Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: CwMb6ITrvE+3vh73umk0KK51DgdlPHnTCmBVqoRMM/w=
Subject key identifier: F2:99:8C:90:CF:CD:A1:EF:7F:37:AB:BD:2A:A0:9D:3A:6D:EB:88:CC
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 018F34AC5320AAD252AA8A7CFF4CC8B530B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 1033
Signing time: Wed 01 May 2024 15:00:59 +0000
Manifest this update: Wed 01 May 2024 15:00:59 +0000
Manifest next update: Thu 02 May 2024 15:00:59 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: nQq0LWlcUdhntdKfcIGdx7DJho526ZYLdnzllVOvfDc=)
2: ugbhVJYiLZ2tF_OQCFOFVRB5zqw.roa (hash: iXL3C2bOR47H+4x/c4DBH/byY4TqOZNTB1faZXGATIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:ac:53:20:aa:d2:52:aa:8a:7c:ff:4c:c8:b5:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: May 1 15:00:59 2024 GMT
Not After : May 2 15:00:59 2024 GMT
Subject: CN=f2998c90cfcda1ef7f37abbd2aa09d3a6deb88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:8d:0f:ab:d7:88:f7:b7:1d:c1:0e:f0:5c:
f8:80:9f:5f:02:9f:01:4d:2b:e4:37:33:c8:d3:ec:
05:5a:f5:c9:91:55:e9:8b:89:ac:45:2c:8f:61:b4:
9a:1b:5c:1b:2b:3a:d5:27:ce:ee:cb:1f:3d:d7:3b:
0f:6f:8b:ce:3f:66:43:a8:51:df:4f:34:0a:8d:f8:
dc:36:9e:f5:9d:c5:a5:ee:a0:d7:66:3a:2f:94:85:
b7:92:06:41:4f:4d:ca:81:11:54:b2:14:3b:bb:7b:
fd:d4:e3:24:ae:35:19:ff:d2:91:d7:4e:1b:9c:da:
bc:67:17:65:ef:1e:1e:5c:34:10:f4:55:b6:66:bc:
17:9e:a4:e1:fb:9c:ed:0c:34:22:70:b5:a8:48:4b:
31:1f:56:21:da:d4:27:15:15:83:09:a4:fd:9e:f5:
65:93:ad:92:2b:2c:d1:bd:47:79:10:b0:77:72:6c:
49:f8:b5:dd:d8:ff:b9:ee:8c:c3:59:c0:e8:0f:60:
49:78:5c:71:cf:2d:ad:56:1b:58:b7:a1:b1:c6:14:
ec:c6:36:9e:98:6d:b2:b9:ac:0e:d6:35:4c:c2:a3:
e7:2b:c2:19:f8:ee:4f:9c:51:82:66:44:42:b1:72:
17:44:cb:5b:fd:31:45:3d:3a:06:90:a0:e9:80:11:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:8C:90:CF:CD:A1:EF:7F:37:AB:BD:2A:A0:9D:3A:6D:EB:88:CC
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a2:99:56:33:0c:91:c0:b4:ee:47:1b:58:5f:ee:d4:cb:34:
23:38:47:99:74:21:b7:d1:13:8d:86:3c:81:de:66:5d:c3:56:
7d:04:34:af:eb:35:35:e9:53:1c:0a:e5:72:5c:62:8c:33:43:
dc:9a:82:f2:51:64:74:e5:2b:85:fe:76:2f:9a:7f:14:95:e9:
b7:74:92:55:29:a8:28:fa:eb:d5:cd:18:4a:fc:37:0b:8e:06:
a9:85:31:3f:78:a5:bd:7a:1a:32:98:74:5b:b6:0c:f7:2f:fe:
17:29:ec:ca:4d:28:fa:17:9d:67:ea:49:a3:1f:49:54:6d:ff:
1c:c5:f2:39:3e:c9:15:13:4a:86:69:3b:dc:3e:3e:03:da:a5:
1c:27:64:6a:ac:3b:e8:05:e5:e5:95:85:f9:8b:2e:08:43:9b:
45:74:db:d0:64:ae:f3:fb:b7:72:b7:37:69:86:bb:0c:33:68:
1d:13:54:67:a2:96:f4:b5:eb:df:6e:d7:2f:3c:70:78:64:70:
76:68:d2:92:d4:d0:ce:4d:39:05:aa:8e:43:3d:92:a2:b5:12:
11:08:a6:68:78:da:35:74:83:8a:22:2d:ee:ba:d2:97:cb:e3:
cc:10:13:92:08:6d:da:09:d7:86:b6:f2:fd:4a:d3:bd:40:e4:
44:af:3e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY80rFMgqtJSqop8/0zItTC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmY4YzE4MWIyODBlM2QyODI4ZGExYjI0NzdiOTEwMjM1
NTk1NWEwHhcNMjQwNTAxMTUwMDU5WhcNMjQwNTAyMTUwMDU5WjAzMTEwLwYDVQQD
EyhmMjk5OGM5MGNmY2RhMWVmN2YzN2FiYmQyYWEwOWQzYTZkZWI4OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQGND6vXiPe3HcEO8Fz4gJ9fAp8B
TSvkNzPI0+wFWvXJkVXpi4msRSyPYbSaG1wbKzrVJ87uyx891zsPb4vOP2ZDqFHf
TzQKjfjcNp71ncWl7qDXZjovlIW3kgZBT03KgRFUshQ7u3v91OMkrjUZ/9KR104b
nNq8Zxdl7x4eXDQQ9FW2ZrwXnqTh+5ztDDQicLWoSEsxH1Yh2tQnFRWDCaT9nvVl
k62SKyzRvUd5ELB3cmxJ+LXd2P+57ozDWcDoD2BJeFxxzy2tVhtYt6GxxhTsxjae
mG2yuawO1jVMwqPnK8IZ+O5PnFGCZkRCsXIXRMtb/TFFPToGkKDpgBEWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKZjJDPzaHvfzervSqgnTpt64jMMB8GA1UdIwQY
MBaAFOW/jBgbKA49KCjaGyR3uRAjVZVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ZjQ1MjQtMjM0Yy00OTFiLTk5NjQt
MTgyZjFiYWM2NDBhLzEvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ZjQ1MjQtMjM0Yy00OTFiLTk5NjQtMTgyZjFiYWM2NDBh
LzEvNWItTUdCc29EajBvS05vYkpIZTVFQ05WbFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKKZVjMM
kcC07kcbWF/u1Ms0IzhHmXQht9ETjYY8gd5mXcNWfQQ0r+s1NelTHArlclxijDND
3JqC8lFkdOUrhf52L5p/FJXpt3SSVSmoKPrr1c0YSvw3C44GqYUxP3ilvXoaMph0
W7YM9y/+Fynsyk0o+hedZ+pJox9JVG3/HMXyOT7JFRNKhmk73D4+A9qlHCdkaqw7
6AXl5ZWF+YsuCEObRXTb0GSu8/u3crc3aYa7DDNoHRNUZ6KW9LXr327XLzxweGRw
dmjSktTQzk05BaqOQz2SorUSEQimaHjaNXSDiiIt7rrSl8vjzBATkght2gnXhrby
/UrTvUDkRK8+YA==
-----END CERTIFICATE-----
Generated at Wed May 1 23:57:23 2024 by rpki-client on console-fra.rpki-client.org