Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: W4gyha21A0q3FgLqvPG6HHtsanMIhdOsPrnVMvb7FO8=
Subject key identifier: 82:CC:FC:1B:C0:DB:A2:50:E9:D2:5F:DB:45:AA:E1:A9:D1:A5:42:89
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 018F88249115BA1E0EA9F13EB9727D0ABEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 20:00:48 +0000
Manifest this update: Fri 17 May 2024 20:00:48 +0000
Manifest next update: Sat 18 May 2024 20:00:48 +0000
Files and hashes: 1: HUcTbUESIFKjLsiqPF2oTRw_8q0.roa (hash: FCENVfY7eBLUJyiDxBM9X1m2IcJPcmQozsxhPGovtQk=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: gwDanUHojY7DyxzSYt/4hAlMc7nOVtLZTFdmWpKl0t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:91:15:ba:1e:0e:a9:f1:3e:b9:72:7d:0a:be:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: May 17 20:00:48 2024 GMT
Not After : May 18 20:00:48 2024 GMT
Subject: CN=82ccfc1bc0dba250e9d25fdb45aae1a9d1a54289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:df:d6:6c:3a:45:33:5b:56:a4:ea:d5:4d:
24:91:51:fd:e1:7d:a3:4c:94:92:b4:40:7a:a4:9e:
62:58:92:6a:69:d3:e1:2a:d9:4c:06:df:51:9d:e9:
3f:5d:73:ba:7e:a7:e5:ec:52:7f:f4:08:ce:6d:65:
d6:e5:79:49:75:44:8c:ae:b6:df:af:07:f1:1d:6f:
a2:79:92:26:4d:f2:06:be:42:12:1d:47:d7:17:b2:
28:f0:e6:50:5c:81:c6:97:db:06:7c:65:2e:74:50:
c8:92:b4:27:23:c1:a7:dc:57:ad:e6:57:37:af:e9:
d7:4f:01:88:83:bd:14:23:b0:c0:7b:23:fa:cc:23:
bb:dd:2b:55:a5:cc:23:50:e9:05:a8:41:8f:42:f9:
cb:77:a1:b4:79:60:37:4e:93:af:7e:86:e0:68:9d:
a3:37:1a:31:10:7f:6d:23:8a:ab:4b:a3:bc:f6:75:
e4:74:f1:23:fa:3a:39:70:39:de:ec:f6:1b:2a:0c:
d8:2f:54:d8:ec:cd:18:eb:16:c3:17:53:88:c6:34:
df:2f:7a:b7:1b:42:83:48:02:53:cb:36:21:4e:8f:
76:c1:32:83:df:c3:79:c6:79:31:a4:74:70:49:fc:
3b:d2:d9:ee:e8:63:e9:87:46:5a:02:f3:55:b4:75:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:FC:1B:C0:DB:A2:50:E9:D2:5F:DB:45:AA:E1:A9:D1:A5:42:89
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:0b:86:d3:99:62:c2:7b:dc:d3:6e:f7:7b:9e:ea:67:79:
3a:c1:3a:74:9d:db:1a:39:94:7b:82:2d:72:b0:9e:9d:d3:55:
ec:12:9f:3f:b6:d0:89:2f:2d:fd:eb:16:48:d0:4e:cd:ce:97:
1a:c6:d8:fc:be:9c:53:3c:8b:7e:0d:fa:6c:d4:fc:0f:ed:0d:
64:4e:39:9d:32:c4:9f:08:8c:07:21:17:c4:1d:e3:97:fc:85:
6e:28:06:da:ee:61:8f:5e:68:97:55:41:ea:f8:16:33:6a:3a:
97:69:69:47:3b:8a:be:05:e3:10:75:0e:a1:07:5a:52:5e:ee:
25:b7:47:ee:ed:76:9c:09:8d:58:28:58:75:74:87:a5:16:65:
21:cf:3a:66:2f:52:85:23:0d:03:24:ad:68:fe:31:d1:81:dc:
c2:df:b7:1f:15:81:03:a2:a9:4f:c2:09:67:90:78:3d:47:56:
7d:24:d5:4b:0e:18:3e:35:2e:5f:96:33:35:72:ec:d1:63:8b:
ac:d7:e0:a2:19:3a:8d:63:02:e0:25:f9:0d:a3:ee:0f:8d:85:
fa:a1:b3:c4:d0:a6:c6:41:3a:fe:92:59:5c:ff:2c:14:90:81:
53:2a:3f:22:33:86:f8:67:2f:30:39:8f:ac:a8:fe:50:d3:9d:
a7:64:6a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJJEVuh4OqfE+uXJ9Cr69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjQwNTE3MjAwMDQ4WhcNMjQwNTE4MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg4MmNjZmMxYmMwZGJhMjUwZTlkMjVmZGI0NWFhZTFhOWQxYTU0Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JTf1mw6RTNbVqTq1U0kkVH94X2j
TJSStEB6pJ5iWJJqadPhKtlMBt9Rnek/XXO6fqfl7FJ/9AjObWXW5XlJdUSMrrbf
rwfxHW+ieZImTfIGvkISHUfXF7Io8OZQXIHGl9sGfGUudFDIkrQnI8Gn3Fet5lc3
r+nXTwGIg70UI7DAeyP6zCO73StVpcwjUOkFqEGPQvnLd6G0eWA3TpOvfobgaJ2j
NxoxEH9tI4qrS6O89nXkdPEj+jo5cDne7PYbKgzYL1TY7M0Y6xbDF1OIxjTfL3q3
G0KDSAJTyzYhTo92wTKD38N5xnkxpHRwSfw70tnu6GPph0ZaAvNVtHU80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILM/BvA26JQ6dJf20Wq4anRpUKJMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ4LhtOZ
YsJ73NNu93ue6md5OsE6dJ3bGjmUe4ItcrCendNV7BKfP7bQiS8t/esWSNBOzc6X
GsbY/L6cUzyLfg36bNT8D+0NZE45nTLEnwiMByEXxB3jl/yFbigG2u5hj15ol1VB
6vgWM2o6l2lpRzuKvgXjEHUOoQdaUl7uJbdH7u12nAmNWChYdXSHpRZlIc86Zi9S
hSMNAyStaP4x0YHcwt+3HxWBA6KpT8IJZ5B4PUdWfSTVSw4YPjUuX5YzNXLs0WOL
rNfgohk6jWMC4CX5DaPuD42F+qGzxNCmxkE6/pJZXP8sFJCBUyo/IjOG+GcvMDmP
rKj+UNOdp2Rq+Q==
-----END CERTIFICATE-----
Generated at Sat May 18 00:32:41 2024 by rpki-client on console-fra.rpki-client.org