Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: Uv1vN4Th5/wewYfavkxJbtKsibzNPbRIfI5P2K4Y1u8=
Subject key identifier: 2B:4F:41:73:EC:91:A9:71:BA:D9:CE:80:52:FC:4B:BB:E9:E8:46:C0
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 018F83D9ECB11A978EC8DDD2A30BB6326D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 07A8
Signing time: Fri 17 May 2024 00:00:48 +0000
Manifest this update: Fri 17 May 2024 00:00:48 +0000
Manifest next update: Sat 18 May 2024 00:00:48 +0000
Files and hashes: 1: 6wWoZs5RLt_I2DhhrLEGczBEMzU.roa (hash: a9vG/goMYlc30oktf27BvAO4drB2ejkVF+THKX94kk0=)
2: G6gmIKJUhjkzi0z6OAdoJs844rY.roa (hash: c72HnbHzYZYTcnx4gTtQvMyKtw/dk3aTMnP9ypJnWbk=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: wtTy/o+TjsF7wH0vj2fcXYDKUXhODRpnYryKm1iaAw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:d9:ec:b1:1a:97:8e:c8:dd:d2:a3:0b:b6:32:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: May 17 00:00:48 2024 GMT
Not After : May 18 00:00:48 2024 GMT
Subject: CN=2b4f4173ec91a971bad9ce8052fc4bbbe9e846c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:85:aa:68:ee:ab:dc:40:e0:1d:ba:28:56:
cd:f8:c0:46:db:5a:91:b5:72:89:a0:e4:d3:ad:f9:
e6:99:8a:92:d5:04:6e:d9:9e:c6:5a:11:13:f9:28:
db:6c:ef:fa:41:30:c6:51:5c:e4:17:01:89:41:14:
be:dd:22:76:38:98:22:f2:02:42:cf:f7:8b:9e:13:
ff:84:47:2f:17:b2:6a:0e:9a:77:b3:f6:3a:59:43:
54:8d:a3:33:4e:f5:c9:7f:ef:0f:cc:3a:d3:7a:3b:
da:c7:88:ba:f5:04:96:db:df:76:9a:0b:d3:f8:d4:
2e:1b:83:31:ae:92:5f:18:0c:9e:19:1e:cf:f8:ff:
39:e0:17:7d:db:fe:39:aa:3b:bf:0a:78:95:d4:86:
1f:de:64:a4:e5:d2:23:55:23:8b:b4:70:d9:9c:38:
6f:b9:bc:5d:65:cb:57:19:4a:b8:72:55:06:2f:23:
c3:bb:03:2b:75:b2:66:43:bd:4f:8b:a2:01:33:9c:
38:75:68:95:d0:4d:5e:5c:2a:6a:6b:8e:6f:f0:62:
86:dc:e9:85:39:43:06:23:55:5a:22:fa:d1:64:d3:
f5:a0:86:bb:de:fd:18:08:48:fe:93:a3:cf:65:c7:
7b:23:a2:85:af:c2:54:4a:f3:05:12:43:5d:f5:bb:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:41:73:EC:91:A9:71:BA:D9:CE:80:52:FC:4B:BB:E9:E8:46:C0
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9b:fe:76:32:5e:75:59:7b:40:34:e6:b1:f6:3f:f5:67:eb:
6a:50:50:f2:45:be:35:24:7f:8c:f4:68:38:0b:ad:a9:c8:ff:
b6:6c:90:67:5d:3d:b6:37:aa:23:54:a7:c3:8c:98:9c:64:c5:
65:10:5b:a4:c3:28:d6:a9:84:7b:5e:72:1f:36:15:80:b7:31:
ff:e7:99:dd:f2:53:07:15:7d:22:25:f8:f6:4d:c0:aa:e3:51:
0a:24:06:b1:6e:16:9b:7a:dc:39:eb:d6:41:f7:0d:4b:45:75:
eb:1f:71:f6:e8:2e:dc:42:8c:b7:9f:fd:2e:36:d3:5d:e2:64:
40:ac:26:6a:45:67:b9:27:b0:41:52:b1:ca:02:76:09:6f:74:
51:f5:29:be:84:76:df:45:3b:14:10:57:7f:fe:a6:7f:8e:37:
1c:3d:15:bd:1d:79:52:f3:ff:0e:f4:82:fa:f4:9e:92:e7:1a:
b9:05:46:b5:11:03:db:d9:4f:5c:a2:d0:eb:5d:21:a9:8a:01:
45:22:21:fc:bb:e8:e2:b7:e8:69:8a:10:d2:85:b8:f1:d8:76:
cd:5f:d1:90:22:49:c3:b1:ff:34:4a:89:9e:23:99:37:a0:91:
ec:d4:9a:ae:4d:6a:25:ed:07:27:87:5f:c4:e6:1f:17:e9:a6:
4b:28:a0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+D2eyxGpeOyN3Sowu2Mm1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjQwNTE3MDAwMDQ4WhcNMjQwNTE4MDAwMDQ4WjAzMTEwLwYDVQQD
EygyYjRmNDE3M2VjOTFhOTcxYmFkOWNlODA1MmZjNGJiYmU5ZTg0NmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAGFqmjuq9xA4B26KFbN+MBG21qR
tXKJoOTTrfnmmYqS1QRu2Z7GWhET+SjbbO/6QTDGUVzkFwGJQRS+3SJ2OJgi8gJC
z/eLnhP/hEcvF7JqDpp3s/Y6WUNUjaMzTvXJf+8PzDrTejvax4i69QSW2992mgvT
+NQuG4MxrpJfGAyeGR7P+P854Bd92/45qju/CniV1IYf3mSk5dIjVSOLtHDZnDhv
ubxdZctXGUq4clUGLyPDuwMrdbJmQ71Pi6IBM5w4dWiV0E1eXCpqa45v8GKG3OmF
OUMGI1VaIvrRZNP1oIa73v0YCEj+k6PPZcd7I6KFr8JUSvMFEkNd9bsTXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtPQXPskalxutnOgFL8S7vp6EbAMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZv+djJe
dVl7QDTmsfY/9WfralBQ8kW+NSR/jPRoOAutqcj/tmyQZ109tjeqI1Snw4yYnGTF
ZRBbpMMo1qmEe15yHzYVgLcx/+eZ3fJTBxV9IiX49k3AquNRCiQGsW4Wm3rcOevW
QfcNS0V16x9x9ugu3EKMt5/9LjbTXeJkQKwmakVnuSewQVKxygJ2CW90UfUpvoR2
30U7FBBXf/6mf443HD0VvR15UvP/DvSC+vSekucauQVGtRED29lPXKLQ610hqYoB
RSIh/Lvo4rfoaYoQ0oW48dh2zV/RkCJJw7H/NEqJniOZN6CR7NSark1qJe0HJ4df
xOYfF+mmSyigKQ==
-----END CERTIFICATE-----
Generated at Fri May 17 01:15:24 2024 by rpki-client on console-ams.rpki-client.org