Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: SNSWFo6MXq+moiYkS4T3cgzdJTKDEJa5clMuft6xRIc=
Subject key identifier: 55:FA:9B:BE:EB:24:51:7F:1A:D4:3F:A6:8C:1A:4E:13:B4:68:87:D0
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 018F87ED8C5E276A9295EE726FA92B9D54C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 19:00:43 +0000
Manifest this update: Fri 17 May 2024 19:00:43 +0000
Manifest next update: Sat 18 May 2024 19:00:43 +0000
Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: uU6a0nIMq3MqwgQgTPwf0hrhy3/1d0kiQ1/zr2vlW60=)
2: yWNpS7yGLMVwqxfBZQ01X2D8B-w.roa (hash: bPXomo9ZO8moEYD+b/zWWM8ZNqL2uP1auBivBckw0HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:8c:5e:27:6a:92:95:ee:72:6f:a9:2b:9d:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: May 17 19:00:43 2024 GMT
Not After : May 18 19:00:43 2024 GMT
Subject: CN=55fa9bbeeb24517f1ad43fa68c1a4e13b46887d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:4d:70:07:34:8f:2f:ec:f0:9d:64:0e:b1:
04:f3:7c:29:4d:1b:3f:be:7f:5b:46:3b:d1:47:f4:
2b:a8:d6:e7:c1:d6:fc:0c:34:2f:77:ac:40:c4:cb:
a9:16:11:3a:4e:df:8b:37:35:3d:1b:1f:1b:d0:1c:
36:ac:34:94:0f:27:07:c7:bd:12:a9:6b:cf:f1:e8:
2f:0d:4c:fe:82:65:a4:91:29:49:a2:01:a5:99:80:
99:fd:c9:68:67:d8:a8:f8:0f:fc:16:77:09:b1:fc:
36:6d:8e:6d:a6:65:f0:cf:81:9e:c8:8a:b4:a2:75:
4a:57:3e:1f:8e:33:67:6b:85:ef:9e:87:38:44:2f:
70:4c:6c:de:34:65:4f:10:9e:44:83:f0:b9:da:40:
4d:52:71:65:8f:13:6c:91:66:ba:3c:4d:39:ef:c0:
41:07:fa:c7:88:11:38:54:20:59:37:55:48:13:63:
d4:24:a4:5c:07:19:f3:4e:82:ac:05:c1:39:f3:98:
cb:fd:49:98:b1:72:dd:20:8f:7c:69:53:c5:b1:64:
36:b3:14:a6:1c:57:d5:bc:38:41:0b:d4:31:70:4f:
d5:fd:6b:ff:28:d0:38:35:e8:08:0a:40:8b:b3:7a:
70:d4:df:a0:2f:55:de:89:6e:60:f3:c5:9f:33:66:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:9B:BE:EB:24:51:7F:1A:D4:3F:A6:8C:1A:4E:13:B4:68:87:D0
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:11:9a:b7:3c:17:a6:f1:62:b0:e3:66:25:d9:12:73:bf:
c4:b0:f1:6e:bc:43:d9:07:7e:14:e9:2f:6f:cc:4b:c2:05:0d:
23:b3:42:f1:56:01:37:9c:23:d3:2a:65:6b:c7:8d:75:29:a9:
cd:1e:2d:2d:6e:34:da:7a:c8:0f:af:59:94:f6:e3:a4:c7:27:
80:7d:44:4a:e7:11:1a:fc:36:44:78:44:a8:33:5e:8b:59:94:
7a:06:54:07:72:f2:66:a4:92:e9:05:5f:7a:43:d3:4e:d1:9e:
e1:95:ef:83:78:fe:5a:6c:f7:ae:63:b8:7a:18:01:09:a6:77:
2a:60:26:a8:21:13:53:ac:42:ab:d3:13:83:8d:4f:95:52:cf:
43:f0:a2:6a:c8:fe:ee:bd:45:a0:5d:ae:fe:ad:ed:1c:a5:2b:
77:e0:bd:4a:47:e8:30:a6:61:bb:f7:27:1d:9b:c2:b4:39:3b:
06:62:b3:e0:3c:7c:54:36:0e:37:dc:b6:26:45:cb:97:cd:85:
4d:a7:7a:2a:35:6b:35:99:e9:ae:90:b0:d5:a0:90:ee:c3:65:
bb:ca:4b:98:2a:30:96:1e:57:b2:f1:ff:5f:a2:77:09:c5:c0:
70:07:60:1b:a2:df:de:85:3d:54:47:5e:82:81:61:2b:92:3c:
73:e4:eb:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YxeJ2qSle5yb6krnVTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTM2YmVhMWIwYzNhMjA4YWJhMjdkOGIxMGIyNzVlNDc0
ZGRlMmMwHhcNMjQwNTE3MTkwMDQzWhcNMjQwNTE4MTkwMDQzWjAzMTEwLwYDVQQD
Eyg1NWZhOWJiZWViMjQ1MTdmMWFkNDNmYTY4YzFhNGUxM2I0Njg4N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6lNcAc0jy/s8J1kDrEE83wpTRs/
vn9bRjvRR/QrqNbnwdb8DDQvd6xAxMupFhE6Tt+LNzU9Gx8b0Bw2rDSUDycHx70S
qWvP8egvDUz+gmWkkSlJogGlmYCZ/cloZ9io+A/8FncJsfw2bY5tpmXwz4GeyIq0
onVKVz4fjjNna4Xvnoc4RC9wTGzeNGVPEJ5Eg/C52kBNUnFljxNskWa6PE0578BB
B/rHiBE4VCBZN1VIE2PUJKRcBxnzToKsBcE585jL/UmYsXLdII98aVPFsWQ2sxSm
HFfVvDhBC9QxcE/V/Wv/KNA4NegICkCLs3pw1N+gL1XeiW5g88WfM2ZJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX6m77rJFF/GtQ/powaThO0aIfQMB8GA1UdIwQY
MBaAFF6Ta+obDDogiron2LELJ15HTd4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjct
OTg0NzdhODY1M2M3LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjctOTg0NzdhODY1M2M3
LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmgRmrc8
F6bxYrDjZiXZEnO/xLDxbrxD2Qd+FOkvb8xLwgUNI7NC8VYBN5wj0ypla8eNdSmp
zR4tLW402nrID69ZlPbjpMcngH1ESucRGvw2RHhEqDNei1mUegZUB3LyZqSS6QVf
ekPTTtGe4ZXvg3j+Wmz3rmO4ehgBCaZ3KmAmqCETU6xCq9MTg41PlVLPQ/Ciasj+
7r1FoF2u/q3tHKUrd+C9SkfoMKZhu/cnHZvCtDk7BmKz4Dx8VDYON9y2JkXLl82F
Tad6KjVrNZnprpCw1aCQ7sNlu8pLmCowlh5XsvH/X6J3CcXAcAdgG6Lf3oU9VEde
goFhK5I8c+TrRg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:34 2024 by rpki-client on console-ams.rpki-client.org