Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: BwueuxwbMts9P2qijISiyK2MQjSF7OIUxCi/7g9NLNM=
Subject key identifier: C3:9D:D2:E5:75:AB:69:89:84:99:DC:E9:08:21:D9:1A:48:49:CB:5A
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 018F877F4C21816D580126B5BBFC1767E4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 08DE
Signing time: Fri 17 May 2024 17:00:17 +0000
Manifest this update: Fri 17 May 2024 17:00:17 +0000
Manifest next update: Sat 18 May 2024 17:00:17 +0000
Files and hashes: 1: 8QXhfXmssECcQX50jUhHPE9PZeU.roa (hash: 9xDd/ewOr+NmpFWmTyxXGNhDnDoCF8xfyATMjMge2sQ=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: kWDZd2Dl51Ez6UVwIVqyy8A9MvgCCHfPOfl3UDonBGw=)
3: zRCIBU1Aq9DcEW7hsYMYh4cdg3U.roa (hash: tuHYtqC8JyLcna9cmvADod1u6p9IVW8SJujyNdL1uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:7f:4c:21:81:6d:58:01:26:b5:bb:fc:17:67:e4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: May 17 17:00:17 2024 GMT
Not After : May 18 17:00:17 2024 GMT
Subject: CN=c39dd2e575ab69898499dce90821d91a4849cb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:3a:9a:84:d8:ac:2c:95:92:5d:58:02:26:
c8:8a:01:2c:73:64:a7:4e:c8:9e:2a:ec:8c:c0:6a:
cb:65:47:7d:71:bc:1d:40:2c:fa:25:95:6c:9a:f8:
f7:6d:bd:33:e9:48:8b:e3:c6:20:29:38:a5:fa:d8:
a0:bd:65:19:e0:c0:1a:80:c5:39:e0:ba:85:b4:a8:
de:00:f2:95:47:29:06:ca:d3:b8:18:5d:5c:e8:e5:
34:1b:bf:fd:db:cd:8b:23:2f:dc:c8:39:ff:0a:06:
2a:a5:f4:55:04:7c:24:f4:73:e4:6b:be:bb:cd:af:
c1:e0:6f:31:89:a9:34:2b:11:7c:9e:3e:f6:d5:db:
00:a3:21:4f:7d:9f:f7:f1:5d:54:94:15:85:82:a6:
c0:b1:1b:8d:75:f1:a1:de:5a:01:52:d9:92:72:a0:
cf:d9:61:32:4b:09:50:8d:8e:10:0f:ac:ea:99:2f:
36:c0:16:73:67:04:1f:c3:4e:40:0d:b7:d9:33:ea:
49:e4:b5:c5:ad:6d:6e:d1:fa:bb:6b:a4:f5:e4:b7:
fa:ec:10:e2:32:36:94:45:3b:43:66:48:0c:f1:d3:
dd:68:9e:c9:63:2d:04:42:81:92:d2:17:db:a1:f8:
14:39:13:74:30:26:a6:c0:2b:23:9e:43:41:6c:fc:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:D2:E5:75:AB:69:89:84:99:DC:E9:08:21:D9:1A:48:49:CB:5A
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:35:3a:d5:5c:02:0e:21:0f:ad:8b:1e:25:14:32:4f:00:50:
b2:d3:c2:f5:37:96:68:f1:0a:0e:25:63:71:f5:2d:82:dd:24:
a5:7f:19:8d:2d:1d:17:59:cf:7b:b7:41:ed:61:fa:1b:8d:8a:
f1:62:26:ed:9d:b9:77:a5:15:80:00:07:b2:00:c4:da:ce:15:
f3:f4:a0:46:f2:6c:9f:c8:7e:cb:5b:66:40:e9:ed:b1:09:47:
3f:55:12:52:fd:7e:9d:d9:78:87:9e:79:52:4b:c5:37:b9:0d:
d3:70:58:42:ac:68:7d:ff:01:81:25:a6:36:0b:8e:5f:b4:90:
72:af:e2:95:f1:81:57:9b:26:b3:cc:b8:65:dc:98:5f:8e:0c:
e1:8f:a5:fe:c8:3e:8d:a0:2c:76:38:21:1b:68:06:23:da:13:
29:82:28:e8:45:96:b5:25:a8:e4:a2:cd:22:da:c7:1f:31:de:
12:76:c8:a5:74:4f:34:4e:81:27:d5:48:ec:a5:0a:9b:7b:04:
92:2c:27:21:2f:b0:1d:af:68:e2:47:8c:ce:f5:aa:55:42:9c:
88:ec:c9:3f:b9:45:96:a1:14:bc:78:e9:69:b4:50:e7:57:b9:
80:8c:d9:62:63:da:15:4a:35:8e:8d:cd:fa:b3:e3:15:df:5b:
71:39:4e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Hf0whgW1YASa1u/wXZ+TEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYzZkZDE3MTllMjg0ZmY1YzcwN2Y4MTIyZThlZDBkODc5
NWFmM2QwHhcNMjQwNTE3MTcwMDE3WhcNMjQwNTE4MTcwMDE3WjAzMTEwLwYDVQQD
EyhjMzlkZDJlNTc1YWI2OTg5ODQ5OWRjZTkwODIxZDkxYTQ4NDljYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurk6moTYrCyVkl1YAibIigEsc2Sn
TsieKuyMwGrLZUd9cbwdQCz6JZVsmvj3bb0z6UiL48YgKTil+tigvWUZ4MAagMU5
4LqFtKjeAPKVRykGytO4GF1c6OU0G7/9282LIy/cyDn/CgYqpfRVBHwk9HPka767
za/B4G8xiak0KxF8nj721dsAoyFPfZ/38V1UlBWFgqbAsRuNdfGh3loBUtmScqDP
2WEySwlQjY4QD6zqmS82wBZzZwQfw05ADbfZM+pJ5LXFrW1u0fq7a6T15Lf67BDi
MjaURTtDZkgM8dPdaJ7JYy0EQoGS0hfbofgUORN0MCamwCsjnkNBbPworwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOd0uV1q2mJhJnc6Qgh2RpISctaMB8GA1UdIwQY
MBaAFFLG3RcZ4oT/XHB/gSLo7Q2Hla89MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMt
NjlkNDA2ZTE4NjUzLzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xMGIyOGUtZjkyOC00YTMwLTk0ZjMtNjlkNDA2ZTE4NjUz
LzEvVXNiZEZ4bmloUDljY0gtQkl1anREWWVWcnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjU61VwC
DiEPrYseJRQyTwBQstPC9TeWaPEKDiVjcfUtgt0kpX8ZjS0dF1nPe7dB7WH6G42K
8WIm7Z25d6UVgAAHsgDE2s4V8/SgRvJsn8h+y1tmQOntsQlHP1USUv1+ndl4h555
UkvFN7kN03BYQqxoff8BgSWmNguOX7SQcq/ilfGBV5sms8y4ZdyYX44M4Y+l/sg+
jaAsdjghG2gGI9oTKYIo6EWWtSWo5KLNItrHHzHeEnbIpXRPNE6BJ9VI7KUKm3sE
kiwnIS+wHa9o4keMzvWqVUKciOzJP7lFlqEUvHjpabRQ51e5gIzZYmPaFUo1jo3N
+rPjFd9bcTlOPQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:50:21 2024 by rpki-client on console-ams.rpki-client.org