Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: L9i9pQNplZZ5g3UyM6QZPu7MC5yoZ7BCj5fTXolRmPg=
Subject key identifier: 34:B9:AF:ED:9F:60:CC:14:1C:F3:32:59:A6:0B:33:51:77:6B:4C:C2
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019359F7C0461147DB6ECD2D93F123FBD95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 40
Signing time: Sat 23 Nov 2024 17:00:29 +0000
Manifest this update: Sat 23 Nov 2024 17:00:29 +0000
Manifest next update: Sun 24 Nov 2024 17:00:29 +0000
Files and hashes: 1: mR7icI0Jkm6vOUrLmtZXig6smic.roa (hash: ApOVZjcKNuhEaV2GNt2Za7DXa/+Y31KRjFmK4wwSoow=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: GtUn4UcB3slGr+GjfqN1BXSKkM3eusIJ+IVHgtcQSA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:f7:c0:46:11:47:db:6e:cd:2d:93:f1:23:fb:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Nov 23 17:00:29 2024 GMT
Not After : Nov 24 17:00:29 2024 GMT
Subject: CN=34b9afed9f60cc141cf33259a60b3351776b4cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:9d:ce:19:aa:19:bf:b8:44:97:c3:a5:e7:
37:47:2c:5f:1b:f5:52:ee:b5:28:45:80:4a:ec:c0:
17:57:f8:c1:99:89:d9:66:99:6d:49:e8:ed:10:6a:
8e:79:4a:8b:c4:d3:f2:05:34:9b:12:e3:be:b9:56:
79:5c:db:69:d7:7a:e0:0f:2b:77:6a:2f:20:2f:97:
14:95:db:82:23:84:13:9d:b3:72:1b:c1:77:a5:59:
f3:19:27:fb:bf:3e:2b:a5:59:8d:d6:b4:0e:2b:04:
b7:91:b6:90:62:d8:d2:35:ca:f6:9b:db:87:b6:00:
1d:b6:f4:4b:70:d1:07:a5:56:f2:f5:49:1b:94:81:
70:57:c0:93:21:cc:71:25:2e:54:07:7f:92:b3:da:
70:f7:44:62:2b:c2:15:ee:5f:e4:9d:a8:b7:16:73:
f7:3e:63:e6:75:b4:e3:10:ec:84:c3:bb:64:44:7f:
12:6a:6a:46:c8:8c:15:ce:1f:7a:26:66:ed:c5:14:
0d:b4:27:4d:71:44:77:5c:ef:1c:a5:03:a5:ee:a5:
86:2f:71:f1:89:b2:27:c2:f0:88:fc:7e:e2:32:7e:
f4:d1:9f:de:17:35:a8:05:70:71:d6:8f:31:0c:5d:
64:26:5a:78:9f:5a:b2:b2:5a:14:50:65:31:02:db:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:AF:ED:9F:60:CC:14:1C:F3:32:59:A6:0B:33:51:77:6B:4C:C2
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:b3:5e:df:ab:0e:46:41:94:31:9e:19:49:41:82:2f:9b:
cd:4a:87:a2:48:7e:ec:45:73:13:54:4e:78:6f:cb:33:a3:97:
f4:b7:20:90:44:9f:2c:a0:94:96:b8:38:42:53:62:b2:39:51:
d4:7c:05:c1:3f:cf:26:26:0e:67:8d:50:63:02:b2:85:e1:61:
d7:1b:3c:9e:1e:b8:be:0c:95:0b:93:4c:92:f0:7e:a3:45:61:
05:15:67:24:e2:0a:a7:1d:68:f1:5a:ea:37:91:6a:8b:ec:73:
58:d5:86:9c:78:8b:12:68:22:bf:e7:0f:80:f3:4b:d4:d1:39:
88:54:d4:51:52:cc:f6:c0:02:51:24:97:b5:42:0b:0d:81:84:
25:13:86:c2:37:80:02:fb:26:18:37:82:15:96:7a:24:fa:ce:
99:b0:1b:1a:44:d3:04:0c:82:3c:93:77:2f:8d:c9:7a:d6:8d:
a5:c7:90:19:02:45:08:af:6b:77:df:48:db:d2:e1:e3:f6:7d:
14:5e:93:b8:25:77:68:df:85:c3:7f:7c:3f:1e:32:4f:c0:22:
12:f4:24:9a:54:28:26:16:cd:55:bf:dc:f4:62:4a:18:8f:16:
50:c3:83:65:e5:48:b0:44:de:88:36:a8:6a:c1:76:2f:05:8e:
a0:bb:ff:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZ98BGEUfbbs0tk/Ej+9leMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MWJiMWNkZDViODZiZTc3ODA2ODg5ZDJlMWIyMDJhY2My
N2IyMjUwHhcNMjQxMTIzMTcwMDI5WhcNMjQxMTI0MTcwMDI5WjAzMTEwLwYDVQQD
EygzNGI5YWZlZDlmNjBjYzE0MWNmMzMyNTlhNjBiMzM1MTc3NmI0Y2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8CdzhmqGb+4RJfDpec3RyxfG/VS
7rUoRYBK7MAXV/jBmYnZZpltSejtEGqOeUqLxNPyBTSbEuO+uVZ5XNtp13rgDyt3
ai8gL5cUlduCI4QTnbNyG8F3pVnzGSf7vz4rpVmN1rQOKwS3kbaQYtjSNcr2m9uH
tgAdtvRLcNEHpVby9UkblIFwV8CTIcxxJS5UB3+Ss9pw90RiK8IV7l/knai3FnP3
PmPmdbTjEOyEw7tkRH8SampGyIwVzh96JmbtxRQNtCdNcUR3XO8cpQOl7qWGL3Hx
ibInwvCI/H7iMn700Z/eFzWoBXBx1o8xDF1kJlp4n1qysloUUGUxAtt82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS5r+2fYMwUHPMyWaYLM1F3a0zCMB8GA1UdIwQY
MBaAFLQbsc3VuGvneAaInS4bICrMJ7IlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQt
ZGM0ZTc5ODhhMjhhLzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xOGM4ZDUtMDg5YS00NzBlLTkwNmQtZGM0ZTc5ODhhMjhh
LzEvdEJ1eHpkVzRhLWQ0Qm9pZExoc2dLc3duc2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB6zXt+r
DkZBlDGeGUlBgi+bzUqHokh+7EVzE1ROeG/LM6OX9LcgkESfLKCUlrg4QlNisjlR
1HwFwT/PJiYOZ41QYwKyheFh1xs8nh64vgyVC5NMkvB+o0VhBRVnJOIKpx1o8Vrq
N5Fqi+xzWNWGnHiLEmgiv+cPgPNL1NE5iFTUUVLM9sACUSSXtUILDYGEJROGwjeA
AvsmGDeCFZZ6JPrOmbAbGkTTBAyCPJN3L43JetaNpceQGQJFCK9rd99I29Lh4/Z9
FF6TuCV3aN+Fw398Px4yT8AiEvQkmlQoJhbNVb/c9GJKGI8WUMODZeVIsETeiDao
asF2LwWOoLv/Ug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:44:43 2024 by rpki-client on console-ams.rpki-client.org