Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
File: DdhN2sUMWa7K8GsJuFc6hioOo9s.mft (raw, json)
Hash identifier: sBWS7NrB9x+feLhwLbXWalij9fVuryzvQW+DMIcErps=
Subject key identifier: 8A:57:11:FC:CA:AF:16:32:45:3F:C1:5C:AC:45:A3:CB:40:3C:1B:66
Authority key identifier: 0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
Certificate issuer: /CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Certificate serial: 018F524925EC0FB3A9698709AD0D200A35DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
Manifest number: 115B
Signing time: Tue 07 May 2024 09:01:16 +0000
Manifest this update: Tue 07 May 2024 09:01:16 +0000
Manifest next update: Wed 08 May 2024 09:01:16 +0000
Files and hashes: 1: DdhN2sUMWa7K8GsJuFc6hioOo9s.crl (hash: /WF/ZJeyBE0T4w3iIdp+8elqupNfUh7Ylhp50XHESgE=)
2: mf6lbFxmfNJZGO9LD453AtgsXLE.roa (hash: /akBcF8p+qqDnXIQl/LmDRlrY4kwlyHQnCYkz1JZQ2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:49:25:ec:0f:b3:a9:69:87:09:ad:0d:20:0a:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd84ddac50c59aecaf06b09b8573a862a0ea3db
Validity
Not Before: May 7 09:01:16 2024 GMT
Not After : May 8 09:01:16 2024 GMT
Subject: CN=8a5711fccaaf1632453fc15cac45a3cb403c1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:42:9b:9c:0a:17:90:07:96:3d:27:49:49:
85:e5:39:65:16:a8:84:2a:61:26:7f:06:4b:6a:19:
7a:b8:c7:8b:58:29:ec:b8:c3:ac:33:48:d3:41:02:
02:e4:48:78:f8:a0:c7:94:d7:f3:18:e4:05:4e:94:
4a:58:10:29:85:98:64:5d:cb:5c:79:57:fe:c1:aa:
06:bd:1b:7d:4d:06:c6:71:1f:49:39:c1:03:67:23:
2f:d5:a4:64:da:f9:b7:27:ab:49:de:64:e4:69:d5:
25:7b:f9:6c:c1:9b:84:60:db:28:b1:0f:c3:bc:8a:
af:d0:20:42:c5:12:e6:ce:a8:98:2e:b6:00:75:bd:
8b:d3:31:c1:9c:33:40:ba:4b:49:0e:1e:19:09:c1:
fb:e9:f6:65:d1:37:30:6e:bf:75:a2:c2:ac:65:9a:
2e:c3:44:1c:13:50:e5:7e:45:ec:99:84:80:10:00:
a6:21:16:48:d6:06:d6:fc:2e:84:7b:f6:b6:82:b0:
89:22:1a:bc:b9:72:96:a2:e8:91:3a:44:fb:c5:86:
f6:ca:e8:8a:82:70:b8:ed:e7:56:ca:3d:3b:12:70:
b8:24:32:34:17:0a:41:d8:04:88:35:b2:d3:e6:84:
a6:36:95:23:68:c2:57:0f:65:21:69:d1:49:53:d0:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:11:FC:CA:AF:16:32:45:3F:C1:5C:AC:45:A3:CB:40:3C:1B:66
X509v3 Authority Key Identifier:
keyid:0D:D8:4D:DA:C5:0C:59:AE:CA:F0:6B:09:B8:57:3A:86:2A:0E:A3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdhN2sUMWa7K8GsJuFc6hioOo9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a7550a-83ec-48d0-bb33-cdee9995e9e7/1/DdhN2sUMWa7K8GsJuFc6hioOo9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:0d:db:49:05:5c:d4:05:a0:8e:d2:89:8a:1b:14:39:d8:
22:31:ea:73:aa:5b:97:dc:12:2f:1e:63:40:20:72:eb:47:f0:
b8:34:15:f5:89:e3:7e:36:0b:78:97:a3:e7:ec:8e:83:74:d9:
b1:79:e7:10:4a:58:fe:79:47:89:06:30:0e:f9:ec:2c:6f:77:
43:23:1e:f1:bd:da:ee:f4:f3:e6:d1:41:59:5b:cb:9a:f3:03:
63:86:26:ea:c7:b5:e5:be:62:9a:9d:13:9a:f7:52:00:78:d4:
29:47:36:38:36:c8:08:52:f4:00:45:b9:88:05:a8:97:4a:ae:
8e:62:3d:ed:de:4f:4a:33:07:b9:73:30:d9:16:c2:39:44:e2:
e2:3b:06:ea:16:2e:95:55:ce:49:2c:77:89:b8:f5:8f:ae:75:
b2:93:ca:de:e7:d2:8c:72:ee:23:0d:03:5e:0b:ef:57:07:e8:
b9:6a:07:67:d0:76:c7:42:d8:3d:6e:df:f2:0d:4c:03:02:de:
df:c6:8d:73:81:70:1a:3a:a1:85:b3:8b:73:9e:fa:29:54:0b:
aa:e9:f8:6e:4b:99:c5:65:c4:ee:0f:47:8f:29:f7:c6:92:f3:
6e:0f:12:bc:71:b9:fd:77:60:ae:24:9f:f9:69:87:39:61:99:
1e:92:00:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9SSSXsD7OpaYcJrQ0gCjXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDg0ZGRhYzUwYzU5YWVjYWYwNmIwOWI4NTczYTg2MmEw
ZWEzZGIwHhcNMjQwNTA3MDkwMTE2WhcNMjQwNTA4MDkwMTE2WjAzMTEwLwYDVQQD
Eyg4YTU3MTFmY2NhYWYxNjMyNDUzZmMxNWNhYzQ1YTNjYjQwM2MxYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPBCm5wKF5AHlj0nSUmF5TllFqiE
KmEmfwZLahl6uMeLWCnsuMOsM0jTQQIC5Eh4+KDHlNfzGOQFTpRKWBAphZhkXctc
eVf+waoGvRt9TQbGcR9JOcEDZyMv1aRk2vm3J6tJ3mTkadUle/lswZuEYNsosQ/D
vIqv0CBCxRLmzqiYLrYAdb2L0zHBnDNAuktJDh4ZCcH76fZl0Tcwbr91osKsZZou
w0QcE1DlfkXsmYSAEACmIRZI1gbW/C6Ee/a2grCJIhq8uXKWouiROkT7xYb2yuiK
gnC47edWyj07EnC4JDI0FwpB2ASINbLT5oSmNpUjaMJXD2UhadFJU9ApCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpXEfzKrxYyRT/BXKxFo8tAPBtmMB8GA1UdIwQY
MBaAFA3YTdrFDFmuyvBrCbhXOoYqDqPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMt
Y2RlZTk5OTVlOWU3LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzU1MGEtODNlYy00OGQwLWJiMzMtY2RlZTk5OTVlOWU3
LzEvRGRoTjJzVU1XYTdLOEdzSnVGYzZoaW9PbzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsgN20kF
XNQFoI7SiYobFDnYIjHqc6pbl9wSLx5jQCBy60fwuDQV9YnjfjYLeJej5+yOg3TZ
sXnnEEpY/nlHiQYwDvnsLG93QyMe8b3a7vTz5tFBWVvLmvMDY4Ym6se15b5imp0T
mvdSAHjUKUc2ODbICFL0AEW5iAWol0qujmI97d5PSjMHuXMw2RbCOUTi4jsG6hYu
lVXOSSx3ibj1j651spPK3ufSjHLuIw0DXgvvVwfouWoHZ9B2x0LYPW7f8g1MAwLe
38aNc4FwGjqhhbOLc576KVQLqun4bkuZxWXE7g9Hjyn3xpLzbg8SvHG5/XdgriSf
+WmHOWGZHpIArQ==
-----END CERTIFICATE-----
Generated at Tue May 7 14:04:37 2024 by rpki-client on console-fra.rpki-client.org