Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: GBKvIMWMbq3c1H72UN0l/7G48nimLhqx/CaXENW2Re0=
Subject key identifier: F8:FF:36:82:6A:62:C1:D6:F0:FC:59:8B:0D:AA:02:D0:85:F6:66:05
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 018F505A9DECE16F9E8136ED97CDC874D850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 115C
Signing time: Tue 07 May 2024 00:01:06 +0000
Manifest this update: Tue 07 May 2024 00:01:06 +0000
Manifest next update: Wed 08 May 2024 00:01:06 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: jEYETwA5MWLdUpjpc+SdM1vi1ugVncAmBdDQCc6/6fA=)
2: IT2bk4dv9wOkuJfpHqAjH87DIvc.roa (hash: e0C6AzkhODudLWvRQAiKhtrl+62mStCU6ARDxkP5Jsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:50:5a:9d:ec:e1:6f:9e:81:36:ed:97:cd:c8:74:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: May 7 00:01:06 2024 GMT
Not After : May 8 00:01:06 2024 GMT
Subject: CN=f8ff36826a62c1d6f0fc598b0daa02d085f66605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:52:88:05:55:73:5b:91:d9:14:04:c4:f4:
2d:bc:12:6c:c0:02:7e:bb:18:9b:c2:59:16:4c:3b:
0c:2f:b3:fd:d1:9f:99:3e:dc:d7:2f:aa:0f:ed:ec:
9e:8a:86:5e:07:50:e6:1e:4f:6d:00:5a:72:f1:b3:
fd:df:09:05:8e:05:e3:08:43:31:48:e6:2c:1c:14:
b6:71:f7:27:e5:a5:15:97:cd:6d:84:d0:49:e5:fb:
2f:11:93:c1:d2:33:f1:4b:c9:ba:ae:da:4c:a5:a2:
c0:6f:08:2d:10:ee:49:52:d7:e7:0e:d5:c3:ca:a4:
3d:87:20:c8:5c:2e:50:37:75:6a:9d:ed:dc:b5:ae:
fe:40:1e:29:8e:c9:24:af:43:df:72:75:88:79:b1:
ce:15:d9:e0:7d:e3:63:46:56:c4:75:15:e3:0a:c8:
06:d9:ce:75:f8:b5:b6:4a:00:e2:b2:e5:3b:f0:bc:
98:c4:4d:02:c3:11:f4:0d:35:77:ba:0e:f7:e7:b7:
c6:87:63:00:0c:63:61:63:67:a6:2f:ad:6d:e3:87:
41:82:8a:77:03:9a:ea:fc:04:d1:96:1c:be:b3:b7:
b4:ec:15:51:e9:c7:3a:77:38:28:f9:1f:80:cb:ed:
31:26:25:28:54:03:35:de:5f:f8:57:3a:55:1e:b6:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:36:82:6A:62:C1:D6:F0:FC:59:8B:0D:AA:02:D0:85:F6:66:05
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:01:19:0c:e5:cb:9d:c1:18:e8:28:de:09:d7:ac:94:e3:
e4:b1:b0:19:ea:08:2a:fb:bc:25:94:d3:a1:e7:c8:c1:36:1f:
c5:4c:30:0e:b2:dc:59:c8:85:8a:36:c0:e1:d5:34:6e:ea:ee:
ba:92:64:63:b0:85:6c:20:d9:f7:17:4b:30:48:46:76:43:fd:
ad:57:90:aa:98:27:fd:f5:c4:e5:ca:e7:5d:17:28:23:dd:8b:
92:8e:92:e1:a1:04:7b:2f:43:06:77:82:00:d3:cd:a2:1c:65:
3a:8b:47:93:da:46:cc:33:13:a2:32:6e:65:2b:c1:1e:7c:21:
c4:b2:4b:fe:15:ed:00:1f:1d:b8:84:9c:60:6c:2b:36:58:98:
32:89:0c:2f:5f:cf:1f:09:ff:9b:a5:2c:9c:64:0c:6a:ec:23:
27:d8:38:39:21:dd:a6:27:55:9f:82:0b:15:17:fe:23:27:a9:
14:cf:79:81:bf:dd:22:05:90:3e:62:7b:76:c9:72:c7:8e:e7:
96:88:34:eb:6a:60:16:ae:40:2f:99:fd:ce:bf:ad:4e:b2:b0:
28:4f:a2:b9:8f:69:2b:78:00:7d:ac:cc:43:a8:66:0e:48:13:
51:4c:43:49:b8:f8:cc:f3:d6:c2:5c:7f:13:64:ee:bc:07:5a:
bf:0f:b8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9QWp3s4W+egTbtl83IdNhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Zjg2NmZiMGFhODNhMjcxYTBjYjdkYzkwMzAxODhjODlk
MjNlNWQwHhcNMjQwNTA3MDAwMTA2WhcNMjQwNTA4MDAwMTA2WjAzMTEwLwYDVQQD
EyhmOGZmMzY4MjZhNjJjMWQ2ZjBmYzU5OGIwZGFhMDJkMDg1ZjY2NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJNSiAVVc1uR2RQExPQtvBJswAJ+
uxibwlkWTDsML7P90Z+ZPtzXL6oP7eyeioZeB1DmHk9tAFpy8bP93wkFjgXjCEMx
SOYsHBS2cfcn5aUVl81thNBJ5fsvEZPB0jPxS8m6rtpMpaLAbwgtEO5JUtfnDtXD
yqQ9hyDIXC5QN3Vqne3cta7+QB4pjskkr0PfcnWIebHOFdngfeNjRlbEdRXjCsgG
2c51+LW2SgDisuU78LyYxE0CwxH0DTV3ug7357fGh2MADGNhY2emL61t44dBgop3
A5rq/ATRlhy+s7e07BVR6cc6dzgo+R+Ay+0xJiUoVAM13l/4VzpVHrY9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj/NoJqYsHW8PxZiw2qAtCF9mYFMB8GA1UdIwQY
MBaAFNn4ZvsKqDonGgy33JAwGIyJ0j5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYt
NWMxZDVhNjk5MmQ4LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MjczYTQtMTBjOC00MGJmLWIyNGYtNWMxZDVhNjk5MmQ4
LzEvMmZobS13cW9PaWNhRExmY2tEQVlqSW5TUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0IBGQzl
y53BGOgo3gnXrJTj5LGwGeoIKvu8JZTToefIwTYfxUwwDrLcWciFijbA4dU0buru
upJkY7CFbCDZ9xdLMEhGdkP9rVeQqpgn/fXE5crnXRcoI92Lko6S4aEEey9DBneC
ANPNohxlOotHk9pGzDMTojJuZSvBHnwhxLJL/hXtAB8duIScYGwrNliYMokML1/P
Hwn/m6UsnGQMauwjJ9g4OSHdpidVn4ILFRf+IyepFM95gb/dIgWQPmJ7dslyx47n
log062pgFq5AL5n9zr+tTrKwKE+iuY9pK3gAfazMQ6hmDkgTUUxDSbj4zPPWwlx/
E2TuvAdavw+42g==
-----END CERTIFICATE-----
Generated at Tue May 7 02:28:42 2024 by rpki-client on console-fra.rpki-client.org