Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: hl7gxkia2w1IxYGbx6fxavQ2Sad//L0bsVvGRwP7K+U=
Subject key identifier: 34:A1:0E:64:3E:97:16:23:2E:FF:C3:E9:AE:23:68:51:A6:4D:2A:B3
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019238EF2DC32D4703C8B2BEE9D4629BB8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 0199
Signing time: Sat 28 Sep 2024 14:00:51 +0000
Manifest this update: Sat 28 Sep 2024 14:00:51 +0000
Manifest next update: Sun 29 Sep 2024 14:00:51 +0000
Files and hashes: 1: CP_JGey0BwwdkF1heNorjgCZa0o.roa (hash: Pcar/5gkIUzhLpvDz9JB7QkU9UibHd/GabCQIlLw5kw=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: nAirClZlGKdd2Srf72y582sPpqzc5GmFewNTHSsUzsY=)
3: z2uqutJQgXPaSGHqrq8ChGOUbRs.roa (hash: AAK/K6USmhAkHlpNdgA75L/3Cfw9NMjMShnX6vrxfZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:ef:2d:c3:2d:47:03:c8:b2:be:e9:d4:62:9b:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Sep 28 14:00:51 2024 GMT
Not After : Sep 29 14:00:51 2024 GMT
Subject: CN=34a10e643e9716232effc3e9ae236851a64d2ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:b9:32:fe:99:6e:a1:22:65:a9:8e:b5:93:
4e:24:72:4b:36:99:13:1e:c7:2c:40:29:91:e5:df:
80:ca:35:dc:87:7a:c5:ed:1a:d8:a5:f1:36:a0:a3:
91:89:eb:f9:38:be:74:ff:6d:8e:9f:44:0d:7e:bf:
ed:a2:f9:b3:35:71:6c:c0:4a:e6:fe:21:99:f5:b7:
df:a6:34:0f:fc:71:22:06:50:fd:6b:ff:c7:b3:98:
6f:6a:64:93:1c:0b:52:ef:83:5e:70:d7:a1:f7:e6:
cc:6e:6c:11:2f:b2:4b:73:68:6f:c8:af:9d:77:ce:
fc:2e:54:93:b7:86:e3:39:c1:c2:07:75:5d:64:7a:
7a:fc:7a:87:36:c3:47:a6:38:32:6c:85:91:c8:f2:
e9:76:99:3e:90:9b:1d:e2:c8:24:77:4d:b0:0d:a0:
1a:e5:8a:b3:3a:f3:e8:85:c6:e8:94:92:15:ab:ea:
16:20:e9:91:3b:9b:ae:44:b3:33:c8:03:2b:e3:3a:
89:e2:c5:9d:10:da:ad:c9:8d:83:5f:7a:2f:6f:82:
a0:ca:28:76:e0:78:f3:ae:41:6b:10:e6:23:49:87:
8c:bf:95:04:23:1e:71:06:37:b4:4a:2f:3b:1c:9e:
bc:8d:4e:b1:e8:ea:6b:b6:de:6e:cd:eb:9d:9f:2f:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:0E:64:3E:97:16:23:2E:FF:C3:E9:AE:23:68:51:A6:4D:2A:B3
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b2:62:57:6a:00:9c:b4:80:ce:99:eb:28:0e:6a:41:67:5e:
41:b5:0d:bb:60:c1:70:aa:01:44:7e:ac:98:1e:d4:59:31:7f:
69:f1:85:37:2b:fc:51:9a:e4:99:91:80:7b:e5:07:63:78:94:
d0:43:76:6b:40:bb:3e:38:6c:73:04:c8:ef:15:12:07:4b:91:
2d:be:44:56:2b:43:cf:f8:f7:c2:80:f4:10:44:8b:e2:91:3f:
23:bf:92:c7:df:7f:a2:95:b8:0b:b0:0d:c3:27:35:e2:db:fc:
1e:67:cc:f0:fc:cf:34:7e:5e:2c:88:54:94:4a:b1:c0:b7:28:
1f:b2:0a:9a:5a:b8:ec:11:61:91:d2:b1:dc:14:52:77:b2:42:
d3:7b:4e:06:a8:12:be:5d:ee:88:c0:b8:99:d6:a8:df:15:b6:
21:5f:17:62:d3:8a:65:b4:63:c7:3f:98:64:69:6b:04:62:4e:
58:3d:96:56:4b:50:43:fc:f3:28:41:49:58:8b:fe:2a:e5:ca:
7e:8d:84:3b:3e:44:f4:e3:1d:9e:0a:47:3d:b0:ce:09:63:bc:
b1:c7:ec:4c:8d:21:65:24:93:37:3e:54:0a:07:16:df:aa:c3:
a6:2c:9b:0f:a1:fa:71:24:20:a8:2c:9d:12:84:af:1c:61:05:
8c:74:e0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI47y3DLUcDyLK+6dRim7jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5
MDViMTYwHhcNMjQwOTI4MTQwMDUxWhcNMjQwOTI5MTQwMDUxWjAzMTEwLwYDVQQD
EygzNGExMGU2NDNlOTcxNjIzMmVmZmMzZTlhZTIzNjg1MWE2NGQyYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsK5Mv6ZbqEiZamOtZNOJHJLNpkT
HscsQCmR5d+AyjXch3rF7RrYpfE2oKORiev5OL50/22On0QNfr/tovmzNXFswErm
/iGZ9bffpjQP/HEiBlD9a//Hs5hvamSTHAtS74NecNeh9+bMbmwRL7JLc2hvyK+d
d878LlSTt4bjOcHCB3VdZHp6/HqHNsNHpjgybIWRyPLpdpk+kJsd4sgkd02wDaAa
5YqzOvPohcbolJIVq+oWIOmRO5uuRLMzyAMr4zqJ4sWdENqtyY2DX3ovb4Kgyih2
4HjzrkFrEOYjSYeMv5UEIx5xBje0Si87HJ68jU6x6Oprtt5uzeudny+mjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDShDmQ+lxYjLv/D6a4jaFGmTSqzMB8GA1UdIwQY
MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt
OTFmNDlkOGQxMTVkLzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk
LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7JiV2oA
nLSAzpnrKA5qQWdeQbUNu2DBcKoBRH6smB7UWTF/afGFNyv8UZrkmZGAe+UHY3iU
0EN2a0C7PjhscwTI7xUSB0uRLb5EVitDz/j3woD0EESL4pE/I7+Sx99/opW4C7AN
wyc14tv8HmfM8PzPNH5eLIhUlEqxwLcoH7IKmlq47BFhkdKx3BRSd7JC03tOBqgS
vl3uiMC4mdao3xW2IV8XYtOKZbRjxz+YZGlrBGJOWD2WVktQQ/zzKEFJWIv+KuXK
fo2EOz5E9OMdngpHPbDOCWO8scfsTI0hZSSTNz5UCgcW36rDpiybD6H6cSQgqCyd
EoSvHGEFjHTgAA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:22:57 2024 by rpki-client on console-ams.rpki-client.org