Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.mft
File: KTXf0LuKwC8iHNywku8FJdDWmI8.mft (raw, json)
Hash identifier: /Wqk+/CRN9yliu7POSZLnN93cPQZmUTw7EL7kaFRuOs=
Subject key identifier: E0:02:1B:8C:D7:EC:33:E2:B8:C5:FD:1D:85:32:29:A1:C8:88:C1:5E
Authority key identifier: 29:35:DF:D0:BB:8A:C0:2F:22:1C:DC:B0:92:EF:05:25:D0:D6:98:8F
Certificate issuer: /CN=2935dfd0bb8ac02f221cdcb092ef0525d0d6988f
Certificate serial: 019045D48175B1E935192580387DEDB3BB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTXf0LuKwC8iHNywku8FJdDWmI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.mft
Manifest number: 02E6
Signing time: Sun 23 Jun 2024 16:01:13 +0000
Manifest this update: Sun 23 Jun 2024 16:01:13 +0000
Manifest next update: Mon 24 Jun 2024 16:01:13 +0000
Files and hashes: 1: 5wJKY0bWQTfgoYClaysZW2O0JYY.roa (hash: 8hhlk/BdswaToKaw1TpcWekfuv+cFkPMnP6kiD5d5m8=)
2: KTXf0LuKwC8iHNywku8FJdDWmI8.crl (hash: 3TqG3npnYczXgfUCY89p+Zu7SzRSnXLnR3JMIQtu3DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTXf0LuKwC8iHNywku8FJdDWmI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:81:75:b1:e9:35:19:25:80:38:7d:ed:b3:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2935dfd0bb8ac02f221cdcb092ef0525d0d6988f
Validity
Not Before: Jun 23 16:01:13 2024 GMT
Not After : Jun 24 16:01:13 2024 GMT
Subject: CN=e0021b8cd7ec33e2b8c5fd1d853229a1c888c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:17:c9:ff:e4:8a:3b:d1:e5:85:bf:e0:f5:
04:51:34:b0:5d:fc:34:0e:43:17:80:44:58:1d:b0:
37:16:7b:ca:ef:8a:ca:38:2c:cf:0f:a6:37:cc:1c:
ff:15:ab:d3:ed:44:86:6c:9b:67:b2:21:6f:38:21:
b7:24:dd:d3:4e:a3:5e:a4:92:21:37:cb:71:03:dc:
7b:52:05:ef:c3:c2:d1:8d:24:7c:d2:5c:5a:6c:92:
78:c0:d7:40:b9:e0:6f:e4:6f:8e:9a:6d:9f:b0:9d:
f3:7a:27:43:0a:d8:37:87:d0:2e:5c:e6:02:26:1a:
54:62:d5:93:ac:b3:38:a7:32:5c:8a:e4:c6:e9:ed:
c8:5f:44:48:1f:70:35:f6:9f:82:f1:46:1d:83:60:
73:e4:6e:b6:b2:7b:a5:b1:4f:10:1f:9c:3b:5c:da:
b9:e0:cd:78:a5:4d:90:fd:49:38:b8:aa:b7:8f:0f:
1d:9a:05:67:39:f4:45:40:28:86:00:eb:c4:92:49:
51:35:47:3a:88:66:bb:e5:d6:1b:71:41:5d:8f:37:
56:88:93:cf:d8:69:cc:d8:d8:3c:ed:27:9e:f6:4c:
5b:03:19:ef:69:a4:e9:c9:5f:fb:c0:b4:94:79:76:
7a:e8:00:5e:d4:fb:26:81:05:cd:18:46:5e:5b:79:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:1B:8C:D7:EC:33:E2:B8:C5:FD:1D:85:32:29:A1:C8:88:C1:5E
X509v3 Authority Key Identifier:
keyid:29:35:DF:D0:BB:8A:C0:2F:22:1C:DC:B0:92:EF:05:25:D0:D6:98:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTXf0LuKwC8iHNywku8FJdDWmI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c37502-510b-4015-a718-38e8ea0c4d37/1/KTXf0LuKwC8iHNywku8FJdDWmI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:63:9f:85:da:80:3d:7c:98:2d:28:93:9c:3e:55:1a:5e:
42:88:af:1c:46:80:bf:44:00:89:b8:f7:a3:a0:fc:6d:d4:e4:
fb:db:62:cf:ca:7f:bb:b3:3a:22:79:5f:f0:2c:3c:28:45:b4:
f8:5c:2f:75:77:4d:4a:06:27:85:b8:4a:db:28:d9:6d:58:51:
7a:36:6d:bb:29:80:80:a1:4b:50:f2:f8:26:27:16:1a:94:df:
9c:36:72:8f:e9:71:d0:bf:a3:51:ed:01:24:20:ec:a3:a7:25:
e7:6f:de:aa:f3:e5:fb:97:36:04:e8:ac:60:8f:71:82:b8:21:
30:fc:5a:01:2a:f8:c9:1e:02:b6:7c:88:16:39:4d:ea:41:b8:
4f:f4:74:54:9c:fe:32:d8:04:a7:5c:23:f0:76:61:da:e4:6d:
8d:f4:9c:f9:78:c1:52:0b:be:21:7c:71:da:d9:01:60:6b:31:
75:a1:87:5d:cc:71:9b:f8:eb:9c:be:bc:ef:1f:c2:b4:cc:df:
3c:3f:10:9c:d3:ac:9f:02:49:05:5e:ed:9e:da:3d:09:4c:10:
46:14:13:16:32:1f:43:c8:df:24:e8:5b:47:b4:a9:79:5c:14:
2a:f8:9b:e9:38:ba:33:e2:33:16:e3:01:14:d7:a8:25:0a:99:
93:ba:1a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1IF1sek1GSWAOH3ts7uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzVkZmQwYmI4YWMwMmYyMjFjZGNiMDkyZWYwNTI1ZDBk
Njk4OGYwHhcNMjQwNjIzMTYwMTEzWhcNMjQwNjI0MTYwMTEzWjAzMTEwLwYDVQQD
EyhlMDAyMWI4Y2Q3ZWMzM2UyYjhjNWZkMWQ4NTMyMjlhMWM4ODhjMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA224Xyf/kijvR5YW/4PUEUTSwXfw0
DkMXgERYHbA3FnvK74rKOCzPD6Y3zBz/FavT7USGbJtnsiFvOCG3JN3TTqNepJIh
N8txA9x7UgXvw8LRjSR80lxabJJ4wNdAueBv5G+Omm2fsJ3zeidDCtg3h9AuXOYC
JhpUYtWTrLM4pzJciuTG6e3IX0RIH3A19p+C8UYdg2Bz5G62snulsU8QH5w7XNq5
4M14pU2Q/Uk4uKq3jw8dmgVnOfRFQCiGAOvEkklRNUc6iGa75dYbcUFdjzdWiJPP
2GnM2Ng87See9kxbAxnvaaTpyV/7wLSUeXZ66ABe1PsmgQXNGEZeW3lOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOACG4zX7DPiuMX9HYUyKaHIiMFeMB8GA1UdIwQY
MBaAFCk139C7isAvIhzcsJLvBSXQ1piPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RYZjBMdUt3QzhpSE55d2t1OEZKZERXbUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMzc1MDItNTEwYi00MDE1LWE3MTgt
MzhlOGVhMGM0ZDM3LzEvS1RYZjBMdUt3QzhpSE55d2t1OEZKZERXbUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jMzc1MDItNTEwYi00MDE1LWE3MTgtMzhlOGVhMGM0ZDM3
LzEvS1RYZjBMdUt3QzhpSE55d2t1OEZKZERXbUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl99jn4Xa
gD18mC0ok5w+VRpeQoivHEaAv0QAibj3o6D8bdTk+9tiz8p/u7M6Inlf8Cw8KEW0
+FwvdXdNSgYnhbhK2yjZbVhRejZtuymAgKFLUPL4JicWGpTfnDZyj+lx0L+jUe0B
JCDso6cl52/eqvPl+5c2BOisYI9xgrghMPxaASr4yR4CtnyIFjlN6kG4T/R0VJz+
MtgEp1wj8HZh2uRtjfSc+XjBUgu+IXxx2tkBYGsxdaGHXcxxm/jrnL687x/CtMzf
PD8QnNOsnwJJBV7tnto9CUwQRhQTFjIfQ8jfJOhbR7SpeVwUKvib6Ti6M+IzFuMB
FNeoJQqZk7oaCg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:06:27 2024 by rpki-client on console-ams.rpki-client.org