Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File: T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier: C+T+3m590JGrA/JbAp9zXcB/OjLUwnzych9H5blSVrM=
Subject key identifier: 3C:84:2C:DA:B8:62:FF:06:B7:7D:74:46:8A:7B:FC:F2:D9:FF:B1:6B
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer: /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial: 018F87487E058082D4E7F94CD3E46EA3AC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number: 0CCF
Signing time: Fri 17 May 2024 16:00:25 +0000
Manifest this update: Fri 17 May 2024 16:00:25 +0000
Manifest next update: Sat 18 May 2024 16:00:25 +0000
Files and hashes: 1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: v5TSaHossJuh5ZKqSLNhg/m59FrGofUkqAXcQv5fEqU=)
2: XB6dqnG-YNBlbpgnvzbU8peLzU8.roa (hash: mF/8rZzx+Rt7wN2ria/Ji5BgAnMB6QerrzswiCHxeRA=)
3: gsl-IpGyIm07XH5zWOchrUQ8ARU.roa (hash: Xg2MIz9uYOnYjYqlucDdwqu8UaNslEqewYdz1eDwKs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:7e:05:80:82:d4:e7:f9:4c:d3:e4:6e:a3:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Validity
Not Before: May 17 16:00:25 2024 GMT
Not After : May 18 16:00:25 2024 GMT
Subject: CN=3c842cdab862ff06b77d74468a7bfcf2d9ffb16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:f5:f2:92:8b:1b:49:48:87:7e:3e:33:52:
67:b4:d5:10:05:04:0e:15:cf:17:77:28:ad:4d:90:
70:56:1c:28:8a:d1:32:42:22:a4:91:74:40:b0:0e:
b4:59:08:ea:23:93:83:00:0d:3b:bb:50:79:3d:91:
6e:a3:ed:6c:9b:f7:69:a0:18:bd:d3:89:12:7c:3f:
ad:68:f1:e6:bd:6a:4a:f3:f0:9f:8d:bc:55:98:e4:
e7:15:b1:68:e5:55:12:9a:8e:75:09:89:e5:08:9d:
c2:5c:58:c8:af:97:b5:4d:66:f5:54:1c:45:2e:87:
a7:71:1a:64:e0:cc:b3:a9:bf:52:fa:ea:0a:50:2c:
fe:4d:16:ce:0a:9c:a5:c5:a6:81:fd:dc:e5:b2:39:
44:70:18:a9:3e:cc:a6:84:d5:70:f0:25:31:06:5f:
6f:4a:11:ff:89:54:99:32:b0:03:49:04:bf:e7:26:
79:1c:33:5b:65:e4:88:ff:83:06:d8:37:32:6a:97:
1f:a7:8d:ba:b9:50:be:0b:b7:02:2c:20:36:2d:b5:
d5:4a:65:fb:31:04:b9:50:1b:a4:e6:9e:35:1f:65:
ac:0f:0f:17:7b:1a:fb:62:42:30:c1:a2:b8:95:ea:
71:84:58:7a:f6:30:84:10:91:1a:98:4c:10:1e:06:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:84:2C:DA:B8:62:FF:06:B7:7D:74:46:8A:7B:FC:F2:D9:FF:B1:6B
X509v3 Authority Key Identifier:
keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0d:77:8d:83:41:ef:55:a7:b3:59:37:21:59:c1:a4:cd:4a:
1d:81:da:d6:20:eb:ff:57:f1:3c:57:d7:99:04:16:b7:25:f8:
65:57:19:44:31:22:de:57:93:a4:3c:0a:62:45:df:6e:f1:a7:
a4:53:fc:fd:23:dc:db:5a:1c:9a:bb:84:24:8e:7d:59:09:5e:
0e:c6:9a:14:13:a5:11:f3:70:cd:67:8a:1a:0f:07:a9:a6:91:
bb:83:f5:08:b7:87:47:e0:61:c8:48:39:e8:3e:c2:5b:df:7f:
57:e8:ae:51:d1:f9:2c:2f:3c:19:8e:f5:0b:2e:01:a9:40:89:
6b:3d:bc:54:ce:a9:1d:27:57:4c:57:42:b3:2f:21:90:c7:f5:
e8:58:65:15:e4:d5:21:3a:41:50:70:00:7d:10:45:5d:03:8d:
db:20:7b:ab:96:8c:7f:cd:f1:b8:b3:65:ab:89:25:2b:29:7f:
6a:f1:a2:fc:54:36:6f:c0:8b:71:d3:86:af:7c:b2:ce:8a:a0:
6f:e7:aa:5d:63:de:8e:e8:d0:a2:2d:77:fa:0c:c5:98:78:a2:
5e:a6:d6:a1:f5:e1:74:46:70:06:23:a0:a1:cc:86:b3:4e:b6:
59:a0:79:a3:bc:d8:80:c0:e4:c9:8a:98:e4:a0:93:36:ee:11:
ca:4a:78:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSH4FgILU5/lM0+Ruo6wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNjcyZDM5OTI5NzMxYWVkOWUwMWJjNWE5ZTZkNjgwZjQ2
NTlhMGIwHhcNMjQwNTE3MTYwMDI1WhcNMjQwNTE4MTYwMDI1WjAzMTEwLwYDVQQD
EygzYzg0MmNkYWI4NjJmZjA2Yjc3ZDc0NDY4YTdiZmNmMmQ5ZmZiMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9P18pKLG0lIh34+M1JntNUQBQQO
Fc8XdyitTZBwVhwoitEyQiKkkXRAsA60WQjqI5ODAA07u1B5PZFuo+1sm/dpoBi9
04kSfD+taPHmvWpK8/CfjbxVmOTnFbFo5VUSmo51CYnlCJ3CXFjIr5e1TWb1VBxF
LoencRpk4Myzqb9S+uoKUCz+TRbOCpylxaaB/dzlsjlEcBipPsymhNVw8CUxBl9v
ShH/iVSZMrADSQS/5yZ5HDNbZeSI/4MG2Dcyapcfp426uVC+C7cCLCA2LbXVSmX7
MQS5UBuk5p41H2WsDw8Xexr7YkIwwaK4lepxhFh69jCEEJEamEwQHgYy0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyELNq4Yv8Gt310Rop7/PLZ/7FrMB8GA1UdIwQY
MBaAFE9nLTmSlzGu2eAbxanm1oD0ZZoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAt
N2UyODA3NTJkYTIxLzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zNWMwYjktMjg1NS00YjIwLThjODAtN2UyODA3NTJkYTIx
LzEvVDJjdE9aS1hNYTdaNEJ2RnFlYldnUFJsbWdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQ13jYNB
71Wns1k3IVnBpM1KHYHa1iDr/1fxPFfXmQQWtyX4ZVcZRDEi3leTpDwKYkXfbvGn
pFP8/SPc21ocmruEJI59WQleDsaaFBOlEfNwzWeKGg8HqaaRu4P1CLeHR+BhyEg5
6D7CW99/V+iuUdH5LC88GY71Cy4BqUCJaz28VM6pHSdXTFdCsy8hkMf16FhlFeTV
ITpBUHAAfRBFXQON2yB7q5aMf83xuLNlq4klKyl/avGi/FQ2b8CLcdOGr3yyzoqg
b+eqXWPejujQoi13+gzFmHiiXqbWofXhdEZwBiOgocyGs062WaB5o7zYgMDkyYqY
5KCTNu4Rykp4sg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:43:15 2024 by rpki-client on console-ams.rpki-client.org