Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: 3tYMTkf5QZvlTzFzG8+h7DLN0ZAfkGpCsKZfi1GCcAM=
Subject key identifier: 97:3A:CF:B8:C5:95:FD:64:CE:40:47:A2:18:5D:F5:AE:4A:C0:CD:70
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019025A44A14B0F4FBD3FEDF15CAE455EDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 11C9
Signing time: Mon 17 Jun 2024 10:00:42 +0000
Manifest this update: Mon 17 Jun 2024 10:00:42 +0000
Manifest next update: Tue 18 Jun 2024 10:00:42 +0000
Files and hashes: 1: 42irQsdBNFZPiDI6aK2dVTBb56s.roa (hash: JTaHyEMUuNToCs2lntVj9swjRH26yJwbiKH6EHInOhA=)
2: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: 2yrXer8aDwUT+IaZgVHPwAxHs1n+0b1a6z2A8bg3GWE=)
3: LduAehX0P4USgKSq5xS2w-O6JkY.roa (hash: +zWtBZ73nCOK2IY5IlDZiRwLN5ZEshyPoycr85a06+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:a4:4a:14:b0:f4:fb:d3:fe:df:15:ca:e4:55:ed:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jun 17 10:00:42 2024 GMT
Not After : Jun 18 10:00:42 2024 GMT
Subject: CN=973acfb8c595fd64ce4047a2185df5ae4ac0cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:67:71:dc:31:8e:a1:f3:60:fe:77:9a:28:
ba:50:70:4c:c8:43:fa:ea:46:90:07:b1:a1:07:11:
0a:b2:7d:79:75:f4:73:05:c5:6e:31:b4:90:22:25:
51:af:fa:65:39:aa:15:f9:0b:3d:b4:27:1c:56:7f:
63:35:25:5f:d9:50:10:46:7f:35:b4:b0:a2:4a:b8:
5e:bb:62:cf:88:c4:8d:31:7f:32:58:32:8e:30:ed:
f2:50:16:2b:cb:df:4d:a3:a5:c1:43:23:b6:4f:d7:
cd:72:58:ad:bc:64:a7:fa:00:22:70:38:6f:48:10:
54:a9:3b:a2:6b:63:e6:7a:63:00:e1:3c:6b:71:ca:
f1:cd:b8:c4:ad:a8:a7:45:e9:b4:19:98:cd:9f:eb:
da:28:eb:7c:1b:a2:52:d6:ba:46:93:68:67:7e:3c:
f6:01:c4:ae:5c:7d:1d:4e:0c:d8:98:c1:d0:0e:78:
c9:d2:96:a3:d4:12:c2:15:77:15:44:a8:30:4c:07:
81:f2:7c:88:3b:08:03:07:c4:1e:ab:9f:a5:6c:34:
e8:85:59:c4:3d:9c:cf:82:92:a0:c4:48:7c:03:a6:
fe:45:e6:a9:76:99:47:aa:27:87:c8:1e:27:44:bd:
d5:a2:e3:fa:45:2a:81:f2:82:11:9b:23:79:4a:9e:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:CF:B8:C5:95:FD:64:CE:40:47:A2:18:5D:F5:AE:4A:C0:CD:70
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3d:37:db:b1:4f:54:c6:95:b5:a2:db:ba:a7:33:75:d0:32:
11:ca:0e:a0:74:71:59:df:bd:f8:f3:1d:c7:b9:56:55:92:a9:
70:32:d4:d0:4d:72:cd:80:22:82:1d:f2:7a:5b:a8:d3:6d:2a:
d1:df:e6:9e:f4:50:c0:f3:a6:22:07:ee:01:e2:75:69:1f:0a:
b1:0a:81:8a:d3:15:9f:61:af:ff:ee:d7:1d:0a:e9:99:5f:08:
ba:ef:39:59:50:8d:7e:34:97:25:36:ae:d5:67:d3:fa:66:f9:
95:05:44:48:e6:1e:c5:c0:a9:a9:f6:18:c1:a5:00:63:07:76:
1f:78:8e:31:2c:9c:12:46:47:fc:01:88:cd:93:0e:10:32:7b:
ed:36:7c:c3:35:cf:50:6a:39:51:e0:83:56:4d:0d:e2:a7:e2:
0a:2d:ae:3e:09:02:77:3f:a1:5e:00:16:16:4d:e0:c1:d7:95:
fe:ed:16:dc:3e:e4:29:f4:c9:06:ba:36:72:fc:22:23:83:1d:
62:aa:77:50:0e:d0:81:75:cf:56:78:56:3d:10:e1:fe:74:c2:
93:7d:5e:f0:47:9f:1e:f2:f7:7a:13:17:10:0a:92:33:bf:dc:
47:8a:e8:3a:df:d9:94:0c:4e:76:23:7e:5d:c7:23:b9:1e:fc:
43:13:52:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAlpEoUsPT70/7fFcrkVe3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi
NjRiY2MwHhcNMjQwNjE3MTAwMDQyWhcNMjQwNjE4MTAwMDQyWjAzMTEwLwYDVQQD
Eyg5NzNhY2ZiOGM1OTVmZDY0Y2U0MDQ3YTIxODVkZjVhZTRhYzBjZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BtncdwxjqHzYP53mii6UHBMyEP6
6kaQB7GhBxEKsn15dfRzBcVuMbSQIiVRr/plOaoV+Qs9tCccVn9jNSVf2VAQRn81
tLCiSrheu2LPiMSNMX8yWDKOMO3yUBYry99No6XBQyO2T9fNclitvGSn+gAicDhv
SBBUqTuia2PmemMA4TxrccrxzbjErainRem0GZjNn+vaKOt8G6JS1rpGk2hnfjz2
AcSuXH0dTgzYmMHQDnjJ0paj1BLCFXcVRKgwTAeB8nyIOwgDB8Qeq5+lbDTohVnE
PZzPgpKgxEh8A6b+ReapdplHqieHyB4nRL3VouP6RSqB8oIRmyN5Sp44cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc6z7jFlf1kzkBHohhd9a5KwM1wMB8GA1UdIwQY
MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt
M2YyNTM5MmRlN2Y5LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5
LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT0327FP
VMaVtaLbuqczddAyEcoOoHRxWd+9+PMdx7lWVZKpcDLU0E1yzYAigh3yeluo020q
0d/mnvRQwPOmIgfuAeJ1aR8KsQqBitMVn2Gv/+7XHQrpmV8Iuu85WVCNfjSXJTau
1WfT+mb5lQVESOYexcCpqfYYwaUAYwd2H3iOMSycEkZH/AGIzZMOEDJ77TZ8wzXP
UGo5UeCDVk0N4qfiCi2uPgkCdz+hXgAWFk3gwdeV/u0W3D7kKfTJBro2cvwiI4Md
Yqp3UA7QgXXPVnhWPRDh/nTCk31e8EefHvL3ehMXEAqSM7/cR4roOt/ZlAxOdiN+
XccjuR78QxNSZQ==
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:17:00 2024 by rpki-client on console-fra.rpki-client.org