Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
File: 3Nuge59wvV7OGwI16izIytYS7cI.mft (raw, json)
Hash identifier: fJnnUFcJA6b0Gd0rfBkTO04bzSkpnG6av91nGqkx53w=
Subject key identifier: C9:AB:6B:3F:31:17:95:E8:9E:36:A6:F4:36:4B:55:4E:82:C1:03:E0
Authority key identifier: DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
Certificate issuer: /CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Certificate serial: 018F29BA8A762E15CACAB77148278541BC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
Manifest number: 1086
Signing time: Mon 29 Apr 2024 12:00:41 +0000
Manifest this update: Mon 29 Apr 2024 12:00:41 +0000
Manifest next update: Tue 30 Apr 2024 12:00:41 +0000
Files and hashes: 1: 1COTyKQo3hdhvLiMU4WcrbCNaAw.roa (hash: GQRxnMIDQNWvybE0RqU/hS3HSz689Ao7kjlT7htki+0=)
2: 3Nuge59wvV7OGwI16izIytYS7cI.crl (hash: CqsUfm79bTfSxB8an8gNNrO68Q+fFxoV2zdY8EBr04I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:ba:8a:76:2e:15:ca:ca:b7:71:48:27:85:41:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Validity
Not Before: Apr 29 12:00:41 2024 GMT
Not After : Apr 30 12:00:41 2024 GMT
Subject: CN=c9ab6b3f311795e89e36a6f4364b554e82c103e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:c7:5b:b2:e2:19:b8:5c:3a:90:60:00:ee:
67:77:ce:37:f3:09:18:f9:1b:e6:8f:b1:20:c7:83:
bf:35:3c:9c:73:48:f4:b9:48:22:ca:51:6c:67:20:
82:64:77:f2:d7:f6:83:b0:f5:d4:eb:5d:55:63:3b:
cb:78:42:db:f1:2c:6f:ab:59:4f:de:4f:87:cb:33:
c0:56:33:b9:44:ab:fc:b7:93:19:62:45:ef:90:f5:
39:3d:78:c8:c5:aa:e3:03:18:a6:ff:d2:e0:d1:fb:
1e:d7:de:e2:b9:2d:dd:cc:be:cd:90:13:c3:04:d9:
78:d7:ea:a7:4c:7c:61:be:03:9a:83:a8:ba:83:cd:
56:de:a7:67:b8:c1:b7:44:02:54:30:fc:04:d4:00:
17:33:89:ab:be:80:9c:58:47:ad:7f:a5:b1:49:f3:
19:5a:e0:c1:7a:95:98:8b:5b:f9:ae:81:37:f2:7b:
7e:0c:e7:12:db:e2:39:6f:44:08:2d:1d:9d:f9:22:
94:e1:40:c3:56:21:55:1a:15:f9:fc:d5:7e:fa:c1:
35:d0:d1:de:b1:42:7b:4a:2b:cc:b0:33:ae:6a:1c:
5b:b0:70:18:9a:43:ea:af:71:79:17:22:a6:ae:8d:
e7:7e:86:05:d1:4f:a0:63:67:92:a5:3a:46:bd:a2:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:6B:3F:31:17:95:E8:9E:36:A6:F4:36:4B:55:4E:82:C1:03:E0
X509v3 Authority Key Identifier:
keyid:DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:52:ed:4e:61:3f:65:6c:fa:d2:d1:57:17:b1:63:63:60:
57:9f:07:8d:89:66:e0:e5:70:fe:ec:ba:87:c6:36:47:1e:de:
4e:7d:6f:e9:6f:e1:f5:3c:95:7b:a8:63:dc:d0:b7:5a:73:8b:
62:ec:21:4d:ba:82:65:be:27:10:47:d7:4e:a0:ca:9a:10:2c:
3a:8b:00:de:2a:7c:84:1f:97:05:db:0c:96:94:34:6b:70:da:
c7:63:95:4d:73:15:63:6a:b9:4b:97:b8:67:24:60:53:1a:af:
33:14:51:92:9b:94:df:23:93:1e:fa:fc:3b:b0:59:1f:32:23:
eb:43:b6:70:6b:99:38:55:7e:a5:43:87:11:3d:4e:6e:ff:8e:
f9:63:11:20:0d:7d:48:d5:50:d7:41:38:52:d9:dd:c9:63:71:
6d:17:05:45:32:e4:97:f7:df:29:08:50:2d:75:63:29:0d:ec:
0e:52:3f:92:82:09:97:9b:ac:48:4e:40:27:31:ad:ae:50:01:
a9:ad:48:bb:db:4e:c5:53:bc:64:4e:2f:4e:b1:10:55:50:ea:
a6:16:eb:1c:c9:4c:fc:a4:91:f4:31:da:ac:17:45:0c:12:58:
cd:29:cd:e3:5b:75:b9:ec:b2:f3:98:c5:01:48:50:37:da:af:
84:91:17:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8puop2LhXKyrdxSCeFQbxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGJhMDdiOWY3MGJkNWVjZTFiMDIzNWVhMmNjOGNhZDYx
MmVkYzIwHhcNMjQwNDI5MTIwMDQxWhcNMjQwNDMwMTIwMDQxWjAzMTEwLwYDVQQD
EyhjOWFiNmIzZjMxMTc5NWU4OWUzNmE2ZjQzNjRiNTU0ZTgyYzEwM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpzHW7LiGbhcOpBgAO5nd8438wkY
+Rvmj7Egx4O/NTycc0j0uUgiylFsZyCCZHfy1/aDsPXU611VYzvLeELb8Sxvq1lP
3k+HyzPAVjO5RKv8t5MZYkXvkPU5PXjIxarjAxim/9Lg0fse197iuS3dzL7NkBPD
BNl41+qnTHxhvgOag6i6g81W3qdnuMG3RAJUMPwE1AAXM4mrvoCcWEetf6WxSfMZ
WuDBepWYi1v5roE38nt+DOcS2+I5b0QILR2d+SKU4UDDViFVGhX5/NV++sE10NHe
sUJ7SivMsDOuahxbsHAYmkPqr3F5FyKmro3nfoYF0U+gY2eSpTpGvaJsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmraz8xF5Xonjam9DZLVU6CwQPgMB8GA1UdIwQY
MBaAFNzboHufcL1ezhsCNeosyMrWEu3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM051Z2U1OXd2VjdPR3dJMTZpekl5dFlTN2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xM2FiYzQtZDEzNy00ODkwLTljM2Mt
YTRiN2UzNDgzOTE5LzEvM051Z2U1OXd2VjdPR3dJMTZpekl5dFlTN2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xM2FiYzQtZDEzNy00ODkwLTljM2MtYTRiN2UzNDgzOTE5
LzEvM051Z2U1OXd2VjdPR3dJMTZpekl5dFlTN2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACThS7U5h
P2Vs+tLRVxexY2NgV58HjYlm4OVw/uy6h8Y2Rx7eTn1v6W/h9TyVe6hj3NC3WnOL
YuwhTbqCZb4nEEfXTqDKmhAsOosA3ip8hB+XBdsMlpQ0a3Dax2OVTXMVY2q5S5e4
ZyRgUxqvMxRRkpuU3yOTHvr8O7BZHzIj60O2cGuZOFV+pUOHET1Obv+O+WMRIA19
SNVQ10E4UtndyWNxbRcFRTLkl/ffKQhQLXVjKQ3sDlI/koIJl5usSE5AJzGtrlAB
qa1Iu9tOxVO8ZE4vTrEQVVDqphbrHMlM/KSR9DHarBdFDBJYzSnN41t1ueyy85jF
AUhQN9qvhJEXKg==
-----END CERTIFICATE-----
Generated at Mon Apr 29 13:30:46 2024 by rpki-client on console-ams.rpki-client.org