Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
File: Tgb93gU95YTiype-NjhKwCqcwV8.mft (raw, json)
Hash identifier: ik7OKSn6FJlSIZX0w5sVe03aadjzYqIzjsjMR4X4w0E=
Subject key identifier: B8:3D:B6:DE:0F:1D:82:32:A4:B4:5A:D5:4B:7B:AD:D6:EC:3C:57:4E
Authority key identifier: 4E:06:FD:DE:05:3D:E5:84:E2:CA:97:BE:36:38:4A:C0:2A:9C:C1:5F
Certificate issuer: /CN=4e06fdde053de584e2ca97be36384ac02a9cc15f
Certificate serial: 018F87493E208E5F24720262B0FA32E95605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
Manifest number: 09BB
Signing time: Fri 17 May 2024 16:01:15 +0000
Manifest this update: Fri 17 May 2024 16:01:15 +0000
Manifest next update: Sat 18 May 2024 16:01:15 +0000
Files and hashes: 1: Tgb93gU95YTiype-NjhKwCqcwV8.crl (hash: AAH0ZFahdcUtQnIM+G8XY82gPba+ZCpx7pXVUHeYZdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:3e:20:8e:5f:24:72:02:62:b0:fa:32:e9:56:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06fdde053de584e2ca97be36384ac02a9cc15f
Validity
Not Before: May 17 16:01:15 2024 GMT
Not After : May 18 16:01:15 2024 GMT
Subject: CN=b83db6de0f1d8232a4b45ad54b7badd6ec3c574e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:33:38:b3:11:79:c8:4f:3f:b7:fc:dd:17:
34:9c:7d:ed:a5:62:a9:61:42:d2:c6:f0:8f:b4:83:
82:b7:ca:a3:72:59:89:32:bd:74:4a:0d:00:93:ca:
82:bb:59:15:c5:98:d7:91:83:d4:1c:02:6e:1b:60:
80:32:f0:38:62:eb:ca:58:f2:9f:88:06:2c:82:b5:
7e:0f:75:a5:c0:9e:3a:fd:12:fb:c0:24:ed:79:13:
ae:2f:39:66:9b:76:c4:39:d0:b2:c5:db:74:43:1c:
60:2b:e5:48:07:6c:bc:e6:1d:bf:37:a3:fd:1a:53:
31:7b:50:53:ea:77:c3:eb:56:d8:fc:68:4a:93:af:
2a:45:73:d7:72:a6:73:9e:27:d9:1f:bd:c5:24:3c:
87:f3:7d:af:c5:01:37:c3:7e:21:7e:6e:e3:1e:b7:
6c:4a:7e:7c:57:a1:e9:11:12:be:ee:b6:e2:c3:c9:
b2:9e:06:64:e2:bd:f3:d3:30:67:e1:2a:b4:01:28:
65:b5:dd:8b:b5:1c:92:4e:2f:bb:c1:0a:82:18:26:
aa:fa:01:01:a4:dd:22:bb:0a:fa:fb:dd:d9:a5:48:
fa:de:ae:e3:82:1a:aa:c1:ec:d1:93:49:98:14:60:
b5:59:d6:51:34:c2:73:37:d1:c6:85:bd:59:0e:60:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:B6:DE:0F:1D:82:32:A4:B4:5A:D5:4B:7B:AD:D6:EC:3C:57:4E
X509v3 Authority Key Identifier:
keyid:4E:06:FD:DE:05:3D:E5:84:E2:CA:97:BE:36:38:4A:C0:2A:9C:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tgb93gU95YTiype-NjhKwCqcwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/8df79e-dff4-4a30-be70-9f800621904a/1/Tgb93gU95YTiype-NjhKwCqcwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:07:fa:a0:0c:54:1a:36:13:c6:27:4d:12:7a:c8:fc:99:
35:64:80:75:2c:a1:3e:24:23:ce:cc:9d:74:51:30:ca:97:da:
44:48:4f:ab:c6:48:31:90:e2:38:28:44:a7:29:c7:82:cf:cd:
63:15:6a:eb:3e:5b:72:ae:6e:48:c9:ba:e6:e7:6d:de:de:55:
04:36:af:05:64:78:6f:96:0a:f0:01:f1:19:8e:b2:86:e4:a9:
27:f7:de:ed:bb:b4:52:be:0c:05:44:cf:36:68:9b:77:d6:98:
bb:cb:de:89:fb:ac:79:14:63:2c:61:9f:47:c9:15:5c:2b:d5:
c2:c2:67:27:01:cf:1f:92:72:2b:69:ba:0b:70:d3:61:42:07:
2a:b4:14:49:70:6c:ba:03:62:2c:dd:59:63:ba:19:9e:0b:72:
5b:f2:02:d4:7e:2a:6b:9a:6b:d9:78:44:09:3a:cd:7d:5b:ca:
1a:06:f2:b0:7e:4e:db:2f:2f:dc:fc:23:71:05:f0:fd:23:85:
af:55:5c:aa:9b:d0:73:e9:f5:64:39:e1:5d:b4:59:5b:d8:cd:
73:fd:a6:94:1d:e7:4c:63:15:34:31:f3:0f:53:02:4b:65:37:
d0:4f:d8:46:69:45:ec:32:f8:d7:fa:41:9f:2b:0c:44:89:48:
63:30:9a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HST4gjl8kcgJisPoy6VYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDZmZGRlMDUzZGU1ODRlMmNhOTdiZTM2Mzg0YWMwMmE5
Y2MxNWYwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
EyhiODNkYjZkZTBmMWQ4MjMyYTRiNDVhZDU0YjdiYWRkNmVjM2M1NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc8zOLMRechPP7f83Rc0nH3tpWKp
YULSxvCPtIOCt8qjclmJMr10Sg0Ak8qCu1kVxZjXkYPUHAJuG2CAMvA4YuvKWPKf
iAYsgrV+D3WlwJ46/RL7wCTteROuLzlmm3bEOdCyxdt0QxxgK+VIB2y85h2/N6P9
GlMxe1BT6nfD61bY/GhKk68qRXPXcqZznifZH73FJDyH832vxQE3w34hfm7jHrds
Sn58V6HpERK+7rbiw8myngZk4r3z0zBn4Sq0AShltd2LtRySTi+7wQqCGCaq+gEB
pN0iuwr6+93ZpUj63q7jghqqwezRk0mYFGC1WdZRNMJzN9HGhb1ZDmCeowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg9tt4PHYIypLRa1Ut7rdbsPFdOMB8GA1UdIwQY
MBaAFE4G/d4FPeWE4sqXvjY4SsAqnMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84ZGY3OWUtZGZmNC00YTMwLWJlNzAt
OWY4MDA2MjE5MDRhLzEvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84ZGY3OWUtZGZmNC00YTMwLWJlNzAtOWY4MDA2MjE5MDRh
LzEvVGdiOTNnVTk1WVRpeXBlLU5qaEt3Q3Fjd1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzIH+qAM
VBo2E8YnTRJ6yPyZNWSAdSyhPiQjzsyddFEwypfaREhPq8ZIMZDiOChEpynHgs/N
YxVq6z5bcq5uSMm65udt3t5VBDavBWR4b5YK8AHxGY6yhuSpJ/fe7bu0Ur4MBUTP
Nmibd9aYu8veifuseRRjLGGfR8kVXCvVwsJnJwHPH5JyK2m6C3DTYUIHKrQUSXBs
ugNiLN1ZY7oZngtyW/IC1H4qa5pr2XhECTrNfVvKGgbysH5O2y8v3PwjcQXw/SOF
r1VcqpvQc+n1ZDnhXbRZW9jNc/2mlB3nTGMVNDHzD1MCS2U30E/YRmlF7DL41/pB
nysMRIlIYzCawA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:18:42 2024 by rpki-client on console-ams.rpki-client.org