Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: uN2DlowPVXjp8uj825TjPWqvzusrNfKPu9t3vhE8QKI=
Subject key identifier: F4:C2:D4:AF:FA:A2:4C:46:6F:FE:BE:A1:13:25:3D:79:80:87:F3:F9
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 018F5FCE0C2463C04E78F98159C640F3F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 064A
Signing time: Fri 10 May 2024 00:01:30 +0000
Manifest this update: Fri 10 May 2024 00:01:30 +0000
Manifest next update: Sat 11 May 2024 00:01:30 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: lqrautQZXYV84in8FgJkTxNk+SM4mL+qxo8Mlxa2ZVY=)
2: nNjYfWH4ZKvN9tM6WZw9fzKIMGE.roa (hash: /34OAhU2qXeFNZwKL0A5oNJLdBT3r2t/hDdx/MPeI5s=)
3: wbBdIZ72KmkGPINWNX-dv5PQlvI.roa (hash: RyHYhPLqMM0Zs8CjVO4mQya9Yecue77o/Ld42R+L3ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:ce:0c:24:63:c0:4e:78:f9:81:59:c6:40:f3:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: May 10 00:01:30 2024 GMT
Not After : May 11 00:01:30 2024 GMT
Subject: CN=f4c2d4affaa24c466ffebea113253d798087f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:e7:fb:5e:d7:2b:f6:23:1a:f0:c5:84:c2:
d7:47:37:e1:b4:eb:0f:df:9f:1e:7f:4d:88:84:a8:
67:a4:d5:ec:ac:39:60:7d:1f:f0:56:a1:ba:a1:b4:
9b:ae:af:83:89:f1:ac:41:a2:fe:05:77:d3:13:b7:
0b:f1:71:bb:03:ab:07:59:1b:0a:2a:f5:35:86:dc:
ce:a6:fb:41:db:64:f4:28:7a:79:2f:bd:d4:e6:c9:
74:fd:2b:e5:01:da:3a:90:51:91:f5:6f:81:29:3b:
19:ae:6a:6b:fb:eb:66:3c:e9:36:43:23:fe:fa:4b:
83:00:66:50:8e:33:cb:10:83:66:d5:ab:7f:c1:a7:
57:22:b3:00:7a:38:a5:9c:70:3e:93:8f:29:f5:ef:
85:18:59:b3:ec:55:b1:4c:85:2e:f2:0e:43:5d:c1:
bb:51:ff:cd:82:d4:e4:11:76:50:89:81:ee:c8:37:
da:a5:a0:9c:72:1c:21:9e:d2:78:73:2c:52:69:ab:
c1:0f:b0:ab:47:7c:9e:41:10:98:b4:0d:5e:7e:03:
07:ed:fa:eb:4a:5e:7a:53:84:ee:df:c9:2d:27:91:
10:c4:f8:32:ba:05:12:84:c6:32:f9:b1:41:6e:85:
f7:29:c1:e3:62:7f:1f:43:7a:d8:b0:d8:7c:2f:1d:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:D4:AF:FA:A2:4C:46:6F:FE:BE:A1:13:25:3D:79:80:87:F3:F9
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:a1:f8:a7:b4:c5:c5:c1:50:cb:b5:b8:36:3c:ae:24:39:
69:47:d9:61:5c:a7:cb:2a:81:ae:1a:77:a7:ea:67:22:73:d8:
94:d6:cd:62:24:26:4a:aa:7c:e8:88:dd:18:e4:87:f7:1c:0e:
a4:48:4c:3f:c6:f1:56:fe:4d:ec:1b:a0:0f:9b:24:b3:cb:c1:
89:35:94:6b:a4:95:bd:1c:15:cb:72:0e:26:02:b5:4a:57:16:
ea:60:ac:be:3c:3c:14:51:43:9b:d8:a9:0f:ac:7a:b1:90:de:
e8:04:ba:5d:d4:34:9a:95:27:09:7f:37:26:ab:9c:59:68:8a:
51:52:45:c2:51:28:29:8c:46:27:73:f5:4d:08:5e:65:ed:5b:
5a:ae:89:e8:bc:38:3a:97:0e:a7:51:23:2c:cc:63:00:d2:5d:
f7:a8:6d:a7:78:1a:24:a0:02:2f:86:eb:43:75:a4:a8:0a:4b:
69:ae:17:30:6a:ab:e7:0d:97:7a:dd:75:1c:10:69:ca:12:3c:
26:ea:23:98:04:45:fa:cc:81:ac:30:72:2d:72:cf:b3:a2:7b:
d3:a4:e5:58:40:8a:13:f9:16:27:56:89:f0:51:f3:94:b8:19:
f7:b8:d4:5a:f6:08:55:ea:6b:29:d7:42:ec:15:7b:4f:19:54:
0a:ad:ba:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9fzgwkY8BOePmBWcZA8/S+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjQwNTEwMDAwMTMwWhcNMjQwNTExMDAwMTMwWjAzMTEwLwYDVQQD
EyhmNGMyZDRhZmZhYTI0YzQ2NmZmZWJlYTExMzI1M2Q3OTgwODdmM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQzn+17XK/YjGvDFhMLXRzfhtOsP
358ef02IhKhnpNXsrDlgfR/wVqG6obSbrq+DifGsQaL+BXfTE7cL8XG7A6sHWRsK
KvU1htzOpvtB22T0KHp5L73U5sl0/SvlAdo6kFGR9W+BKTsZrmpr++tmPOk2QyP+
+kuDAGZQjjPLEINm1at/wadXIrMAejilnHA+k48p9e+FGFmz7FWxTIUu8g5DXcG7
Uf/NgtTkEXZQiYHuyDfapaCcchwhntJ4cyxSaavBD7CrR3yeQRCYtA1efgMH7frr
Sl56U4Tu38ktJ5EQxPgyugUShMYy+bFBboX3KcHjYn8fQ3rYsNh8Lx2SoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTC1K/6okxGb/6+oRMlPXmAh/P5MB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDGh+Ke0
xcXBUMu1uDY8riQ5aUfZYVynyyqBrhp3p+pnInPYlNbNYiQmSqp86IjdGOSH9xwO
pEhMP8bxVv5N7BugD5sks8vBiTWUa6SVvRwVy3IOJgK1SlcW6mCsvjw8FFFDm9ip
D6x6sZDe6AS6XdQ0mpUnCX83JqucWWiKUVJFwlEoKYxGJ3P1TQheZe1bWq6J6Lw4
OpcOp1EjLMxjANJd96htp3gaJKACL4brQ3WkqApLaa4XMGqr5w2Xet11HBBpyhI8
JuojmARF+syBrDByLXLPs6J706TlWECKE/kWJ1aJ8FHzlLgZ97jUWvYIVeprKddC
7BV7TxlUCq26Gw==
-----END CERTIFICATE-----
Generated at Fri May 10 06:16:34 2024 by rpki-client on console-ams.rpki-client.org