Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: 1acIR2s4MZXQcjJlF6EF9cggOAFq0IwB1KjphXv27mo=
Subject key identifier: A7:DC:29:53:09:13:26:9A:FA:1B:8A:89:40:D2:52:D0:4A:4B:C6:F8
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 018F45A14D3DF19E1333F18B13A014C18756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1157
Signing time: Sat 04 May 2024 22:02:29 +0000
Manifest this update: Sat 04 May 2024 22:02:29 +0000
Manifest next update: Sun 05 May 2024 22:02:29 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: 75vRO83yUHwyZCy8H4B1ykel7s/hHSAjp2893aHzhBc=)
2: oCX2I8DK9iprDPDB2ySN-0pfhxs.roa (hash: YwqQXmWxHAEkUq2k0oeta+pssG6f92R7DD9Ifnrrovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a1:4d:3d:f1:9e:13:33:f1:8b:13:a0:14:c1:87:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: May 4 22:02:29 2024 GMT
Not After : May 5 22:02:29 2024 GMT
Subject: CN=a7dc29530913269afa1b8a8940d252d04a4bc6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ad:ee:98:39:e5:ab:09:f8:af:2f:1f:82:59:
6a:b1:5b:7c:94:0a:ad:a2:23:36:1d:b7:9f:cc:de:
4b:12:d5:41:6d:d5:44:70:ad:14:e2:50:06:4c:dd:
dc:d7:41:20:67:3d:c6:df:a8:b3:04:ae:e2:4d:48:
fa:7e:a6:a6:ca:d4:1b:01:51:68:34:b3:aa:b8:9c:
43:f7:5b:e9:d8:20:ea:1f:96:9e:53:3c:18:aa:e5:
20:30:a7:a3:98:60:24:59:60:e0:70:78:1c:54:d3:
cd:de:de:b0:99:8c:1d:70:0f:02:15:16:15:67:0f:
1d:7f:ef:be:71:28:5f:67:26:37:42:9b:4b:f3:c6:
da:91:84:86:d3:56:aa:f0:3a:b2:bf:67:2a:57:4f:
61:8e:d1:39:9c:dd:d9:35:14:43:f9:9b:52:1a:10:
a6:92:d4:33:d8:56:29:16:cc:6f:00:77:9e:64:7d:
7a:8c:97:7a:9c:da:eb:c4:c9:d7:0d:1f:03:0e:e3:
4d:13:36:a9:43:fe:5d:28:56:f7:3c:f6:34:cf:f6:
49:05:a5:29:85:56:6c:97:03:45:85:65:27:4c:be:
e7:69:99:7e:c0:a9:06:52:76:4e:c4:34:5c:02:0e:
e8:e8:7c:ee:3c:ad:7c:da:f0:e8:7d:a9:51:01:7e:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:29:53:09:13:26:9A:FA:1B:8A:89:40:D2:52:D0:4A:4B:C6:F8
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0d:0d:3c:69:93:71:44:9f:69:85:a7:8d:98:72:ee:4e:5d:
44:aa:70:f0:51:33:7f:ca:27:14:a1:b7:f8:90:3c:e0:35:b2:
ed:c6:de:12:1d:3f:ad:90:86:39:4d:a0:ef:47:ee:cb:9d:0b:
6f:2e:78:1e:1c:74:b8:aa:d8:2a:84:8f:ee:c3:84:00:bf:34:
82:00:e0:7a:e0:d9:7b:10:29:3d:d1:24:dd:ec:a7:6b:2c:80:
4b:17:5f:13:b5:09:4b:d0:b7:a9:cb:b8:76:ed:f2:b4:8a:37:
47:7c:96:a7:04:b9:67:62:e8:12:ea:a4:f3:b9:de:53:7e:f0:
df:2f:f7:7c:06:34:7e:49:ab:cd:7f:ca:51:48:64:85:00:23:
e1:27:2b:97:fe:61:a7:71:66:63:60:75:85:26:44:f6:6b:09:
86:40:d9:a9:be:8a:59:2c:40:2b:95:90:db:56:98:5e:68:7e:
82:1c:b0:c0:3e:6a:28:f8:d9:5e:49:89:10:04:eb:b6:3d:55:
ba:fe:df:0a:31:1f:3d:08:c5:01:2c:05:15:ac:6f:75:e2:0f:
04:72:d2:c0:4b:d2:14:af:7f:c1:aa:6a:7f:87:78:60:34:4d:
f7:ae:46:c1:e6:7e:75:67:c4:24:19:7d:78:19:c4:4e:e6:f8:
11:7c:3b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9FoU098Z4TM/GLE6AUwYdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOWIwNWEzNWQ0MTA5YTFlNGE4MzRjY2FkYWNkZDJjNmY1
NmIwNWEwHhcNMjQwNTA0MjIwMjI5WhcNMjQwNTA1MjIwMjI5WjAzMTEwLwYDVQQD
EyhhN2RjMjk1MzA5MTMyNjlhZmExYjhhODk0MGQyNTJkMDRhNGJjNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q3umDnlqwn4ry8fgllqsVt8lAqt
oiM2HbefzN5LEtVBbdVEcK0U4lAGTN3c10EgZz3G36izBK7iTUj6fqamytQbAVFo
NLOquJxD91vp2CDqH5aeUzwYquUgMKejmGAkWWDgcHgcVNPN3t6wmYwdcA8CFRYV
Zw8df+++cShfZyY3QptL88bakYSG01aq8Dqyv2cqV09hjtE5nN3ZNRRD+ZtSGhCm
ktQz2FYpFsxvAHeeZH16jJd6nNrrxMnXDR8DDuNNEzapQ/5dKFb3PPY0z/ZJBaUp
hVZslwNFhWUnTL7naZl+wKkGUnZOxDRcAg7o6HzuPK182vDofalRAX4ixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfcKVMJEyaa+huKiUDSUtBKS8b4MB8GA1UdIwQY
MBaAFBCbBaNdQQmh5Kg0zK2s3SxvVrBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAt
NDQ5MTUyZjFkM2I3LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jYWFjMGUtNTI2OC00MjNhLWFmYjAtNDQ5MTUyZjFkM2I3
LzEvRUpzRm8xMUJDYUhrcURUTXJhemRMRzlXc0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQ0NPGmT
cUSfaYWnjZhy7k5dRKpw8FEzf8onFKG3+JA84DWy7cbeEh0/rZCGOU2g70fuy50L
by54Hhx0uKrYKoSP7sOEAL80ggDgeuDZexApPdEk3eynayyASxdfE7UJS9C3qcu4
du3ytIo3R3yWpwS5Z2LoEuqk87neU37w3y/3fAY0fkmrzX/KUUhkhQAj4Scrl/5h
p3FmY2B1hSZE9msJhkDZqb6KWSxAK5WQ21aYXmh+ghywwD5qKPjZXkmJEATrtj1V
uv7fCjEfPQjFASwFFaxvdeIPBHLSwEvSFK9/wapqf4d4YDRN965GweZ+dWfEJBl9
eBnETub4EXw7JA==
-----END CERTIFICATE-----
Generated at Sun May 5 00:25:05 2024 by rpki-client on console-ams.rpki-client.org