Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: Pyh1E6QRTA9Xs2zM6bu0psRThKna4MIM/a3F3off6/s=
Subject key identifier: 3D:29:2E:D1:7F:27:70:4E:A2:90:3C:62:89:94:B5:FF:35:B8:82:64
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 018F317451B7C06B9A737634653CB27864CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 0C3C
Signing time: Wed 01 May 2024 00:00:57 +0000
Manifest this update: Wed 01 May 2024 00:00:57 +0000
Manifest next update: Thu 02 May 2024 00:00:57 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: K+KcwW/zABkNXWsB0KUXyuuVp6AJaLtaqXheBEG7qmg=)
2: Ys5ZcIWNUfItTusOPrfvQd8ap0g.roa (hash: 38d64IY2ChVXjGOP4GDjbOrJeZmqfSM1GL3TXxbSeec=)
3: xLnSF2b56sdGvEy1nIz5m5r51yI.roa (hash: qVK23ObsKI6e1rTm6jUAy0nD1WL/SdzGZ0NJ7KNEkbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:74:51:b7:c0:6b:9a:73:76:34:65:3c:b2:78:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: May 1 00:00:57 2024 GMT
Not After : May 2 00:00:57 2024 GMT
Subject: CN=3d292ed17f27704ea2903c628994b5ff35b88264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:41:b8:71:0e:0e:c7:0a:c4:16:dd:e5:29:
be:ac:a4:f6:83:2e:e0:44:55:22:cb:c2:2d:a8:98:
64:61:ac:01:69:a6:8e:dc:44:35:fa:18:d3:6c:f7:
1f:de:9b:3c:fd:1a:5e:c3:e8:aa:e4:06:88:fb:f7:
d4:09:6b:69:65:49:4c:60:d4:b6:44:da:9f:e4:19:
04:15:fa:4c:7b:b2:5a:5b:1d:2c:0a:5f:2d:b1:7c:
f6:13:1a:70:96:da:27:d1:7d:4d:3c:ac:a3:85:23:
de:01:0b:da:07:98:1c:da:e8:e4:53:a4:75:12:d8:
5c:04:cc:42:84:e8:cf:41:39:15:21:25:19:d1:eb:
65:4c:f9:14:32:76:42:8f:13:0a:8a:ed:6c:d8:56:
b2:31:20:77:27:f9:6f:56:52:27:37:5e:46:ff:b0:
77:82:ef:e3:28:44:b3:a3:d9:56:b3:75:f3:b7:43:
9a:b0:a4:3b:b2:62:00:b3:e4:cf:a8:c0:3f:b3:dc:
40:51:19:5c:06:1e:08:df:27:76:df:70:6f:8d:40:
dd:7c:d3:d7:8d:03:52:a6:1a:89:77:cb:74:77:59:
c4:a2:c8:97:f8:2c:de:79:e8:ba:84:8c:26:00:f0:
a9:0b:67:c0:63:0b:5b:b8:e8:4b:11:f7:75:2b:52:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:2E:D1:7F:27:70:4E:A2:90:3C:62:89:94:B5:FF:35:B8:82:64
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ae:21:5f:71:7d:1e:87:23:30:5c:e0:37:b1:46:f0:ce:f7:
7f:1c:b7:53:50:09:9d:e3:d4:40:22:38:16:28:68:11:dd:9b:
c6:3c:1a:a9:36:07:cd:24:fc:fe:8b:c1:b7:0f:b7:da:f1:55:
aa:68:42:99:05:7c:98:4b:6c:98:8e:8d:b1:44:88:a7:0c:85:
40:96:90:cb:86:b9:13:42:53:cd:01:a9:49:f3:50:10:6b:09:
12:a5:11:d0:1a:b1:13:2b:b6:31:41:94:0d:25:55:16:00:97:
5a:cd:b2:a0:b3:0b:fa:c8:49:7d:66:99:69:e0:a6:a7:8b:e9:
a6:85:ab:08:95:73:5d:6d:39:8c:5e:bc:90:6f:41:72:37:8b:
7a:cf:b3:31:09:05:08:aa:62:50:dc:9d:0f:45:a6:79:7f:aa:
81:1a:bd:1e:ef:df:d0:0c:81:54:ba:35:d9:7f:1a:f0:81:dd:
3b:fc:f2:19:84:1c:89:ba:20:aa:b8:cf:77:5a:46:78:da:0e:
b5:ea:f4:79:fc:b7:e9:a1:7b:c7:24:84:e3:0d:09:dd:b4:2d:
1c:02:51:c0:21:b7:f5:72:41:ad:8f:9b:c0:82:99:54:97:0c:
a9:04:2d:18:06:9f:8c:db:24:37:ab:91:b1:08:a4:4b:86:7d:
ab:b2:26:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8xdFG3wGuac3Y0ZTyyeGTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjQwNTAxMDAwMDU3WhcNMjQwNTAyMDAwMDU3WjAzMTEwLwYDVQQD
EygzZDI5MmVkMTdmMjc3MDRlYTI5MDNjNjI4OTk0YjVmZjM1Yjg4MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4xBuHEODscKxBbd5Sm+rKT2gy7g
RFUiy8ItqJhkYawBaaaO3EQ1+hjTbPcf3ps8/Rpew+iq5AaI+/fUCWtpZUlMYNS2
RNqf5BkEFfpMe7JaWx0sCl8tsXz2Expwlton0X1NPKyjhSPeAQvaB5gc2ujkU6R1
EthcBMxChOjPQTkVISUZ0etlTPkUMnZCjxMKiu1s2FayMSB3J/lvVlInN15G/7B3
gu/jKESzo9lWs3Xzt0OasKQ7smIAs+TPqMA/s9xAURlcBh4I3yd233BvjUDdfNPX
jQNSphqJd8t0d1nEosiX+Czeeei6hIwmAPCpC2fAYwtbuOhLEfd1K1K1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0pLtF/J3BOopA8YomUtf81uIJkMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ64hX3F9
HocjMFzgN7FG8M73fxy3U1AJnePUQCI4FihoEd2bxjwaqTYHzST8/ovBtw+32vFV
qmhCmQV8mEtsmI6NsUSIpwyFQJaQy4a5E0JTzQGpSfNQEGsJEqUR0BqxEyu2MUGU
DSVVFgCXWs2yoLML+shJfWaZaeCmp4vppoWrCJVzXW05jF68kG9BcjeLes+zMQkF
CKpiUNydD0WmeX+qgRq9Hu/f0AyBVLo12X8a8IHdO/zyGYQcibogqrjPd1pGeNoO
ter0efy36aF7xySE4w0J3bQtHAJRwCG39XJBrY+bwIKZVJcMqQQtGAafjNskN6uR
sQikS4Z9q7Im8A==
-----END CERTIFICATE-----
Generated at Wed May 1 09:18:35 2024 by rpki-client on console-fra.rpki-client.org