Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: xqFirT2NWVZUPgfxdNd0Jo1epYjOa1/GT9RMJJ7eV54=
Subject key identifier: BA:44:C6:6F:FF:D5:28:F7:57:4D:52:3E:65:9B:F0:66:38:7C:00:15
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 018F87ED3D99DD5DD22478767B7413218E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 117C
Signing time: Fri 17 May 2024 19:00:22 +0000
Manifest this update: Fri 17 May 2024 19:00:22 +0000
Manifest next update: Sat 18 May 2024 19:00:22 +0000
Files and hashes: 1: y_hkAEXEzVup9N_jtoDogHEzl1E.roa (hash: gtJYbb0wyrFQ5wYi2CRJinlHC18eHqkvEm9XIQkvbLE=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: BA12UPuQsIH+d+esU7+CVST2ritfc5HlpDhJQRzb7IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:3d:99:dd:5d:d2:24:78:76:7b:74:13:21:8e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: May 17 19:00:22 2024 GMT
Not After : May 18 19:00:22 2024 GMT
Subject: CN=ba44c66fffd528f7574d523e659bf066387c0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:e7:a1:a5:7a:78:2c:a6:4b:ce:e0:eb:5b:
98:64:1d:4e:32:45:2d:ac:39:50:59:d9:c2:ff:ed:
7a:be:60:f2:84:9c:61:ef:30:a0:38:29:a2:d6:bd:
ed:f2:30:ba:8f:3c:ad:f9:8e:a2:9d:5c:7a:3b:6a:
82:09:02:7b:3b:dc:52:8e:ee:f9:79:83:9c:1c:d8:
70:cc:9a:54:59:58:b0:e1:01:09:78:d1:9f:e9:38:
50:c7:51:a1:7b:ff:d7:0e:30:37:71:4c:1d:29:40:
17:71:66:a7:31:cf:0a:d4:bc:f8:c6:fb:05:c9:92:
d6:d7:90:7c:19:dc:aa:f0:99:47:ea:64:ff:f6:c8:
9c:00:34:d0:67:e9:7e:70:4d:4f:83:f8:51:29:8a:
dd:e7:ca:78:4f:c6:35:3a:b0:fe:cc:8b:71:dc:1d:
6e:40:e3:94:d6:9f:d0:ab:40:77:5a:74:13:5c:3e:
bd:92:92:19:46:4a:c1:2f:6b:db:d3:65:48:8a:20:
66:16:5e:c0:4f:8a:cf:9a:5a:6f:3e:2b:b9:ff:a5:
19:c4:7d:b0:f3:a3:80:75:83:e0:58:e5:8b:3f:6c:
4d:40:80:6f:53:dc:5e:a0:eb:67:62:c4:bf:47:1f:
77:5a:a8:e5:3b:c8:14:59:17:f4:5c:28:cd:cb:1b:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:C6:6F:FF:D5:28:F7:57:4D:52:3E:65:9B:F0:66:38:7C:00:15
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:79:2b:6e:ec:d5:00:36:15:42:ed:70:70:c8:c5:fe:0d:51:
4a:b0:4d:dd:60:f1:6b:93:37:47:cc:65:d8:ab:50:b3:56:ec:
27:63:79:f2:ea:fb:8a:5e:67:2c:b1:72:3f:fe:48:09:2c:b9:
96:43:84:92:b9:09:20:40:0f:2a:81:92:ff:6d:f2:8b:b9:81:
0e:57:e0:01:5d:66:e1:59:d1:57:5d:32:d9:54:b7:fe:bf:37:
92:81:53:7e:87:a5:3b:1f:c8:b9:8c:94:2b:f8:bb:0c:e3:2f:
1f:34:8d:7c:f4:3b:10:97:3a:2b:14:1f:8f:78:36:eb:8e:1f:
81:1e:9b:29:39:81:72:0e:d4:2e:1e:a1:b2:fd:ed:ad:f1:99:
f5:3f:3d:c3:bd:dd:8d:6b:6e:cd:70:94:76:51:cf:a3:8a:b6:
92:5f:7d:49:62:2c:d9:b5:8f:41:dc:ab:c8:dd:36:9a:58:64:
1d:60:64:c0:aa:08:7a:fe:21:ef:08:cd:1d:d9:2c:e0:27:51:
dc:6f:bd:ae:22:9a:e2:5c:a3:df:43:01:f4:ff:27:9f:53:f6:
1e:02:e2:d0:aa:32:c2:26:54:45:d8:3f:48:b1:05:b1:fb:90:
d1:86:91:4a:39:a4:19:ec:24:f3:4b:20:3e:b8:6f:f6:c2:21:
67:c3:17:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7T2Z3V3SJHh2e3QTIY4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2FiOGM5ZDIxN2FjMzA3OWMzMDE0YjE4ZDQ0NmUyMTNm
MTk0OTIwHhcNMjQwNTE3MTkwMDIyWhcNMjQwNTE4MTkwMDIyWjAzMTEwLwYDVQQD
EyhiYTQ0YzY2ZmZmZDUyOGY3NTc0ZDUyM2U2NTliZjA2NjM4N2MwMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9rnoaV6eCymS87g61uYZB1OMkUt
rDlQWdnC/+16vmDyhJxh7zCgOCmi1r3t8jC6jzyt+Y6inVx6O2qCCQJ7O9xSju75
eYOcHNhwzJpUWViw4QEJeNGf6ThQx1Ghe//XDjA3cUwdKUAXcWanMc8K1Lz4xvsF
yZLW15B8Gdyq8JlH6mT/9sicADTQZ+l+cE1Pg/hRKYrd58p4T8Y1OrD+zItx3B1u
QOOU1p/Qq0B3WnQTXD69kpIZRkrBL2vb02VIiiBmFl7AT4rPmlpvPiu5/6UZxH2w
86OAdYPgWOWLP2xNQIBvU9xeoOtnYsS/Rx93WqjlO8gUWRf0XCjNyxuizwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpExm//1Sj3V01SPmWb8GY4fAAVMB8GA1UdIwQY
MBaAFM/KuMnSF6wwecMBSxjURuIT8ZSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2Yt
NDQ1NDAwZDcwM2M4LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2YtNDQ1NDAwZDcwM2M4
LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHkrbuzV
ADYVQu1wcMjF/g1RSrBN3WDxa5M3R8xl2KtQs1bsJ2N58ur7il5nLLFyP/5ICSy5
lkOEkrkJIEAPKoGS/23yi7mBDlfgAV1m4VnRV10y2VS3/r83koFTfoelOx/IuYyU
K/i7DOMvHzSNfPQ7EJc6KxQfj3g2644fgR6bKTmBcg7ULh6hsv3trfGZ9T89w73d
jWtuzXCUdlHPo4q2kl99SWIs2bWPQdyryN02mlhkHWBkwKoIev4h7wjNHdks4CdR
3G+9riKa4lyj30MB9P8nn1P2HgLi0KoywiZURdg/SLEFsfuQ0YaRSjmkGewk80sg
Prhv9sIhZ8MXCg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:57:56 2024 by rpki-client on console-fra.rpki-client.org