Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: l5108p/c/4gfOFg/HPAi2wI7vTNSbMvc8z406/x9Few=
Subject key identifier: 5D:40:82:31:3B:3B:D9:B8:54:4B:B0:D3:E1:E0:D6:2D:3A:4D:EB:42
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 018F727851B0AD0C3970FD4084796BF4B973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 117A
Signing time: Mon 13 May 2024 15:00:38 +0000
Manifest this update: Mon 13 May 2024 15:00:38 +0000
Manifest next update: Tue 14 May 2024 15:00:38 +0000
Files and hashes: 1: CBHw9jhDKrMquym8Oq0XHyeYY4Y.roa (hash: WTZdkHdre+oXhy1PSx7bUexIRJ27JG+KMz2YB5gpMPE=)
2: NMBwJqVYnrwi7lPhK-xV3AGZgrs.roa (hash: DB1lzj/1/vlfiI5mbL8CkZtKyTRU7o+OFiNG+aLSpU8=)
3: RFRttKdoAHPuBkrEZlZXbXFQCDI.roa (hash: gGkGkBM+DYy4S8qAI91zpZe5NXUANmPmai75nE63EwI=)
4: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: bOQFED86/TbYyf8SL04qLHKGkExHAGAJdblWXaGG808=)
5: bq7OP9TmXZiG_zQcEe6YI_hOgPY.roa (hash: SkabKxUOkBNHegBMTaI5mWA5c9sXNKrfgdNH/l3e+EQ=)
6: c2Um77VBBMUz6W5fC5pzyvl2OUE.roa (hash: cEtfb8seliakExAI/ZbHqG/Jt0hl9jD+e7tgBsXBdnU=)
7: nTBHWmgxyhWcacNlVFSCYzx0xA0.roa (hash: ktRUk1RBVAT6WhF7x1dJLStdOgXq1auNj9IXSm1VZKA=)
8: qSO8GRUH7b27Z58Dz-ZviOrIRBc.roa (hash: BYoiyMB3TNm/JFz9s+6miGp5TQXiMuzo/vBJOuzjsoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 14:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:78:51:b0:ad:0c:39:70:fd:40:84:79:6b:f4:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: May 13 15:00:38 2024 GMT
Not After : May 14 15:00:38 2024 GMT
Subject: CN=5d4082313b3bd9b8544bb0d3e1e0d62d3a4deb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:b7:8f:f5:d1:2b:92:03:02:2a:f4:a7:3c:
5c:06:3d:28:3c:00:10:b0:a6:c0:69:b2:f1:af:e7:
a4:19:e2:4d:e1:fb:c7:e8:ce:4e:51:d7:e4:18:14:
e6:8b:43:25:d0:d2:d5:20:70:0d:95:c7:01:7e:fb:
81:cd:c5:37:25:32:c8:c7:02:b2:8c:b1:1a:50:82:
09:d6:00:7f:a2:7f:5d:5a:90:77:ea:48:08:6f:da:
85:a9:e3:bd:7d:88:f5:2d:91:65:a7:dd:1e:14:f0:
d8:25:52:9a:86:ac:bc:fc:8a:88:4e:39:56:49:90:
69:3d:b9:f7:8b:86:82:a4:45:d9:e8:de:fc:5e:97:
e6:fb:54:ba:6c:3e:96:d0:05:26:50:0d:a4:0e:fb:
65:a1:5a:a8:4c:32:6b:10:12:4c:f8:ba:7a:04:61:
03:96:94:76:3d:fa:58:b6:d9:af:d4:96:aa:3b:5a:
aa:e4:ea:cc:47:69:a7:98:43:22:8d:19:41:b7:2f:
34:32:fc:32:91:d4:b1:04:57:33:d6:98:d8:e5:04:
d0:01:86:35:be:ee:7f:f8:6b:ad:7d:86:22:31:0a:
3c:7d:f9:24:12:d9:fb:7e:3b:64:14:fc:4b:22:b0:
41:80:76:7c:15:44:88:a7:4d:92:a8:84:3b:e8:58:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:82:31:3B:3B:D9:B8:54:4B:B0:D3:E1:E0:D6:2D:3A:4D:EB:42
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d1:16:91:4d:71:3a:94:00:5f:35:71:58:ad:16:61:97:8a:
f4:39:96:79:f6:06:43:e5:c1:90:07:45:ee:5c:95:9a:4c:54:
9d:4c:e3:78:1c:ee:4a:15:50:12:89:f2:c5:f2:1b:f2:59:63:
d1:1a:40:ae:f2:68:6a:83:44:9b:c6:f7:7c:60:86:98:3d:40:
ec:94:aa:08:18:e3:47:8a:3b:31:7b:13:5c:9b:d1:97:62:03:
92:ae:05:3b:41:6b:9c:20:2e:c0:c2:e2:7d:19:1d:ab:2c:12:
d7:de:49:03:67:82:3e:3a:8c:4a:d0:58:02:90:8f:7f:df:e7:
29:cf:fe:57:7b:a8:04:d0:9e:b0:84:e4:08:ba:32:1b:0c:86:
62:8a:17:c3:77:92:5c:f7:cf:3b:25:c4:fb:b2:3d:46:1c:74:
e1:b7:42:b3:a6:e5:d1:ae:64:6d:e7:22:58:90:e1:49:98:f2:
87:8c:a8:dd:6d:c9:a7:f3:9c:27:67:e3:ae:5d:ac:ce:ad:03:
a3:6a:24:01:20:59:09:c7:0a:76:74:1f:1f:02:26:dd:f6:91:
ba:77:ab:2a:0a:97:88:a8:df:79:66:8d:8e:69:5f:f2:0e:ef:
66:31:36:ff:72:0a:1a:97:3f:a3:ca:de:ef:a4:ee:13:9f:31:
42:c2:40:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9yeFGwrQw5cP1AhHlr9LlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm
MTZhOWYwHhcNMjQwNTEzMTUwMDM4WhcNMjQwNTE0MTUwMDM4WjAzMTEwLwYDVQQD
Eyg1ZDQwODIzMTNiM2JkOWI4NTQ0YmIwZDNlMWUwZDYyZDNhNGRlYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37q3j/XRK5IDAir0pzxcBj0oPAAQ
sKbAabLxr+ekGeJN4fvH6M5OUdfkGBTmi0Ml0NLVIHANlccBfvuBzcU3JTLIxwKy
jLEaUIIJ1gB/on9dWpB36kgIb9qFqeO9fYj1LZFlp90eFPDYJVKahqy8/IqITjlW
SZBpPbn3i4aCpEXZ6N78Xpfm+1S6bD6W0AUmUA2kDvtloVqoTDJrEBJM+Lp6BGED
lpR2PfpYttmv1JaqO1qq5OrMR2mnmEMijRlBty80MvwykdSxBFcz1pjY5QTQAYY1
vu5/+GutfYYiMQo8ffkkEtn7fjtkFPxLIrBBgHZ8FUSIp02SqIQ76FhXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1AgjE7O9m4VEuw0+Hg1i06TetCMB8GA1UdIwQY
MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt
ODZhNTUxOGUyZDUyLzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy
LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdEWkU1x
OpQAXzVxWK0WYZeK9DmWefYGQ+XBkAdF7lyVmkxUnUzjeBzuShVQEonyxfIb8llj
0RpArvJoaoNEm8b3fGCGmD1A7JSqCBjjR4o7MXsTXJvRl2IDkq4FO0FrnCAuwMLi
fRkdqywS195JA2eCPjqMStBYApCPf9/nKc/+V3uoBNCesITkCLoyGwyGYooXw3eS
XPfPOyXE+7I9Rhx04bdCs6bl0a5kbeciWJDhSZjyh4yo3W3Jp/OcJ2fjrl2szq0D
o2okASBZCccKdnQfHwIm3faRunerKgqXiKjfeWaNjmlf8g7vZjE2/3IKGpc/o8re
76TuE58xQsJAoQ==
-----END CERTIFICATE-----
Generated at Mon May 13 16:46:48 2024 by rpki-client on console-fra.rpki-client.org