Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
File: imcGszlg4dFf0XcKKY4KVVpBqAk.mft (raw, json)
Hash identifier: 6dJ+f1VU0UUSyliM0VSbWXxCTgFOZKKxL4uTVSzSS3w=
Subject key identifier: 6C:00:21:6E:77:85:1F:57:5A:1A:18:01:1B:6A:EC:63:93:44:CE:62
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 018F87484BFABBEE8B57C884BBB01C418617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:00:13 +0000
Manifest this update: Fri 17 May 2024 16:00:13 +0000
Manifest next update: Sat 18 May 2024 16:00:13 +0000
Files and hashes: 1: bAttX97RzMOQ1qZ4HNmPUlpQfng.roa (hash: YLRYjqt74FnjIduetj4BOJ/FB85gxZ+gkeFk/pa5oN0=)
2: imcGszlg4dFf0XcKKY4KVVpBqAk.crl (hash: H8kr3aROPDGFJ2+DWA/3NmBDQury3JdOQtgqfSMMZXw=)
3: wzni65xEvs8kN0nfJW4ufeW5IzY.roa (hash: Px/XjVWCTyQqtwE/6XTDh7kpdoG4oYdOrz9Fyz3Z/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:4b:fa:bb:ee:8b:57:c8:84:bb:b0:1c:41:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: May 17 16:00:13 2024 GMT
Not After : May 18 16:00:13 2024 GMT
Subject: CN=6c00216e77851f575a1a18011b6aec639344ce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:0d:0b:af:43:07:98:b6:19:f2:ce:d4:cb:
c9:df:96:9f:5f:85:8b:c2:52:d4:bb:4f:d2:48:9d:
7e:cc:ff:2f:32:95:ac:60:01:3d:8c:f8:b0:4b:5a:
66:c1:ad:5d:5f:03:eb:f0:38:28:ab:15:dc:1f:03:
b8:9d:82:c0:1c:1f:b9:53:e5:1a:df:eb:72:31:f0:
94:69:59:1e:90:a2:20:48:02:85:a8:24:9c:e7:be:
bf:e1:40:35:4f:03:b4:b5:8c:b1:0a:03:11:af:48:
93:1a:92:be:52:88:bd:d0:22:c9:9e:17:15:8a:30:
8d:9e:9a:1a:37:94:a3:a4:44:b0:38:78:2d:cf:67:
17:61:5b:db:17:ce:24:ee:b7:26:7c:35:30:e6:3a:
54:14:4d:8b:38:2a:79:26:8b:6a:78:07:59:60:95:
56:12:ba:ce:c1:ec:39:f9:a8:3c:81:c3:f9:4d:fa:
f0:84:1b:e2:fb:98:26:5b:67:e5:e5:e3:fd:df:9a:
4f:0c:33:58:96:a6:67:4a:fa:77:4d:05:33:91:29:
c0:23:aa:7c:7a:17:ed:8a:00:5e:67:e2:ea:77:76:
89:54:2a:7a:a0:30:c9:f6:ac:cc:96:b7:3f:a4:71:
ac:88:3f:2e:ef:26:9f:9f:18:11:ca:e2:6f:13:79:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:21:6E:77:85:1F:57:5A:1A:18:01:1B:6A:EC:63:93:44:CE:62
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:6f:44:c3:a7:e8:99:6b:88:2d:03:cb:f9:bb:fe:44:18:
c1:6c:62:96:b5:95:5c:d4:ea:df:7d:6c:09:7a:37:4a:6c:7a:
3a:f4:04:2d:3b:2b:ca:78:82:58:df:22:be:71:55:c4:5f:62:
d2:bf:53:48:8d:ff:f4:d6:25:c2:47:a0:96:eb:28:4c:40:fe:
61:4e:66:d9:89:97:0a:88:0a:20:b3:23:36:39:4a:68:a9:27:
64:d4:80:29:f6:d6:fd:70:20:38:47:c7:11:7e:9d:f4:c8:bb:
3f:13:8d:d2:e0:fd:dd:dd:89:6b:02:67:94:27:c8:62:aa:82:
c1:a6:e9:d1:bc:9a:9f:6e:94:21:6a:ab:89:ff:d0:c3:8a:fe:
2b:af:76:78:5f:7d:83:64:7f:9a:a0:6c:ac:09:35:73:e8:6d:
43:6f:e1:d6:09:fd:f3:f5:89:12:d5:06:a3:76:67:45:d5:84:
6a:a4:b2:09:75:a5:e5:e5:dc:48:e2:16:61:76:e6:e5:69:59:
1d:7f:aa:27:94:89:9e:8e:90:71:02:4e:d6:e2:a4:e8:9e:2a:
c9:14:8f:9f:5e:3b:ac:4e:5a:64:86:92:7c:15:53:cf:5f:e5:
e6:19:be:70:da:df:5a:44:71:7f:a3:58:0d:fa:d7:74:8f:e6:
58:9b:a0:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSEv6u+6LV8iEu7AcQYYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjcwNmIzMzk2MGUxZDE1ZmQxNzcwYTI5OGUwYTU1NWE0
MWE4MDkwHhcNMjQwNTE3MTYwMDEzWhcNMjQwNTE4MTYwMDEzWjAzMTEwLwYDVQQD
Eyg2YzAwMjE2ZTc3ODUxZjU3NWExYTE4MDExYjZhZWM2MzkzNDRjZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxENC69DB5i2GfLO1MvJ35afX4WL
wlLUu0/SSJ1+zP8vMpWsYAE9jPiwS1pmwa1dXwPr8DgoqxXcHwO4nYLAHB+5U+Ua
3+tyMfCUaVkekKIgSAKFqCSc576/4UA1TwO0tYyxCgMRr0iTGpK+Uoi90CLJnhcV
ijCNnpoaN5SjpESwOHgtz2cXYVvbF84k7rcmfDUw5jpUFE2LOCp5JotqeAdZYJVW
ErrOwew5+ag8gcP5TfrwhBvi+5gmW2fl5eP935pPDDNYlqZnSvp3TQUzkSnAI6p8
ehftigBeZ+Lqd3aJVCp6oDDJ9qzMlrc/pHGsiD8u7yafnxgRyuJvE3kenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwAIW53hR9XWhoYARtq7GOTRM5iMB8GA1UdIwQY
MBaAFIpnBrM5YOHRX9F3CimOClVaQagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1jR3N6bGc0ZEZmMFhjS0tZNEtWVnBCcUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hNGQ5N2MtMjE0Zi00ZTU4LThhMWIt
OWI3YmEyNTE1NjA3LzEvaW1jR3N6bGc0ZEZmMFhjS0tZNEtWVnBCcUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hNGQ5N2MtMjE0Zi00ZTU4LThhMWItOWI3YmEyNTE1NjA3
LzEvaW1jR3N6bGc0ZEZmMFhjS0tZNEtWVnBCcUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+pvRMOn
6JlriC0Dy/m7/kQYwWxilrWVXNTq331sCXo3Smx6OvQELTsryniCWN8ivnFVxF9i
0r9TSI3/9NYlwkeglusoTED+YU5m2YmXCogKILMjNjlKaKknZNSAKfbW/XAgOEfH
EX6d9Mi7PxON0uD93d2JawJnlCfIYqqCwabp0byan26UIWqrif/Qw4r+K692eF99
g2R/mqBsrAk1c+htQ2/h1gn98/WJEtUGo3ZnRdWEaqSyCXWl5eXcSOIWYXbm5WlZ
HX+qJ5SJno6QcQJO1uKk6J4qyRSPn147rE5aZIaSfBVTz1/l5hm+cNrfWkRxf6NY
DfrXdI/mWJug9Q==
-----END CERTIFICATE-----
Generated at Fri May 17 19:05:53 2024 by rpki-client on console-fra.rpki-client.org