Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 2JLkFDL8hRHTiI9MKsG77PpUtSBq0ILzYPnVObc4mRI=
Subject key identifier: 50:1D:E9:18:9D:A6:DD:4A:D5:E8:76:F5:22:4B:82:C5:FE:21:0C:64
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 018F86DA583C1D5AF2B412FB1B7E54EB5586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: D2
Signing time: Fri 17 May 2024 14:00:07 +0000
Manifest this update: Fri 17 May 2024 14:00:07 +0000
Manifest next update: Sat 18 May 2024 14:00:07 +0000
Files and hashes: 1: 33hLGtTlOfBUBiCHtmMi_GE4T3o.roa (hash: HYKkGn7up2kMwvN1mtbiZWOX32fMafQmlN4dT29qY4k=)
2: PDR7iFzlcevvX1CYurjtsCmFS3Q.roa (hash: pq/Wsj2UqHMOUlN0FXDQs03uYxflZiJkrRluD4xU5Ro=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: MnVD99sStfb1I2cJcfM3Z4GHZDfZ2DOZcUT46IP0XxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:58:3c:1d:5a:f2:b4:12:fb:1b:7e:54:eb:55:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 17 14:00:07 2024 GMT
Not After : May 18 14:00:07 2024 GMT
Subject: CN=501de9189da6dd4ad5e876f5224b82c5fe210c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:66:26:02:56:b7:5a:78:8e:ff:0a:7c:63:
7c:28:36:3f:43:a5:af:d9:0e:81:31:a8:c7:28:0f:
a7:61:b5:cb:eb:a7:05:bc:ca:1c:1f:4c:df:c1:93:
d6:cb:1f:bd:45:c4:46:6c:8b:88:89:9b:a7:59:00:
30:bf:21:f1:14:f3:8b:89:e7:3c:ea:5b:a5:9f:b4:
96:01:a1:f3:93:f0:0b:aa:b0:65:98:62:a1:fa:a0:
4a:e9:d1:c4:2b:0b:5a:90:d1:85:ea:c8:e3:c6:7c:
ff:3c:75:cd:69:5b:07:e8:07:33:4f:a5:f4:ac:3c:
ed:9b:ff:05:b2:f4:3f:2b:45:01:d7:4c:8f:70:79:
5f:ab:e1:96:09:5b:0f:d6:22:9b:ac:43:b3:d5:a0:
65:22:ae:2d:f4:ce:d1:30:f6:4c:cb:83:b8:e2:88:
6d:85:a9:07:23:06:99:e3:2d:b7:e0:c0:64:aa:2f:
64:46:1b:9c:ee:31:9c:ce:0f:77:6c:5c:ab:d8:2b:
71:b4:eb:7a:d9:55:e6:07:4e:d0:3c:d8:a9:f4:42:
9e:91:e8:17:80:f3:9e:5a:b3:04:0a:dc:b2:7f:83:
8d:97:df:fc:ec:45:91:bd:89:1a:1d:94:de:8b:f0:
66:e8:44:27:44:e9:47:77:a3:76:db:8f:64:32:11:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:E9:18:9D:A6:DD:4A:D5:E8:76:F5:22:4B:82:C5:FE:21:0C:64
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:68:b6:9e:13:7d:cc:f4:52:17:7a:ae:42:2f:5b:f7:f0:d0:
74:1d:9f:3c:d9:05:eb:bf:98:91:b6:53:b0:98:f6:0f:a0:d4:
89:61:15:49:e3:8d:f7:ed:69:91:53:71:2d:0e:4d:ea:33:04:
84:18:73:cc:03:e5:df:02:75:29:5c:b0:e0:ae:a8:79:d7:e4:
97:c1:33:e8:43:34:a8:ad:2f:89:a9:ff:07:07:00:25:8e:7e:
cb:fe:08:8e:dd:df:7f:f1:94:c3:70:6a:41:24:bc:86:9f:3a:
03:58:13:b6:be:b6:e4:8c:ec:da:2b:f4:ab:5b:81:cc:6c:da:
f5:e6:e0:99:76:bf:b0:b5:64:ac:92:85:f7:bc:ae:42:e4:32:
2d:80:8e:f6:fe:4f:93:45:ce:c8:98:ce:2f:5a:c6:c8:49:51:
84:b8:8f:e9:7f:af:0a:53:28:4c:8f:fa:7d:b1:8b:d6:c4:8e:
50:db:8a:b7:1a:6f:d4:22:a1:ee:84:0f:0c:58:e4:f5:f0:6f:
6b:fc:88:ab:31:61:72:cd:37:3d:21:92:87:32:a0:8f:53:5d:
dd:ab:de:2c:c5:81:6e:01:a7:40:74:7c:56:ea:99:73:f2:a9:
36:81:36:8d:e1:39:d6:a3:de:4a:fc:78:33:1c:a1:79:a4:d6:
cf:1d:65:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+G2lg8HVrytBL7G35U61WGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw
NTIzOWQwHhcNMjQwNTE3MTQwMDA3WhcNMjQwNTE4MTQwMDA3WjAzMTEwLwYDVQQD
Eyg1MDFkZTkxODlkYTZkZDRhZDVlODc2ZjUyMjRiODJjNWZlMjEwYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkJmJgJWt1p4jv8KfGN8KDY/Q6Wv
2Q6BMajHKA+nYbXL66cFvMocH0zfwZPWyx+9RcRGbIuIiZunWQAwvyHxFPOLiec8
6luln7SWAaHzk/ALqrBlmGKh+qBK6dHEKwtakNGF6sjjxnz/PHXNaVsH6AczT6X0
rDztm/8FsvQ/K0UB10yPcHlfq+GWCVsP1iKbrEOz1aBlIq4t9M7RMPZMy4O44oht
hakHIwaZ4y234MBkqi9kRhuc7jGczg93bFyr2CtxtOt62VXmB07QPNip9EKekegX
gPOeWrMECtyyf4ONl9/87EWRvYkaHZTei/Bm6EQnROlHd6N2249kMhH6ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAd6Ridpt1K1eh29SJLgsX+IQxkMB8GA1UdIwQY
MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It
ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl
LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGi2nhN9
zPRSF3quQi9b9/DQdB2fPNkF67+YkbZTsJj2D6DUiWEVSeON9+1pkVNxLQ5N6jME
hBhzzAPl3wJ1KVyw4K6oedfkl8Ez6EM0qK0vian/BwcAJY5+y/4Ijt3ff/GUw3Bq
QSS8hp86A1gTtr625Izs2iv0q1uBzGza9ebgmXa/sLVkrJKF97yuQuQyLYCO9v5P
k0XOyJjOL1rGyElRhLiP6X+vClMoTI/6fbGL1sSOUNuKtxpv1CKh7oQPDFjk9fBv
a/yIqzFhcs03PSGShzKgj1Nd3aveLMWBbgGnQHR8VuqZc/KpNoE2jeE51qPeSvx4
MxyheaTWzx1lBA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:30:25 2024 by rpki-client on console-fra.rpki-client.org