Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 6U65nTCNOkg++B6QsseVJ0QLhW8yfntdKMnQVcEtNHo=
Subject key identifier: 0C:16:28:C7:43:68:3F:74:EA:A9:64:A3:29:07:86:A5:88:C9:1E:8F
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 018F866CD47863C3541410B2BC41218183AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 03C5
Signing time: Fri 17 May 2024 12:00:30 +0000
Manifest this update: Fri 17 May 2024 12:00:30 +0000
Manifest next update: Sat 18 May 2024 12:00:30 +0000
Files and hashes: 1: E4SWu64tus818gEG4WEa0ykuvX8.roa (hash: x5X43n6nxKK98an5uLLnKBP3NJReP32cy8t7wpACMKg=)
2: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: Zr9X7KFoJY5t0HJ63nxVELd+YyGPZNLofVefDQhPAiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:d4:78:63:c3:54:14:10:b2:bc:41:21:81:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: May 17 12:00:30 2024 GMT
Not After : May 18 12:00:30 2024 GMT
Subject: CN=0c1628c743683f74eaa964a3290786a588c91e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:d3:7b:6b:de:b5:f5:fe:18:15:4e:5c:da:
5d:d2:60:e9:81:00:43:1b:52:00:e8:a1:8a:14:b9:
59:a5:b9:48:8d:c1:29:db:38:44:e0:b9:38:4a:59:
ee:c8:0a:4f:7c:40:62:cd:a9:93:01:0b:81:7d:22:
bb:c9:9f:c8:ce:10:a9:c1:3a:63:52:97:e5:35:3f:
78:87:16:56:10:ec:61:d9:74:0a:79:2f:a5:4d:83:
b9:52:cb:4f:e3:86:01:61:5c:63:46:c5:c4:14:c7:
1e:3e:36:76:68:9d:8c:8c:52:7a:47:2a:62:72:97:
62:88:5f:e1:f0:4f:f7:e1:7f:72:56:de:f0:b7:3b:
b0:0e:22:d3:26:e1:98:4b:0d:03:b8:90:21:72:45:
a0:62:58:c5:36:c2:5b:db:3a:ed:45:f5:e9:50:ee:
a0:aa:94:40:3d:c1:6f:0c:03:86:c5:0d:80:76:2d:
19:dc:ef:ef:fd:b2:8a:01:e3:88:7d:3b:0e:51:eb:
96:14:93:b9:5c:8c:ed:97:d6:e7:c3:f5:15:06:fa:
cb:84:f7:77:a0:fe:16:60:90:bb:1d:fd:b1:d9:50:
3c:d8:34:00:90:1b:7c:46:e1:13:7a:d6:7f:9c:d1:
bd:4a:6e:12:0c:af:02:ca:d2:5d:70:7c:e2:e8:73:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:28:C7:43:68:3F:74:EA:A9:64:A3:29:07:86:A5:88:C9:1E:8F
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:c9:6d:14:53:b8:bb:01:9f:fb:09:ae:37:93:4c:d0:70:
22:cb:89:e6:65:6a:b1:24:14:d1:02:de:7a:c0:e5:fb:b3:d2:
23:69:52:d7:de:00:24:e3:d9:9a:d6:7a:e8:e4:78:ef:1f:f8:
ce:a4:60:df:25:80:84:da:0b:f2:aa:7a:ea:44:d1:c2:72:11:
d0:78:ae:bc:9f:02:5a:86:6a:18:23:e6:fe:50:07:83:59:1a:
34:36:54:9f:c7:cf:0a:f0:be:e6:ca:9b:8b:7c:b2:67:f2:52:
5b:8a:f3:91:21:e0:37:39:46:ac:73:c6:5b:76:b3:67:65:4d:
55:a6:96:73:f3:c2:d2:5f:0b:35:3b:52:74:a8:ea:5a:01:8e:
6c:70:dc:ce:a2:69:ce:d0:ea:80:53:fe:53:6b:cd:c6:d4:e2:
a9:9e:bb:9b:68:b7:6f:ca:2e:4b:f8:da:9d:25:a7:16:11:fb:
8c:f2:53:d9:69:c2:79:1b:e1:56:51:3a:96:38:ca:af:df:a2:
b6:65:de:3e:e5:1b:c2:76:43:e2:54:89:d3:14:73:80:0c:19:
80:82:a5:c0:38:f8:2f:98:09:10:8f:ce:12:06:e5:b8:75:69:
fa:06:f5:e2:8c:6d:13:f3:41:28:ab:a0:f9:e9:2f:c7:02:50:
6e:f5:24:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GbNR4Y8NUFBCyvEEhgYOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1
NjJmZDIwHhcNMjQwNTE3MTIwMDMwWhcNMjQwNTE4MTIwMDMwWjAzMTEwLwYDVQQD
EygwYzE2MjhjNzQzNjgzZjc0ZWFhOTY0YTMyOTA3ODZhNTg4YzkxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzPTe2vetfX+GBVOXNpd0mDpgQBD
G1IA6KGKFLlZpblIjcEp2zhE4Lk4SlnuyApPfEBizamTAQuBfSK7yZ/IzhCpwTpj
UpflNT94hxZWEOxh2XQKeS+lTYO5UstP44YBYVxjRsXEFMcePjZ2aJ2MjFJ6Rypi
cpdiiF/h8E/34X9yVt7wtzuwDiLTJuGYSw0DuJAhckWgYljFNsJb2zrtRfXpUO6g
qpRAPcFvDAOGxQ2Adi0Z3O/v/bKKAeOIfTsOUeuWFJO5XIztl9bnw/UVBvrLhPd3
oP4WYJC7Hf2x2VA82DQAkBt8RuETetZ/nNG9Sm4SDK8CytJdcHzi6HMf2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwWKMdDaD906qlkoykHhqWIyR6PMB8GA1UdIwQY
MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt
NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy
LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyTJbRRT
uLsBn/sJrjeTTNBwIsuJ5mVqsSQU0QLeesDl+7PSI2lS194AJOPZmtZ66OR47x/4
zqRg3yWAhNoL8qp66kTRwnIR0HiuvJ8CWoZqGCPm/lAHg1kaNDZUn8fPCvC+5sqb
i3yyZ/JSW4rzkSHgNzlGrHPGW3azZ2VNVaaWc/PC0l8LNTtSdKjqWgGObHDczqJp
ztDqgFP+U2vNxtTiqZ67m2i3b8ouS/janSWnFhH7jPJT2WnCeRvhVlE6ljjKr9+i
tmXePuUbwnZD4lSJ0xRzgAwZgIKlwDj4L5gJEI/OEgbluHVp+gb14oxtE/NBKKug
+ekvxwJQbvUk8g==
-----END CERTIFICATE-----
Generated at Fri May 17 19:15:08 2024 by rpki-client on console-fra.rpki-client.org