Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
File: aqNKS6w794E80qZrT0W5x4bdNUI.mft (raw, json)
Hash identifier: /iFtmBEtAJcUzDb1Towpx3A4hTI/Tse4m7dreLLEroA=
Subject key identifier: 40:22:A0:D8:55:5B:B3:75:6A:36:4A:33:F0:5C:99:BD:5F:73:E6:A4
Authority key identifier: 6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
Certificate issuer: /CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Certificate serial: 018F874850795388EC059956708FD2596156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
Manifest number: 03C6
Signing time: Fri 17 May 2024 16:00:14 +0000
Manifest this update: Fri 17 May 2024 16:00:14 +0000
Manifest next update: Sat 18 May 2024 16:00:14 +0000
Files and hashes: 1: QQYxK_tkgXrigJ4YubeNJsjHcQk.roa (hash: RbybevO9NgPzwbsOqAMgT3fSDUB7Mq0qifvewxygxEs=)
2: aqNKS6w794E80qZrT0W5x4bdNUI.crl (hash: 1ZFvihzE8Ocre9klh72D6glMN+csbcd1GJzab65a5Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:50:79:53:88:ec:05:99:56:70:8f:d2:59:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Validity
Not Before: May 17 16:00:14 2024 GMT
Not After : May 18 16:00:14 2024 GMT
Subject: CN=4022a0d8555bb3756a364a33f05c99bd5f73e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:be:2e:f3:e3:c6:a5:d8:2b:1e:d0:45:a7:
84:fb:71:aa:eb:ce:26:b5:72:36:25:77:4c:ed:7f:
d6:09:0f:ff:64:d4:81:c6:2a:ef:6a:32:bd:9e:43:
21:c9:47:21:ad:d5:d3:70:7a:7c:9c:a2:47:95:a1:
da:01:90:7f:9f:55:da:1e:f1:c9:d5:c5:72:6c:41:
90:56:e4:13:ec:e7:ea:8d:dd:ac:3f:db:38:45:05:
9d:09:39:a9:f4:35:80:52:5e:35:de:3e:57:de:ba:
60:6b:68:b0:14:ce:26:ed:a4:42:17:fa:dc:c1:94:
82:d6:8d:6d:8e:7f:2e:76:a9:de:8b:8c:60:06:d6:
93:81:8e:82:0c:ec:07:a4:51:f8:a2:a1:93:77:d9:
17:96:8f:d8:f2:b1:25:6b:f5:3b:73:96:3b:d5:dd:
c1:cb:a9:af:c3:da:ed:f1:50:86:71:f2:a6:28:b5:
84:68:05:aa:fb:d9:5b:d0:fe:2c:35:2d:14:59:9c:
a8:88:b9:78:4e:5c:dd:c6:08:4c:70:63:c6:13:ed:
87:67:8c:bc:8d:81:c9:37:cd:02:91:36:c9:58:67:
cd:76:f9:4d:bf:cb:8b:d9:d6:8a:8d:40:1d:a4:19:
0f:d9:53:aa:69:60:ad:6a:94:89:cf:2b:52:09:bd:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:A0:D8:55:5B:B3:75:6A:36:4A:33:F0:5C:99:BD:5F:73:E6:A4
X509v3 Authority Key Identifier:
keyid:6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:02:76:41:e6:9f:50:fe:8f:3f:88:a6:46:44:44:98:6f:
32:fc:c4:d4:a4:e3:ad:c4:13:7c:bd:af:ef:90:30:34:43:31:
d8:f5:81:39:f9:08:79:bd:e8:fd:c8:fa:36:61:99:a0:d1:31:
e6:61:6e:65:90:df:d4:88:83:06:c2:48:99:a3:41:ce:c9:a0:
0d:4e:42:bf:08:e4:02:4b:0d:43:3c:5c:16:3b:1c:3a:25:44:
de:98:88:ca:ac:c0:0b:82:1e:bd:ae:6f:23:30:d3:a7:2b:44:
ac:a4:0a:7c:5a:3d:80:d9:5e:97:c2:18:10:28:43:fb:9c:94:
f4:93:19:a8:59:5a:8d:e1:80:33:84:4e:d2:42:9a:06:ba:8b:
ff:58:ae:e0:25:78:04:a7:03:3d:b9:c7:56:e0:fc:7e:f2:33:
0a:08:ff:2d:f6:6d:95:64:66:35:c7:33:83:59:2e:c7:d1:12:
19:bc:5a:e7:39:4d:bc:c4:c3:99:14:28:7c:d9:17:ea:2a:3a:
95:9f:4a:75:5f:32:5d:a6:4e:0b:4d:4f:2c:d1:aa:7f:54:0e:
ff:07:18:a0:b9:6a:15:7b:39:14:9a:bb:72:b5:96:bb:37:7f:
da:12:3a:d4:b2:7f:d0:fc:c7:20:27:ac:db:4d:ef:e1:77:e6:
fa:fc:0c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSFB5U4jsBZlWcI/SWWFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTM0YTRiYWMzYmY3ODEzY2QyYTY2YjRmNDViOWM3ODZk
ZDM1NDIwHhcNMjQwNTE3MTYwMDE0WhcNMjQwNTE4MTYwMDE0WjAzMTEwLwYDVQQD
Eyg0MDIyYTBkODU1NWJiMzc1NmEzNjRhMzNmMDVjOTliZDVmNzNlNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6+LvPjxqXYKx7QRaeE+3Gq684m
tXI2JXdM7X/WCQ//ZNSBxirvajK9nkMhyUchrdXTcHp8nKJHlaHaAZB/n1XaHvHJ
1cVybEGQVuQT7Ofqjd2sP9s4RQWdCTmp9DWAUl413j5X3rpga2iwFM4m7aRCF/rc
wZSC1o1tjn8udqnei4xgBtaTgY6CDOwHpFH4oqGTd9kXlo/Y8rEla/U7c5Y71d3B
y6mvw9rt8VCGcfKmKLWEaAWq+9lb0P4sNS0UWZyoiLl4TlzdxghMcGPGE+2HZ4y8
jYHJN80CkTbJWGfNdvlNv8uL2daKjUAdpBkP2VOqaWCtapSJzytSCb2MSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAioNhVW7N1ajZKM/Bcmb1fc+akMB8GA1UdIwQY
MBaAFGqjSkusO/eBPNKma09FuceG3TVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzkyMGQtODEwOS00MTE5LWI4NDAt
NjY0ZWYwZGE4YzMwLzEvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jYzkyMGQtODEwOS00MTE5LWI4NDAtNjY0ZWYwZGE4YzMw
LzEvYXFOS1M2dzc5NEU4MHFaclQwVzV4NGJkTlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA0CdkHm
n1D+jz+IpkZERJhvMvzE1KTjrcQTfL2v75AwNEMx2PWBOfkIeb3o/cj6NmGZoNEx
5mFuZZDf1IiDBsJImaNBzsmgDU5CvwjkAksNQzxcFjscOiVE3piIyqzAC4Ieva5v
IzDTpytErKQKfFo9gNlel8IYEChD+5yU9JMZqFlajeGAM4RO0kKaBrqL/1iu4CV4
BKcDPbnHVuD8fvIzCgj/LfZtlWRmNcczg1kux9ESGbxa5zlNvMTDmRQofNkX6io6
lZ9KdV8yXaZOC01PLNGqf1QO/wcYoLlqFXs5FJq7crWWuzd/2hI61LJ/0PzHICes
203v4Xfm+vwMvw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:20:12 2024 by rpki-client on console-ams.rpki-client.org