Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier: CRP07Th1OvHbALvkM+s3Fi1GavChy13GaMfJi08u3pU=
Subject key identifier: AE:C6:59:3A:ED:FE:FD:1E:F2:1E:97:C0:61:8B:CD:A7:1B:E8:21:B5
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 018F882458A79760F5470118808BBEC4DA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number: 0CDF
Signing time: Fri 17 May 2024 20:00:34 +0000
Manifest this update: Fri 17 May 2024 20:00:34 +0000
Manifest next update: Sat 18 May 2024 20:00:34 +0000
Files and hashes: 1: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: U+5JlzUYr53r9wIa5xwMe7C1dCgqW/IY07yOMVrinPs=)
2: tvVmBokwmPtZUbK0bEwW9Q5YpQQ.roa (hash: axANsarz1ZUsjfMBbDNzNEHnnVX1Mzj/uswzI6s2GHw=)
3: zb7HZgyhwhucEhK7UuASuk8P-WY.roa (hash: SmCBBAdXFw6LjVK+wlTyzOkm5JDeF49BWfqta4GoBwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:58:a7:97:60:f5:47:01:18:80:8b:be:c4:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: May 17 20:00:34 2024 GMT
Not After : May 18 20:00:34 2024 GMT
Subject: CN=aec6593aedfefd1ef21e97c0618bcda71be821b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:c7:96:c5:d1:d3:13:3f:36:ef:6a:71:66:
db:c9:9a:bc:99:98:0d:95:e4:27:4f:97:af:16:2f:
0d:24:7b:d4:ed:3a:ab:68:2f:5f:c2:7f:6a:e2:5a:
8f:83:f6:f0:49:05:69:c5:15:ba:11:9d:44:8f:bc:
15:f3:00:dc:d6:8c:1a:35:c6:35:d0:05:1c:71:f9:
a4:ac:c8:fb:1a:66:f7:ac:83:a1:2b:56:cc:a9:04:
ba:e6:4b:36:e0:07:66:e0:ab:f5:98:f0:2d:32:a9:
d7:90:5c:4c:6c:d3:be:11:4b:8a:34:e1:98:ca:c5:
41:2b:d4:9e:41:bc:f5:58:ef:e6:5f:34:67:ea:25:
02:b3:5e:b7:53:55:da:9b:36:cd:0b:90:2e:c9:5b:
3b:1a:8f:13:94:75:19:4c:ab:90:b7:8d:24:f7:bc:
bd:09:ae:9a:de:e7:b8:bc:73:be:46:d3:ef:3b:07:
ed:30:05:8a:4a:bd:24:81:86:bb:fb:ee:4e:c3:fa:
cb:a5:ad:9a:e6:c0:d7:5a:f6:8d:d9:07:44:cf:43:
64:dc:a8:ca:9c:ff:48:ab:fb:af:db:81:21:9e:bf:
94:2a:82:f2:19:28:cb:74:a6:07:79:d0:b3:b7:b5:
e1:10:1b:59:03:1d:e4:90:0d:a4:90:a2:04:ab:f6:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:59:3A:ED:FE:FD:1E:F2:1E:97:C0:61:8B:CD:A7:1B:E8:21:B5
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:58:87:bd:3e:65:25:36:98:3e:e9:89:3f:63:ff:8e:ab:9d:
9e:75:a5:50:5d:64:76:74:aa:ce:3d:47:2c:26:b1:2c:64:cb:
20:a3:a2:06:5b:be:bd:d9:a1:15:c1:4c:85:2f:87:28:a5:1b:
32:e6:5b:bd:2f:eb:1e:a4:45:84:67:0c:88:58:46:d9:4d:54:
86:0b:7f:0a:a6:e0:53:a2:10:16:41:1b:99:0b:c7:50:67:55:
06:49:c2:43:f5:0c:12:75:03:2e:e4:ea:eb:58:83:2d:19:84:
f9:6b:49:9d:30:6f:48:5f:10:bd:fc:97:72:11:24:1e:89:2d:
28:98:6c:8d:34:49:fd:ac:b2:20:33:1a:c3:9c:5e:1c:0e:4b:
5a:96:13:d9:ae:3c:c7:d9:18:d3:7e:26:3e:a8:e8:70:5c:22:
6a:a3:d7:b4:85:1a:54:f1:de:8d:9c:d0:59:7e:4d:53:43:56:
80:37:04:de:31:d0:1a:c1:fa:7a:95:e2:2d:50:a3:2e:c0:f0:
43:82:79:6a:c9:54:21:f1:b9:f5:f8:7a:50:2f:81:a8:be:58:
48:4d:86:ac:41:8c:e8:26:b7:cb:77:21:b5:b3:a1:e2:53:3d:
a2:5d:c7:0c:5b:25:1b:1d:d5:c9:16:96:c5:0a:2a:28:5f:7d:
ee:ab:3c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJFinl2D1RwEYgIu+xNo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGYwMGYzOGNjZWQ5MjE5Nzk5MzA3NmNiMzY4NWJmMzJi
YzVlNjkwHhcNMjQwNTE3MjAwMDM0WhcNMjQwNTE4MjAwMDM0WjAzMTEwLwYDVQQD
EyhhZWM2NTkzYWVkZmVmZDFlZjIxZTk3YzA2MThiY2RhNzFiZTgyMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IXHlsXR0xM/Nu9qcWbbyZq8mZgN
leQnT5evFi8NJHvU7TqraC9fwn9q4lqPg/bwSQVpxRW6EZ1Ej7wV8wDc1owaNcY1
0AUccfmkrMj7Gmb3rIOhK1bMqQS65ks24Adm4Kv1mPAtMqnXkFxMbNO+EUuKNOGY
ysVBK9SeQbz1WO/mXzRn6iUCs163U1XamzbNC5AuyVs7Go8TlHUZTKuQt40k97y9
Ca6a3ue4vHO+RtPvOwftMAWKSr0kgYa7++5Ow/rLpa2a5sDXWvaN2QdEz0Nk3KjK
nP9Iq/uv24Ehnr+UKoLyGSjLdKYHedCzt7XhEBtZAx3kkA2kkKIEq/YaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7GWTrt/v0e8h6XwGGLzacb6CG1MB8GA1UdIwQY
MBaAFLLfAPOMztkhl5kwdss2hb8yvF5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MDZmYTgtNTJhMi00ZWQyLWEyZTEt
MDRlNGU0ZGM1ZmJhLzEvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MDZmYTgtNTJhMi00ZWQyLWEyZTEtMDRlNGU0ZGM1ZmJh
LzEvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUViHvT5l
JTaYPumJP2P/jqudnnWlUF1kdnSqzj1HLCaxLGTLIKOiBlu+vdmhFcFMhS+HKKUb
MuZbvS/rHqRFhGcMiFhG2U1Uhgt/CqbgU6IQFkEbmQvHUGdVBknCQ/UMEnUDLuTq
61iDLRmE+WtJnTBvSF8QvfyXchEkHoktKJhsjTRJ/ayyIDMaw5xeHA5LWpYT2a48
x9kY034mPqjocFwiaqPXtIUaVPHejZzQWX5NU0NWgDcE3jHQGsH6epXiLVCjLsDw
Q4J5aslUIfG59fh6UC+BqL5YSE2GrEGM6Ca3y3chtbOh4lM9ol3HDFslGx3VyRaW
xQoqKF997qs8VQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:02:28 2024 by rpki-client on console-fra.rpki-client.org