Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: LlM/mFO439qvTPUBpvxBgo3JhFhODPQrExR/AP0HPY8=
Subject key identifier: 03:DA:3A:25:59:22:20:30:BB:A6:25:E9:B4:31:9F:00:3C:89:34:47
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 018F847E9A412D2B260EF9BEB7EFEB94D120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0BB8
Signing time: Fri 17 May 2024 03:00:40 +0000
Manifest this update: Fri 17 May 2024 03:00:40 +0000
Manifest next update: Sat 18 May 2024 03:00:40 +0000
Files and hashes: 1: Ll6p2Lg4LZOLU3YmdFwr-dWlRI4.roa (hash: clRrsIj+CA7iIHCeA2230IK7VNAVqmEMS6hLDKR0T0k=)
2: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: J5VeqyYV/4ZCGSmReqrRNdv0+hvkzDFclCiFAC6DGaA=)
3: yABts4yKPRnbR_pWhkzwRRhbAVo.roa (hash: p8P6cR3zys3xQPApgcpqIHM4OhIXerb+tR1TFXXddtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:7e:9a:41:2d:2b:26:0e:f9:be:b7:ef:eb:94:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: May 17 03:00:40 2024 GMT
Not After : May 18 03:00:40 2024 GMT
Subject: CN=03da3a2559222030bba625e9b4319f003c893447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:b4:d3:3c:92:ac:14:d8:64:8a:1e:dc:df:
45:fc:d2:9a:7e:a7:e1:84:98:3f:0e:10:05:bd:57:
b5:45:9c:ce:9a:71:18:b0:cb:db:69:ee:e7:4b:e0:
cb:35:ee:36:26:e6:3d:3c:98:3a:a3:0e:e0:95:27:
2a:11:b0:3c:bb:c6:62:f1:63:db:59:d5:6f:dc:7d:
f7:52:75:dc:99:17:1f:61:ad:01:df:23:b6:94:74:
96:b2:c2:86:a6:a5:26:52:4d:13:68:57:16:3b:da:
5f:c3:a6:21:14:41:96:be:c6:6d:df:78:98:9a:48:
fe:d7:67:b5:a3:96:32:41:0b:07:ef:d0:c5:f5:fe:
80:01:98:6b:4b:af:93:d4:2a:d6:41:24:ac:c0:51:
44:f3:c0:63:32:cc:59:56:87:1b:a0:1f:e6:c8:2c:
b9:42:ab:64:73:cd:a5:1d:1f:8d:59:9f:77:3b:4e:
39:62:fb:f4:f6:ce:a6:ae:7a:d2:24:5b:a4:3b:b1:
52:b1:9f:e5:68:90:f4:ef:b1:5c:c4:c2:17:34:63:
ab:60:a5:fa:6d:04:f7:1b:10:e4:94:ad:b6:07:2e:
45:b9:59:fb:34:5a:43:fa:0f:34:ea:02:4d:27:17:
66:c8:f8:d4:0c:20:d4:29:f0:c5:18:64:a4:c9:43:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:3A:25:59:22:20:30:BB:A6:25:E9:B4:31:9F:00:3C:89:34:47
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d1:92:0e:8d:28:27:f4:1c:5d:54:e0:6a:81:96:1e:99:58:
63:ef:f7:ed:40:83:34:2d:32:63:76:7f:27:1b:aa:53:44:9d:
85:c7:39:dc:77:bf:04:73:16:0a:b1:a7:b8:6d:0d:56:de:3e:
57:e1:9a:00:6d:af:b1:84:d7:b2:9c:9a:fe:c1:60:76:e0:b3:
11:a1:64:d1:76:c9:f5:db:0c:07:e2:1d:28:f7:ff:90:fb:d0:
a5:0c:23:27:5b:bf:a6:1e:89:29:bc:03:8b:c5:91:07:48:18:
7e:2f:74:34:ef:44:a8:79:d4:64:5a:a0:a3:8c:92:9a:fd:84:
35:00:77:d9:a3:76:7f:6f:02:4c:5b:ee:38:2e:08:84:20:d0:
7e:81:2b:41:c5:cb:e7:82:fb:56:fd:50:7d:19:66:d6:6a:a4:
6d:71:6b:fd:a4:7d:2e:0a:1d:f9:b5:94:6d:d8:a8:3e:a7:47:
98:6f:08:60:a6:32:c2:8f:7e:a9:07:29:ae:8c:67:85:88:9b:
79:d7:ad:17:9d:53:3f:fa:b5:be:5d:3c:20:db:bc:b3:17:d2:
52:77:7a:50:39:a1:53:6f:d8:49:79:aa:2b:62:73:ea:0e:0f:
a0:19:9d:81:3e:77:97:fc:fc:18:fd:7c:96:ed:01:47:35:35:
c8:bc:37:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+EfppBLSsmDvm+t+/rlNEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjQwNTE3MDMwMDQwWhcNMjQwNTE4MDMwMDQwWjAzMTEwLwYDVQQD
EygwM2RhM2EyNTU5MjIyMDMwYmJhNjI1ZTliNDMxOWYwMDNjODkzNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgm00zySrBTYZIoe3N9F/NKafqfh
hJg/DhAFvVe1RZzOmnEYsMvbae7nS+DLNe42JuY9PJg6ow7glScqEbA8u8Zi8WPb
WdVv3H33UnXcmRcfYa0B3yO2lHSWssKGpqUmUk0TaFcWO9pfw6YhFEGWvsZt33iY
mkj+12e1o5YyQQsH79DF9f6AAZhrS6+T1CrWQSSswFFE88BjMsxZVocboB/myCy5
Qqtkc82lHR+NWZ93O045Yvv09s6mrnrSJFukO7FSsZ/laJD077FcxMIXNGOrYKX6
bQT3GxDklK22By5FuVn7NFpD+g806gJNJxdmyPjUDCDUKfDFGGSkyUPMRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPaOiVZIiAwu6Yl6bQxnwA8iTRHMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNGSDo0o
J/QcXVTgaoGWHplYY+/37UCDNC0yY3Z/JxuqU0Sdhcc53He/BHMWCrGnuG0NVt4+
V+GaAG2vsYTXspya/sFgduCzEaFk0XbJ9dsMB+IdKPf/kPvQpQwjJ1u/ph6JKbwD
i8WRB0gYfi90NO9EqHnUZFqgo4ySmv2ENQB32aN2f28CTFvuOC4IhCDQfoErQcXL
54L7Vv1QfRlm1mqkbXFr/aR9Lgod+bWUbdioPqdHmG8IYKYywo9+qQcproxnhYib
edetF51TP/q1vl08INu8sxfSUnd6UDmhU2/YSXmqK2Jz6g4PoBmdgT53l/z8GP18
lu0BRzU1yLw3dA==
-----END CERTIFICATE-----
Generated at Fri May 17 08:42:02 2024 by rpki-client on console-fra.rpki-client.org