Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 5UnttbuD6zrQFxbvCJbdkx2KHrOYjbSmvIv+ICpxACE=
Subject key identifier: 89:FD:37:03:5C:83:EE:54:29:37:3A:3E:5F:25:DA:27:D0:77:BC:7C
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019234DC49B03C23613DA6A90CAE73258F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 0DA1
Signing time: Fri 27 Sep 2024 19:01:44 +0000
Manifest this update: Fri 27 Sep 2024 19:01:44 +0000
Manifest next update: Sat 28 Sep 2024 19:01:44 +0000
Files and hashes: 1: _iTO45d2Uy09xhtiWUIVUbgHUlA.roa (hash: zFHSnvc/b3yK7YmVj6ZlkQXfJK3SQvyxocYYXRnNZKw=)
2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: UycLda7cex5lKjl7nb3NzRHSN6t3eIgHussn0zAg+D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:dc:49:b0:3c:23:61:3d:a6:a9:0c:ae:73:25:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Sep 27 19:01:44 2024 GMT
Not After : Sep 28 19:01:44 2024 GMT
Subject: CN=89fd37035c83ee5429373a3e5f25da27d077bc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:fb:23:68:4e:c1:4f:0e:a5:81:97:c4:74:
72:c7:2f:fd:42:55:78:85:63:df:60:a7:c1:bb:58:
7b:f4:a4:a9:89:3b:9d:3d:08:8b:91:65:08:fd:70:
ed:f7:e7:29:bd:69:7f:1f:21:e2:60:61:e6:03:c5:
ef:60:32:ec:66:ae:57:f7:7b:eb:c5:4b:ed:99:45:
03:1b:c1:54:2d:a1:41:15:e5:31:2b:86:7a:90:6a:
df:15:4e:6a:6f:a4:64:cc:98:64:c0:d0:ca:b6:45:
2a:49:c5:36:9e:4b:ea:9d:5c:03:c2:1d:bf:fd:ba:
1b:65:36:ee:14:5b:1b:11:0c:49:5f:b1:d1:5a:64:
6a:bd:ca:bd:de:19:ae:6c:43:51:aa:3f:f1:f3:46:
8a:94:f5:ed:c4:22:aa:53:a5:a5:4f:96:de:7b:f0:
95:d7:d9:b8:76:24:d2:c7:dd:46:13:7b:24:9d:d7:
a1:54:fa:5e:2d:bd:c7:9a:60:f0:36:60:f6:a5:e9:
c8:6a:df:fb:f5:ce:50:6d:12:bd:95:6d:e4:ce:25:
5f:8d:f7:3f:8d:51:97:29:24:36:d5:1a:1b:b7:ea:
b0:17:42:df:91:a6:03:3f:f7:bd:49:be:7c:71:d7:
2c:d3:3e:88:a2:ca:4c:72:5f:54:f1:71:50:1e:ee:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:37:03:5C:83:EE:54:29:37:3A:3E:5F:25:DA:27:D0:77:BC:7C
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:da:fd:42:d8:87:bb:bc:27:d6:c7:02:2c:20:43:10:fe:2c:
a1:af:60:04:c0:94:b2:21:62:ad:74:d4:8d:4c:f1:4a:b7:16:
03:cd:35:c8:35:62:1d:01:ec:65:4d:aa:40:7d:e4:18:e0:6e:
a6:fd:10:69:f7:41:42:5c:b6:82:7c:02:3a:00:6b:5f:e6:42:
56:89:23:95:b0:e1:ac:56:ab:de:1c:bf:94:61:94:ae:27:35:
9a:48:39:61:69:19:7a:89:ca:fa:50:1a:6b:ae:2a:a0:18:f8:
9c:13:5a:bb:7b:98:21:a7:48:41:b8:f2:09:79:57:94:08:6a:
3b:42:e3:2d:0e:e0:e0:43:91:48:02:93:45:e8:e0:b1:70:35:
ed:d0:e4:ca:46:46:60:86:37:89:11:ed:c3:4b:05:19:a1:39:
96:03:f0:51:b4:85:cd:03:4a:c8:a8:e6:e4:d4:43:29:c3:29:
cf:24:78:5e:0a:74:bf:6b:72:0f:53:18:f3:a0:ee:9f:17:2d:
90:d6:ca:47:5a:09:4d:c0:6e:a3:90:f5:25:43:72:01:13:f3:
9f:23:35:cc:0a:12:68:d8:0c:7b:75:9d:a5:35:b2:9f:84:74:
40:b9:6c:a2:ba:38:6d:aa:fb:54:89:39:c7:9f:c2:bf:a2:bb:
5f:29:cb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI03EmwPCNhPaapDK5zJY8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz
NmExZDEwHhcNMjQwOTI3MTkwMTQ0WhcNMjQwOTI4MTkwMTQ0WjAzMTEwLwYDVQQD
Eyg4OWZkMzcwMzVjODNlZTU0MjkzNzNhM2U1ZjI1ZGEyN2QwNzdiYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnv7I2hOwU8OpYGXxHRyxy/9QlV4
hWPfYKfBu1h79KSpiTudPQiLkWUI/XDt9+cpvWl/HyHiYGHmA8XvYDLsZq5X93vr
xUvtmUUDG8FULaFBFeUxK4Z6kGrfFU5qb6RkzJhkwNDKtkUqScU2nkvqnVwDwh2/
/bobZTbuFFsbEQxJX7HRWmRqvcq93hmubENRqj/x80aKlPXtxCKqU6WlT5bee/CV
19m4diTSx91GE3skndehVPpeLb3HmmDwNmD2penIat/79c5QbRK9lW3kziVfjfc/
jVGXKSQ21Robt+qwF0LfkaYDP/e9Sb58cdcs0z6IospMcl9U8XFQHu4dNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn9NwNcg+5UKTc6Pl8l2ifQd7x8MB8GA1UdIwQY
MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct
ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1
LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNr9QtiH
u7wn1scCLCBDEP4soa9gBMCUsiFirXTUjUzxSrcWA801yDViHQHsZU2qQH3kGOBu
pv0QafdBQly2gnwCOgBrX+ZCVokjlbDhrFar3hy/lGGUric1mkg5YWkZeonK+lAa
a64qoBj4nBNau3uYIadIQbjyCXlXlAhqO0LjLQ7g4EORSAKTRejgsXA17dDkykZG
YIY3iRHtw0sFGaE5lgPwUbSFzQNKyKjm5NRDKcMpzyR4Xgp0v2tyD1MY86Dunxct
kNbKR1oJTcBuo5D1JUNyARPznyM1zAoSaNgMe3WdpTWyn4R0QLlsoro4bar7VIk5
x5/Cv6K7XynLaw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:17:09 2024 by rpki-client on console-ams.rpki-client.org