Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: lwQB7HTqD9VbpRsvB8FpCCuE2mIh+a5N1zAQ8t/5A6M=
Subject key identifier: 1F:FD:24:33:50:E6:AA:44:11:46:3C:0C:A9:29:3D:FD:19:31:E3:5C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018F97609AFBAAA8677D3EB2FD62CC699867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 11B9
Signing time: Mon 20 May 2024 19:00:41 +0000
Manifest this update: Mon 20 May 2024 19:00:41 +0000
Manifest next update: Tue 21 May 2024 19:00:41 +0000
Files and hashes: 1: DNHfqH0b9VdF4hoVInKm7hfv6Wg.roa (hash: 8VpVPqU/wWlwo2NPwvbaq4kpa/k25AkPPfIeEkeY+bc=)
2: IzGIYzfzaOk4hfn7FZBCGmfmVf0.roa (hash: BmMJpjYB9wvChjoLjUgi8E++ivutPCkwSmMyKSRd1uU=)
3: UEtW5jde2G6UaOJSSoBA0RpVmCs.roa (hash: 7DrjbBPIkM7KLARwUW7vpkyZqIjFwAn4RbU/8QLN0r8=)
4: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: w54Zl12672ZkiblGZcleY+nI6bKlSLHvtqGyWQSL2AQ=)
5: g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa (hash: xwrPupJyTSgtXq8WEJv2cqH3UIl7MRXc3Rvae7hOpfU=)
6: o4CBm7Z8T5narPIkfi43fkyfxSM.roa (hash: B6VyI/vC7McL0hYh94IklpKAqs9mukMsI3L/8MPmzrI=)
7: sosUM-xzbWNE6LQvHgo9f9XQ7uo.roa (hash: 7qSIjKSa3O7B/Unqw/GzxefKacwKw7OL4ffaPHCVlRo=)
8: xIlcmXA5jrNSALlhazowvUHu0To.roa (hash: s7CGh21ZNWc+fFxlynS3q8GdK4y25LnjnbcUp6gMl5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:60:9a:fb:aa:a8:67:7d:3e:b2:fd:62:cc:69:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 20 19:00:41 2024 GMT
Not After : May 21 19:00:41 2024 GMT
Subject: CN=1ffd243350e6aa4411463c0ca9293dfd1931e35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:d9:22:1c:80:9b:c3:7f:ad:52:c3:6c:d6:
de:7c:a6:3c:4b:49:40:b3:39:be:04:c5:c7:26:c1:
35:b0:8f:42:c0:f3:5b:06:21:ff:4f:33:b0:fa:1e:
42:4c:2a:c3:ef:b8:1f:f2:7e:08:3b:96:a5:e8:cd:
44:d8:e7:3d:44:b7:2f:f8:aa:0a:39:94:b2:be:20:
2f:ca:31:92:0a:58:51:fc:80:a6:18:64:a3:76:95:
7d:e2:d2:cd:ea:a2:54:43:6d:95:49:54:fc:26:01:
a2:43:58:db:28:09:71:89:92:c2:a2:b6:ec:a1:c2:
52:ec:b5:be:f3:51:36:08:35:c0:2a:9a:80:ef:06:
9d:c8:38:e7:7c:d9:30:ad:bc:b9:91:17:13:0e:2a:
b1:c2:7e:a5:89:55:ca:a7:98:99:9c:1e:62:57:95:
a2:54:d9:5d:d7:d5:53:66:d1:af:50:37:14:be:05:
85:ab:3b:77:7a:85:9e:33:54:4f:6a:c2:e7:14:07:
bc:ea:b0:06:5b:f7:19:ed:6a:e6:46:7b:a2:82:b8:
12:46:6c:d3:f8:2a:4e:43:2e:51:7c:21:c5:21:ac:
31:f8:b0:04:85:87:50:16:4e:50:e0:f6:67:39:ac:
0a:20:8c:a7:f7:84:87:61:d9:e7:54:0f:e7:72:82:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:24:33:50:E6:AA:44:11:46:3C:0C:A9:29:3D:FD:19:31:E3:5C
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:db:4b:1b:b3:0f:95:5c:9d:c3:5e:df:73:55:6e:e5:95:be:
96:27:bc:1c:71:99:c4:43:ed:f4:07:9b:0c:f4:3f:31:6d:0e:
66:da:04:1e:99:47:77:16:9e:fd:3c:a8:ab:7e:e1:5b:f9:69:
ce:b8:4d:65:51:2b:b1:ab:02:39:16:17:5f:f5:b7:7a:46:8a:
ed:7b:0b:71:97:27:98:87:72:41:86:4f:f2:9d:5b:7d:97:df:
61:23:c7:a9:59:aa:8d:28:7e:17:bc:b8:d0:7c:17:c3:73:c2:
29:c4:d8:8b:e8:80:44:14:97:bc:8a:2a:85:6c:d6:0e:05:0f:
f8:27:17:0f:c8:48:d4:ec:d3:91:14:67:66:61:ec:5f:ef:2b:
f8:93:83:05:04:b8:19:82:11:5e:e9:1c:9f:ae:b9:2e:28:11:
c4:ac:14:65:b1:4c:24:4e:9e:80:37:1c:59:3d:d7:56:8b:97:
e7:1e:b7:2e:09:f6:4b:8c:c1:0c:ed:6d:04:f1:38:3a:88:9a:
b2:7a:80:14:95:2b:8d:d3:30:4b:a1:19:e4:77:8b:8d:d8:c9:
78:e0:0f:94:fa:2b:c4:26:e2:65:d5:1e:22:04:a6:f6:14:1d:
80:7b:d0:2a:ac:bf:ee:7c:bb:b1:d8:30:e2:cc:7d:0c:27:87:
8c:43:2b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+XYJr7qqhnfT6y/WLMaZhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1
YjhmY2IwHhcNMjQwNTIwMTkwMDQxWhcNMjQwNTIxMTkwMDQxWjAzMTEwLwYDVQQD
EygxZmZkMjQzMzUwZTZhYTQ0MTE0NjNjMGNhOTI5M2RmZDE5MzFlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T3ZIhyAm8N/rVLDbNbefKY8S0lA
szm+BMXHJsE1sI9CwPNbBiH/TzOw+h5CTCrD77gf8n4IO5al6M1E2Oc9RLcv+KoK
OZSyviAvyjGSClhR/ICmGGSjdpV94tLN6qJUQ22VSVT8JgGiQ1jbKAlxiZLCorbs
ocJS7LW+81E2CDXAKpqA7wadyDjnfNkwrby5kRcTDiqxwn6liVXKp5iZnB5iV5Wi
VNld19VTZtGvUDcUvgWFqzt3eoWeM1RPasLnFAe86rAGW/cZ7WrmRnuigrgSRmzT
+CpOQy5RfCHFIawx+LAEhYdQFk5Q4PZnOawKIIyn94SHYdnnVA/ncoIJZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/9JDNQ5qpEEUY8DKkpPf0ZMeNcMB8GA1UdIwQY
MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt
MTNhMDZhMjY5YWE4LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4
LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdtLG7MP
lVydw17fc1Vu5ZW+lie8HHGZxEPt9AebDPQ/MW0OZtoEHplHdxae/Tyoq37hW/lp
zrhNZVErsasCORYXX/W3ekaK7XsLcZcnmIdyQYZP8p1bfZffYSPHqVmqjSh+F7y4
0HwXw3PCKcTYi+iARBSXvIoqhWzWDgUP+CcXD8hI1OzTkRRnZmHsX+8r+JODBQS4
GYIRXukcn665LigRxKwUZbFMJE6egDccWT3XVouX5x63Lgn2S4zBDO1tBPE4Ooia
snqAFJUrjdMwS6EZ5HeLjdjJeOAPlPorxCbiZdUeIgSm9hQdgHvQKqy/7ny7sdgw
4sx9DCeHjEMrFg==
-----END CERTIFICATE-----
Generated at Tue May 21 00:54:02 2024 by rpki-client on console-fra.rpki-client.org