Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: NODudR+ZdISUpJnKvLin9SxFdATcq6613f25K/bETMg=
Subject key identifier: 42:A1:31:02:C0:8E:78:26:AA:31:EC:6F:FA:79:DE:90:3A:83:64:80
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 018F4C7DF1EE7833B32A1CA61864D96B21D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 10EA
Signing time: Mon 06 May 2024 06:01:13 +0000
Manifest this update: Mon 06 May 2024 06:01:13 +0000
Manifest next update: Tue 07 May 2024 06:01:13 +0000
Files and hashes: 1: 4h09xgTwwLeySB8UvgunjFtxLv8.roa (hash: U2W2NiiSyO8slerwfjM+yduRxuYjJPSjcHCidNPfUXE=)
2: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: vvPefcwr13+GmVCRrUNNrS1iJsWKCPlfTAQeG0yE2pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:7d:f1:ee:78:33:b3:2a:1c:a6:18:64:d9:6b:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: May 6 06:01:13 2024 GMT
Not After : May 7 06:01:13 2024 GMT
Subject: CN=42a13102c08e7826aa31ec6ffa79de903a836480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:77:be:a6:61:24:37:51:7b:c4:06:6b:c7:
99:5a:d9:ae:50:7f:a7:fd:f2:a1:54:20:da:25:14:
d2:e7:13:c3:98:a8:54:de:df:4e:08:bc:ac:6a:32:
7e:22:c1:98:be:8e:3f:6b:4c:1c:42:7d:ba:02:f1:
e0:46:dd:af:5e:98:da:30:a0:0d:2e:00:7c:b0:42:
0a:d0:ea:83:53:41:ae:22:79:9b:03:11:10:49:25:
d0:f7:e5:75:24:50:a7:a4:fe:38:27:3a:c6:62:00:
20:8b:f6:98:36:da:a7:fe:fd:70:69:dc:e8:e3:f0:
35:e1:2d:5d:e8:ff:b4:2e:40:28:39:4b:77:4f:41:
75:e4:56:27:7f:3c:ad:4b:ec:bb:60:f4:1c:47:87:
24:85:ee:b9:4a:6d:6a:72:bb:a3:25:2e:c2:09:8a:
b2:99:6c:50:3a:37:ba:be:f4:42:68:0b:4d:4c:1e:
3e:aa:bc:af:3d:4b:e7:a2:0e:1e:5b:3c:3c:f1:f2:
03:db:9a:95:11:35:7e:27:15:7b:31:a9:ca:68:a0:
11:37:3a:3d:bd:92:3f:48:5f:1e:84:ec:83:2f:4a:
3d:47:b4:36:20:90:5c:65:6b:10:00:40:74:39:b2:
db:77:49:5e:ee:54:be:1e:1c:b9:a2:23:23:42:ad:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:31:02:C0:8E:78:26:AA:31:EC:6F:FA:79:DE:90:3A:83:64:80
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:30:f8:a1:67:98:5f:8c:a5:d5:07:df:e1:95:77:31:e3:
fc:ba:d1:f6:25:5d:4f:12:8b:7b:6b:c8:46:f0:a3:3c:7b:1e:
f2:62:20:23:de:6b:44:52:d7:5e:6f:ba:8c:b3:57:39:f5:e4:
07:70:ba:ea:a2:76:35:10:c1:64:da:f6:57:a0:2e:7b:b3:0b:
f5:51:4d:cb:b5:41:a7:d8:34:9b:ea:48:25:25:fc:76:05:58:
93:2b:a8:97:29:f1:dd:71:41:8a:bd:eb:b2:ca:ba:85:76:c5:
38:a6:20:e9:ff:47:10:d7:25:fd:f8:26:55:4a:8b:f6:f7:5c:
13:da:81:a5:92:7e:72:7d:14:bb:9b:a8:20:1b:c6:fe:7a:36:
9c:c3:04:05:cc:14:1a:67:3f:de:fe:41:1e:95:bb:90:26:84:
f5:5a:6b:f5:98:74:0e:74:78:72:c4:b1:b3:8a:29:9f:c0:cf:
bd:b3:aa:83:a8:c9:11:db:91:79:d1:4f:bc:54:a7:af:06:28:
81:91:cd:ea:32:48:f8:d8:f6:28:b4:b5:03:ed:a4:5a:dd:b9:
0a:fa:e7:5b:24:cd:82:9e:35:1f:0e:1b:ee:79:f9:51:d9:e6:
5e:e9:09:33:da:23:43:8e:14:dd:36:84:fe:78:ae:c3:a4:52:
56:40:d4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9MffHueDOzKhymGGTZayHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWUyMjU2MTRjNjVjZTJjZjUyNzVlYjQ2NDMzNDM5NWMw
NmY0MzAwHhcNMjQwNTA2MDYwMTEzWhcNMjQwNTA3MDYwMTEzWjAzMTEwLwYDVQQD
Eyg0MmExMzEwMmMwOGU3ODI2YWEzMWVjNmZmYTc5ZGU5MDNhODM2NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oZ3vqZhJDdRe8QGa8eZWtmuUH+n
/fKhVCDaJRTS5xPDmKhU3t9OCLysajJ+IsGYvo4/a0wcQn26AvHgRt2vXpjaMKAN
LgB8sEIK0OqDU0GuInmbAxEQSSXQ9+V1JFCnpP44JzrGYgAgi/aYNtqn/v1wadzo
4/A14S1d6P+0LkAoOUt3T0F15FYnfzytS+y7YPQcR4ckhe65Sm1qcrujJS7CCYqy
mWxQOje6vvRCaAtNTB4+qryvPUvnog4eWzw88fID25qVETV+JxV7ManKaKARNzo9
vZI/SF8ehOyDL0o9R7Q2IJBcZWsQAEB0ObLbd0le7lS+Hhy5oiMjQq0SYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKhMQLAjngmqjHsb/p53pA6g2SAMB8GA1UdIwQY
MBaAFO8eIlYUxlziz1J160ZDNDlcBvQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYt
MTFmOTUyNjhlYTc0LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kNDU1YmEtN2VjNi00ZjNlLWFjZDYtMTFmOTUyNjhlYTc0
LzEvN3g0aVZoVEdYT0xQVW5YclJrTTBPVndHOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWcw+KFn
mF+MpdUH3+GVdzHj/LrR9iVdTxKLe2vIRvCjPHse8mIgI95rRFLXXm+6jLNXOfXk
B3C66qJ2NRDBZNr2V6Aue7ML9VFNy7VBp9g0m+pIJSX8dgVYkyuolynx3XFBir3r
ssq6hXbFOKYg6f9HENcl/fgmVUqL9vdcE9qBpZJ+cn0Uu5uoIBvG/no2nMMEBcwU
Gmc/3v5BHpW7kCaE9Vpr9Zh0DnR4csSxs4opn8DPvbOqg6jJEduRedFPvFSnrwYo
gZHN6jJI+Nj2KLS1A+2kWt25CvrnWyTNgp41Hw4b7nn5UdnmXukJM9ojQ44U3TaE
/niuw6RSVkDUsg==
-----END CERTIFICATE-----
Generated at Mon May 6 10:43:33 2024 by rpki-client on console-fra.rpki-client.org