Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: dyklNYrrFpqc7k/ebQyu687DtwUhIaeNFswHqHn1i5M=
Subject key identifier: C9:AE:AC:87:B9:BC:50:E0:C6:E6:C6:3F:A7:59:5E:07:E1:68:EA:B0
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018F8B26C27D543B32CF6A29AE0794E985DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0239
Signing time: Sat 18 May 2024 10:02:04 +0000
Manifest this update: Sat 18 May 2024 10:02:04 +0000
Manifest next update: Sun 19 May 2024 10:02:04 +0000
Files and hashes: 1: 3fjSIMnH_WBLUgpvU7tlZHyeIto.roa (hash: WGMBLao+4V+10nyD0vrWm6kwApVc/HWl+LY5c8OlBc4=)
2: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: 6k9yBWRY01Mekcp3NJNd6qI7TXIUugeWNXKhQpXbA/8=)
3: HAKoJA_4VVRjUB9p7Aq16OPdGgo.roa (hash: TJ0kFVUE0nvOqu5DKW8gaMLrYYvWCee27XHAym+SLcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:26:c2:7d:54:3b:32:cf:6a:29:ae:07:94:e9:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: May 18 10:02:04 2024 GMT
Not After : May 19 10:02:04 2024 GMT
Subject: CN=c9aeac87b9bc50e0c6e6c63fa7595e07e168eab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:be:e4:0f:b9:15:ec:8d:e5:f7:14:13:b6:
a8:3f:19:68:28:36:e6:a5:83:64:d0:8c:cb:1d:ba:
99:05:e2:05:ef:68:37:dd:a9:ea:2e:7d:7d:65:95:
73:1e:da:77:46:1b:da:02:04:a2:fc:f6:21:48:c6:
57:e7:99:59:74:ac:b4:e5:f1:bf:5d:e2:d3:9d:7a:
29:24:cb:ab:ec:70:f5:67:2d:8e:fc:93:c4:7c:22:
2d:d5:cf:ae:d1:eb:e7:02:80:e3:8d:75:99:60:59:
0b:47:55:1f:45:41:e5:13:c6:4e:dc:85:de:26:06:
e6:8c:ed:3b:3f:aa:ef:17:92:17:bc:26:9b:b0:53:
d9:3a:00:11:91:d3:fe:76:65:ce:8a:76:8d:24:37:
d8:1a:f8:ed:e7:2f:ca:48:a6:4c:d8:26:54:ba:8e:
83:16:7c:4d:8e:d2:c6:f1:56:57:4e:b9:e4:29:b1:
0c:7e:6d:d8:8c:f8:de:b9:ba:1f:06:b4:a1:5a:b8:
ef:47:35:1f:3b:67:2b:59:dd:68:25:7a:7c:fa:f1:
6c:80:c8:cf:80:c7:e7:49:75:de:da:50:af:76:23:
54:85:e9:f8:44:d0:58:d3:0a:44:65:24:88:ce:a7:
ce:96:3b:b5:89:88:46:54:b5:88:07:35:2e:9c:2a:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:AC:87:B9:BC:50:E0:C6:E6:C6:3F:A7:59:5E:07:E1:68:EA:B0
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:95:d0:e2:7b:3b:f5:a2:98:ab:13:84:4c:6c:f9:68:2e:
97:16:77:eb:26:7e:ed:53:5a:95:4e:ab:7f:5c:ec:d2:54:a7:
0a:0c:e3:bf:74:c9:8e:b4:8f:49:4e:c7:84:44:b9:b7:3e:67:
1b:d2:ba:81:a0:37:02:dc:cd:60:cf:e9:04:e8:2d:33:28:1f:
cb:27:03:c4:76:56:72:78:83:0d:f9:3f:b1:bb:af:62:65:44:
8a:db:39:9d:15:81:d2:c2:5b:5e:12:b0:bf:32:32:f6:d9:4a:
f2:b0:8a:33:1b:22:85:7e:be:45:b8:51:ca:02:62:7e:b9:5a:
8c:7a:0d:9d:63:41:62:ff:f2:2c:3d:11:78:d3:6b:37:93:54:
24:12:69:e7:ce:fa:0b:da:e8:86:a9:80:87:76:72:1e:21:f5:
0a:2d:05:40:b7:98:41:76:74:21:eb:a6:75:85:82:1a:89:f2:
38:b1:8a:1b:73:d7:99:dc:d5:55:05:9e:95:2a:50:16:a1:54:
27:67:59:92:d9:72:58:c2:ad:2d:4c:34:9d:f1:47:86:6a:aa:
c3:67:9b:f7:97:fb:4d:cc:f0:da:bf:d8:72:72:8d:8c:33:89:
d9:ab:29:79:8b:e4:36:ac:4a:63:7e:c6:2f:30:5a:ae:1e:be:
a9:db:89:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+LJsJ9VDsyz2oprgeU6YXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx
MWY3MDkwHhcNMjQwNTE4MTAwMjA0WhcNMjQwNTE5MTAwMjA0WjAzMTEwLwYDVQQD
EyhjOWFlYWM4N2I5YmM1MGUwYzZlNmM2M2ZhNzU5NWUwN2UxNjhlYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ii+5A+5FeyN5fcUE7aoPxloKDbm
pYNk0IzLHbqZBeIF72g33anqLn19ZZVzHtp3RhvaAgSi/PYhSMZX55lZdKy05fG/
XeLTnXopJMur7HD1Zy2O/JPEfCIt1c+u0evnAoDjjXWZYFkLR1UfRUHlE8ZO3IXe
JgbmjO07P6rvF5IXvCabsFPZOgARkdP+dmXOinaNJDfYGvjt5y/KSKZM2CZUuo6D
FnxNjtLG8VZXTrnkKbEMfm3YjPjeubofBrShWrjvRzUfO2crWd1oJXp8+vFsgMjP
gMfnSXXe2lCvdiNUhen4RNBY0wpEZSSIzqfOlju1iYhGVLWIBzUunCqOMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmurIe5vFDgxubGP6dZXgfhaOqwMB8GA1UdIwQY
MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt
MDdhMjhhZDNjYjY0LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0
LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCuV0OJ7
O/WimKsThExs+WgulxZ36yZ+7VNalU6rf1zs0lSnCgzjv3TJjrSPSU7HhES5tz5n
G9K6gaA3AtzNYM/pBOgtMygfyycDxHZWcniDDfk/sbuvYmVEits5nRWB0sJbXhKw
vzIy9tlK8rCKMxsihX6+RbhRygJifrlajHoNnWNBYv/yLD0ReNNrN5NUJBJp5876
C9rohqmAh3ZyHiH1Ci0FQLeYQXZ0IeumdYWCGonyOLGKG3PXmdzVVQWelSpQFqFU
J2dZktlyWMKtLUw0nfFHhmqqw2eb95f7Tczw2r/YcnKNjDOJ2aspeYvkNqxKY37G
LzBarh6+qduJjg==
-----END CERTIFICATE-----
Generated at Sat May 18 14:02:13 2024 by rpki-client on console-fra.rpki-client.org