Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: r9wq8BnxiUjkC0sF0qEiNXQhdoWVNjjVM0lWOPiLFbk=
Subject key identifier: 34:04:E0:94:EA:CC:8E:09:7C:8A:CC:43:C4:DF:B7:2A:26:96:2A:9A
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 018F86A369ED81E8275A6E58149BC1511809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 01B3
Signing time: Fri 17 May 2024 13:00:07 +0000
Manifest this update: Fri 17 May 2024 13:00:07 +0000
Manifest next update: Sat 18 May 2024 13:00:07 +0000
Files and hashes: 1: X5vjGxFTz6PxQ9gVXrqw6e_N06c.roa (hash: SV56lSzCbD4GTXAsCvSCsD5HUdWxTttzmUxtkwsokQs=)
2: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: yQZ0/ihpq2IKNs5Rvcuy0Dme7DMmyI/gE5c4d4ZQQCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:69:ed:81:e8:27:5a:6e:58:14:9b:c1:51:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: May 17 13:00:07 2024 GMT
Not After : May 18 13:00:07 2024 GMT
Subject: CN=3404e094eacc8e097c8acc43c4dfb72a26962a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:46:89:45:94:08:cf:0b:a9:6f:d8:52:4c:
4a:45:da:8e:9a:20:86:29:4d:96:5b:01:a1:4d:81:
fd:88:37:c5:94:3e:f1:bd:92:a1:e4:9e:df:29:78:
87:99:88:68:3e:7f:d6:bd:da:e2:56:94:cc:58:6f:
55:c2:48:be:3d:53:e7:69:52:cd:03:a3:73:2c:a4:
dd:a0:7e:a0:e5:87:ba:e1:ab:cb:4a:e4:89:1f:8f:
50:66:10:b2:70:51:7d:f7:92:91:f9:24:a6:2f:ef:
86:96:4a:66:81:60:71:fe:b6:dc:97:c0:ad:5f:c1:
02:15:4e:ca:34:0c:b2:bc:ff:35:82:a2:f4:0f:e5:
23:b4:cb:79:38:23:bd:c4:80:ed:57:a7:41:f9:5e:
f5:57:7b:80:15:2e:da:e5:e9:20:8d:d0:b9:93:7b:
28:e7:6c:23:42:91:fc:38:2c:64:7d:29:72:1a:6a:
71:f9:ed:8c:30:0c:74:8b:72:d4:e3:22:97:8d:45:
4d:21:b1:45:27:a5:12:5d:2a:f3:42:59:d0:84:9b:
5a:a0:03:15:8f:7e:a8:b7:28:fc:db:d7:55:f4:d0:
46:94:74:6c:d9:ef:8c:44:30:16:5e:bd:dd:17:fb:
77:ef:b6:2f:ac:d6:7f:8b:0c:54:77:83:b0:2c:72:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:E0:94:EA:CC:8E:09:7C:8A:CC:43:C4:DF:B7:2A:26:96:2A:9A
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c7:06:61:a4:1a:4b:bd:6e:58:69:9f:9b:1c:38:6e:c0:68:
1a:07:7d:1d:c6:7e:7b:1d:e1:35:47:25:f4:fe:56:c6:56:2f:
14:69:41:b1:69:d6:ad:c3:f8:89:17:40:61:22:0a:dc:59:d0:
52:9b:ea:e9:3c:56:59:0a:37:ef:a7:ed:f6:c2:a9:0c:0e:2e:
17:3d:95:e6:a0:c5:bf:92:ea:ab:f8:16:6d:19:a8:9f:64:00:
22:ad:20:5c:2c:55:78:29:76:6e:74:4d:82:8a:8a:b3:53:60:
fb:c9:6e:c8:b6:9c:ed:1d:d3:bb:a2:b1:51:46:8d:74:8d:15:
fe:e0:55:a3:16:af:fb:56:1e:6e:22:b0:3c:d8:13:31:07:c1:
eb:f8:48:85:73:8e:ce:3e:8c:ab:65:8c:f3:7d:33:3c:a9:4a:
c6:18:7a:e5:af:e0:93:4e:25:04:2e:0c:b1:db:04:84:7b:42:
29:cf:fe:36:c2:53:fe:49:b9:c0:c2:5d:ce:98:10:aa:e6:8d:
fb:b6:5a:f6:6c:cc:1b:f2:72:03:9e:3b:7b:0d:15:c8:2b:3d:
a1:7d:09:12:3e:12:9e:35:c1:3e:33:33:48:dc:32:74:db:a5:
a9:27:aa:0a:9d:64:64:b1:91:13:a1:6e:11:0f:91:71:dd:d1:
50:11:64:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go2ntgegnWm5YFJvBURgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz
YjljN2UwHhcNMjQwNTE3MTMwMDA3WhcNMjQwNTE4MTMwMDA3WjAzMTEwLwYDVQQD
EygzNDA0ZTA5NGVhY2M4ZTA5N2M4YWNjNDNjNGRmYjcyYTI2OTYyYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nhGiUWUCM8LqW/YUkxKRdqOmiCG
KU2WWwGhTYH9iDfFlD7xvZKh5J7fKXiHmYhoPn/WvdriVpTMWG9Vwki+PVPnaVLN
A6NzLKTdoH6g5Ye64avLSuSJH49QZhCycFF995KR+SSmL++GlkpmgWBx/rbcl8Ct
X8ECFU7KNAyyvP81gqL0D+UjtMt5OCO9xIDtV6dB+V71V3uAFS7a5ekgjdC5k3so
52wjQpH8OCxkfSlyGmpx+e2MMAx0i3LU4yKXjUVNIbFFJ6USXSrzQlnQhJtaoAMV
j36otyj829dV9NBGlHRs2e+MRDAWXr3dF/t377YvrNZ/iwxUd4OwLHJW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQE4JTqzI4JfIrMQ8TftyomliqaMB8GA1UdIwQY
MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt
MjgzNmFkMWMzMjFlLzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl
LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxscGYaQa
S71uWGmfmxw4bsBoGgd9HcZ+ex3hNUcl9P5WxlYvFGlBsWnWrcP4iRdAYSIK3FnQ
Upvq6TxWWQo376ft9sKpDA4uFz2V5qDFv5Lqq/gWbRmon2QAIq0gXCxVeCl2bnRN
goqKs1Ng+8luyLac7R3Tu6KxUUaNdI0V/uBVoxav+1YebiKwPNgTMQfB6/hIhXOO
zj6Mq2WM830zPKlKxhh65a/gk04lBC4MsdsEhHtCKc/+NsJT/km5wMJdzpgQquaN
+7Za9mzMG/JyA547ew0VyCs9oX0JEj4SnjXBPjMzSNwydNulqSeqCp1kZLGRE6Fu
EQ+Rcd3RUBFkvg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:42:26 2024 by rpki-client on console-fra.rpki-client.org