Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: NbkmSBGi2aEEWm+y67fJFvWxscTp0pcjuNfhSvwVH2o=
Subject key identifier: 2F:3F:BC:B8:29:4D:80:4D:B7:50:A8:BE:19:56:89:FC:D6:DC:DC:59
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01901C333DE32FFF9CFE71FD6AD24FFBE865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 11D1
Signing time: Sat 15 Jun 2024 14:00:38 +0000
Manifest this update: Sat 15 Jun 2024 14:00:38 +0000
Manifest next update: Sun 16 Jun 2024 14:00:38 +0000
Files and hashes: 1: K5H-LYRvkiXXBM0FJgRX0LGZSTo.roa (hash: CvOiDOYI9t1mQsM5msxWxv8sw1uJSBLq2jzm/+zYnLA=)
2: R8wOgcDBFMoQCuYHbEZEsHZnRLI.roa (hash: T+M4cA84ZOnvoHRZS9yT6YvetfcmwPuc00yLL9gvyKQ=)
3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: sk1vwOCjxLqmPkvUD0RodeCxJnjyIDQha2JGTwTeA7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:33:3d:e3:2f:ff:9c:fe:71:fd:6a:d2:4f:fb:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jun 15 14:00:38 2024 GMT
Not After : Jun 16 14:00:38 2024 GMT
Subject: CN=2f3fbcb8294d804db750a8be195689fcd6dcdc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:9b:25:9f:01:73:0f:d4:d0:8c:29:aa:e2:
7c:cb:0b:0e:5f:2b:3e:0c:b7:5a:e2:1a:2c:b7:e1:
8e:67:8a:ba:e6:b3:42:26:46:19:59:8e:d0:e1:f5:
21:28:62:c1:16:f6:a3:4a:c2:b7:3c:5a:e7:00:78:
1c:a7:1f:f2:17:b0:26:7c:02:3a:61:f2:f5:00:34:
17:36:f6:b9:cb:06:0c:52:b0:65:9f:63:7c:fc:c2:
c3:5d:b6:9a:6b:69:e6:25:c1:03:c1:8d:3d:cf:00:
4d:60:cf:a6:df:f4:3f:04:0e:6a:2d:84:51:d5:ea:
96:26:77:4b:16:dc:8a:7c:a2:e0:db:ff:b3:10:cd:
41:c9:40:09:2b:e3:98:26:8a:ac:c6:0c:78:08:47:
3a:7e:79:49:88:41:c7:85:ec:c6:f6:25:58:c9:97:
fa:00:88:51:f3:c7:69:7f:71:d8:1c:58:27:55:af:
5b:59:b6:fc:a0:0a:24:2c:b5:e4:86:05:38:11:a4:
4e:e3:22:a9:52:9d:59:b9:7f:4f:b1:0e:bb:48:23:
16:31:f4:7c:64:bc:85:77:0a:99:0a:92:0c:61:0d:
30:5c:ad:a3:6c:4b:f2:a3:ae:1e:9c:5a:9b:08:0a:
4e:e5:75:43:ba:3c:e5:d6:bd:31:7a:d7:6b:b9:f9:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:BC:B8:29:4D:80:4D:B7:50:A8:BE:19:56:89:FC:D6:DC:DC:59
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:28:81:18:9d:4d:04:e6:ab:7a:2b:6e:b9:8e:a1:f7:20:
08:e1:b3:d2:1b:97:b6:43:14:b2:95:ea:5c:1a:de:57:b0:6e:
d4:6d:97:15:e1:f9:c5:4f:91:2e:15:ce:d2:de:be:51:f6:73:
bb:37:2d:1c:4a:c6:54:63:73:85:ac:bd:53:38:25:9c:68:79:
e8:aa:a5:f7:59:d6:de:46:81:00:98:81:a5:9d:6e:0e:7c:9e:
e4:4f:32:65:0e:22:eb:1b:13:0d:57:03:47:ee:fa:04:38:f8:
ab:39:a2:c7:51:fa:04:46:d2:c4:58:4c:69:51:a9:a9:9e:dd:
34:2d:a4:0b:1b:f5:81:9c:62:f8:45:ea:56:d8:cf:00:7f:d4:
1d:8c:60:62:95:a9:e6:95:16:3e:8d:81:68:29:6c:57:c0:1f:
31:c5:50:8c:32:52:e5:33:f5:28:00:a6:6f:20:01:7a:6f:81:
33:3c:26:c6:17:35:0d:5b:fc:12:cd:ab:63:9f:d2:7b:dc:db:
35:1b:83:55:db:6b:67:14:6d:9a:ff:52:14:bd:83:65:ec:33:
07:d1:0b:db:0b:17:94:82:78:d2:8e:ea:7a:87:6d:3b:9a:dc:
66:0d:4d:5e:7c:ba:e7:24:3f:cb:f1:11:64:3c:2a:8e:a0:4e:
1c:89:02:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcMz3jL/+c/nH9atJP++hlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk
MjI5YzMwHhcNMjQwNjE1MTQwMDM4WhcNMjQwNjE2MTQwMDM4WjAzMTEwLwYDVQQD
EygyZjNmYmNiODI5NGQ4MDRkYjc1MGE4YmUxOTU2ODlmY2Q2ZGNkYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp+bJZ8Bcw/U0IwpquJ8ywsOXys+
DLda4host+GOZ4q65rNCJkYZWY7Q4fUhKGLBFvajSsK3PFrnAHgcpx/yF7AmfAI6
YfL1ADQXNva5ywYMUrBln2N8/MLDXbaaa2nmJcEDwY09zwBNYM+m3/Q/BA5qLYRR
1eqWJndLFtyKfKLg2/+zEM1ByUAJK+OYJoqsxgx4CEc6fnlJiEHHhezG9iVYyZf6
AIhR88dpf3HYHFgnVa9bWbb8oAokLLXkhgU4EaRO4yKpUp1ZuX9PsQ67SCMWMfR8
ZLyFdwqZCpIMYQ0wXK2jbEvyo64enFqbCApO5XVDujzl1r0xetdrufn0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8/vLgpTYBNt1CovhlWifzW3NxZMB8GA1UdIwQY
MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt
YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw
LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD4ogRid
TQTmq3orbrmOofcgCOGz0huXtkMUspXqXBreV7Bu1G2XFeH5xU+RLhXO0t6+UfZz
uzctHErGVGNzhay9UzglnGh56Kql91nW3kaBAJiBpZ1uDnye5E8yZQ4i6xsTDVcD
R+76BDj4qzmix1H6BEbSxFhMaVGpqZ7dNC2kCxv1gZxi+EXqVtjPAH/UHYxgYpWp
5pUWPo2BaClsV8AfMcVQjDJS5TP1KACmbyABem+BMzwmxhc1DVv8Es2rY5/Se9zb
NRuDVdtrZxRtmv9SFL2DZewzB9EL2wsXlIJ40o7qeodtO5rcZg1NXny65yQ/y/ER
ZDwqjqBOHIkC4g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:48:21 2024 by rpki-client on console-ams.rpki-client.org