Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: ZyWQc30I6bb00Rlk4QT7wOPdHOlJGecZMPlR30EXowo=
Subject key identifier: E0:BB:A9:C1:29:3C:24:36:06:90:B2:8F:12:5F:08:4D:D2:AB:73:DA
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 018F4EA363ECB97EC53C56F2DEA9984EFE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1158
Signing time: Mon 06 May 2024 16:01:21 +0000
Manifest this update: Mon 06 May 2024 16:01:21 +0000
Manifest next update: Tue 07 May 2024 16:01:21 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: yMEBHKNo/T+X3KoH53qOTS5jS4VtOLLKjoEJBAVYDRQ=)
2: lNjLQzQuWdiPKqs8kZFszSCkwyI.roa (hash: 3e+CD0KQsw4Bn3QIwZM9rBfHVZWPpCuSyu+aDKJh000=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:a3:63:ec:b9:7e:c5:3c:56:f2:de:a9:98:4e:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: May 6 16:01:21 2024 GMT
Not After : May 7 16:01:21 2024 GMT
Subject: CN=e0bba9c1293c24360690b28f125f084dd2ab73da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:6a:ed:32:6f:46:5f:44:31:8f:45:e1:72:
a3:60:02:13:15:d6:89:84:96:77:60:5d:9c:b8:e9:
27:8c:f7:88:78:5b:b9:80:5e:43:69:f1:b2:e0:0d:
61:60:14:40:e7:b5:64:5a:e1:e1:dd:81:5e:da:3e:
c5:86:46:bb:f8:92:e1:87:a9:7d:a9:7f:32:10:59:
ef:23:4e:d1:a2:93:d9:fb:d4:05:e0:00:b2:f6:67:
01:a5:49:87:3f:9e:fa:7e:76:7f:bd:d0:c3:bc:b8:
4b:8b:de:3e:1a:68:97:7b:3d:57:04:1e:19:68:01:
53:77:ef:ae:bc:a3:50:b7:46:71:61:9e:0a:67:a4:
c7:fe:ec:ca:0f:92:f5:4b:30:99:ca:8f:da:68:3e:
f1:59:cb:1a:1f:8e:8e:bd:f6:4a:10:55:b0:e1:49:
f4:7e:6b:83:ea:13:86:73:4e:23:5d:3f:f5:1b:1d:
ad:74:ec:33:21:6a:cd:fa:ac:1a:f4:6b:e7:cc:42:
f6:c3:aa:76:70:1e:55:82:76:12:5d:6d:c1:7a:95:
32:6a:c8:bd:1a:96:5c:57:e7:5e:00:52:17:df:9c:
45:31:8a:be:a7:6d:f2:ff:a5:04:ab:cf:d5:81:50:
32:18:10:74:63:5a:34:3d:60:4d:e9:de:3f:e6:1c:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:A9:C1:29:3C:24:36:06:90:B2:8F:12:5F:08:4D:D2:AB:73:DA
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:77:8e:f0:ec:ad:ba:3a:5a:7e:e7:88:7d:ec:9c:d8:22:f3:
0b:fa:6f:9a:a3:b0:34:b3:33:16:77:94:fa:49:25:6e:54:b8:
f3:cf:ad:65:bf:48:92:7d:65:07:7b:1e:c4:eb:b2:aa:05:b1:
91:6d:53:a3:67:a5:9b:c8:2b:df:50:f5:a5:da:4c:62:47:38:
0f:05:c8:1f:61:64:11:57:df:4c:93:2a:36:7c:c3:3d:50:2f:
65:7f:c5:58:ee:7e:ac:5a:cf:0d:e1:b5:b8:03:a3:eb:38:30:
63:42:20:f4:aa:05:00:02:52:63:d9:c8:48:73:28:7a:36:43:
a0:10:a0:b3:7a:4e:95:3c:02:46:be:c8:fa:53:d7:33:aa:58:
76:1b:d2:bf:94:cc:cf:00:f8:77:82:b0:49:a1:f1:00:71:30:
75:09:ba:71:99:40:99:71:0a:af:8e:6f:15:ac:bb:23:73:66:
03:b0:fd:4e:a0:42:34:42:83:55:db:10:e9:eb:33:f1:4a:89:
fc:54:53:4c:41:1f:5f:4e:8a:5a:7f:63:fe:d4:03:e8:c8:36:
13:bd:fc:56:b8:53:1d:9f:03:bd:08:09:05:9d:fd:10:a7:22:
c3:59:dd:7d:fb:37:b9:2f:f7:72:a9:16:7b:c6:79:48:92:1e:
93:83:ee:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Oo2PsuX7FPFby3qmYTv6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj
YTQ0OTUwHhcNMjQwNTA2MTYwMTIxWhcNMjQwNTA3MTYwMTIxWjAzMTEwLwYDVQQD
EyhlMGJiYTljMTI5M2MyNDM2MDY5MGIyOGYxMjVmMDg0ZGQyYWI3M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0dq7TJvRl9EMY9F4XKjYAITFdaJ
hJZ3YF2cuOknjPeIeFu5gF5DafGy4A1hYBRA57VkWuHh3YFe2j7Fhka7+JLhh6l9
qX8yEFnvI07RopPZ+9QF4ACy9mcBpUmHP576fnZ/vdDDvLhLi94+GmiXez1XBB4Z
aAFTd++uvKNQt0ZxYZ4KZ6TH/uzKD5L1SzCZyo/aaD7xWcsaH46OvfZKEFWw4Un0
fmuD6hOGc04jXT/1Gx2tdOwzIWrN+qwa9GvnzEL2w6p2cB5VgnYSXW3BepUyasi9
GpZcV+deAFIX35xFMYq+p23y/6UEq8/VgVAyGBB0Y1o0PWBN6d4/5hx5ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC7qcEpPCQ2BpCyjxJfCE3Sq3PaMB8GA1UdIwQY
MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt
OGNmMTE1YWEyY2MzLzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz
LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHeO8Oyt
ujpafueIfeyc2CLzC/pvmqOwNLMzFneU+kklblS488+tZb9Ikn1lB3sexOuyqgWx
kW1To2elm8gr31D1pdpMYkc4DwXIH2FkEVffTJMqNnzDPVAvZX/FWO5+rFrPDeG1
uAOj6zgwY0Ig9KoFAAJSY9nISHMoejZDoBCgs3pOlTwCRr7I+lPXM6pYdhvSv5TM
zwD4d4KwSaHxAHEwdQm6cZlAmXEKr45vFay7I3NmA7D9TqBCNEKDVdsQ6esz8UqJ
/FRTTEEfX06KWn9j/tQD6Mg2E738VrhTHZ8DvQgJBZ39EKciw1ndffs3uS/3cqkW
e8Z5SJIek4Pu1w==
-----END CERTIFICATE-----
Generated at Mon May 6 21:21:20 2024 by rpki-client on console-ams.rpki-client.org