Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: qUpeKQtPf0fHwz0M8kFeEER/sSAJ2GhAVR0SB7ILIBw=
Subject key identifier: 65:16:69:4E:D9:63:0D:76:BF:81:DF:2E:90:01:67:FB:91:50:E5:D6
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01901DEB40A29EF59F3664FCCAF012FF4D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 22:01:15 +0000
Manifest this update: Sat 15 Jun 2024 22:01:15 +0000
Manifest next update: Sun 16 Jun 2024 22:01:15 +0000
Files and hashes: 1: q4p0jFQ3WEfG-M-4E7I9saS5OYY.roa (hash: e5nOmBteRDXgf2CEGYG1zrThh5BuvyRg11QsYb1ewt0=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: ACBlXl55nON7Ny+Z7rYMTbpNdXOCXJwe2PHF/QKKAUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:40:a2:9e:f5:9f:36:64:fc:ca:f0:12:ff:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jun 15 22:01:15 2024 GMT
Not After : Jun 16 22:01:15 2024 GMT
Subject: CN=6516694ed9630d76bf81df2e900167fb9150e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:30:96:6a:9c:be:e8:dd:04:ea:76:0b:5c:
aa:7d:41:d1:6e:a4:fd:07:9c:79:8e:d2:ba:0e:2c:
8f:ab:0f:29:a8:3e:1a:de:01:2c:fb:d5:1b:64:39:
c6:4c:0d:29:8b:c5:ab:38:f7:b9:cc:68:0c:f2:39:
2c:c6:3c:1c:12:c6:92:b3:1a:a2:ce:8a:19:4c:df:
24:2d:78:55:42:42:5d:64:d2:68:42:6f:0d:91:7a:
74:53:14:45:90:ee:17:33:34:1e:cd:8f:bc:18:f1:
e6:b6:2b:23:c8:e3:da:3f:33:f0:12:0f:4d:44:8b:
0c:b6:83:50:eb:51:97:50:16:d7:c3:a3:4c:ed:95:
fc:68:00:bd:00:95:a5:74:cb:2e:88:9a:92:b9:41:
9f:82:93:ec:9e:85:39:6f:ae:23:6d:91:be:52:f0:
c0:4a:ff:83:50:9b:c8:91:b4:08:48:88:55:84:3f:
73:67:3c:41:e1:da:8b:ef:45:08:7f:fd:dd:a9:e9:
9c:07:07:dc:ab:00:73:4e:ae:5e:a5:25:4e:29:96:
87:b7:1f:df:a4:e9:40:46:05:75:aa:b5:d1:60:6d:
8e:7f:22:22:b0:2e:33:2f:a4:d5:65:d3:ab:68:79:
27:8c:68:dc:6a:ee:a0:31:74:20:22:25:4e:38:70:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:69:4E:D9:63:0D:76:BF:81:DF:2E:90:01:67:FB:91:50:E5:D6
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b4:c7:d5:d2:f5:58:03:7e:be:ba:4e:4a:49:fe:7f:d9:60:
f9:8e:5c:3c:46:0e:4c:a8:b3:fc:79:a3:03:df:bd:9f:c7:97:
dd:c1:0e:23:56:c5:f9:3c:41:ea:5d:41:67:6a:d0:3b:6a:93:
be:03:03:4a:c4:30:47:68:34:15:e5:09:69:82:18:ed:50:13:
5f:88:7d:18:1b:e3:89:07:68:41:18:aa:e8:42:b8:20:c9:01:
62:12:10:4c:62:11:46:8b:2d:79:71:5c:1f:9f:b6:b4:2d:fe:
39:22:fd:d8:8d:92:4d:77:66:eb:2a:2e:5a:e8:b8:b4:64:da:
96:61:4e:06:d8:1a:29:90:f2:de:08:2f:84:1a:bd:41:2e:a3:
b5:18:10:43:52:b9:9a:83:fc:90:63:2b:c4:f4:93:96:35:a3:
8a:37:41:a5:0b:0b:4f:0f:0d:ca:86:9c:73:02:94:99:da:ce:
6c:28:61:67:b7:7d:74:26:91:bc:9f:86:c6:df:10:1f:ee:4b:
e8:82:34:59:6b:a3:0e:a2:6f:58:80:44:18:7b:69:f7:8a:4f:
43:b9:7d:19:0b:15:92:0f:02:59:48:4e:5c:a4:c9:c3:5d:70:
09:61:6b:11:7b:3e:b3:42:02:9e:21:c3:4c:b5:14:aa:f2:b1:
86:06:6e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd60CinvWfNmT8yvAS/02aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjQwNjE1MjIwMTE1WhcNMjQwNjE2MjIwMTE1WjAzMTEwLwYDVQQD
Eyg2NTE2Njk0ZWQ5NjMwZDc2YmY4MWRmMmU5MDAxNjdmYjkxNTBlNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6cwlmqcvujdBOp2C1yqfUHRbqT9
B5x5jtK6DiyPqw8pqD4a3gEs+9UbZDnGTA0pi8WrOPe5zGgM8jksxjwcEsaSsxqi
zooZTN8kLXhVQkJdZNJoQm8NkXp0UxRFkO4XMzQezY+8GPHmtisjyOPaPzPwEg9N
RIsMtoNQ61GXUBbXw6NM7ZX8aAC9AJWldMsuiJqSuUGfgpPsnoU5b64jbZG+UvDA
Sv+DUJvIkbQISIhVhD9zZzxB4dqL70UIf/3dqemcBwfcqwBzTq5epSVOKZaHtx/f
pOlARgV1qrXRYG2OfyIisC4zL6TVZdOraHknjGjcau6gMXQgIiVOOHDZ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUWaU7ZYw12v4HfLpABZ/uRUOXWMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbTH1dL1
WAN+vrpOSkn+f9lg+Y5cPEYOTKiz/HmjA9+9n8eX3cEOI1bF+TxB6l1BZ2rQO2qT
vgMDSsQwR2g0FeUJaYIY7VATX4h9GBvjiQdoQRiq6EK4IMkBYhIQTGIRRosteXFc
H5+2tC3+OSL92I2STXdm6youWui4tGTalmFOBtgaKZDy3ggvhBq9QS6jtRgQQ1K5
moP8kGMrxPSTljWjijdBpQsLTw8NyoaccwKUmdrObChhZ7d9dCaRvJ+Gxt8QH+5L
6II0WWujDqJvWIBEGHtp94pPQ7l9GQsVkg8CWUhOXKTJw11wCWFrEXs+s0ICniHD
TLUUqvKxhgZuTA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:07 2024 by rpki-client on console-fra.rpki-client.org