Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
File: sof_KnM-M76vU0lKkO7BUrvHWLw.mft (raw, json)
Hash identifier: 6PYhrH1vCiLSO74ZnYG0Vo0raxFL3LzWEfsIQs2cTbc=
Subject key identifier: 11:26:8F:CA:56:EB:C6:0E:43:76:85:28:B2:E6:7B:54:82:BB:FD:04
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 01904B9FDD8EAAD1FF7608E0026EBFB7ECDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
Manifest number: 10FB
Signing time: Mon 24 Jun 2024 19:01:26 +0000
Manifest this update: Mon 24 Jun 2024 19:01:26 +0000
Manifest next update: Tue 25 Jun 2024 19:01:26 +0000
Files and hashes: 1: 5CQStpCUSk0ZfZpfFcrWgicKBt8.roa (hash: fECfcykV0j3rVFPF433Y4LD2pnpbCe0Q8dT3lDc1NPc=)
2: KdqdPrriyweC3-NSKW4hbKsIqcI.roa (hash: HGlVdWMm0vaue79SELHpdyurYMlkV4BZNA2iiB5r9Gw=)
3: sof_KnM-M76vU0lKkO7BUrvHWLw.crl (hash: 9Uegp7PAwd28AiZKxyyZDjI9qUqiDNk9XBZny8oaTC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:9f:dd:8e:aa:d1:ff:76:08:e0:02:6e:bf:b7:ec:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: Jun 24 19:01:26 2024 GMT
Not After : Jun 25 19:01:26 2024 GMT
Subject: CN=11268fca56ebc60e43768528b2e67b5482bbfd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:42:e7:58:10:cc:75:25:51:17:53:47:76:
bf:f6:9f:87:e7:01:66:ba:d7:a2:22:83:1d:30:73:
5c:d7:e5:e9:0b:01:40:c9:d8:03:d7:ed:00:01:7e:
3b:cf:36:0b:d3:f4:6e:e9:02:3a:81:47:09:4c:c0:
22:4b:6c:85:a9:66:68:71:8a:52:8a:2a:11:92:d6:
88:1a:33:7f:7a:a4:a9:8e:16:df:11:d3:63:27:b2:
36:2c:de:81:7c:97:1f:cd:58:cd:a1:ad:c7:c1:85:
98:aa:e5:8c:63:4a:39:1a:df:2b:89:ef:e8:aa:3f:
12:3c:83:f0:d3:0d:8b:33:4f:ca:d8:c3:2c:48:17:
89:a4:57:fa:9c:b4:90:fc:fc:66:c9:26:82:74:17:
6a:fa:6e:88:79:71:6c:01:73:1c:a3:81:56:d9:14:
80:3f:81:f1:2e:c9:db:de:1c:e1:bf:8f:76:3d:bc:
fa:90:46:fa:19:da:37:73:3d:37:ea:02:c4:fa:4c:
96:2d:1d:f9:6a:a1:39:a9:f4:83:9c:65:53:18:6d:
15:cc:42:b3:28:b5:4c:93:81:aa:fc:0d:84:e9:d4:
23:2d:7c:9d:fc:20:4c:b0:06:9f:d5:ba:ae:4a:af:
6d:cb:71:0d:72:b3:92:6f:52:66:c3:ab:f8:8b:52:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:8F:CA:56:EB:C6:0E:43:76:85:28:B2:E6:7B:54:82:BB:FD:04
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:eb:dc:61:24:61:de:86:52:8b:2e:43:62:32:b8:34:01:
24:d4:c2:2c:f7:dd:f7:4d:83:66:db:11:00:08:57:04:6b:ea:
a9:0a:f7:14:58:2b:9b:27:68:54:52:f7:7d:9b:50:1b:de:3f:
e3:71:31:e0:03:19:47:0f:ff:8f:65:fc:8d:6a:e9:12:3a:7e:
aa:8e:7a:4d:d5:76:b6:9c:02:74:60:c2:2c:df:5f:da:3c:ff:
b0:01:3c:c7:f8:8f:07:d8:51:d2:09:46:48:c6:c2:de:f4:c6:
c2:64:c4:ca:fc:2f:53:4d:41:ab:3b:a1:3a:0a:a5:7c:91:d5:
88:15:af:2a:ee:47:b2:c1:7f:b1:5f:ab:18:91:98:cd:78:75:
d7:f3:aa:9c:54:ab:2c:da:4f:03:41:fe:6f:25:7e:13:6e:61:
bc:7b:00:d9:6f:93:71:95:b0:a2:4a:c7:71:2a:87:61:2c:de:
85:e7:39:a7:6c:27:09:dc:47:a2:9a:4c:b6:18:99:e1:cc:85:
24:42:79:70:c9:03:9c:3e:87:5d:85:1a:e7:f6:b4:d0:0a:ba:
11:c5:a0:e6:2f:4a:b7:1d:d9:15:b0:9b:2b:f4:0e:97:e7:00:
c8:5b:fd:3c:e6:af:cb:66:9c:32:6c:79:1e:30:5c:2d:7c:fb:
12:f2:2b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBLn92OqtH/dgjgAm6/t+zaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODdmZjJhNzMzZTMzYmVhZjUzNDk0YTkwZWVjMTUyYmJj
NzU4YmMwHhcNMjQwNjI0MTkwMTI2WhcNMjQwNjI1MTkwMTI2WjAzMTEwLwYDVQQD
EygxMTI2OGZjYTU2ZWJjNjBlNDM3Njg1MjhiMmU2N2I1NDgyYmJmZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkBC51gQzHUlURdTR3a/9p+H5wFm
uteiIoMdMHNc1+XpCwFAydgD1+0AAX47zzYL0/Ru6QI6gUcJTMAiS2yFqWZocYpS
iioRktaIGjN/eqSpjhbfEdNjJ7I2LN6BfJcfzVjNoa3HwYWYquWMY0o5Gt8rie/o
qj8SPIPw0w2LM0/K2MMsSBeJpFf6nLSQ/PxmySaCdBdq+m6IeXFsAXMco4FW2RSA
P4HxLsnb3hzhv492Pbz6kEb6Gdo3cz036gLE+kyWLR35aqE5qfSDnGVTGG0VzEKz
KLVMk4Gq/A2E6dQjLXyd/CBMsAaf1bquSq9ty3ENcrOSb1Jmw6v4i1LPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEmj8pW68YOQ3aFKLLme1SCu/0EMB8GA1UdIwQY
MBaAFLKH/ypzPjO+r1NJSpDuwVK7x1i8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYt
NGY1ZWMwYTdlMDA2LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYjIxNTEtMDVjYS00YTc2LTg1OWYtNGY1ZWMwYTdlMDA2
LzEvc29mX0tuTS1NNzZ2VTBsS2tPN0JVcnZIV0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczrr3GEk
Yd6GUosuQ2IyuDQBJNTCLPfd902DZtsRAAhXBGvqqQr3FFgrmydoVFL3fZtQG94/
43Ex4AMZRw//j2X8jWrpEjp+qo56TdV2tpwCdGDCLN9f2jz/sAE8x/iPB9hR0glG
SMbC3vTGwmTEyvwvU01BqzuhOgqlfJHViBWvKu5HssF/sV+rGJGYzXh11/OqnFSr
LNpPA0H+byV+E25hvHsA2W+TcZWwokrHcSqHYSzehec5p2wnCdxHoppMthiZ4cyF
JEJ5cMkDnD6HXYUa5/a00Aq6EcWg5i9Ktx3ZFbCbK/QOl+cAyFv9POavy2acMmx5
HjBcLXz7EvIreQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 03:53:10 2024 by rpki-client on console-fra.rpki-client.org