Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: Ksd27rePRZeWQEStS1AleMsFUadSh5j4OxvJo6Qtp1Q=
Subject key identifier: 08:22:5E:B5:E0:E8:09:59:2F:11:51:BB:4B:1F:AF:C2:86:61:25:C1
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 018F45A29CBFB27A351CF92035C7454F21F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 10E9
Signing time: Sat 04 May 2024 22:03:55 +0000
Manifest this update: Sat 04 May 2024 22:03:55 +0000
Manifest next update: Sun 05 May 2024 22:03:55 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: o+oGZ0tKXhDfjkha2kOt5Hc+nF9wZ7E1VHCVzDK0AbE=)
2: JYGXULfvbcui9pHXWUg9Q7ZSr68.roa (hash: aK8ykfzhntBWZ6jsQK5N8rKXOe9HETpguVmArlvmrhU=)
3: gj0rhPuRH8j5fxrYyL6X73wIg54.roa (hash: EtGZJw9ZMgo1oqImeB6LRjLqkkL8+NBOTpHvq4nhE1U=)
4: otKuOrCHqCGuWhhqjXZc0xag20E.roa (hash: WCcAMuZ9IFXFybGMUJf4Z+22XtM/gncwSMkYkd1NbTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a2:9c:bf:b2:7a:35:1c:f9:20:35:c7:45:4f:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: May 4 22:03:55 2024 GMT
Not After : May 5 22:03:55 2024 GMT
Subject: CN=08225eb5e0e809592f1151bb4b1fafc2866125c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:dc:f1:3f:d9:9e:9c:fc:aa:ec:fd:5f:39:
59:4e:23:6a:aa:de:16:1a:fa:01:1a:3d:63:d0:b4:
fd:b8:b6:75:9b:ae:65:bf:df:c6:f8:06:c6:9c:92:
30:db:77:eb:98:a3:70:0a:46:70:99:f9:ea:a3:9b:
d8:ad:52:ec:5c:ac:2d:e7:16:c5:bd:f9:67:b5:29:
4b:5f:59:ea:21:11:84:11:d1:b2:d5:cb:bc:28:b0:
73:c6:ba:46:a0:da:50:f4:e1:2b:ff:70:c4:a2:5a:
40:99:4b:6b:cf:45:49:62:b3:0e:94:c8:01:c7:7a:
7e:9a:4a:19:92:75:bc:e6:50:b7:bb:2a:23:9f:82:
db:cc:77:7b:0e:95:31:f1:fc:a5:3d:2c:3d:78:3d:
4d:6a:ca:56:aa:04:b4:09:40:16:5e:7f:28:60:58:
67:4f:c8:e7:ea:fa:be:fd:05:74:55:bb:cd:dd:77:
df:0b:88:2e:85:85:d8:d0:46:08:f6:99:9d:ec:46:
00:57:3c:79:86:cb:c8:32:de:2c:63:e4:a0:51:dc:
a8:ee:0d:49:6d:c9:08:ca:2e:24:f8:69:4d:8e:e9:
a1:5a:69:82:96:7f:6c:d4:ad:f2:e9:95:21:9c:18:
1d:d0:19:fc:e3:37:25:ad:a1:c4:d8:01:5b:0c:da:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:5E:B5:E0:E8:09:59:2F:11:51:BB:4B:1F:AF:C2:86:61:25:C1
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:96:c7:61:34:65:dc:3f:e4:48:50:e2:a5:fd:67:7f:2b:2e:
39:b8:1e:ff:7e:fc:32:95:b0:38:05:17:37:2c:23:5a:8b:60:
e0:53:5c:f8:55:c3:af:1b:89:2d:de:41:4f:07:7b:2f:6c:13:
19:8d:8c:6d:e0:63:a2:2b:ef:e9:25:09:81:2e:c6:f7:73:80:
13:f5:12:0f:3b:78:46:16:df:9a:fb:6a:20:83:9e:e2:14:ff:
e0:48:b4:a7:a6:22:c1:dc:21:aa:c7:71:e5:d5:45:1d:5f:e6:
46:ba:47:86:e7:67:29:4e:0f:fc:5b:27:ce:e2:38:3d:7b:65:
dd:10:55:27:0e:44:f7:10:85:a1:80:4c:df:c6:cf:ec:39:82:
0e:04:eb:54:aa:98:10:1e:5c:68:32:3e:4d:17:d5:b1:b1:61:
ed:af:42:7e:b0:67:5f:31:08:5b:ad:8e:1c:b4:8a:4d:66:b2:
3b:50:dc:2c:6f:4f:49:4d:f3:df:01:52:a5:11:08:6d:0b:c2:
8b:78:fc:e4:3a:81:e9:df:ca:2d:2a:a6:68:3d:36:b1:ce:4c:
42:8d:fc:b4:6c:ad:1b:ef:05:42:1e:ea:ae:e2:76:99:9a:b0:
32:fa:47:6c:9b:61:6b:86:37:cb:91:37:05:84:21:93:0a:43:
1a:8c:9e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Fopy/sno1HPkgNcdFTyH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjQwNTA0MjIwMzU1WhcNMjQwNTA1MjIwMzU1WjAzMTEwLwYDVQQD
EygwODIyNWViNWUwZTgwOTU5MmYxMTUxYmI0YjFmYWZjMjg2NjEyNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcrc8T/Znpz8quz9XzlZTiNqqt4W
GvoBGj1j0LT9uLZ1m65lv9/G+AbGnJIw23frmKNwCkZwmfnqo5vYrVLsXKwt5xbF
vflntSlLX1nqIRGEEdGy1cu8KLBzxrpGoNpQ9OEr/3DEolpAmUtrz0VJYrMOlMgB
x3p+mkoZknW85lC3uyojn4LbzHd7DpUx8fylPSw9eD1NaspWqgS0CUAWXn8oYFhn
T8jn6vq+/QV0VbvN3XffC4guhYXY0EYI9pmd7EYAVzx5hsvIMt4sY+SgUdyo7g1J
bckIyi4k+GlNjumhWmmCln9s1K3y6ZUhnBgd0Bn84zclraHE2AFbDNpNTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgiXrXg6AlZLxFRu0sfr8KGYSXBMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpbHYTRl
3D/kSFDipf1nfysuObge/378MpWwOAUXNywjWotg4FNc+FXDrxuJLd5BTwd7L2wT
GY2MbeBjoivv6SUJgS7G93OAE/USDzt4RhbfmvtqIIOe4hT/4Ei0p6Yiwdwhqsdx
5dVFHV/mRrpHhudnKU4P/FsnzuI4PXtl3RBVJw5E9xCFoYBM38bP7DmCDgTrVKqY
EB5caDI+TRfVsbFh7a9CfrBnXzEIW62OHLSKTWayO1DcLG9PSU3z3wFSpREIbQvC
i3j85DqB6d/KLSqmaD02sc5MQo38tGytG+8FQh7qruJ2mZqwMvpHbJtha4Y3y5E3
BYQhkwpDGoyeuA==
-----END CERTIFICATE-----
Generated at Sun May 5 06:31:05 2024 by rpki-client on console-fra.rpki-client.org