Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: TENMalCaijbr/EMKswLEuJk8SI5HaU/dlOXYTULHNdI=
Subject key identifier: B1:B0:FE:3C:B9:D5:61:77:96:FD:94:84:6C:3D:40:84:79:90:73:84
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0193568950DFDFCCA48E2638BE7E1E216706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0C44
Signing time: Sat 23 Nov 2024 01:00:59 +0000
Manifest this update: Sat 23 Nov 2024 01:00:59 +0000
Manifest next update: Sun 24 Nov 2024 01:00:59 +0000
Files and hashes: 1: sbo9gjQQqElO4rzd0NIuq720b34.roa (hash: FZpsTgXE5UXyvb1i+UP6MgkgccgMhKYPlelNI2hcbmo=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: pfwT7O1lJxRlyVoDX35WfR/eLgS9e9SvbjN/agCLESk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:50:df:df:cc:a4:8e:26:38:be:7e:1e:21:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Nov 23 01:00:59 2024 GMT
Not After : Nov 24 01:00:59 2024 GMT
Subject: CN=b1b0fe3cb9d5617796fd94846c3d408479907384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:76:63:6d:9d:cb:40:f1:1d:26:79:c6:fc:
ed:69:55:81:28:4c:28:1c:0a:20:cb:41:84:81:01:
7d:7d:04:86:92:24:1d:f1:68:33:3c:f7:f1:90:35:
6c:0f:84:79:ec:d3:d9:11:b1:59:c5:92:99:26:27:
be:3c:00:ba:42:df:8a:e0:3d:36:db:2e:a1:07:e2:
a0:2d:98:37:c6:44:33:fe:71:1d:10:44:5d:56:58:
c9:76:c4:37:7a:aa:b3:aa:3b:d6:f6:39:4a:7b:1b:
1a:ca:e3:e5:05:7b:c7:d9:c9:13:e8:fb:75:37:af:
5f:48:97:d6:de:e7:7d:e0:7a:50:e6:56:04:ad:ec:
8c:c8:8b:af:3d:30:3c:51:c3:2e:2c:39:6e:be:d5:
44:a4:87:36:95:c3:4e:c0:2d:4d:d4:69:11:26:57:
64:3f:52:41:9e:74:5d:a7:37:e8:04:9d:54:21:d9:
01:77:c0:5a:4b:9a:3c:90:9f:71:73:b6:d2:ea:a5:
72:ba:9e:a7:96:1d:fa:81:a9:cb:50:c1:06:b7:28:
39:a9:44:63:f9:58:52:ab:84:d7:12:ef:72:21:95:
e3:3b:03:23:c3:86:75:0b:d4:30:13:5d:b7:f0:e7:
a0:a8:ba:b8:30:9a:22:d1:14:cc:b1:ab:a4:5c:7e:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:FE:3C:B9:D5:61:77:96:FD:94:84:6C:3D:40:84:79:90:73:84
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:4a:b5:90:b5:9b:8e:8b:cf:22:e1:77:62:ef:68:cf:c4:
ff:6e:85:e3:6f:e7:82:79:9f:03:d0:d1:7e:a1:11:db:31:f8:
2f:65:15:0a:45:44:14:19:0f:c7:28:70:ed:37:1f:70:e7:05:
ab:a6:82:86:79:17:cc:b7:2f:4f:0b:1f:fa:46:92:3c:38:33:
3b:ad:ce:2e:fe:31:eb:8d:83:cd:81:83:f4:ab:8a:90:19:f9:
2a:53:78:4b:f2:77:dd:a6:ff:c2:a5:5e:e3:28:39:80:d2:6c:
68:c2:e4:55:96:b8:79:44:7e:70:4f:d1:01:63:e5:58:59:74:
48:45:fb:7d:93:e0:e5:25:7e:2f:78:e2:1c:96:30:d0:4a:99:
9c:9f:af:3e:f1:9e:a4:e1:ae:fd:08:78:89:bd:e5:2c:60:29:
30:ca:79:25:6c:10:e4:33:61:78:ae:48:2d:05:6c:72:4b:4e:
d3:8e:17:f4:65:7d:1c:79:16:22:7f:91:4c:06:db:a2:bc:22:
9f:0b:0c:00:52:8a:0e:09:89:21:26:9a:11:8d:87:d2:ab:9a:
69:ee:9f:44:f8:2d:30:4c:7e:f8:21:b4:0f:45:6e:25:72:e5:
35:d9:92:52:5b:94:bb:9e:1e:11:f2:23:2c:74:3d:68:74:89:
a7:e0:01:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiVDf38ykjiY4vn4eIWcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTFkMDBiZGI2MjZhZTU3MzA3ZDVjZDRlOGFkZGQ5NDc1
NjgwYjMwHhcNMjQxMTIzMDEwMDU5WhcNMjQxMTI0MDEwMDU5WjAzMTEwLwYDVQQD
EyhiMWIwZmUzY2I5ZDU2MTc3OTZmZDk0ODQ2YzNkNDA4NDc5OTA3Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ah2Y22dy0DxHSZ5xvztaVWBKEwo
HAogy0GEgQF9fQSGkiQd8WgzPPfxkDVsD4R57NPZEbFZxZKZJie+PAC6Qt+K4D02
2y6hB+KgLZg3xkQz/nEdEERdVljJdsQ3eqqzqjvW9jlKexsayuPlBXvH2ckT6Pt1
N69fSJfW3ud94HpQ5lYEreyMyIuvPTA8UcMuLDluvtVEpIc2lcNOwC1N1GkRJldk
P1JBnnRdpzfoBJ1UIdkBd8BaS5o8kJ9xc7bS6qVyup6nlh36ganLUMEGtyg5qURj
+VhSq4TXEu9yIZXjOwMjw4Z1C9QwE1238OegqLq4MJoi0RTMsaukXH7ZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGw/jy51WF3lv2UhGw9QIR5kHOEMB8GA1UdIwQY
MBaAFLaR0AvbYmrlcwfVzU6K3dlHVoCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEt
NDUwYWQ1NWQzMjVhLzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEtNDUwYWQ1NWQzMjVh
LzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFpKtZC1
m46LzyLhd2LvaM/E/26F42/ngnmfA9DRfqER2zH4L2UVCkVEFBkPxyhw7TcfcOcF
q6aChnkXzLcvTwsf+kaSPDgzO63OLv4x642DzYGD9KuKkBn5KlN4S/J33ab/wqVe
4yg5gNJsaMLkVZa4eUR+cE/RAWPlWFl0SEX7fZPg5SV+L3jiHJYw0EqZnJ+vPvGe
pOGu/Qh4ib3lLGApMMp5JWwQ5DNheK5ILQVscktO044X9GV9HHkWIn+RTAbborwi
nwsMAFKKDgmJISaaEY2H0quaae6fRPgtMEx++CG0D0VuJXLlNdmSUluUu54eEfIj
LHQ9aHSJp+ABbw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:16 2024 by rpki-client on console-ams.rpki-client.org