Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: OOfx86rp8r7JUogfTxF2jaWIcF07hKtV4rXBxNG4rIk=
Subject key identifier: 96:72:A0:67:28:2F:23:B5:B8:4A:73:EC:51:58:71:69:D4:86:83:6F
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 018F41C35EE6692EC9DAA27A14AA2FE5260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1152
Signing time: Sat 04 May 2024 04:01:13 +0000
Manifest this update: Sat 04 May 2024 04:01:13 +0000
Manifest next update: Sun 05 May 2024 04:01:13 +0000
Files and hashes: 1: 1-9WjWG3T8YEI-zd3tFV0uoA2duU.roa (hash: zw68VS06UTsXwmXaMfWoRhs9nAeQktrVXNF2uJDd2bE=)
2: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: Y9/kdVWZ7inhozKOmfXaZQoja70zodcrODZ0lLD55IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:c3:5e:e6:69:2e:c9:da:a2:7a:14:aa:2f:e5:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: May 4 04:01:13 2024 GMT
Not After : May 5 04:01:13 2024 GMT
Subject: CN=9672a067282f23b5b84a73ec51587169d486836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:d3:a1:e6:48:d5:24:86:db:77:f3:70:38:
b3:ef:b6:86:6e:3f:af:55:0f:2d:e7:3c:53:b1:12:
4a:b2:27:bb:a6:39:f4:d9:db:c4:ff:6a:38:f7:5b:
03:bb:47:9d:07:74:c2:ba:47:e5:19:6b:bc:7a:8e:
a8:ed:95:d5:92:4c:79:f7:2c:6c:cc:f8:33:3c:65:
93:34:4d:c3:19:2e:c1:b6:5b:0a:fe:ac:38:f4:4b:
5a:d4:38:43:e2:52:fd:a6:66:a7:48:c5:57:a4:d6:
52:14:a0:2c:c1:ae:29:2b:68:80:1f:64:84:94:ca:
4d:88:25:d0:62:73:2c:04:24:19:c2:db:1b:70:fa:
6d:22:01:bf:81:ca:56:4a:b3:67:17:2e:78:b3:a6:
d6:e2:c7:0c:96:89:4f:4d:c0:76:6f:7c:47:b0:78:
0e:13:6e:2f:b8:bb:de:b5:b0:c3:f8:5b:2c:e9:1c:
ae:65:ce:02:84:2d:0a:4a:69:f9:bd:81:f2:ff:f1:
29:53:fd:9b:f3:3d:00:8a:d0:4e:ba:2c:84:c7:9c:
54:f4:a9:c0:f1:1a:64:4b:19:ec:5f:c5:cc:41:d4:
80:72:e4:ec:e3:9d:60:02:08:eb:95:77:6a:ea:ec:
d9:c5:b0:a4:11:d4:70:ad:b6:70:4d:af:e3:b6:7a:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:A0:67:28:2F:23:B5:B8:4A:73:EC:51:58:71:69:D4:86:83:6F
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:18:75:ac:6b:c2:93:c0:0a:0e:46:24:40:db:e5:d1:2e:
ca:2d:63:d9:5b:70:2e:28:d1:39:d3:9e:03:bd:8b:6f:54:c4:
ec:30:eb:d1:a4:9c:7b:43:3a:14:7e:c9:54:5c:d2:75:87:13:
23:4e:53:40:ed:d4:63:e8:6b:af:16:59:54:03:09:a0:b7:17:
50:80:84:0a:0d:3a:3e:66:1f:78:54:5b:79:92:5e:89:4c:31:
2f:c3:c9:12:da:d8:84:ee:9f:f3:11:01:ef:26:80:0a:5c:ae:
e3:88:63:f2:0b:e4:ba:6b:93:02:ff:80:be:6c:7d:44:8c:c0:
ba:de:81:8b:fc:63:52:f1:f5:62:8d:c0:93:e4:25:83:77:9e:
1b:d7:68:55:16:ff:ca:4d:a0:5b:72:08:63:1e:4d:8b:8e:d0:
05:a7:fa:4f:22:3c:56:4c:0c:77:f3:a6:4b:10:03:f1:7d:c0:
e8:cd:96:22:bd:84:e6:25:ba:7a:51:be:b8:40:c2:74:37:71:
73:50:23:24:28:ad:f0:6a:5a:73:37:4e:40:61:41:1b:04:60:
9b:ac:05:91:b8:39:8c:9b:aa:96:7e:b8:39:a4:53:3f:d1:f3:
24:86:73:8b:29:5d:ea:a7:c1:5b:c3:8a:f9:77:2e:92:fd:24:
e4:fa:94:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Bw17maS7J2qJ6FKov5SYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDBhOTViZTBlNjAxMTA5Y2IxOTg4NDI2OGJhMjIwNDQ1
NWM3OTAwHhcNMjQwNTA0MDQwMTEzWhcNMjQwNTA1MDQwMTEzWjAzMTEwLwYDVQQD
Eyg5NjcyYTA2NzI4MmYyM2I1Yjg0YTczZWM1MTU4NzE2OWQ0ODY4MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKPToeZI1SSG23fzcDiz77aGbj+v
VQ8t5zxTsRJKsie7pjn02dvE/2o491sDu0edB3TCukflGWu8eo6o7ZXVkkx59yxs
zPgzPGWTNE3DGS7BtlsK/qw49Eta1DhD4lL9pmanSMVXpNZSFKAswa4pK2iAH2SE
lMpNiCXQYnMsBCQZwtsbcPptIgG/gcpWSrNnFy54s6bW4scMlolPTcB2b3xHsHgO
E24vuLvetbDD+Fss6RyuZc4ChC0KSmn5vYHy//EpU/2b8z0AitBOuiyEx5xU9KnA
8RpkSxnsX8XMQdSAcuTs451gAgjrlXdq6uzZxbCkEdRwrbZwTa/jtnqprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZyoGcoLyO1uEpz7FFYcWnUhoNvMB8GA1UdIwQY
MBaAFADQqVvg5gEQnLGYhCaLoiBEVceQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAt
ZDFmZDRkYTJkNWNiLzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZTVhMzQtNWFlMy00Y2JlLTkwOTAtZDFmZDRkYTJkNWNi
LzEvQU5DcFctRG1BUkNjc1ppRUpvdWlJRVJWeDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnEYdaxr
wpPACg5GJEDb5dEuyi1j2VtwLijROdOeA72Lb1TE7DDr0aSce0M6FH7JVFzSdYcT
I05TQO3UY+hrrxZZVAMJoLcXUICECg06PmYfeFRbeZJeiUwxL8PJEtrYhO6f8xEB
7yaAClyu44hj8gvkumuTAv+Avmx9RIzAut6Bi/xjUvH1Yo3Ak+Qlg3eeG9doVRb/
yk2gW3IIYx5Ni47QBaf6TyI8VkwMd/OmSxAD8X3A6M2WIr2E5iW6elG+uEDCdDdx
c1AjJCit8GpaczdOQGFBGwRgm6wFkbg5jJuqln64OaRTP9HzJIZziyld6qfBW8OK
+Xcukv0k5PqULA==
-----END CERTIFICATE-----
Generated at Sat May 4 09:24:33 2024 by rpki-client on console-ams.rpki-client.org