Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: v+RlqW2stGoaOZH/ri6GvF5FzlIxbzvCLmq1s0gHroA=
Subject key identifier: DD:70:A0:2E:AE:BD:5E:31:55:BF:CC:D0:8B:92:7F:6C:A7:CD:07:1D
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 018F38C00DABCD329618CCD80371657EB0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1155
Signing time: Thu 02 May 2024 10:01:01 +0000
Manifest this update: Thu 02 May 2024 10:01:01 +0000
Manifest next update: Fri 03 May 2024 10:01:01 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: slSIo7oQ/PN/g+7FgnLDxpDO1Ba8jSy3JhKRB5SeG7I=)
2: XKSXxv-taJ4Gawngnw5hjIG-JEg.roa (hash: zaS1vLJbPt6cC4krrB78z3solOp/69KpAYMxBNe/Fp8=)
3: fYoZ4WhadEHlUTpuUML73ra30K0.roa (hash: G2p3r8cITDc/tRYQ3KnbyBPvkjwrYzxM/lul5LNx/T8=)
4: gAV1_0yCORXha5xtLk1NRumjvyQ.roa (hash: s30GeoIDeHky+QEu5jqE9XHQiuLpuh51XpYyiHZrHJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:c0:0d:ab:cd:32:96:18:cc:d8:03:71:65:7e:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: May 2 10:01:01 2024 GMT
Not After : May 3 10:01:01 2024 GMT
Subject: CN=dd70a02eaebd5e3155bfccd08b927f6ca7cd071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:3f:74:65:4a:b3:64:da:1d:ef:82:3f:5e:
a7:58:c4:1d:f9:34:11:dc:26:36:d6:2d:fb:36:fe:
20:aa:29:b6:7e:9e:64:01:ce:f1:62:9d:2f:26:c5:
cc:79:f1:31:df:4f:00:80:74:ad:6d:6f:44:71:8a:
b7:8e:86:27:b6:22:79:00:31:28:5e:bb:d4:d0:4c:
f9:57:c3:62:74:56:c0:be:2b:91:ab:10:c4:87:5c:
53:4a:96:74:f3:b9:c2:e2:cb:f5:54:ee:62:f6:80:
06:fa:ff:57:fc:90:ae:66:25:64:ee:8e:66:c7:e7:
77:b3:72:76:72:36:8a:c1:d0:03:b1:d9:a2:59:77:
6c:16:e5:ce:0d:a9:3c:75:a3:e6:89:b2:e4:af:dc:
ee:20:b0:d9:1e:ad:e7:72:71:17:c3:f6:79:66:2b:
bb:bd:30:5e:a2:20:75:51:74:85:09:f5:5b:07:e2:
15:1e:2f:b8:11:6d:49:96:70:c8:49:83:88:8c:f5:
f1:40:25:f4:21:5e:27:a7:bb:1d:26:65:c4:ed:e9:
a2:34:af:5c:7e:59:cf:81:1a:d7:28:10:be:db:dd:
6c:ca:73:71:6f:7d:d1:e6:ac:ff:f1:91:18:da:cb:
e4:f5:10:90:75:5e:e9:8c:ec:d2:fe:f1:b7:25:cd:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:A0:2E:AE:BD:5E:31:55:BF:CC:D0:8B:92:7F:6C:A7:CD:07:1D
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a6:f9:0c:db:9b:8d:a2:66:8b:0d:b8:a8:86:32:1c:4f:0b:
ec:eb:4d:a8:43:9b:86:66:ae:04:15:fd:f0:fe:73:5e:1b:d6:
4f:9f:98:69:2e:61:eb:a7:bd:7f:6e:28:be:5e:bb:d6:dd:56:
d7:fe:07:51:c0:41:d7:36:f7:c1:57:3b:72:62:32:07:a5:6d:
04:52:03:2e:81:20:30:f5:2c:39:00:a0:83:4c:e6:33:2b:10:
95:01:a5:3b:ab:66:ca:24:30:f4:dc:28:50:63:44:2a:a9:43:
6e:fb:ec:d9:36:d9:20:84:c9:2d:2f:1f:f8:06:b1:48:34:d4:
8c:0c:8e:38:38:ed:ad:14:fd:81:5b:44:98:16:1f:d7:83:8c:
f7:3b:85:b7:3f:28:32:77:25:a3:5b:a4:75:f1:c3:69:5e:ed:
a9:f7:80:6c:e1:cc:bd:3b:24:1e:56:af:b0:03:04:86:b0:fd:
99:19:8c:aa:80:95:85:d4:77:c9:09:6f:42:00:1e:4d:33:7f:
09:19:c9:7e:09:59:1a:70:d5:ac:f0:b2:9d:7f:c9:92:78:d0:
1d:71:48:e3:51:41:d1:25:ab:57:f8:e5:4e:f8:0c:b9:cd:50:
ea:ec:aa:56:7a:ef:8c:38:2f:5a:57:a4:e9:a6:c2:6b:6c:6d:
06:34:b4:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84wA2rzTKWGMzYA3FlfrDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjQwNTAyMTAwMTAxWhcNMjQwNTAzMTAwMTAxWjAzMTEwLwYDVQQD
EyhkZDcwYTAyZWFlYmQ1ZTMxNTViZmNjZDA4YjkyN2Y2Y2E3Y2QwNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt50/dGVKs2TaHe+CP16nWMQd+TQR
3CY21i37Nv4gqim2fp5kAc7xYp0vJsXMefEx308AgHStbW9EcYq3joYntiJ5ADEo
XrvU0Ez5V8NidFbAviuRqxDEh1xTSpZ087nC4sv1VO5i9oAG+v9X/JCuZiVk7o5m
x+d3s3J2cjaKwdADsdmiWXdsFuXODak8daPmibLkr9zuILDZHq3ncnEXw/Z5Ziu7
vTBeoiB1UXSFCfVbB+IVHi+4EW1JlnDISYOIjPXxQCX0IV4np7sdJmXE7emiNK9c
flnPgRrXKBC+291synNxb33R5qz/8ZEY2svk9RCQdV7pjOzS/vG3Jc2iRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1woC6uvV4xVb/M0IuSf2ynzQcdMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKab5DNub
jaJmiw24qIYyHE8L7OtNqEObhmauBBX98P5zXhvWT5+YaS5h66e9f24ovl671t1W
1/4HUcBB1zb3wVc7cmIyB6VtBFIDLoEgMPUsOQCgg0zmMysQlQGlO6tmyiQw9Nwo
UGNEKqlDbvvs2TbZIITJLS8f+AaxSDTUjAyOODjtrRT9gVtEmBYf14OM9zuFtz8o
Mnclo1ukdfHDaV7tqfeAbOHMvTskHlavsAMEhrD9mRmMqoCVhdR3yQlvQgAeTTN/
CRnJfglZGnDVrPCynX/JknjQHXFI41FB0SWrV/jlTvgMuc1Q6uyqVnrvjDgvWlek
6abCa2xtBjS09A==
-----END CERTIFICATE-----
Generated at Thu May 2 15:50:04 2024 by rpki-client on console-ams.rpki-client.org