Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: Nt97bG80po853bNeKusP/YdMYwOrntbPcPK/5DGws6c=
Subject key identifier: 4E:02:DE:98:DD:3A:85:3B:DF:40:86:1E:E9:15:F1:9F:87:54:24:22
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 018F5212259940D02F82088E32FDDC2BD901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 0C20
Signing time: Tue 07 May 2024 08:01:11 +0000
Manifest this update: Tue 07 May 2024 08:01:11 +0000
Manifest next update: Wed 08 May 2024 08:01:11 +0000
Files and hashes: 1: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: KzDgnk5ywS5/4XWu6Id078iITi8b3/BqWq7j5ihrAk4=)
2: wIX-j9iXgfL_I-eYFr2nJgVS5i8.roa (hash: nNIQVx4/fiT/uKr/MEZ23ijfTDp7Mek+tQBUZ1kqjhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:12:25:99:40:d0:2f:82:08:8e:32:fd:dc:2b:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: May 7 08:01:11 2024 GMT
Not After : May 8 08:01:11 2024 GMT
Subject: CN=4e02de98dd3a853bdf40861ee915f19f87542422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:cb:20:18:3d:84:8c:b0:36:ca:94:fe:0a:
17:2b:16:24:c2:fa:3a:14:af:d5:36:5e:66:70:ba:
05:f3:3b:ac:d0:dc:3c:76:10:81:a4:21:05:22:d2:
d0:7e:32:d1:5d:f4:c9:8f:f7:19:92:a7:48:52:d3:
09:b8:27:8d:f7:02:3d:b7:aa:61:5e:16:fe:38:e2:
dc:3a:09:d5:32:33:2e:86:13:df:8b:fe:19:b8:6d:
50:f5:a3:4a:a1:a6:05:09:02:d8:05:a2:63:b2:46:
0f:c3:2e:ce:de:6d:6a:bb:47:10:40:07:1c:fb:39:
e8:0c:26:23:9d:c6:dd:ed:9d:f7:1b:34:8b:d3:b8:
a4:22:43:6e:4c:4e:60:cb:6c:fc:d4:47:7a:eb:29:
49:f5:56:77:ea:42:5a:c0:3f:28:2c:78:22:ae:54:
19:b0:6c:d5:5c:aa:5a:d8:db:a3:be:22:26:bc:71:
61:1c:34:3f:a4:e8:39:5e:9a:5b:50:80:83:41:fc:
25:e0:37:8c:16:70:22:bf:3a:02:35:20:76:9b:9f:
a3:e5:66:ee:4d:80:41:a6:e5:f1:a6:54:2d:1c:84:
85:fe:b6:e0:86:b2:78:24:47:7e:be:d8:c2:f1:13:
4a:17:8f:0e:31:56:6b:ee:af:16:00:28:db:37:b5:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:02:DE:98:DD:3A:85:3B:DF:40:86:1E:E9:15:F1:9F:87:54:24:22
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:be:73:68:92:fa:c9:1b:37:58:2e:0c:f1:9f:65:3b:9e:0c:
03:0a:5c:b2:bd:97:7e:07:5a:9d:a8:01:63:1e:2a:9f:a4:1c:
88:ba:61:a1:af:da:2d:ed:7c:6a:6e:52:8e:ce:dd:42:db:15:
60:a9:d4:cf:ea:77:4f:e7:78:b0:32:ec:15:09:73:36:ca:ac:
74:59:2e:9b:25:1d:09:55:14:95:dd:69:15:a6:9b:16:01:a0:
53:62:9f:88:35:72:ef:58:95:3f:30:05:16:7a:e6:9e:e3:e2:
f3:8d:8b:6b:66:8f:d3:48:b1:41:5f:e2:28:bc:f4:d8:e3:4e:
8f:b2:de:87:fd:d4:52:76:22:08:46:e3:72:73:cc:86:3e:fb:
32:d7:a6:f4:e5:cb:a0:47:a0:6a:1d:b1:d3:2c:62:0e:63:b9:
2b:5d:83:62:03:8a:d8:5f:c4:bf:75:b5:c5:e5:01:2f:ef:83:
5a:16:fe:63:9c:39:ef:fb:75:d8:3e:b2:eb:9a:cb:ae:68:a6:
81:eb:d5:b8:db:cb:f6:bd:4c:4e:ab:e3:20:e9:7c:c6:6b:cd:
7d:08:46:0c:1a:0c:e1:88:f0:4e:82:ba:3d:60:5a:9b:12:ae:
4d:cb:05:b9:52:17:52:4b:98:06:9e:bb:aa:d8:a1:89:96:51:
b6:03:5e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9SEiWZQNAvggiOMv3cK9kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4
NDc3MGMwHhcNMjQwNTA3MDgwMTExWhcNMjQwNTA4MDgwMTExWjAzMTEwLwYDVQQD
Eyg0ZTAyZGU5OGRkM2E4NTNiZGY0MDg2MWVlOTE1ZjE5Zjg3NTQyNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx7LIBg9hIywNsqU/goXKxYkwvo6
FK/VNl5mcLoF8zus0Nw8dhCBpCEFItLQfjLRXfTJj/cZkqdIUtMJuCeN9wI9t6ph
Xhb+OOLcOgnVMjMuhhPfi/4ZuG1Q9aNKoaYFCQLYBaJjskYPwy7O3m1qu0cQQAcc
+znoDCYjncbd7Z33GzSL07ikIkNuTE5gy2z81Ed66ylJ9VZ36kJawD8oLHgirlQZ
sGzVXKpa2NujviImvHFhHDQ/pOg5XppbUICDQfwl4DeMFnAivzoCNSB2m5+j5Wbu
TYBBpuXxplQtHISF/rbghrJ4JEd+vtjC8RNKF48OMVZr7q8WACjbN7WudwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4C3pjdOoU730CGHukV8Z+HVCQiMB8GA1UdIwQY
MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt
ODAzNWYyZGZjMWY0LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0
LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL5zaJL6
yRs3WC4M8Z9lO54MAwpcsr2XfgdanagBYx4qn6QciLphoa/aLe18am5Sjs7dQtsV
YKnUz+p3T+d4sDLsFQlzNsqsdFkumyUdCVUUld1pFaabFgGgU2KfiDVy71iVPzAF
FnrmnuPi842La2aP00ixQV/iKLz02ONOj7Leh/3UUnYiCEbjcnPMhj77Mtem9OXL
oEegah2x0yxiDmO5K12DYgOK2F/Ev3W1xeUBL++DWhb+Y5w57/t12D6y65rLrmim
gevVuNvL9r1MTqvjIOl8xmvNfQhGDBoM4YjwToK6PWBamxKuTcsFuVIXUkuYBp67
qtihiZZRtgNe/g==
-----END CERTIFICATE-----
Generated at Tue May 7 15:16:28 2024 by rpki-client on console-ams.rpki-client.org