Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: 8tNz+RKROUF0/YfOplvgT4CeLy7Fdb7xkr5DgzPWAf8=
Subject key identifier: A0:34:8C:9F:49:97:3D:B8:E5:F7:B0:02:6F:6D:DE:BE:86:45:2E:23
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 018F90146079E0348C6ECD814C6D737E22C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 08F3
Signing time: Sun 19 May 2024 09:00:05 +0000
Manifest this update: Sun 19 May 2024 09:00:05 +0000
Manifest next update: Mon 20 May 2024 09:00:05 +0000
Files and hashes: 1: PqYivTbBUGRa3r405njgslres4Q.roa (hash: Xcoa4fFHTXgFWGlMr3aL34jR90wFuBSXV+WVq4qWo3M=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: gWqmopdEe3qFsiyfPSNQXEzctQsHlrlboFZU4KhH/gA=)
3: wUNmbFk1v6u7xR5hCviVkBvUPgs.roa (hash: Sh6tsWN215KDx7fXXwTV9jlvZ60RCPsCey5M9YPc/Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:14:60:79:e0:34:8c:6e:cd:81:4c:6d:73:7e:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: May 19 09:00:05 2024 GMT
Not After : May 20 09:00:05 2024 GMT
Subject: CN=a0348c9f49973db8e5f7b0026f6ddebe86452e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:37:a6:7e:bd:ca:1a:2e:a1:bc:ef:9c:6d:
0a:ef:f3:7e:ab:8f:e5:4d:11:6a:06:68:11:4c:ba:
bc:06:fd:80:fe:c8:5f:cf:dd:78:2a:71:8a:63:46:
93:c3:6a:54:8b:4c:19:ee:25:7d:ea:44:b8:55:e1:
56:18:e1:df:7f:41:de:14:29:e3:81:28:6f:5b:9d:
07:cc:bd:b4:e3:e7:aa:ca:fb:3e:a2:f8:a3:6b:fe:
f5:87:0a:4c:4e:20:e9:d3:5b:dd:54:d8:c5:69:dd:
9b:d8:0e:ee:de:f2:3e:21:21:34:7c:2c:20:c6:3c:
0c:08:ca:53:64:ee:c9:d2:66:9d:9b:a4:e4:f0:a3:
4b:43:a7:0a:f0:bb:87:9a:d4:69:69:19:da:c9:07:
03:9f:64:dc:6f:b6:f5:00:a3:c5:fd:ee:65:ff:73:
05:5a:05:73:89:bd:93:91:d2:ce:76:d6:86:83:04:
12:71:96:82:00:cf:f6:cc:f9:7e:85:50:c9:99:de:
4a:0e:a5:59:de:b4:9a:fd:69:a3:b8:f1:37:6e:c6:
1a:9e:a9:58:9b:03:ef:ab:90:2c:ea:95:e9:8c:f3:
d0:bc:b4:68:b6:c9:e6:c4:62:47:5e:4b:00:f6:94:
5b:16:2a:6b:ba:ec:f6:bf:7d:ae:92:e5:89:e5:fd:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:8C:9F:49:97:3D:B8:E5:F7:B0:02:6F:6D:DE:BE:86:45:2E:23
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:b1:81:3d:c3:70:af:ea:2e:12:e7:33:51:70:ed:98:84:
f2:5b:26:1f:56:09:39:17:2d:2a:a7:d6:66:e6:22:8a:1c:f2:
52:4e:90:02:a8:99:ae:d8:cf:bd:f7:33:5c:96:af:84:1e:9d:
5e:6e:29:c4:ed:eb:a5:a8:86:f2:a3:df:74:2e:8a:16:d4:02:
99:5c:06:2e:06:e6:6c:85:d3:bd:39:18:66:95:7b:3f:1d:e7:
4b:b2:ac:a8:0f:28:c4:90:79:14:d1:3e:9a:f6:c8:4e:d1:9b:
d9:0d:58:ee:50:1c:50:94:54:c6:8d:3c:24:ae:2d:56:a6:20:
ca:ce:32:a5:5a:7f:ac:c1:19:a9:87:dd:6d:22:40:25:3b:43:
f7:b6:7a:8a:12:c4:b2:a5:36:90:5e:09:1d:df:c2:90:68:2c:
65:6b:81:bf:0b:51:b0:26:f0:ed:18:ac:24:d3:69:14:b0:4f:
15:d6:1f:f9:64:85:02:ff:74:a2:46:38:be:a9:50:aa:8f:cc:
0c:ed:64:c0:b4:35:e8:c5:0b:64:cc:bd:7f:24:a0:2b:48:6f:
a5:01:6b:81:41:7c:07:1f:8d:6a:88:f2:21:a5:76:8d:cc:8c:
a7:62:ed:1d:9e:17:30:55:c3:88:58:28:7b:f0:23:6c:25:60:
31:67:0b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+QFGB54DSMbs2BTG1zfiLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZWQ5YjVjYjRiNjQ4NjZjMzgzZGVlNDU3NmJmZjNmZjg3
NTI0MmQwHhcNMjQwNTE5MDkwMDA1WhcNMjQwNTIwMDkwMDA1WjAzMTEwLwYDVQQD
EyhhMDM0OGM5ZjQ5OTczZGI4ZTVmN2IwMDI2ZjZkZGViZTg2NDUyZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSk3pn69yhouobzvnG0K7/N+q4/l
TRFqBmgRTLq8Bv2A/shfz914KnGKY0aTw2pUi0wZ7iV96kS4VeFWGOHff0HeFCnj
gShvW50HzL204+eqyvs+ovija/71hwpMTiDp01vdVNjFad2b2A7u3vI+ISE0fCwg
xjwMCMpTZO7J0madm6Tk8KNLQ6cK8LuHmtRpaRnayQcDn2Tcb7b1AKPF/e5l/3MF
WgVzib2TkdLOdtaGgwQScZaCAM/2zPl+hVDJmd5KDqVZ3rSa/WmjuPE3bsYanqlY
mwPvq5As6pXpjPPQvLRotsnmxGJHXksA9pRbFipruuz2v32ukuWJ5f2NMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA0jJ9Jlz245fewAm9t3r6GRS4jMB8GA1UdIwQY
MBaAFLbtm1y0tkhmw4Pe5Fdr/z/4dSQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDkt
NWE5MDVhZjUwN2MzLzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDktNWE5MDVhZjUwN2Mz
LzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+SxgT3D
cK/qLhLnM1Fw7ZiE8lsmH1YJORctKqfWZuYiihzyUk6QAqiZrtjPvfczXJavhB6d
Xm4pxO3rpaiG8qPfdC6KFtQCmVwGLgbmbIXTvTkYZpV7Px3nS7KsqA8oxJB5FNE+
mvbITtGb2Q1Y7lAcUJRUxo08JK4tVqYgys4ypVp/rMEZqYfdbSJAJTtD97Z6ihLE
sqU2kF4JHd/CkGgsZWuBvwtRsCbw7RisJNNpFLBPFdYf+WSFAv90okY4vqlQqo/M
DO1kwLQ16MULZMy9fySgK0hvpQFrgUF8Bx+NaojyIaV2jcyMp2LtHZ4XMFXDiFgo
e/AjbCVgMWcLzw==
-----END CERTIFICATE-----
Generated at Sun May 19 10:28:55 2024 by rpki-client on console-ams.rpki-client.org