Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: cv1F4Qf7DSfjGDn9AGsI2Rj7ld8chAn4srT2DniA1vw=
Subject key identifier: 48:A6:88:5F:6A:FA:48:BD:B8:97:4F:FC:29:9A:D5:67:4B:CB:2B:CD
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 018F991782A8E9D36AA9A8E7AA3CFA5F7C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0BF1
Signing time: Tue 21 May 2024 03:00:05 +0000
Manifest this update: Tue 21 May 2024 03:00:05 +0000
Manifest next update: Wed 22 May 2024 03:00:05 +0000
Files and hashes: 1: 7iSXQzRJAcMf_gTmIY-Yq9VjHLU.roa (hash: ZPfafDzxxJq72xsg/V75gIDRGxuHUM2TPUxUeO6rrrw=)
2: 8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa (hash: xfalGS2aRYaAWrLcQWp+OZwpjT/MXkx3b+hGvsDOqxw=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: 4gcP7xrGUeIusoQ9M75/3tB5ZJ4iEw0ygBmOYdaVUKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:17:82:a8:e9:d3:6a:a9:a8:e7:aa:3c:fa:5f:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: May 21 03:00:05 2024 GMT
Not After : May 22 03:00:05 2024 GMT
Subject: CN=48a6885f6afa48bdb8974ffc299ad5674bcb2bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:d2:b3:8e:27:ae:4d:f9:b8:76:eb:64:dc:
62:94:6f:15:8d:89:2b:6f:5a:ac:25:d1:84:b4:86:
21:c2:82:50:3d:d9:1c:4d:d8:e6:53:a6:f4:44:32:
0b:ec:d6:4e:17:0d:57:03:83:8f:f3:56:3e:89:6e:
11:9f:3d:6c:d3:1b:4c:be:eb:e5:a4:01:92:cb:44:
b2:4d:64:c8:fc:10:a6:46:a4:20:da:4e:df:e1:3e:
db:99:bf:b3:ad:d8:26:bd:45:4e:03:78:b8:49:18:
36:1a:6b:ad:38:97:c6:52:0f:d3:45:5b:5a:6a:91:
67:7c:45:89:6c:61:25:dd:a4:01:b6:a2:22:83:a8:
b9:58:8b:db:7c:a5:00:50:c1:91:f0:1e:2a:ad:24:
7e:66:2b:fb:16:34:a4:b4:b5:e8:e9:e7:69:04:28:
46:0b:b6:55:d4:a7:3e:0a:4c:47:5c:b6:cf:20:79:
67:52:c2:5a:67:7e:80:b0:d2:58:22:49:e5:00:ed:
b7:f4:f7:8f:d6:08:3c:0c:f3:95:01:2a:cf:e9:d3:
4e:88:e3:f1:5b:17:33:ce:5e:07:42:2f:94:46:61:
4a:3c:5c:e5:5b:8d:32:b4:56:1d:94:75:8a:e4:f5:
88:2e:1e:93:cf:df:af:72:cc:e7:3e:0d:52:33:21:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:88:5F:6A:FA:48:BD:B8:97:4F:FC:29:9A:D5:67:4B:CB:2B:CD
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:92:4f:0b:4f:43:c4:60:10:cc:0a:1f:55:8e:e8:21:55:
2b:2c:0c:d7:4f:e5:a5:cb:77:3c:8a:14:4f:d2:5a:4d:d0:b1:
7d:ed:52:21:49:63:3c:5d:f4:70:a1:b1:59:6c:e3:8c:02:6c:
0b:8a:1b:c9:a4:fb:29:41:05:d5:74:5f:38:17:3d:69:58:0d:
62:15:58:be:fe:c0:2f:c0:cc:ed:a8:f6:45:3c:56:61:16:55:
0f:08:a2:2c:57:09:48:4c:12:fa:33:c6:e7:65:95:b9:98:63:
b4:ad:21:34:a7:1f:07:06:88:96:36:8f:2e:54:56:29:d9:7d:
e8:4d:71:19:c6:af:d1:ba:55:f7:67:2f:09:df:c4:32:96:cb:
cf:38:3e:6f:7b:b2:9e:6d:03:75:fd:69:d1:4e:c3:3b:43:99:
f9:79:3f:cb:2c:28:5b:08:24:f2:3d:18:3b:21:36:8b:8a:6e:
3c:11:29:e3:ac:8a:9e:16:cb:31:bd:3c:d0:c6:ec:f8:58:e8:
76:a7:03:97:d3:b3:fe:ff:bb:3f:56:a5:ba:83:95:da:0c:98:
7f:c1:d2:dc:26:34:52:ed:62:ca:71:0c:5d:2d:f7:dd:90:f3:
95:57:8f:2f:ac:c7:4d:fc:ce:55:45:d9:b2:8a:c2:4c:55:80:
7a:78:82:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ZF4Ko6dNqqajnqjz6X3wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjQwNTIxMDMwMDA1WhcNMjQwNTIyMDMwMDA1WjAzMTEwLwYDVQQD
Eyg0OGE2ODg1ZjZhZmE0OGJkYjg5NzRmZmMyOTlhZDU2NzRiY2IyYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgnSs44nrk35uHbrZNxilG8VjYkr
b1qsJdGEtIYhwoJQPdkcTdjmU6b0RDIL7NZOFw1XA4OP81Y+iW4Rnz1s0xtMvuvl
pAGSy0SyTWTI/BCmRqQg2k7f4T7bmb+zrdgmvUVOA3i4SRg2GmutOJfGUg/TRVta
apFnfEWJbGEl3aQBtqIig6i5WIvbfKUAUMGR8B4qrSR+Ziv7FjSktLXo6edpBChG
C7ZV1Kc+CkxHXLbPIHlnUsJaZ36AsNJYIknlAO239PeP1gg8DPOVASrP6dNOiOPx
Wxczzl4HQi+URmFKPFzlW40ytFYdlHWK5PWILh6Tz9+vcsznPg1SMyHc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEimiF9q+ki9uJdP/Cma1WdLyyvNMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+ySTwtP
Q8RgEMwKH1WO6CFVKywM10/lpct3PIoUT9JaTdCxfe1SIUljPF30cKGxWWzjjAJs
C4obyaT7KUEF1XRfOBc9aVgNYhVYvv7AL8DM7aj2RTxWYRZVDwiiLFcJSEwS+jPG
52WVuZhjtK0hNKcfBwaIljaPLlRWKdl96E1xGcav0bpV92cvCd/EMpbLzzg+b3uy
nm0Ddf1p0U7DO0OZ+Xk/yywoWwgk8j0YOyE2i4puPBEp46yKnhbLMb080Mbs+Fjo
dqcDl9Oz/v+7P1aluoOV2gyYf8HS3CY0Uu1iynEMXS333ZDzlVePL6zHTfzOVUXZ
sorCTFWAeniCNg==
-----END CERTIFICATE-----
Generated at Tue May 21 03:31:58 2024 by rpki-client on console-fra.rpki-client.org