Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: 8VGV8c9FEJKeY13XaoESzKciXITQ/7K1V7aw8m6dMCI=
Subject key identifier: 0B:43:33:61:9E:FF:B9:5C:96:E2:23:01:60:F6:A5:06:AE:28:B0:24
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 018F478F6CF7A6D8CA76CF8F18435A660F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0516
Signing time: Sun 05 May 2024 07:02:12 +0000
Manifest this update: Sun 05 May 2024 07:02:12 +0000
Manifest next update: Mon 06 May 2024 07:02:12 +0000
Files and hashes: 1: 5cTGvNkv-hG7orBR_NL5wKzDDcU.roa (hash: 0FlJ3tUbnzFOJhYbLPNeQUv40XqJNb1wxmCmYIk/HGs=)
2: Agk2D06VqRUbO7v0GpJ_JkYYb4M.roa (hash: O6WPtMiOK2SOTXUmqCXkXb9yRh+TDpKF9+wILtvrvfU=)
3: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: u0ybuelMcrBi3V0sLJq716GwaatC+RZcfPQtO7Hws5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:8f:6c:f7:a6:d8:ca:76:cf:8f:18:43:5a:66:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: May 5 07:02:12 2024 GMT
Not After : May 6 07:02:12 2024 GMT
Subject: CN=0b4333619effb95c96e2230160f6a506ae28b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:af:a8:44:61:b7:12:5f:2a:1f:6f:b2:b3:
ae:ef:7f:c1:99:ec:19:57:da:ab:97:57:2f:10:c6:
0f:3b:6a:93:ae:72:e3:3f:eb:6c:6f:95:79:58:76:
70:05:33:1f:cd:2d:bc:47:30:6c:80:9d:4d:6c:e7:
6a:50:4f:7d:2b:d7:2e:b5:a6:aa:ab:b5:2f:4a:af:
2f:9f:d5:47:b7:d5:f4:ee:7e:5d:e3:55:84:6d:fa:
f8:0f:04:35:06:d7:eb:1c:74:e8:43:95:5c:94:f1:
60:76:63:6a:f0:1a:0c:0d:7a:d5:87:a1:92:dd:6f:
7a:8f:e3:9c:0c:c2:64:48:e3:39:51:1f:24:2a:3c:
b2:30:45:f7:71:82:fb:5f:ed:a4:a2:a1:08:4d:a1:
75:cb:ec:47:58:e9:ab:b1:9c:00:60:10:3b:9c:98:
6b:49:90:7b:70:35:ce:b7:01:80:0e:8e:17:7c:94:
c5:ef:cc:c9:27:bb:8d:1d:5e:7b:52:78:3f:f0:1a:
1b:02:e5:81:e0:c7:95:c6:1d:a0:29:f4:2b:d8:63:
82:f3:1e:c8:40:f8:68:d5:8e:29:9b:a7:ee:8c:c8:
90:b5:84:fc:ef:c3:78:49:5a:f0:ec:21:cb:05:fd:
2a:17:1d:de:08:ef:f2:78:f8:f3:bb:a4:57:ba:08:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:33:61:9E:FF:B9:5C:96:E2:23:01:60:F6:A5:06:AE:28:B0:24
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:73:eb:1d:35:d8:05:78:a6:d2:05:09:98:d2:d1:77:77:68:
8c:58:15:b7:87:36:8a:05:a8:70:7e:c7:44:7d:ba:89:87:16:
cb:3f:35:3c:41:41:fd:c7:b1:32:01:83:f5:0b:c3:ae:a0:ce:
de:f2:cc:a6:6a:41:65:2b:c5:11:2b:6f:5e:a4:d3:61:6d:92:
1d:d3:eb:a6:7e:c7:34:7e:f3:69:9b:35:e1:23:77:73:62:9f:
c2:ea:3b:8c:9d:cc:76:09:97:90:2a:d0:1e:49:03:f0:13:5a:
37:93:e1:80:de:05:e2:11:3c:fa:7c:03:f5:71:28:ea:f6:ad:
b2:fb:d4:25:39:cc:33:be:ed:4e:cb:be:88:15:33:3d:4a:a7:
ee:bc:01:85:58:db:79:fd:b2:bc:73:e6:bf:f5:dd:74:0f:76:
2f:ec:38:9e:c0:e8:2d:cd:21:dd:9e:ed:bd:00:df:19:3e:27:
d4:df:90:a2:3d:f0:c9:b8:50:2f:f0:a0:97:5a:c6:16:27:bb:
30:77:f8:83:0b:66:e7:8b:7c:15:87:3c:a5:3e:59:0d:2b:7a:
2b:09:b9:38:f9:ca:ff:5e:16:5c:d7:c0:36:11:6f:aa:67:47:
02:a5:2e:2e:6c:12:61:65:7a:af:20:46:fe:5d:e2:eb:65:8d:
da:e0:e1:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Hj2z3ptjKds+PGENaZg8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODA3ZTA4NjMxMDNmMDkxMmU3ZTAyNDc4MTFkMTY3Nzk3
ZDgxMDcwHhcNMjQwNTA1MDcwMjEyWhcNMjQwNTA2MDcwMjEyWjAzMTEwLwYDVQQD
EygwYjQzMzM2MTllZmZiOTVjOTZlMjIzMDE2MGY2YTUwNmFlMjhiMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpCvqERhtxJfKh9vsrOu73/BmewZ
V9qrl1cvEMYPO2qTrnLjP+tsb5V5WHZwBTMfzS28RzBsgJ1NbOdqUE99K9cutaaq
q7UvSq8vn9VHt9X07n5d41WEbfr4DwQ1BtfrHHToQ5VclPFgdmNq8BoMDXrVh6GS
3W96j+OcDMJkSOM5UR8kKjyyMEX3cYL7X+2koqEITaF1y+xHWOmrsZwAYBA7nJhr
SZB7cDXOtwGADo4XfJTF78zJJ7uNHV57Ung/8BobAuWB4MeVxh2gKfQr2GOC8x7I
QPho1Y4pm6fujMiQtYT878N4SVrw7CHLBf0qFx3eCO/yePjzu6RXugiXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtDM2Ge/7lcluIjAWD2pQauKLAkMB8GA1UdIwQY
MBaAFAKAfghjED8JEufgJHgR0Wd5fYEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTct
OGJhYjc4ZGUzMmM5LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTctOGJhYjc4ZGUzMmM5
LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXPrHTXY
BXim0gUJmNLRd3dojFgVt4c2igWocH7HRH26iYcWyz81PEFB/cexMgGD9QvDrqDO
3vLMpmpBZSvFEStvXqTTYW2SHdPrpn7HNH7zaZs14SN3c2Kfwuo7jJ3MdgmXkCrQ
HkkD8BNaN5PhgN4F4hE8+nwD9XEo6vatsvvUJTnMM77tTsu+iBUzPUqn7rwBhVjb
ef2yvHPmv/XddA92L+w4nsDoLc0h3Z7tvQDfGT4n1N+Qoj3wybhQL/Cgl1rGFie7
MHf4gwtm54t8FYc8pT5ZDSt6Kwm5OPnK/14WXNfANhFvqmdHAqUuLmwSYWV6ryBG
/l3i62WN2uDhHg==
-----END CERTIFICATE-----
Generated at Sun May 5 13:17:35 2024 by rpki-client on console-fra.rpki-client.org