTkwMTQzWjAzMTEwLwYDVQQD
EygyNzNhYzE3NWIwM2I1MDM2OWM0Y2QxMmE5M2EzZWY0MjJlYjkzNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Mu793pjJuZSXhEV9AFiM63Pr5v
9beUE4wv0j4DZCZiD2nC3f/IiK8WieTJqXKAWsQyrmIeEKZ5TggOuMiVgsU5Ki+V
STUToteK6myWscNVHvs9A5oORWUWEt/871/5M4m5eDaxWMb2sVc1uNCMrptgbmzd
74SZZJzO9rhyP/BMzpwrKfvBxD7cN7o3fyV5IfoIkroeoK3Bkg9B7lW8RFEEtZn8
HzmdbTAaW2hccNM8UtQcICIloFrr+PDnl7zvNZ9utqD1QM1yLyCiDzMlIc/c43Ww
BI7XcZ4M/YLdEXoxXrsrM09OCsZe3PsRWUz0W8B5JBKe2dIN/b8kZ35E6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc6wXWwO1A2nEzRKpOj70IuuTazMB8GA1UdIwQY
MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt
MzZmZDIzMzUxNGY5LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5
LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6/D4Jnb
8NBl9ZTi4ot/UyNQkVJrZRKZtKkwJm40t8NTaTtleAyK8CPTr9rNgyfBtg1v3ddo
WID6iyshN+31ii7FO+FwX9/tBDE0soyp2SKzYi10JY0qna20iS+uVhw3FIbUcgOr
h8V+t5Ku4wwslhIK8eJFqNUlImedAdxL9ODS0riuhv82CSbmr65YRjNZCh/arXVB
GAI8TPdGZ15juoU5mCoWHW7iY4SGAsq87aWTGJ0NtEYE2l2WnreSP8ZJkuxc7hN7
Si5iLZsvrc2E6CY1IoZwiKsv4MIKZNOv/9kv0ayJRyZ15S9vjd/g2rBSRKpF794U
jQ8lPCFkk2GqSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 21:30:18 2024 by rpki-client on console-ams.rpki-client.org