Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: Ywg03GbPHAatYqLNOI5q6ZD/V/p8xuPGfT9qDpTpuTw=
Subject key identifier: 36:63:2F:52:5F:56:39:CD:E0:64:9D:F5:A9:07:E9:40:86:78:69:E0
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 018F430CF568762E0321B27E71F4C22D1922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0935
Signing time: Sat 04 May 2024 10:01:13 +0000
Manifest this update: Sat 04 May 2024 10:01:13 +0000
Manifest next update: Sun 05 May 2024 10:01:13 +0000
Files and hashes: 1: 1F50zpOCWz9X76KA_7-SQFgbOP4.roa (hash: /sqQsN3K8TrhK/2WoEK2NC5tIDMFdQjN37Q1JMJKF40=)
2: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: WlJ9zfAB24a5zCm7K+DW7bQLXYjiN4rFGHCNiyZ1yuk=)
3: 84_xRs3tcY_TKuf4Z9MFqWqMnRE.roa (hash: 1+ofwM/2g/qfEEy0B++HQXax3JExhZTbc56xGRRVcVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:0c:f5:68:76:2e:03:21:b2:7e:71:f4:c2:2d:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: May 4 10:01:13 2024 GMT
Not After : May 5 10:01:13 2024 GMT
Subject: CN=36632f525f5639cde0649df5a907e940867869e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c1:3a:89:08:a9:b3:c4:f9:b8:da:0c:b2:
bb:20:da:18:88:43:0c:ef:1a:31:77:f4:b1:08:ae:
9e:f6:cb:bc:51:ba:07:4f:50:33:f7:b9:f2:1b:db:
ba:b6:ba:98:d5:58:58:43:63:b7:18:00:f7:f7:c9:
d1:77:3d:9a:ef:a9:70:e6:7e:5d:6f:4e:5c:2a:c0:
83:05:7e:f0:7a:6e:58:50:c8:84:2d:0e:c1:ea:70:
48:c3:92:41:a8:11:14:ae:fd:7c:cb:98:fc:4e:57:
72:de:3e:56:6c:21:fc:6a:97:6c:88:cd:25:68:96:
c0:80:74:ce:cc:ba:64:9c:cc:42:c3:a0:ba:fc:8b:
db:fb:3b:25:23:45:b7:04:cf:44:1d:a7:47:eb:6a:
ac:f3:d8:96:a6:3a:c0:77:23:6b:02:cd:80:d5:fa:
5d:78:d1:80:12:89:9e:98:b1:8d:66:2e:ad:71:ba:
59:28:85:aa:88:7b:b0:e1:5c:15:59:a8:e3:14:23:
8c:c5:3d:13:17:c0:ad:5c:48:a4:ab:45:b4:8d:4e:
10:51:f7:83:b0:a1:ec:43:ca:1f:4a:ce:46:9d:0d:
96:38:a1:d8:a0:b3:0a:fe:96:6f:67:af:f5:83:e1:
cc:c9:8a:c6:63:ed:56:90:c4:4f:c7:d4:83:bc:a3:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:2F:52:5F:56:39:CD:E0:64:9D:F5:A9:07:E9:40:86:78:69:E0
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:84:42:a4:e1:b3:43:6a:16:52:d6:27:55:9b:80:4c:04:
c2:6d:37:8f:09:bb:0a:37:98:6d:7a:1f:05:ec:82:41:ae:61:
b8:2a:52:ce:77:f2:a9:24:b1:d8:6a:b8:f1:ae:05:c2:bd:73:
69:49:6f:37:eb:ab:5e:69:b7:e7:0e:8c:75:23:3a:2a:4d:7e:
6c:95:7a:17:b1:78:ec:6d:5d:e0:3e:02:21:dd:2f:4e:df:52:
ad:f6:56:99:b0:0b:bf:be:60:6c:b9:d4:c5:ed:b6:1f:1f:87:
f3:cb:1b:f3:50:03:50:a2:00:8e:77:c7:1e:84:50:f9:40:36:
26:b0:d8:f6:db:8b:2a:43:c6:82:24:f3:b5:c3:2c:3b:51:e9:
e6:42:6a:1d:f8:46:3a:40:bb:11:a6:87:5d:c8:fa:cb:18:c8:
aa:1e:2d:74:eb:d1:21:31:88:dc:1a:7e:90:fb:69:f5:64:ed:
73:08:76:53:97:ec:aa:15:a2:ca:89:3a:97:2f:e5:2f:de:a4:
cf:c7:87:41:04:86:f2:42:fc:4e:99:fa:97:14:5c:7c:8e:03:
9b:c2:e9:6d:36:94:5a:d1:06:33:a8:1a:91:b5:da:76:5b:77:
92:e0:7e:39:cc:55:c2:6d:73:49:e4:db:f0:65:9d:ab:44:38:
cb:3e:90:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DDPVodi4DIbJ+cfTCLRkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjQwNTA0MTAwMTEzWhcNMjQwNTA1MTAwMTEzWjAzMTEwLwYDVQQD
EygzNjYzMmY1MjVmNTYzOWNkZTA2NDlkZjVhOTA3ZTk0MDg2Nzg2OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7bBOokIqbPE+bjaDLK7INoYiEMM
7xoxd/SxCK6e9su8UboHT1Az97nyG9u6trqY1VhYQ2O3GAD398nRdz2a76lw5n5d
b05cKsCDBX7wem5YUMiELQ7B6nBIw5JBqBEUrv18y5j8Tldy3j5WbCH8apdsiM0l
aJbAgHTOzLpknMxCw6C6/Ivb+zslI0W3BM9EHadH62qs89iWpjrAdyNrAs2A1fpd
eNGAEomemLGNZi6tcbpZKIWqiHuw4VwVWajjFCOMxT0TF8CtXEikq0W0jU4QUfeD
sKHsQ8ofSs5GnQ2WOKHYoLMK/pZvZ6/1g+HMyYrGY+1WkMRPx9SDvKPW7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZjL1JfVjnN4GSd9akH6UCGeGngMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTaEQqTh
s0NqFlLWJ1WbgEwEwm03jwm7CjeYbXofBeyCQa5huCpSznfyqSSx2Gq48a4Fwr1z
aUlvN+urXmm35w6MdSM6Kk1+bJV6F7F47G1d4D4CId0vTt9SrfZWmbALv75gbLnU
xe22Hx+H88sb81ADUKIAjnfHHoRQ+UA2JrDY9tuLKkPGgiTztcMsO1Hp5kJqHfhG
OkC7EaaHXcj6yxjIqh4tdOvRITGI3Bp+kPtp9WTtcwh2U5fsqhWiyok6ly/lL96k
z8eHQQSG8kL8Tpn6lxRcfI4Dm8LpbTaUWtEGM6gakbXadlt3kuB+OcxVwm1zSeTb
8GWdq0Q4yz6QFA==
-----END CERTIFICATE-----
Generated at Sat May 4 11:29:53 2024 by rpki-client on console-fra.rpki-client.org