Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: WgmcSjdsbPKjrVq5QzkuqSuHlzU214isN2Qb/GlPoCw=
Subject key identifier: 53:75:84:F4:A9:E0:73:8D:E7:B8:3E:77:4D:63:DB:73:C4:DE:85:85
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 018F87B60F55E32A66E94116EF35E6A1F9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0144
Signing time: Fri 17 May 2024 18:00:06 +0000
Manifest this update: Fri 17 May 2024 18:00:06 +0000
Manifest next update: Sat 18 May 2024 18:00:06 +0000
Files and hashes: 1: nCkX2y3Z1L_mEhP4KCw6jFbhDKM.roa (hash: vepIgGWrBFv1QQA7NE739SLiG0/5GvJ6fTZP5yg3YiI=)
2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: 0KbYFUhuhaOANo+ngZISc3wgTRuEDEo81bAlF7UEU5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:0f:55:e3:2a:66:e9:41:16:ef:35:e6:a1:f9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: May 17 18:00:06 2024 GMT
Not After : May 18 18:00:06 2024 GMT
Subject: CN=537584f4a9e0738de7b83e774d63db73c4de8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:e0:27:07:f3:09:32:8e:ec:9b:99:d6:d9:
2c:88:c2:ba:6b:9e:e3:e0:cb:ac:3f:0f:82:34:0d:
80:8d:a3:7d:c8:65:6d:db:74:d5:f2:45:b1:d4:f8:
28:26:3a:81:01:82:bb:67:4d:d9:43:23:81:96:13:
69:61:f3:cb:bb:a7:66:13:4a:fb:7b:63:78:f8:0b:
39:96:91:1b:43:02:7c:80:a7:b0:0b:46:d7:71:22:
74:f6:4a:2f:a5:9a:1b:4e:b6:f7:4b:c3:02:29:a3:
d9:d5:d4:1f:2d:58:94:f4:2f:52:88:20:28:0e:6e:
12:ef:b4:64:9c:90:7b:15:c1:2b:07:56:df:49:15:
a2:d3:db:72:a3:ad:08:5f:83:d8:78:9a:72:b2:5e:
fc:b2:66:1f:f2:37:38:42:af:9d:35:ba:3b:08:63:
3c:43:b9:10:86:df:22:77:41:56:7e:55:64:4c:86:
bf:fa:c3:a5:d5:0a:4a:57:2d:2c:53:f6:ef:8f:61:
3f:e5:f3:10:fc:fb:d9:ca:ae:e8:b7:18:54:8d:21:
c5:2e:c4:74:e8:44:cf:2d:b1:50:26:9b:ee:96:7b:
a3:70:c5:32:7f:bc:05:73:e3:86:35:f1:00:ce:37:
81:51:72:34:ce:5f:c1:4c:72:78:80:61:f5:9e:16:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:84:F4:A9:E0:73:8D:E7:B8:3E:77:4D:63:DB:73:C4:DE:85:85
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:59:19:00:5b:86:2d:65:95:25:57:26:dd:f2:ce:ac:b5:
86:b6:4c:f5:40:d2:51:03:75:06:d5:58:29:d6:f2:d5:2a:17:
e6:8e:0f:59:8c:a7:8e:b4:1a:54:31:2d:09:f7:4f:22:07:9c:
80:76:1f:5c:34:0b:c9:77:9b:15:05:ef:ff:cd:68:86:b9:66:
34:19:a6:a5:67:77:9f:d7:7b:ff:5d:55:c6:ef:84:6b:c4:3f:
e5:b5:5d:7c:d2:6c:13:c2:95:7b:7d:6b:eb:ba:61:8f:77:eb:
c6:0f:5a:42:be:33:89:bb:3e:31:d7:90:1d:01:df:80:23:b4:
fc:5c:42:55:f4:4b:77:38:31:8e:92:3b:a7:3b:cc:ec:45:2c:
9a:9b:57:1e:d7:14:28:3c:ac:37:1e:b3:77:51:82:60:71:82:
41:00:cb:83:06:0f:9b:68:2d:d5:b5:51:f4:67:ba:5a:e5:e2:
1d:05:b4:e1:ff:79:10:67:6a:9a:a3:f1:64:0d:9b:34:8b:c6:
31:30:43:0c:3b:e4:a9:47:8e:92:eb:a0:70:0c:d0:3c:06:e3:
b9:13:82:85:b5:2d:85:48:3f:62:ac:28:ab:55:ba:48:14:f2:
c2:ec:13:c4:41:f9:2f:d0:8f:bf:31:c0:39:bf:08:e9:7a:60:
d0:4b:57:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htg9V4ypm6UEW7zXmofnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk
YjJlMDcwHhcNMjQwNTE3MTgwMDA2WhcNMjQwNTE4MTgwMDA2WjAzMTEwLwYDVQQD
Eyg1Mzc1ODRmNGE5ZTA3MzhkZTdiODNlNzc0ZDYzZGI3M2M0ZGU4NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycXgJwfzCTKO7JuZ1tksiMK6a57j
4MusPw+CNA2AjaN9yGVt23TV8kWx1PgoJjqBAYK7Z03ZQyOBlhNpYfPLu6dmE0r7
e2N4+As5lpEbQwJ8gKewC0bXcSJ09kovpZobTrb3S8MCKaPZ1dQfLViU9C9SiCAo
Dm4S77RknJB7FcErB1bfSRWi09tyo60IX4PYeJpysl78smYf8jc4Qq+dNbo7CGM8
Q7kQht8id0FWflVkTIa/+sOl1QpKVy0sU/bvj2E/5fMQ/PvZyq7otxhUjSHFLsR0
6ETPLbFQJpvulnujcMUyf7wFc+OGNfEAzjeBUXI0zl/BTHJ4gGH1nhaN6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN1hPSp4HON57g+d01j23PE3oWFMB8GA1UdIwQY
MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt
YTg5YTcwMjhkNDI5LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5
LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7VZGQBb
hi1llSVXJt3yzqy1hrZM9UDSUQN1BtVYKdby1SoX5o4PWYynjrQaVDEtCfdPIgec
gHYfXDQLyXebFQXv/81ohrlmNBmmpWd3n9d7/11Vxu+Ea8Q/5bVdfNJsE8KVe31r
67phj3frxg9aQr4zibs+MdeQHQHfgCO0/FxCVfRLdzgxjpI7pzvM7EUsmptXHtcU
KDysNx6zd1GCYHGCQQDLgwYPm2gt1bVR9Ge6WuXiHQW04f95EGdqmqPxZA2bNIvG
MTBDDDvkqUeOkuugcAzQPAbjuROChbUthUg/Yqwoq1W6SBTywuwTxEH5L9CPvzHA
Ob8I6Xpg0EtXjA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:29:06 2024 by rpki-client on console-ams.rpki-client.org