Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: dHgE01AdGXRIks10S2zXNmbJwRnWm6YFqg52AYufqFg=
Subject key identifier: D8:12:A7:1D:0A:E1:A1:EB:19:AD:AC:38:41:86:77:55:D3:23:9E:43
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0191F9D9C2AF5532ABE7590FC70EACCCAE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: C6
Signing time: Mon 16 Sep 2024 08:01:23 +0000
Manifest this update: Mon 16 Sep 2024 08:01:23 +0000
Manifest next update: Tue 17 Sep 2024 08:01:23 +0000
Files and hashes: 1: 5k5MJQ3oDrpAWvHisiqHB1KxzkU.roa (hash: sr5zlhvZteADydXdemeMwr5hOYppa9O/htGupMnIoyI=)
2: QUfbWXrFQRLXTsfeBGtfQ5vf4vY.roa (hash: f6Ep5UMPIVSUlBwPQexjpuc7MSPN5ZTBvzRAPmNAPE4=)
3: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: Ao7ynViv3PlKD8i6LN7EVWnvz+HE3m9NZuROoZdvWBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:d9:c2:af:55:32:ab:e7:59:0f:c7:0e:ac:cc:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Sep 16 08:01:23 2024 GMT
Not After : Sep 17 08:01:23 2024 GMT
Subject: CN=d812a71d0ae1a1eb19adac3841867755d3239e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:dd:7f:e2:3e:f0:61:3e:95:07:22:42:d5:
3c:6b:f2:e6:02:2a:e6:e6:6d:d2:1b:47:c8:0f:48:
ee:66:28:36:9e:47:47:ee:49:3d:fb:af:3c:4f:b7:
ee:d2:1f:78:9b:e6:eb:e3:83:00:c6:bf:ae:4d:e9:
3a:54:78:dd:3e:7c:62:c0:32:e7:77:f3:ee:a6:31:
55:11:23:84:48:df:00:c1:d9:84:49:63:bf:5f:c3:
ec:42:f1:5e:ea:9a:45:56:15:39:81:d1:db:50:86:
25:40:76:7a:6d:60:1b:e0:56:70:87:10:67:fd:b3:
1a:ef:57:1d:49:2a:cd:3d:7c:e5:c5:32:26:cc:fe:
83:01:5c:3c:d1:8d:55:b8:a3:7f:64:8a:d1:bf:bd:
61:ad:c6:e2:4a:12:19:cf:87:9b:66:13:46:14:99:
57:a7:db:07:13:f8:cc:38:84:64:68:65:0d:d5:82:
ee:ce:f8:32:b4:d6:cf:ec:08:7a:bc:79:07:30:b7:
02:d3:f3:58:03:ac:1a:05:22:3c:b2:80:f4:ba:b9:
ab:d1:7e:7d:9b:ca:cf:b6:e4:b0:e8:e4:2f:fa:7d:
78:06:0c:62:fe:3d:c7:82:6a:b6:cf:85:38:75:a2:
0f:30:98:76:4a:0b:d1:cb:d0:97:6f:14:b2:77:07:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:A7:1D:0A:E1:A1:EB:19:AD:AC:38:41:86:77:55:D3:23:9E:43
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:0b:fb:d4:a8:62:fd:68:c4:77:15:cd:21:1f:97:2f:ff:
47:1b:f7:8c:3a:58:1f:49:c5:6f:dd:5b:1f:4b:af:ad:70:71:
94:c5:d1:df:04:c7:88:0e:06:74:3a:47:77:4f:d7:fa:1d:0d:
a8:f1:67:db:ae:f7:df:44:dd:52:44:18:91:8e:8d:e0:6b:f7:
c1:c3:3e:42:e8:15:09:d8:c1:49:de:f3:16:e8:03:43:a3:15:
e8:ed:7d:0f:b2:0e:6c:11:9b:f6:d9:dc:2a:5e:da:d1:9c:2f:
c2:0b:48:54:88:00:bd:ea:59:aa:56:89:c3:c5:74:e8:49:f1:
ba:31:47:1b:61:f9:1f:b3:ed:1b:41:54:27:8e:96:a2:06:0c:
67:f4:b4:7f:4f:74:60:43:72:76:b1:a1:a1:1f:f8:12:c6:7a:
45:80:dc:9a:7a:ec:f3:6c:3b:95:3a:7e:45:0c:6b:9e:0c:07:
af:19:0e:93:b4:e7:58:11:a8:95:86:76:aa:06:91:06:25:07:
4f:1d:f4:55:c8:b0:b0:b5:03:db:66:5d:46:00:f3:86:01:15:
63:f5:dc:ef:97:b6:fb:20:1a:9f:36:75:9f:8f:28:3b:25:27:
37:4a:34:6f:7f:07:63:65:d2:b2:3b:bf:7c:cc:1e:e2:48:f2:
04:0a:b4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52cKvVTKr51kPxw6szK4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz
NTdmYWMwHhcNMjQwOTE2MDgwMTIzWhcNMjQwOTE3MDgwMTIzWjAzMTEwLwYDVQQD
EyhkODEyYTcxZDBhZTFhMWViMTlhZGFjMzg0MTg2Nzc1NWQzMjM5ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNHdf+I+8GE+lQciQtU8a/LmAirm
5m3SG0fID0juZig2nkdH7kk9+688T7fu0h94m+br44MAxr+uTek6VHjdPnxiwDLn
d/PupjFVESOESN8AwdmESWO/X8PsQvFe6ppFVhU5gdHbUIYlQHZ6bWAb4FZwhxBn
/bMa71cdSSrNPXzlxTImzP6DAVw80Y1VuKN/ZIrRv71hrcbiShIZz4ebZhNGFJlX
p9sHE/jMOIRkaGUN1YLuzvgytNbP7Ah6vHkHMLcC0/NYA6waBSI8soD0urmr0X59
m8rPtuSw6OQv+n14Bgxi/j3Hgmq2z4U4daIPMJh2SgvRy9CXbxSydwdt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgSpx0K4aHrGa2sOEGGd1XTI55DMB8GA1UdIwQY
MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt
ODcwNzNmNDM0YjAzLzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz
LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAwL+9So
Yv1oxHcVzSEfly//Rxv3jDpYH0nFb91bH0uvrXBxlMXR3wTHiA4GdDpHd0/X+h0N
qPFn267330TdUkQYkY6N4Gv3wcM+QugVCdjBSd7zFugDQ6MV6O19D7IObBGb9tnc
Kl7a0ZwvwgtIVIgAvepZqlaJw8V06EnxujFHG2H5H7PtG0FUJ46WogYMZ/S0f090
YENydrGhoR/4EsZ6RYDcmnrs82w7lTp+RQxrngwHrxkOk7TnWBGolYZ2qgaRBiUH
Tx30VciwsLUD22ZdRgDzhgEVY/Xc75e2+yAanzZ1n48oOyUnN0o0b38HY2XSsju/
fMwe4kjyBAq03A==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:28:39 2024 by rpki-client on console-fra.rpki-client.org