Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: LoLmzjCMLJz7UiFd1jx6enCPIHhn371MvAuWO/45xN8=
Subject key identifier: 66:B4:54:2D:88:39:BE:2C:CE:D7:C2:9A:FB:8C:F2:55:54:FC:40:FC
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 018F3FD65E9C0EA216A84A283E2A025218E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1152
Signing time: Fri 03 May 2024 19:02:44 +0000
Manifest this update: Fri 03 May 2024 19:02:44 +0000
Manifest next update: Sat 04 May 2024 19:02:44 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: DA6BrNVoPsxHeE2EngCblNRm2vBJZQK675nMdzG3I40=)
2: 1ZyUIIbeu8Rp0VNjzW7zqwP_wf8.roa (hash: lHIkPmWKRTVREWSBh0qS7R5q9pbx7uFT6d62kFFHJkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:d6:5e:9c:0e:a2:16:a8:4a:28:3e:2a:02:52:18:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: May 3 19:02:44 2024 GMT
Not After : May 4 19:02:44 2024 GMT
Subject: CN=66b4542d8839be2cced7c29afb8cf25554fc40fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:4f:c2:25:10:cc:d0:23:0d:50:3e:55:7d:
0d:60:21:df:bb:dd:27:45:cc:ba:f2:a1:5d:14:ea:
6b:94:33:14:97:6c:1b:39:98:05:e2:b3:15:a5:7d:
ff:e1:8d:67:80:f9:b1:31:a8:1a:c4:e8:81:68:19:
ca:0e:9a:e6:26:7f:a6:d4:da:24:81:a4:5b:f2:af:
56:c6:71:ad:4f:35:e1:be:a2:a3:72:09:b1:6e:22:
a7:14:e1:82:d5:9b:be:cd:b9:92:12:2d:cc:63:4c:
fb:95:b4:3c:0e:9e:51:c2:fe:82:46:68:5c:49:0c:
8b:a0:cd:c0:81:bd:04:66:84:d3:97:8f:41:b2:8f:
ab:3e:97:f8:16:41:24:47:a3:d1:d1:26:32:9d:a9:
9f:e3:f1:c0:c1:d3:31:e2:25:77:ba:ca:a4:26:a7:
8e:df:66:00:f1:5c:28:3b:0f:93:7f:4e:9e:d3:c4:
d4:4b:8d:53:49:68:b4:09:d9:f5:c9:68:38:5f:f3:
74:20:67:ca:c1:25:42:e5:ef:4c:c5:14:07:56:ff:
ed:73:63:45:a0:9e:57:a1:f0:19:c7:31:96:6f:68:
06:be:e4:ac:57:00:6e:7a:cb:fe:91:87:11:e3:fb:
e0:9a:e5:ea:23:a4:ba:3a:8c:f7:63:75:2d:10:02:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:54:2D:88:39:BE:2C:CE:D7:C2:9A:FB:8C:F2:55:54:FC:40:FC
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ef:08:36:23:91:e0:9a:dd:eb:c1:a2:c2:16:4f:1c:e4:c6:
0f:ec:f4:3d:73:a8:52:ff:f0:b0:64:8d:cf:47:aa:25:df:3a:
52:b1:f1:09:7b:82:1c:59:6b:e5:e9:e2:14:86:0b:a8:ee:83:
28:fd:67:22:32:46:c7:8e:9a:61:50:7a:55:c9:8c:33:4a:76:
b7:7c:40:d9:6f:d7:c1:59:ff:97:2a:a9:af:93:b9:4b:dc:ab:
36:c7:90:d1:0f:05:e6:ae:0d:6a:69:c5:29:5b:43:d1:eb:b6:
f4:3d:20:69:4d:1a:b3:c3:7f:2e:df:46:a3:1a:fa:e2:75:0d:
d4:2b:93:14:78:83:f9:5f:39:46:76:f8:b4:1b:0f:b6:3f:a9:
f6:26:54:c0:ad:b9:e0:dc:9c:72:4a:b3:e2:ea:20:0e:69:86:
65:92:37:df:57:7c:4d:22:4e:e5:3d:f6:ea:a3:6b:8f:be:13:
9d:a3:33:b0:aa:1c:21:6b:c1:b9:3c:f3:86:9e:20:f9:d5:22:
7c:6a:ff:93:5d:7f:83:bb:23:6d:8b:60:70:79:7b:94:5a:54:
89:36:fc:f8:79:b6:6a:32:6d:8a:ef:57:c8:39:a5:f3:7c:8d:
57:fc:e7:c5:44:33:a6:5e:77:17:02:e9:ae:7b:0b:d5:7a:23:
b4:7d:c1:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY8/1l6cDqIWqEooPioCUhjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTY4NjU5MjhlZWVlZTVjYmM5MmY0YzRkMzhhZTVjNjAx
ZGVlMGEwHhcNMjQwNTAzMTkwMjQ0WhcNMjQwNTA0MTkwMjQ0WjAzMTEwLwYDVQQD
Eyg2NmI0NTQyZDg4MzliZTJjY2VkN2MyOWFmYjhjZjI1NTU0ZmM0MGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GxPwiUQzNAjDVA+VX0NYCHfu90n
Rcy68qFdFOprlDMUl2wbOZgF4rMVpX3/4Y1ngPmxMagaxOiBaBnKDprmJn+m1Nok
gaRb8q9WxnGtTzXhvqKjcgmxbiKnFOGC1Zu+zbmSEi3MY0z7lbQ8Dp5Rwv6CRmhc
SQyLoM3Agb0EZoTTl49Bso+rPpf4FkEkR6PR0SYynamf4/HAwdMx4iV3usqkJqeO
32YA8VwoOw+Tf06e08TUS41TSWi0Cdn1yWg4X/N0IGfKwSVC5e9MxRQHVv/tc2NF
oJ5XofAZxzGWb2gGvuSsVwBuesv+kYcR4/vgmuXqI6S6Ooz3Y3UtEALEdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGa0VC2IOb4sztfCmvuM8lVU/ED8MB8GA1UdIwQY
MBaAFPgWhlko7u7ly8kvTE04rlxgHe4KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CYUdXU2p1N3VYTHlTOU1UVGl1WEdBZDdnby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjhiMWJmLThmNDgtNDE2OS1hOWEy
LTVkYWM3MjAyMjNhYi8xLzEtQmFHV1NqdTd1WEx5UzlNVFRpdVhHQWQ3Z28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmLzY4YjFiZi04ZjQ4LTQxNjktYTlhMi01ZGFjNzIwMjIz
YWIvMS8xLUJhR1dTanU3dVhMeVM5TVRUaXVYR0FkN2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbe8I
NiOR4Jrd68GiwhZPHOTGD+z0PXOoUv/wsGSNz0eqJd86UrHxCXuCHFlr5eniFIYL
qO6DKP1nIjJGx46aYVB6VcmMM0p2t3xA2W/XwVn/lyqpr5O5S9yrNseQ0Q8F5q4N
amnFKVtD0eu29D0gaU0as8N/Lt9Goxr64nUN1CuTFHiD+V85Rnb4tBsPtj+p9iZU
wK254Nycckqz4uogDmmGZZI331d8TSJO5T326qNrj74TnaMzsKocIWvBuTzzhp4g
+dUifGr/k11/g7sjbYtgcHl7lFpUiTb8+Hm2ajJtiu9XyDml83yNV/znxUQzpl53
FwLprnsL1XojtH3BXA==
-----END CERTIFICATE-----
Generated at Fri May 3 21:02:05 2024 by rpki-client on console-fra.rpki-client.org