Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: QvlJYH/1bfEepYVGijZr4IZmNDlYTHwZru90VPYiMLw=
Subject key identifier: 5D:91:E8:26:05:F8:4A:5A:B6:84:68:A8:63:C2:84:D3:65:16:0A:89
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 018F4C7E33A214A45D1BF08E0004A51FF421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 05EC
Signing time: Mon 06 May 2024 06:01:30 +0000
Manifest this update: Mon 06 May 2024 06:01:30 +0000
Manifest next update: Tue 07 May 2024 06:01:30 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: lklJT+wvodfCli0hQvzPnk6eziLHC81qTUpLfp7eSK8=)
2: 5u2Kc86-i8DmloPrX0_1MHtcQbQ.roa (hash: ov0RpkEyu6kd0vhA+R4zjRAOZCVB2wodz7TjPHtD0QE=)
3: r9F6xLE6SXXmIhl2hiAxIspeJxc.roa (hash: Qb1UrJxesLYzob0lj+nBr4nLsNewGVh2e9CpqCyhVBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:7e:33:a2:14:a4:5d:1b:f0:8e:00:04:a5:1f:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: May 6 06:01:30 2024 GMT
Not After : May 7 06:01:30 2024 GMT
Subject: CN=5d91e82605f84a5ab68468a863c284d365160a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:98:a1:56:24:95:8e:2a:86:c2:1b:a7:42:
54:b6:4f:af:cc:3e:3c:6a:47:d3:6c:99:f7:d4:1f:
24:fa:bc:f3:41:5e:d0:6f:83:c2:d7:13:4b:0e:3d:
81:28:b7:37:b3:7b:24:78:de:35:07:de:85:f0:41:
93:e3:01:64:f0:b8:41:73:a5:21:14:77:da:ca:98:
10:bd:39:a3:a0:ff:66:d3:f4:65:8d:3e:ca:68:72:
32:6e:a5:06:57:86:34:4d:61:72:03:2c:f3:8e:70:
22:e6:83:7c:33:ec:1a:a7:a8:f1:0b:7d:fa:e7:f4:
3e:40:6b:8d:2e:ff:fc:a4:15:db:7d:1e:76:12:0a:
de:c6:98:1d:aa:d0:41:f3:c4:b1:d4:ca:fd:23:cd:
c0:51:08:5a:1d:08:b8:ad:53:c3:99:37:ac:02:d1:
af:7b:42:93:ca:2a:4a:1b:d6:42:7e:80:c9:10:ea:
44:55:f4:af:d0:06:71:1d:e0:7d:9a:66:1e:02:a6:
47:e8:a4:7c:8e:15:08:d6:71:b2:77:5d:2e:54:0c:
76:04:50:b4:21:df:66:b2:63:b9:2c:a9:34:bc:5f:
16:86:ea:64:78:88:6a:83:04:03:63:2d:8b:24:e1:
16:e8:cd:a5:95:c4:ec:c3:22:a2:7a:28:52:0b:7f:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:E8:26:05:F8:4A:5A:B6:84:68:A8:63:C2:84:D3:65:16:0A:89
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:11:26:d6:98:e5:25:17:2d:95:df:08:82:53:eb:9f:ce:ed:
a0:a5:4f:90:db:b8:0f:ef:cd:a7:49:93:ac:f6:0d:86:ba:4f:
6e:b5:5d:89:79:f3:be:02:10:af:1b:9d:7e:ad:56:b2:87:62:
bb:74:8a:48:31:f4:9e:5f:0b:eb:b6:96:7f:44:9f:56:09:56:
97:da:d2:75:b5:28:a1:73:04:55:c5:8a:e0:52:e9:1d:d3:5b:
7a:d3:7e:de:91:43:e4:be:3e:ba:00:2e:49:2d:5b:e8:13:f6:
94:a2:ec:ab:a0:ec:e2:97:e5:65:db:3f:00:61:94:dc:58:06:
60:61:82:6d:84:3f:87:3d:59:f2:c7:1c:0f:e3:5c:47:fd:9e:
52:ff:23:91:90:7e:88:a4:36:39:c8:c8:98:51:0c:fd:19:3b:
9f:9c:d6:64:01:5d:2c:38:59:af:f6:b8:08:06:9e:26:64:bb:
0b:7d:43:26:bc:c8:6a:59:8b:2c:59:e2:dc:c2:e7:ae:3d:64:
6d:d3:f1:1e:1b:65:33:c1:f9:05:01:88:2f:56:35:9c:6a:9c:
9f:ef:8d:85:d8:2b:d9:f9:c0:00:bb:99:da:f8:62:92:c8:0f:
0c:09:6e:8d:95:92:ba:7c:06:8e:d7:15:d2:83:ca:89:bc:d0:
e4:08:e1:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MfjOiFKRdG/COAASlH/QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm
NjI1NTEwHhcNMjQwNTA2MDYwMTMwWhcNMjQwNTA3MDYwMTMwWjAzMTEwLwYDVQQD
Eyg1ZDkxZTgyNjA1Zjg0YTVhYjY4NDY4YTg2M2MyODRkMzY1MTYwYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz2YoVYklY4qhsIbp0JUtk+vzD48
akfTbJn31B8k+rzzQV7Qb4PC1xNLDj2BKLc3s3skeN41B96F8EGT4wFk8LhBc6Uh
FHfaypgQvTmjoP9m0/RljT7KaHIybqUGV4Y0TWFyAyzzjnAi5oN8M+wap6jxC336
5/Q+QGuNLv/8pBXbfR52EgrexpgdqtBB88Sx1Mr9I83AUQhaHQi4rVPDmTesAtGv
e0KTyipKG9ZCfoDJEOpEVfSv0AZxHeB9mmYeAqZH6KR8jhUI1nGyd10uVAx2BFC0
Id9msmO5LKk0vF8WhupkeIhqgwQDYy2LJOEW6M2llcTswyKieihSC38dVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2R6CYF+EpatoRoqGPChNNlFgqJMB8GA1UdIwQY
MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt
YzRjZTNlODA3M2RiLzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri
LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3BEm1pjl
JRctld8IglPrn87toKVPkNu4D+/Np0mTrPYNhrpPbrVdiXnzvgIQrxudfq1Wsodi
u3SKSDH0nl8L67aWf0SfVglWl9rSdbUooXMEVcWK4FLpHdNbetN+3pFD5L4+ugAu
SS1b6BP2lKLsq6Ds4pflZds/AGGU3FgGYGGCbYQ/hz1Z8sccD+NcR/2eUv8jkZB+
iKQ2OcjImFEM/Rk7n5zWZAFdLDhZr/a4CAaeJmS7C31DJrzIalmLLFni3MLnrj1k
bdPxHhtlM8H5BQGIL1Y1nGqcn++Nhdgr2fnAALuZ2vhiksgPDAlujZWSunwGjtcV
0oPKibzQ5AjhIQ==
-----END CERTIFICATE-----
Generated at Mon May 6 13:15:59 2024 by rpki-client on console-ams.rpki-client.org