Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: AR9ZuFythn8begIOD7O2GGsQQah4AXlCitEt/HpC6A0=
Subject key identifier: DF:AE:00:CA:F1:84:5F:14:D1:69:E9:90:7B:E9:68:8F:BA:DE:07:F6
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 018F889213216E64E4FCB41E5E523EBF2BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 10A9
Signing time: Fri 17 May 2024 22:00:25 +0000
Manifest this update: Fri 17 May 2024 22:00:25 +0000
Manifest next update: Sat 18 May 2024 22:00:25 +0000
Files and hashes: 1: VZdtk_lwzosLG9Qz5DbpRTXI24I.roa (hash: Pg0myaDyh8Zyl8y9qed2cqvxetLOSoiPun6D1M95ZlI=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: M5eymNG+gEMjju+dO+sPAXrN6B+AANrbh3G0yLMBTdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:13:21:6e:64:e4:fc:b4:1e:5e:52:3e:bf:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: May 17 22:00:25 2024 GMT
Not After : May 18 22:00:25 2024 GMT
Subject: CN=dfae00caf1845f14d169e9907be9688fbade07f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:41:89:d0:ce:7f:25:8f:dc:bc:82:97:01:
43:8c:b5:59:26:c9:54:44:0e:4e:6e:d9:10:29:4e:
a5:31:77:74:84:3b:dc:ac:06:3d:17:fe:d0:03:9c:
63:0f:1c:0c:1c:d4:53:13:97:57:0c:ed:48:a0:d9:
40:77:7e:48:2c:96:1a:8e:2f:c7:fe:cb:69:63:4f:
d7:60:41:b3:6c:45:74:b3:49:97:aa:0f:da:cb:44:
a8:08:dc:9f:61:14:49:a0:d0:fb:a8:86:c9:19:0a:
b8:7e:a1:51:01:7a:0a:31:2c:1e:03:00:80:97:5e:
9c:33:18:38:7a:5f:13:34:4b:0e:11:5b:98:96:2e:
e4:aa:4a:56:f2:2b:0b:b3:f8:f7:3a:c7:f3:65:0a:
f2:93:ac:53:53:c0:c9:29:25:9f:d1:43:69:83:2e:
01:d8:e1:08:d5:d2:ff:79:a7:e1:10:ef:b2:e8:ed:
8f:78:dc:93:8d:c4:1e:ed:65:28:e2:81:68:7e:cc:
76:cf:ca:0d:ce:bc:a0:e8:bb:1e:fd:6e:d0:c9:50:
1f:73:24:71:b9:2b:5a:b0:48:b9:e2:7e:24:26:f7:
da:ed:05:fb:34:3a:e7:ab:6c:13:56:86:95:6e:3c:
66:31:7c:69:77:06:84:75:e5:72:06:1b:0d:1d:1e:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:00:CA:F1:84:5F:14:D1:69:E9:90:7B:E9:68:8F:BA:DE:07:F6
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e8:61:63:ae:2d:1e:54:fa:35:76:0b:78:e3:43:27:22:5b:
5d:0c:eb:f6:4d:f4:8c:a9:f1:c1:df:9a:b9:47:75:dd:5e:96:
ce:4c:5a:4e:32:97:51:35:08:85:2e:9e:28:21:8e:b1:89:7c:
90:e6:75:0e:53:d5:83:54:b7:6a:ed:c7:95:d1:06:8f:6b:27:
3c:b6:8d:c9:c5:a9:71:f7:94:4a:c2:b8:05:a9:da:46:4e:7c:
f7:a2:97:60:06:b3:2e:34:e1:5a:69:d3:ca:03:0e:ee:dc:9a:
30:1c:a8:6f:23:d5:c9:1a:d3:64:38:09:12:d2:8d:89:ca:48:
6a:e5:f7:de:16:70:bd:35:26:12:03:35:db:46:c9:01:28:ae:
3c:f2:13:55:30:fa:9e:83:22:99:11:27:11:d1:a0:af:e9:e5:
a7:03:0a:e2:0d:73:6a:ba:1a:16:b8:6c:99:14:d5:29:34:a1:
6f:cd:07:87:4f:6a:e5:77:34:2f:90:c6:fe:6e:0a:db:21:9d:
01:c8:13:cc:c2:65:9d:e9:d2:1f:43:12:a0:8b:ef:93:f0:d8:
36:58:86:c1:94:f7:45:02:9c:0b:1a:fd:c3:20:af:4f:17:b9:
3d:01:f2:93:64:5f:05:fb:d7:02:cc:44:dd:9e:ea:1a:03:e6:
7a:e5:73:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkhMhbmTk/LQeXlI+vyvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw
MjQzMmIwHhcNMjQwNTE3MjIwMDI1WhcNMjQwNTE4MjIwMDI1WjAzMTEwLwYDVQQD
EyhkZmFlMDBjYWYxODQ1ZjE0ZDE2OWU5OTA3YmU5Njg4ZmJhZGUwN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5lBidDOfyWP3LyClwFDjLVZJslU
RA5ObtkQKU6lMXd0hDvcrAY9F/7QA5xjDxwMHNRTE5dXDO1IoNlAd35ILJYaji/H
/stpY0/XYEGzbEV0s0mXqg/ay0SoCNyfYRRJoND7qIbJGQq4fqFRAXoKMSweAwCA
l16cMxg4el8TNEsOEVuYli7kqkpW8isLs/j3OsfzZQryk6xTU8DJKSWf0UNpgy4B
2OEI1dL/eafhEO+y6O2PeNyTjcQe7WUo4oFofsx2z8oNzryg6Lse/W7QyVAfcyRx
uStasEi54n4kJvfa7QX7NDrnq2wTVoaVbjxmMXxpdwaEdeVyBhsNHR5DmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+uAMrxhF8U0WnpkHvpaI+63gf2MB8GA1UdIwQY
MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt
YzhjZWFiOGJjMDUwLzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw
LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOhhY64t
HlT6NXYLeONDJyJbXQzr9k30jKnxwd+auUd13V6WzkxaTjKXUTUIhS6eKCGOsYl8
kOZ1DlPVg1S3au3HldEGj2snPLaNycWpcfeUSsK4BanaRk5896KXYAazLjThWmnT
ygMO7tyaMByobyPVyRrTZDgJEtKNicpIauX33hZwvTUmEgM120bJASiuPPITVTD6
noMimREnEdGgr+nlpwMK4g1zaroaFrhsmRTVKTShb80Hh09q5Xc0L5DG/m4K2yGd
AcgTzMJlnenSH0MSoIvvk/DYNliGwZT3RQKcCxr9wyCvTxe5PQHyk2RfBfvXAsxE
3Z7qGgPmeuVzQA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:55:11 2024 by rpki-client on console-fra.rpki-client.org