Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: /0P2H+Q2+mLVShgSUOrwLGCpuP2FkIwclNVGWifWkrY=
Subject key identifier: 8D:CC:8D:FF:B8:CF:FE:CB:72:4D:E8:35:0C:90:2A:9E:24:24:A3:8E
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 018F9917A31A8E95EA15C726E491578734FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0288
Signing time: Tue 21 May 2024 03:00:13 +0000
Manifest this update: Tue 21 May 2024 03:00:13 +0000
Manifest next update: Wed 22 May 2024 03:00:13 +0000
Files and hashes: 1: 7ek9jw_D1SZL7GHk9xoMUUJn--8.roa (hash: 5WdjWFWUNpBg8x3yWq+u433pecv794pH1RrHL8I6Ubc=)
2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: 7XGnpqFWzPAwU+sRQFZfBBSb9qIepbIGmKx9Po88e44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:17:a3:1a:8e:95:ea:15:c7:26:e4:91:57:87:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: May 21 03:00:13 2024 GMT
Not After : May 22 03:00:13 2024 GMT
Subject: CN=8dcc8dffb8cffecb724de8350c902a9e2424a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:ac:89:02:9e:0a:4c:b6:dc:da:e8:5f:62:
8e:49:a0:57:49:c2:f7:88:c0:ab:98:c8:1b:cd:32:
42:6e:0b:a5:94:b1:da:4a:31:62:46:07:c4:fc:3a:
67:00:00:fe:a5:bd:92:42:9d:f3:83:2a:21:98:36:
3f:ba:19:73:d3:12:3c:a6:ec:bb:e4:35:30:4e:e3:
e0:d9:40:f6:d0:bf:18:59:bf:b7:05:ce:45:b8:53:
26:04:2f:a7:57:83:1e:25:d0:65:3f:ce:63:e8:07:
fa:a0:9d:31:cb:06:7c:70:87:b9:26:b1:7f:7f:8d:
f8:ef:af:85:ed:44:f9:f6:72:2b:b6:34:03:1f:0a:
c3:63:08:e8:7f:c8:08:f7:82:6d:e4:ad:c7:b1:25:
97:be:d3:68:6b:44:76:93:31:ca:6c:52:27:1a:c1:
6b:45:a7:c0:f1:c0:08:f7:0d:87:58:a7:ef:5d:ed:
6b:e2:55:54:83:66:98:14:fb:02:1e:8d:75:ee:0c:
9e:f2:40:ca:ca:8a:29:9f:9f:fd:7e:4b:7d:55:44:
ab:1a:64:f4:8f:fb:2d:cf:4a:59:08:ca:d1:f1:5b:
c0:34:14:cf:6b:90:59:90:70:32:ef:52:c6:ab:8e:
a2:17:2f:50:94:d0:18:d3:2b:56:d5:76:3f:1c:17:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:8D:FF:B8:CF:FE:CB:72:4D:E8:35:0C:90:2A:9E:24:24:A3:8E
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a6:45:41:52:c8:41:a7:cc:9d:ca:78:93:08:06:61:5e:f4:
cb:4d:3b:a8:43:fb:f0:9d:1c:fd:a6:e5:81:21:20:56:4d:5f:
46:ad:3e:92:00:9b:41:b4:8f:6c:cb:4f:59:b4:89:8d:27:60:
00:f0:f0:46:3a:fa:5d:88:3a:00:5f:20:40:42:06:0c:a8:d9:
38:a3:2a:a2:09:2d:42:90:8a:c0:d0:ab:bf:36:83:9d:19:a5:
44:5d:9d:e9:de:c3:7c:30:3a:cd:70:94:67:71:99:dc:58:83:
21:27:89:6d:68:d0:20:25:61:ba:d8:91:23:28:f3:ec:90:6b:
2f:54:22:22:d6:81:04:69:85:cd:0b:8c:5f:fd:c5:b0:54:2c:
9b:b9:e4:08:8d:9b:1f:6f:88:d3:b9:76:35:8c:e8:14:24:aa:
9d:f6:fa:70:ce:67:3f:13:e9:64:67:38:29:7c:8d:7a:b5:06:
0f:ac:d8:ab:39:e6:88:7a:23:dc:0f:a4:08:58:d9:68:34:11:
3e:39:e0:83:c2:5c:c6:ab:30:bf:5c:76:a8:2c:27:f4:56:da:
b4:08:66:f6:2d:6c:8c:81:9b:84:93:f8:40:16:4e:e5:06:61:
1e:5f:46:bd:bb:a5:5f:aa:9f:bd:7e:57:b1:26:de:19:c3:83:
9f:13:97:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ZF6MajpXqFccm5JFXhzT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDEzZmQyYWQ5ZTI1Yzg0YmMwYjU5ZTYwOGE2NDM2NjNl
NmJiNjgwHhcNMjQwNTIxMDMwMDEzWhcNMjQwNTIyMDMwMDEzWjAzMTEwLwYDVQQD
Eyg4ZGNjOGRmZmI4Y2ZmZWNiNzI0ZGU4MzUwYzkwMmE5ZTI0MjRhMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V+siQKeCky23NroX2KOSaBXScL3
iMCrmMgbzTJCbgullLHaSjFiRgfE/DpnAAD+pb2SQp3zgyohmDY/uhlz0xI8puy7
5DUwTuPg2UD20L8YWb+3Bc5FuFMmBC+nV4MeJdBlP85j6Af6oJ0xywZ8cIe5JrF/
f43476+F7UT59nIrtjQDHwrDYwjof8gI94Jt5K3HsSWXvtNoa0R2kzHKbFInGsFr
RafA8cAI9w2HWKfvXe1r4lVUg2aYFPsCHo117gye8kDKyoopn5/9fkt9VUSrGmT0
j/stz0pZCMrR8VvANBTPa5BZkHAy71LGq46iFy9QlNAY0ytW1XY/HBeKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3Mjf+4z/7Lck3oNQyQKp4kJKOOMB8GA1UdIwQY
MBaAFK9BP9KtniXIS8C1nmCKZDZj5rtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYt
ZWJiZTFmNDc3ZjY4LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYtZWJiZTFmNDc3ZjY4
LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqZFQVLI
QafMncp4kwgGYV70y007qEP78J0c/ablgSEgVk1fRq0+kgCbQbSPbMtPWbSJjSdg
APDwRjr6XYg6AF8gQEIGDKjZOKMqogktQpCKwNCrvzaDnRmlRF2d6d7DfDA6zXCU
Z3GZ3FiDISeJbWjQICVhutiRIyjz7JBrL1QiItaBBGmFzQuMX/3FsFQsm7nkCI2b
H2+I07l2NYzoFCSqnfb6cM5nPxPpZGc4KXyNerUGD6zYqznmiHoj3A+kCFjZaDQR
Pjngg8Jcxqswv1x2qCwn9FbatAhm9i1sjIGbhJP4QBZO5QZhHl9GvbulX6qfvX5X
sSbeGcODnxOXyA==
-----END CERTIFICATE-----
Generated at Tue May 21 07:44:00 2024 by rpki-client on console-fra.rpki-client.org