Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: qYbBBtbmuJQZDWlWv/yS+RnCbLp82tADCd8A1ERodmQ=
Subject key identifier: BC:4D:68:72:F0:62:D8:67:A8:B5:1A:8C:10:53:CD:A9:01:C7:4A:24
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 018F98AB2FBA350394F7F0BCFC2CDD9781A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 11D1
Signing time: Tue 21 May 2024 01:01:46 +0000
Manifest this update: Tue 21 May 2024 01:01:46 +0000
Manifest next update: Wed 22 May 2024 01:01:46 +0000
Files and hashes: 1: Juuq6NFlR_u0wegQ1mbet9E7950.roa (hash: 9BeXrWuMt1rSgHFDH8nilGY1NiIKTCNucFevlOidHs0=)
2: UjOI4D4bFnn3-69OmtW1EOFqQcw.roa (hash: Lev7DEgQqT6Xm7J3gHcShkE9ryrEB/bruJS8hTJT8ps=)
3: Z8yIXOGt-R81_p1X8gc7IFzMN60.roa (hash: UrzH24x3uoywiwr/7yoHropCgM2fcMRRu+pc9DAupB4=)
4: aE6rUPg7uW_xAN7Vj6B1enDwUsg.roa (hash: V5FSNYz6NN2Bw4ZdRSpbl0Cwevq1uPcXvFPnRzjv7eA=)
5: aV2tlRfaFNOGgwhONPSFe8FMjhY.roa (hash: LNGPrr5aalBDoCoCd2Fg0HeHcgtY2Iz6ETDdyX3r6aI=)
6: tXPAGmMeMGUt_Y_GLIdZ4bm84u8.roa (hash: Oq4uFu3qipLlmPEUoTtkEvFzy024ZUUiULoF07CLIxw=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: XvoPqcNnZgvApFDVKBcP5LQvHWYbaJPoFfnUSkapkME=)
8: y19d9mLYEwnaQFrYY-KiaJDTT7Y.roa (hash: /FU0vTmK/MHqgbVfmXfxMVXHyd02mSJ/5+msPlk/B3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:ab:2f:ba:35:03:94:f7:f0:bc:fc:2c:dd:97:81:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: May 21 01:01:46 2024 GMT
Not After : May 22 01:01:46 2024 GMT
Subject: CN=bc4d6872f062d867a8b51a8c1053cda901c74a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:d4:ab:a3:cb:b5:0b:75:94:c3:a8:b6:29:
b1:51:75:65:81:7e:61:d2:66:0e:87:cb:f9:cd:1e:
ab:ae:04:2c:a7:c3:ec:63:d0:1e:f0:2d:0e:1b:8d:
6d:44:a8:ef:ec:99:ba:b8:67:ad:0e:81:00:9a:93:
60:10:61:96:8c:d1:32:2a:52:8b:12:5a:10:c6:17:
bf:43:af:cc:be:a3:0c:83:b0:fb:6a:44:11:ed:2c:
f0:c4:de:35:1d:20:14:72:73:86:44:e9:16:c7:86:
c7:67:8d:5e:61:82:70:63:8d:d6:47:71:0b:60:56:
69:c5:ac:25:4f:35:0b:a6:57:d6:92:65:2f:95:13:
1e:1f:13:6c:e1:6c:e7:9f:c0:25:a2:ee:29:b8:db:
df:ed:1e:34:1c:23:25:f8:f9:d6:d2:29:af:48:71:
6e:1b:ed:9d:1d:51:1c:e8:db:a0:d4:75:f0:90:0d:
b0:f6:64:77:46:a9:60:f3:2a:51:99:1b:d9:6d:45:
17:4f:4f:31:9d:56:fc:d1:b2:39:b4:fa:66:9a:44:
df:0e:13:5d:88:b4:d3:71:63:6a:53:9d:09:bf:7b:
02:f8:91:76:41:d1:9f:93:2c:37:0c:26:fd:db:36:
80:2e:e3:78:83:38:b4:b0:2b:f2:33:36:e8:21:ab:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:68:72:F0:62:D8:67:A8:B5:1A:8C:10:53:CD:A9:01:C7:4A:24
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:6e:a2:68:97:13:8e:1c:dc:a3:67:e7:a4:b5:01:82:35:
48:8a:8c:04:b2:2f:c9:2a:b3:03:20:c1:f4:4b:0a:53:4e:f0:
ea:fa:6b:b1:73:45:16:75:75:a6:18:0d:aa:f8:6a:5e:26:3a:
3e:eb:23:7b:56:45:d3:f7:87:ed:87:73:48:84:6c:67:e5:11:
85:3a:49:5a:79:2d:24:78:8b:49:a1:cb:11:06:17:37:84:8c:
f7:a1:aa:dd:dd:b5:43:dc:04:e8:94:e7:17:aa:02:bc:c3:39:
c1:3a:65:b0:05:96:80:78:db:04:29:eb:88:d7:44:42:7a:50:
53:36:f2:49:d4:25:49:b3:a6:fe:fa:d0:12:fb:e0:cf:fe:d3:
25:97:e2:5c:25:90:a7:f2:74:fc:67:fc:91:39:b6:d3:ae:ba:
db:9b:06:f4:26:5d:2d:27:85:93:7f:20:ce:fb:e6:ab:1f:7a:
28:b3:47:91:b8:b5:6d:94:9f:1b:97:db:81:fd:9f:78:48:34:
f3:8a:89:7f:3a:43:0e:c0:83:5a:e2:e5:40:a0:0f:89:f8:e5:
c4:17:d8:a4:9e:75:d8:83:e3:01:3f:77:1b:30:5a:84:e7:c1:
15:58:6c:9e:07:2f:f7:63:79:5e:74:a5:f2:b9:1d:46:6f:3d:
fa:44:1b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Yqy+6NQOU9/C8/Czdl4GoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4
MDQ4NjAwHhcNMjQwNTIxMDEwMTQ2WhcNMjQwNTIyMDEwMTQ2WjAzMTEwLwYDVQQD
EyhiYzRkNjg3MmYwNjJkODY3YThiNTFhOGMxMDUzY2RhOTAxYzc0YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5DUq6PLtQt1lMOotimxUXVlgX5h
0mYOh8v5zR6rrgQsp8PsY9Ae8C0OG41tRKjv7Jm6uGetDoEAmpNgEGGWjNEyKlKL
EloQxhe/Q6/MvqMMg7D7akQR7SzwxN41HSAUcnOGROkWx4bHZ41eYYJwY43WR3EL
YFZpxawlTzULplfWkmUvlRMeHxNs4Wznn8Alou4puNvf7R40HCMl+PnW0imvSHFu
G+2dHVEc6Nug1HXwkA2w9mR3Rqlg8ypRmRvZbUUXT08xnVb80bI5tPpmmkTfDhNd
iLTTcWNqU50Jv3sC+JF2QdGfkyw3DCb92zaALuN4gzi0sCvyMzboIaurMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxNaHLwYthnqLUajBBTzakBx0okMB8GA1UdIwQY
MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt
Y2UyMjUxODdmYzM4LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4
LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUc9uomiX
E44c3KNn56S1AYI1SIqMBLIvySqzAyDB9EsKU07w6vprsXNFFnV1phgNqvhqXiY6
Pusje1ZF0/eH7YdzSIRsZ+URhTpJWnktJHiLSaHLEQYXN4SM96Gq3d21Q9wE6JTn
F6oCvMM5wTplsAWWgHjbBCnriNdEQnpQUzbySdQlSbOm/vrQEvvgz/7TJZfiXCWQ
p/J0/Gf8kTm2066625sG9CZdLSeFk38gzvvmqx96KLNHkbi1bZSfG5fbgf2feEg0
84qJfzpDDsCDWuLlQKAPifjlxBfYpJ512IPjAT93GzBahOfBFVhsngcv92N5XnSl
8rkdRm89+kQbgQ==
-----END CERTIFICATE-----
Generated at Tue May 21 02:13:24 2024 by rpki-client on console-fra.rpki-client.org