Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: Renl22GgHLuOQX9rkSBsWuQkeBAdWOjKls6YMjcnYh8=
Subject key identifier: 02:96:A4:11:6D:3E:40:23:39:97:C1:A2:5F:FF:F2:83:EB:50:8A:A2
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 018F46456DEF773973A172DB35C0446A59D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0582
Signing time: Sun 05 May 2024 01:01:46 +0000
Manifest this update: Sun 05 May 2024 01:01:46 +0000
Manifest next update: Mon 06 May 2024 01:01:46 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: q5CuOxR7iEWtLOZhFaBKrW5f14QEtBjknlq/S0r8e04=)
2: 7GkjYZdaSii6HrojXZvxYQXipWM.roa (hash: /XQPERaOZ1cHm7yWcEmI1viHyqVH+QrX6/03PBr5VIc=)
3: KpXxrPPk4TR1zpyDTSVCaU--k3c.roa (hash: gv/PxYR506JxX7BYPTMYlqAtsj5TCulowKsUQ2v61FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:45:6d:ef:77:39:73:a1:72:db:35:c0:44:6a:59:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: May 5 01:01:46 2024 GMT
Not After : May 6 01:01:46 2024 GMT
Subject: CN=0296a4116d3e40233997c1a25ffff283eb508aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:5a:76:e1:91:c3:85:8a:47:cc:3a:1e:51:
12:04:d0:11:10:1b:c6:da:5a:61:39:4d:e7:2b:dd:
d5:13:08:84:ee:8c:c5:d5:fd:d9:54:d0:a9:79:72:
ba:89:8a:bd:b9:9b:87:a3:e3:c0:fc:7d:6d:58:b1:
ae:7a:52:02:83:36:e6:d7:ac:28:66:67:19:06:93:
10:6e:a5:c8:6e:53:95:1d:a4:f5:e1:56:07:a6:d6:
9d:e2:40:49:70:33:f7:db:d2:8c:da:4b:ba:01:41:
c5:8b:e2:c9:34:8a:83:6f:b3:87:57:6f:21:7e:6f:
64:c1:c3:89:98:a2:bb:05:8f:98:01:ee:68:58:c4:
f1:92:dc:52:82:e5:0d:e9:28:4a:b6:92:66:6d:dd:
12:4a:76:ee:28:01:60:ef:9b:32:be:8a:a9:fe:6d:
e7:e4:f1:27:c3:50:bf:6b:83:f3:94:82:5c:7f:50:
82:e7:fc:ca:ed:09:b6:c8:61:e4:55:03:98:8c:b3:
be:83:f3:83:31:3f:97:76:be:30:ef:f2:9a:fa:ff:
17:6e:1a:36:6e:dd:42:da:e5:0f:7c:67:db:ec:8d:
96:d8:13:95:cb:93:55:2a:62:88:4d:cc:5e:2a:e4:
7e:27:81:b7:ad:d3:1e:c5:09:38:f0:99:83:b5:92:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:A4:11:6D:3E:40:23:39:97:C1:A2:5F:FF:F2:83:EB:50:8A:A2
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:63:a3:55:40:09:57:57:c8:26:82:25:e3:04:6f:0a:d9:07:
18:81:85:27:07:58:72:ab:fc:c1:69:41:bf:62:45:57:b7:fe:
4a:30:15:1d:c5:66:6e:08:8e:15:35:60:e8:40:dc:eb:3b:bd:
b0:45:ea:3a:3f:ef:5b:e9:63:6e:56:c0:d2:c4:5b:99:cf:45:
64:b4:3e:32:10:57:96:60:2b:ff:21:23:f9:5e:23:31:97:d4:
82:71:27:a9:e9:be:cd:46:9e:f2:70:86:64:fb:df:fd:ed:53:
2f:c7:e6:0c:a7:fe:d6:27:2f:2d:6c:5e:51:8d:05:13:64:34:
9f:fc:40:f4:de:5b:aa:27:23:55:c7:d3:31:c5:d5:3f:8c:8f:
64:28:7a:a4:18:20:ac:ea:97:3b:27:56:00:6e:63:ff:9d:d0:
27:26:f7:1b:c9:c3:31:b1:ab:65:13:18:28:ad:dd:ab:25:66:
95:a1:2f:82:17:81:6a:52:a7:0f:f2:89:f3:c7:18:e4:33:32:
d0:2e:5f:2a:87:e8:ea:3e:2a:c2:32:e5:8d:c2:f4:f1:8e:24:
6a:5d:c6:60:8d:da:38:00:89:7b:46:37:ff:e9:2e:64:92:06:
70:1d:ad:b7:68:db:1d:65:9b:20:6d:3c:c2:6a:05:09:a6:ed:
fc:8f:92:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GRW3vdzlzoXLbNcBEalnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj
ZTNmNmUwHhcNMjQwNTA1MDEwMTQ2WhcNMjQwNTA2MDEwMTQ2WjAzMTEwLwYDVQQD
EygwMjk2YTQxMTZkM2U0MDIzMzk5N2MxYTI1ZmZmZjI4M2ViNTA4YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtaduGRw4WKR8w6HlESBNAREBvG
2lphOU3nK93VEwiE7ozF1f3ZVNCpeXK6iYq9uZuHo+PA/H1tWLGuelICgzbm16wo
ZmcZBpMQbqXIblOVHaT14VYHptad4kBJcDP329KM2ku6AUHFi+LJNIqDb7OHV28h
fm9kwcOJmKK7BY+YAe5oWMTxktxSguUN6ShKtpJmbd0SSnbuKAFg75syvoqp/m3n
5PEnw1C/a4PzlIJcf1CC5/zK7Qm2yGHkVQOYjLO+g/ODMT+Xdr4w7/Ka+v8Xbho2
bt1C2uUPfGfb7I2W2BOVy5NVKmKITcxeKuR+J4G3rdMexQk48JmDtZJL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKWpBFtPkAjOZfBol//8oPrUIqiMB8GA1UdIwQY
MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt
MDVkNThmMGNiODhjLzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj
LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmOjVUAJ
V1fIJoIl4wRvCtkHGIGFJwdYcqv8wWlBv2JFV7f+SjAVHcVmbgiOFTVg6EDc6zu9
sEXqOj/vW+ljblbA0sRbmc9FZLQ+MhBXlmAr/yEj+V4jMZfUgnEnqem+zUae8nCG
ZPvf/e1TL8fmDKf+1icvLWxeUY0FE2Q0n/xA9N5bqicjVcfTMcXVP4yPZCh6pBgg
rOqXOydWAG5j/53QJyb3G8nDMbGrZRMYKK3dqyVmlaEvgheBalKnD/KJ88cY5DMy
0C5fKofo6j4qwjLljcL08Y4kal3GYI3aOACJe0Y3/+kuZJIGcB2tt2jbHWWbIG08
wmoFCabt/I+SqQ==
-----END CERTIFICATE-----
Generated at Sun May 5 06:20:43 2024 by rpki-client on console-ams.rpki-client.org