Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: LW0gleJNM7aU+OG6ZFxk5bPmuWBjLUZpi/p7zP1oauo=
Subject key identifier: 39:25:B3:2D:95:FE:33:AE:A2:8E:43:B0:7D:4C:B9:90:3D:6C:F8:40
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 018F8749DA736248B50C0DA082A207270C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 16:01:55 +0000
Manifest this update: Fri 17 May 2024 16:01:55 +0000
Manifest next update: Sat 18 May 2024 16:01:55 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: EmJvkaoRnRqQ+aWQs6k3SJcKAhMxr9Uqo9hjhlznRxg=)
2: TFoxFphTzuHyhh7yt8aJpg4TC2w.roa (hash: Xe/WVQXeKSMyd6z0dl2AkbWD87EzLKH/vT+lTDdSowA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:da:73:62:48:b5:0c:0d:a0:82:a2:07:27:0c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: May 17 16:01:55 2024 GMT
Not After : May 18 16:01:55 2024 GMT
Subject: CN=3925b32d95fe33aea28e43b07d4cb9903d6cf840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:a4:07:e1:1a:93:cc:37:83:8e:bd:66:ae:
06:8c:e9:1b:c2:bb:aa:c9:45:73:d6:59:e1:b4:94:
e3:32:05:81:7c:d1:c6:e0:56:a9:89:18:94:f2:d1:
53:78:e8:47:ff:d4:c5:92:b6:ad:9e:a6:b8:83:3f:
aa:a0:63:db:86:b3:a3:32:23:48:85:be:b0:ca:7f:
18:5b:ab:99:e5:c5:0a:7c:59:a3:b8:32:e4:c5:36:
a4:32:61:f4:74:de:c0:91:df:27:24:a8:7d:c1:43:
48:8c:c3:6c:13:58:b7:d6:1e:0c:f1:2c:e3:f2:ec:
3c:27:58:51:24:14:49:d1:ca:92:cc:d6:d3:9b:df:
62:c0:66:19:a9:5d:27:a1:3f:c3:d0:be:a6:98:b8:
c1:cf:eb:27:89:aa:c9:96:21:9c:2a:bc:ed:3c:4c:
e4:c3:75:26:90:a5:d7:e0:cf:98:fb:2f:ef:c4:9f:
c4:ff:c3:70:92:a7:e6:0c:42:65:93:5b:41:6b:23:
ea:57:9a:e3:fe:c0:90:ee:89:b4:e8:62:4e:2c:26:
1b:dd:44:0f:1a:39:43:14:98:c4:9e:56:9b:70:d1:
78:79:ac:1c:77:14:48:46:1b:da:4b:3f:29:d2:49:
5d:45:b9:d6:67:9c:f9:6f:80:8d:e9:7e:28:2d:4e:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:B3:2D:95:FE:33:AE:A2:8E:43:B0:7D:4C:B9:90:3D:6C:F8:40
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:2d:00:98:0c:bd:e8:a6:81:22:c9:d8:ec:5d:f0:11:ae:
be:20:d5:96:c9:81:f8:11:b3:0a:01:5f:8a:7a:26:d6:02:d4:
73:e8:93:94:df:10:cd:62:a0:0e:54:30:bb:bc:ce:e1:3d:28:
18:2b:42:48:a4:6d:13:2a:bf:93:bf:80:4d:05:dd:be:f0:93:
22:91:0a:01:1f:19:6a:2c:bb:7a:04:f4:f9:89:d7:1d:7e:09:
03:f1:4a:64:be:73:47:ae:67:69:fc:a9:db:80:50:c7:69:74:
68:74:a6:6f:03:24:32:42:13:56:b9:b8:c9:84:59:41:0f:b9:
00:76:b9:90:2b:9b:aa:57:bd:bb:d3:4b:ac:24:49:78:8a:33:
f8:0c:85:68:38:bb:92:e9:82:96:9b:b2:eb:9f:72:b9:eb:75:
6f:e2:71:ff:6b:ed:33:82:cb:42:ec:c8:13:74:63:4a:29:a4:
b4:24:52:39:97:9d:6d:4f:08:07:39:ee:98:07:eb:91:b8:1c:
66:b4:0c:fd:40:d9:b1:ea:00:9f:d6:d2:8b:2d:6b:3f:15:a4:
28:d6:a5:3d:45:b9:0f:a7:99:53:40:b6:42:80:27:36:97:c3:
f7:ea:6b:60:43:8d:18:50:7c:0f:b6:78:43:90:c3:c8:b1:be:
59:9a:35:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdpzYki1DA2ggqIHJwwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5
MTUxODEwHhcNMjQwNTE3MTYwMTU1WhcNMjQwNTE4MTYwMTU1WjAzMTEwLwYDVQQD
EygzOTI1YjMyZDk1ZmUzM2FlYTI4ZTQzYjA3ZDRjYjk5MDNkNmNmODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL6kB+Eak8w3g469Zq4GjOkbwruq
yUVz1lnhtJTjMgWBfNHG4FapiRiU8tFTeOhH/9TFkratnqa4gz+qoGPbhrOjMiNI
hb6wyn8YW6uZ5cUKfFmjuDLkxTakMmH0dN7Akd8nJKh9wUNIjMNsE1i31h4M8Szj
8uw8J1hRJBRJ0cqSzNbTm99iwGYZqV0noT/D0L6mmLjBz+sniarJliGcKrztPEzk
w3UmkKXX4M+Y+y/vxJ/E/8NwkqfmDEJlk1tBayPqV5rj/sCQ7om06GJOLCYb3UQP
GjlDFJjEnlabcNF4eawcdxRIRhvaSz8p0kldRbnWZ5z5b4CN6X4oLU71VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDklsy2V/jOuoo5DsH1MuZA9bPhAMB8GA1UdIwQY
MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt
MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2
LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACngtAJgM
veimgSLJ2Oxd8BGuviDVlsmB+BGzCgFfinom1gLUc+iTlN8QzWKgDlQwu7zO4T0o
GCtCSKRtEyq/k7+ATQXdvvCTIpEKAR8Zaiy7egT0+YnXHX4JA/FKZL5zR65nafyp
24BQx2l0aHSmbwMkMkITVrm4yYRZQQ+5AHa5kCubqle9u9NLrCRJeIoz+AyFaDi7
kumClpuy659yuet1b+Jx/2vtM4LLQuzIE3RjSimktCRSOZedbU8IBznumAfrkbgc
ZrQM/UDZseoAn9bSiy1rPxWkKNalPUW5D6eZU0C2QoAnNpfD9+prYEONGFB8D7Z4
Q5DDyLG+WZo1lg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:34 2024 by rpki-client on console-ams.rpki-client.org