Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: BVdzRaEIJzPzeinA+kvEuqEbfCF9rFMiyfniXhlY5Dc=
Subject key identifier: 9D:10:8F:31:99:8B:9B:6C:D2:6B:F4:E5:6F:D7:17:62:35:A3:6D:C1
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 018F87492C5D08C0175B79E21B8299B5B199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: EA
Signing time: Fri 17 May 2024 16:01:10 +0000
Manifest this update: Fri 17 May 2024 16:01:10 +0000
Manifest next update: Sat 18 May 2024 16:01:10 +0000
Files and hashes: 1: CXJmIZSlb3Bm0L_F0PphGkLC-R0.roa (hash: Z2taV5IouaKLvYvvI13Z5H/JhBaJcu+PDP9dCLn1bo4=)
2: L-JAw7FNvaKL1-Ez8qjKZdxAZhg.roa (hash: rEjh+oT3+ma0U5qRGx3fwF4b+1NVrp59g/OZQIYsf1o=)
3: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: QiPYi51gCn0cPxwOJTUcczMgweCmiERFfiAoBGbKFgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:2c:5d:08:c0:17:5b:79:e2:1b:82:99:b5:b1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: May 17 16:01:10 2024 GMT
Not After : May 18 16:01:10 2024 GMT
Subject: CN=9d108f31998b9b6cd26bf4e56fd7176235a36dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:1b:ad:31:20:ae:21:1d:c8:13:8e:8b:bc:
bd:24:05:66:15:c6:b2:e4:fd:c4:e8:88:db:e4:ea:
42:94:20:53:19:22:6c:e6:65:c4:37:3e:10:66:36:
49:c9:1f:59:4e:2a:e4:a9:57:8f:85:ce:e3:e0:48:
f1:29:77:e6:77:13:21:98:68:74:d1:b2:09:56:57:
b4:5d:c8:77:11:da:23:85:69:0d:e5:70:c9:b7:93:
d0:56:46:b8:78:88:fc:1e:03:b0:28:0f:1c:69:40:
d3:2c:3f:aa:09:01:26:06:42:de:a1:2d:57:22:e2:
81:d7:52:b5:cd:6b:7f:c9:bf:24:9a:92:de:a3:bd:
13:ff:00:af:a0:43:5e:21:2e:7e:24:37:6a:e4:b9:
16:bb:45:e8:4a:7f:c2:56:a2:70:9c:cc:84:32:bc:
e7:c4:50:8d:83:78:a8:20:d3:5e:c2:c4:13:ab:70:
9f:e9:f1:2f:77:7d:43:a1:5b:c1:a5:93:17:c5:6f:
23:24:63:c2:07:ba:88:3b:36:b5:8d:81:08:b1:69:
5a:65:8f:b5:ad:04:13:4c:c5:32:da:1e:1e:7f:a0:
21:db:3d:9a:10:f5:d3:2e:79:7a:0e:7d:b1:2f:e3:
03:0a:5e:28:c7:2c:9c:78:d1:1b:d5:30:73:a5:83:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:8F:31:99:8B:9B:6C:D2:6B:F4:E5:6F:D7:17:62:35:A3:6D:C1
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f7:67:e0:b8:de:99:e2:4f:7b:4b:62:9a:fd:9b:17:eb:c7:
5c:50:e7:8d:cc:32:94:3a:cd:d5:84:e7:39:33:72:53:4a:65:
72:03:a7:75:8a:e4:a3:a2:9a:5a:28:39:4c:c9:2b:ea:8b:f1:
8a:3d:2d:74:ef:eb:68:b4:58:b1:ad:c2:11:d3:c2:fb:fd:a7:
bd:a5:67:b0:3b:8b:e7:15:9b:48:9f:6c:aa:55:39:56:b1:2a:
01:84:cb:70:41:1f:3c:07:76:6c:50:e4:b6:3a:7d:ec:44:66:
4b:6a:f8:6a:82:58:50:78:91:82:c9:84:21:69:7f:66:18:10:
63:f3:aa:24:bf:55:4c:0a:5e:80:09:bf:01:f1:a2:18:5d:9f:
c2:45:e9:2a:8b:cd:fb:8d:58:d5:41:be:cd:46:31:e6:fa:43:
94:32:22:a9:7d:40:e6:7a:94:df:96:6b:8b:64:6e:0d:40:81:
4a:9d:9c:a2:db:81:a5:b0:ea:50:db:d6:04:39:46:00:0f:60:
0b:55:28:06:a2:62:34:1c:9f:be:3a:95:b7:d7:c6:e4:20:d6:
b5:81:0f:b2:05:fe:11:c5:94:33:2b:fe:d0:fc:83:aa:2a:94:
86:cf:e7:78:58:a6:82:b2:c0:9d:a7:ef:d1:89:8b:aa:56:bb:
07:01:8e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSxdCMAXW3niG4KZtbGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1
MDlkMmEwHhcNMjQwNTE3MTYwMTEwWhcNMjQwNTE4MTYwMTEwWjAzMTEwLwYDVQQD
Eyg5ZDEwOGYzMTk5OGI5YjZjZDI2YmY0ZTU2ZmQ3MTc2MjM1YTM2ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2UbrTEgriEdyBOOi7y9JAVmFcay
5P3E6Ijb5OpClCBTGSJs5mXENz4QZjZJyR9ZTirkqVePhc7j4EjxKXfmdxMhmGh0
0bIJVle0Xch3EdojhWkN5XDJt5PQVka4eIj8HgOwKA8caUDTLD+qCQEmBkLeoS1X
IuKB11K1zWt/yb8kmpLeo70T/wCvoENeIS5+JDdq5LkWu0XoSn/CVqJwnMyEMrzn
xFCNg3ioINNewsQTq3Cf6fEvd31DoVvBpZMXxW8jJGPCB7qIOza1jYEIsWlaZY+1
rQQTTMUy2h4ef6Ah2z2aEPXTLnl6Dn2xL+MDCl4oxyyceNEb1TBzpYPY8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0QjzGZi5ts0mv05W/XF2I1o23BMB8GA1UdIwQY
MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt
Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4
LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvdn4Lje
meJPe0timv2bF+vHXFDnjcwylDrN1YTnOTNyU0plcgOndYrko6KaWig5TMkr6ovx
ij0tdO/raLRYsa3CEdPC+/2nvaVnsDuL5xWbSJ9sqlU5VrEqAYTLcEEfPAd2bFDk
tjp97ERmS2r4aoJYUHiRgsmEIWl/ZhgQY/OqJL9VTApegAm/AfGiGF2fwkXpKovN
+41Y1UG+zUYx5vpDlDIiqX1A5nqU35Zri2RuDUCBSp2cotuBpbDqUNvWBDlGAA9g
C1UoBqJiNByfvjqVt9fG5CDWtYEPsgX+EcWUMyv+0PyDqiqUhs/neFimgrLAnafv
0YmLqla7BwGOmA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:58:14 2024 by rpki-client on console-ams.rpki-client.org