Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: /wL0NmP8v5LORuNbMTNc9zbB49Icjeg2QVfyucgNP8k=
Subject key identifier: F4:63:ED:0A:97:78:D6:64:1E:BE:2D:9D:96:C3:89:B3:C5:C4:0E:C4
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 018F97298E70FAE4708D2976275E0A49B8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 117F
Signing time: Mon 20 May 2024 18:00:33 +0000
Manifest this update: Mon 20 May 2024 18:00:33 +0000
Manifest next update: Tue 21 May 2024 18:00:33 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: P8ULttII0gbkGlVtelLHbrjRlr6P9RUHT090uERAf6E=)
2: iePcTJDLgQX1qk6ioRJHkyaDK-U.roa (hash: Dj39yFJ46QUg6fe8kRK7DfycnJDDH/q8/KZc0hlPPwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:29:8e:70:fa:e4:70:8d:29:76:27:5e:0a:49:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: May 20 18:00:33 2024 GMT
Not After : May 21 18:00:33 2024 GMT
Subject: CN=f463ed0a9778d6641ebe2d9d96c389b3c5c40ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:40:64:87:07:fd:20:1a:37:93:f4:86:4c:
b7:7f:76:ac:91:ef:5b:74:64:c2:9b:2e:35:4d:cd:
8f:5b:cd:c5:07:2a:5f:fa:ca:18:87:f7:ee:3c:92:
9d:4f:f6:97:14:d5:d9:b0:69:9f:fb:c9:be:2a:1e:
08:80:67:0b:b2:f0:e8:8d:d2:58:e5:a1:ba:f4:2b:
09:3c:e7:20:1e:d7:b2:61:9e:af:2f:ac:4f:53:a8:
06:35:2b:10:74:e0:d7:43:65:8c:4b:5d:19:6c:9b:
56:b0:6e:89:5a:5f:2a:b5:21:c6:65:21:a2:e1:94:
bd:7c:b2:94:ba:e2:53:b4:e4:cc:05:25:2c:d2:3f:
52:51:32:7a:62:bd:50:57:63:48:47:eb:4e:24:c2:
32:dc:d9:42:fe:4e:63:1f:f5:c7:32:39:aa:fa:ad:
6b:5d:df:c9:8d:26:8f:1d:cc:01:28:82:2c:b1:d5:
27:d6:65:18:ae:cc:b1:4e:9d:60:66:d7:ba:cd:67:
37:c4:97:1a:3b:93:bd:fb:6b:01:14:38:90:5c:70:
a7:a9:45:c0:9e:d1:67:7e:bd:7a:a7:d6:63:cc:e8:
89:a6:d5:25:80:a2:0c:6e:b0:6f:be:e1:28:a8:98:
0c:a9:77:b9:12:43:e0:00:47:d0:8c:4c:19:8f:8a:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:ED:0A:97:78:D6:64:1E:BE:2D:9D:96:C3:89:B3:C5:C4:0E:C4
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ca:2d:52:f4:55:72:d0:38:05:5d:c8:73:a5:9c:6b:05:40:
fb:dc:f5:2d:bf:c9:d4:56:4c:5b:81:b5:7a:2e:c7:58:40:bf:
37:59:a4:e7:42:bd:a7:1d:81:a7:10:22:8b:29:ae:59:fe:73:
e4:d9:65:b0:64:7a:2c:3e:76:e6:be:3d:1b:80:0c:57:15:88:
e8:5f:54:2a:3a:60:33:ab:49:c9:33:49:89:a6:e2:2a:8e:4e:
8e:fc:2f:98:46:01:4b:25:74:9a:c9:bc:ab:b2:07:ff:76:d7:
51:b8:97:c6:bb:22:5e:29:2f:fd:68:9d:f1:39:04:59:d4:ed:
f3:42:ba:4d:cf:66:7c:c6:b5:87:5b:1e:f5:27:b1:26:0a:0d:
12:59:13:d3:81:cf:28:c5:25:af:49:14:71:72:89:76:ba:48:
32:92:ea:ee:df:8d:54:39:43:00:63:a7:ee:53:a2:bc:b9:9e:
a6:48:35:bf:75:fc:29:f8:d2:b5:57:62:56:c2:76:d5:4c:53:
e0:bb:54:57:79:e4:b4:49:bf:a2:51:fe:b6:e8:64:34:88:90:
37:82:ac:44:40:d0:9e:5c:e8:0f:d3:d6:91:3d:c4:44:54:95:
63:a8:ee:6b:e9:8d:91:19:0e:26:c9:02:69:ab:05:66:36:f0:
f4:41:f1:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+XKY5w+uRwjSl2J14KSbjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4
ZjQ0ODkwHhcNMjQwNTIwMTgwMDMzWhcNMjQwNTIxMTgwMDMzWjAzMTEwLwYDVQQD
EyhmNDYzZWQwYTk3NzhkNjY0MWViZTJkOWQ5NmMzODliM2M1YzQwZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRtAZIcH/SAaN5P0hky3f3aske9b
dGTCmy41Tc2PW83FBypf+soYh/fuPJKdT/aXFNXZsGmf+8m+Kh4IgGcLsvDojdJY
5aG69CsJPOcgHteyYZ6vL6xPU6gGNSsQdODXQ2WMS10ZbJtWsG6JWl8qtSHGZSGi
4ZS9fLKUuuJTtOTMBSUs0j9SUTJ6Yr1QV2NIR+tOJMIy3NlC/k5jH/XHMjmq+q1r
Xd/JjSaPHcwBKIIssdUn1mUYrsyxTp1gZte6zWc3xJcaO5O9+2sBFDiQXHCnqUXA
ntFnfr16p9ZjzOiJptUlgKIMbrBvvuEoqJgMqXe5EkPgAEfQjEwZj4rP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRj7QqXeNZkHr4tnZbDibPFxA7EMB8GA1UdIwQY
MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt
YmFlOWQyYjI5NjAxLzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx
LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccotUvRV
ctA4BV3Ic6WcawVA+9z1Lb/J1FZMW4G1ei7HWEC/N1mk50K9px2BpxAiiymuWf5z
5NllsGR6LD525r49G4AMVxWI6F9UKjpgM6tJyTNJiabiKo5OjvwvmEYBSyV0msm8
q7IH/3bXUbiXxrsiXikv/Wid8TkEWdTt80K6Tc9mfMa1h1se9SexJgoNElkT04HP
KMUlr0kUcXKJdrpIMpLq7t+NVDlDAGOn7lOivLmepkg1v3X8KfjStVdiVsJ21UxT
4LtUV3nktEm/olH+tuhkNIiQN4KsREDQnlzoD9PWkT3ERFSVY6jua+mNkRkOJskC
aasFZjbw9EHx3g==
-----END CERTIFICATE-----
Generated at Tue May 21 00:10:42 2024 by rpki-client on console-ams.rpki-client.org