Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: +fQExqK0ZFR58ssSq33CgCtjdfBv37ZUtYbgwghLS+4=
Subject key identifier: 6B:A4:2C:D5:07:26:7F:8C:37:68:F8:EF:26:4D:BF:A0:AC:8D:88:46
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 018FB4FDD031D7A07ABFF75D1FF9686A3221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 0CE0
Signing time: Sun 26 May 2024 13:01:23 +0000
Manifest this update: Sun 26 May 2024 13:01:23 +0000
Manifest next update: Mon 27 May 2024 13:01:23 +0000
Files and hashes: 1: FlDbEKehQsJSjo0s3jft5nTjGgA.roa (hash: 8omC+UNO6ZgyRaUkiBfOGc7v1TGPR0cK3QR8z3+gqyY=)
2: GD7mekuGefVvda4o_6FnPgGHbrc.roa (hash: RkCdUgqNHEIFaudhuJ2GwsHlY49UtrmqEUjYqLog5q0=)
3: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: f6KxAOiqaNIBWaep8vD+5dZGMwo1oO+IrMpX7/G73lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:fd:d0:31:d7:a0:7a:bf:f7:5d:1f:f9:68:6a:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: May 26 13:01:23 2024 GMT
Not After : May 27 13:01:23 2024 GMT
Subject: CN=6ba42cd507267f8c3768f8ef264dbfa0ac8d8846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:44:68:77:05:84:3c:d9:ba:58:e5:2b:a6:
b3:40:f8:2b:f8:e3:77:7b:1f:fe:05:c6:74:1a:da:
70:93:5a:f4:32:2c:63:17:02:10:44:27:5c:49:31:
ad:b4:05:b5:f4:17:40:08:b5:19:82:68:0a:38:66:
38:98:0c:68:d3:07:60:d0:01:1c:39:61:13:aa:f3:
32:07:56:e1:b3:17:c2:19:c3:cd:b6:7a:d1:7f:03:
5a:5f:d5:f6:b0:f4:19:d9:e9:f6:8e:15:75:d6:70:
69:98:e5:ec:4b:ad:84:61:99:93:48:ee:33:9e:b2:
5f:b8:79:8b:2c:9a:8d:58:6a:24:22:8b:f2:57:84:
9d:eb:01:9c:f4:78:8c:36:bf:39:a2:7f:7d:e2:84:
b0:48:6b:9d:ec:75:92:90:84:67:82:b4:de:3a:c4:
58:13:58:0b:85:d9:d5:43:61:24:b2:4f:32:df:88:
be:b3:0f:a8:42:f0:a6:d2:2c:b1:f1:cd:fe:e4:7c:
12:a0:e5:60:e8:99:9c:09:7a:3b:ce:60:f4:ce:91:
ec:f2:20:4d:a2:6f:18:b1:e2:84:7b:91:78:c6:75:
47:1d:4c:54:0f:52:20:1f:81:51:dd:13:31:0a:74:
ef:39:59:27:3a:13:06:7b:d1:7b:4d:b2:97:61:0c:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:2C:D5:07:26:7F:8C:37:68:F8:EF:26:4D:BF:A0:AC:8D:88:46
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:25:e6:05:6a:9a:94:8c:d1:9d:82:96:9b:4c:16:c4:f3:
5b:63:d1:0e:bc:f1:d8:d4:fc:ff:a1:98:f0:a9:fc:6e:d7:d2:
0d:2e:8f:00:f8:ea:b2:c1:cd:70:60:24:7c:2f:22:97:3c:e1:
82:71:75:dc:5d:f0:b9:62:c9:73:d0:7e:a5:26:19:d5:dc:32:
0b:db:89:cc:68:e0:b8:7b:7a:b4:31:0e:c0:cc:05:a6:f5:75:
6c:70:00:29:49:85:03:96:45:78:82:ce:c5:a5:95:b3:ca:c9:
7b:0e:4c:97:a3:e0:a6:00:9a:2b:89:b0:bc:e2:4b:e1:fb:5e:
4f:23:66:57:84:06:68:37:ac:72:c7:e4:be:5c:8b:88:0a:c5:
3f:d1:a0:93:e8:6f:82:28:9e:aa:b2:a2:30:d0:82:62:d3:87:
71:42:35:14:f9:43:35:bf:e4:26:65:95:0b:a6:d4:17:65:60:
db:02:24:9c:45:69:92:bf:c2:42:90:5d:0e:97:55:01:74:d8:
d6:2b:ac:d7:96:cc:ae:52:2b:8d:0b:1b:9c:48:b2:58:2c:a2:
b7:13:03:e0:69:b6:97:5b:96:0f:47:d3:a1:07:d6:ae:72:8a:
c2:99:46:ab:80:3c:d8:a6:11:61:f1:16:93:05:d6:f9:f8:0e:
32:8d:4b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+0/dAx16B6v/ddH/loajIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjQwNTI2MTMwMTIzWhcNMjQwNTI3MTMwMTIzWjAzMTEwLwYDVQQD
Eyg2YmE0MmNkNTA3MjY3ZjhjMzc2OGY4ZWYyNjRkYmZhMGFjOGQ4ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJEaHcFhDzZuljlK6azQPgr+ON3
ex/+BcZ0Gtpwk1r0MixjFwIQRCdcSTGttAW19BdACLUZgmgKOGY4mAxo0wdg0AEc
OWETqvMyB1bhsxfCGcPNtnrRfwNaX9X2sPQZ2en2jhV11nBpmOXsS62EYZmTSO4z
nrJfuHmLLJqNWGokIovyV4Sd6wGc9HiMNr85on994oSwSGud7HWSkIRngrTeOsRY
E1gLhdnVQ2Eksk8y34i+sw+oQvCm0iyx8c3+5HwSoOVg6JmcCXo7zmD0zpHs8iBN
om8YseKEe5F4xnVHHUxUD1IgH4FR3RMxCnTvOVknOhMGe9F7TbKXYQw+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGukLNUHJn+MN2j47yZNv6CsjYhGMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu4l5gVq
mpSM0Z2ClptMFsTzW2PRDrzx2NT8/6GY8Kn8btfSDS6PAPjqssHNcGAkfC8ilzzh
gnF13F3wuWLJc9B+pSYZ1dwyC9uJzGjguHt6tDEOwMwFpvV1bHAAKUmFA5ZFeILO
xaWVs8rJew5Ml6PgpgCaK4mwvOJL4fteTyNmV4QGaDescsfkvlyLiArFP9Ggk+hv
giieqrKiMNCCYtOHcUI1FPlDNb/kJmWVC6bUF2Vg2wIknEVpkr/CQpBdDpdVAXTY
1ius15bMrlIrjQsbnEiyWCyitxMD4Gm2l1uWD0fToQfWrnKKwplGq4A82KYRYfEW
kwXW+fgOMo1Ltg==
-----END CERTIFICATE-----
Generated at Sun May 26 15:19:11 2024 by rpki-client on console-fra.rpki-client.org