Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: QDFVL0lcO7hrrQkpoKniiQbDx6nBQLYh9VXYOAGVVUQ=
Subject key identifier: 33:5B:34:DF:AC:AA:4E:7A:9A:C3:D5:AA:EE:BB:70:C6:30:D2:67:69
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 01903EBF73FD997549840B51BFDC8AAA66D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 11D6
Signing time: Sat 22 Jun 2024 07:00:52 +0000
Manifest this update: Sat 22 Jun 2024 07:00:52 +0000
Manifest next update: Sun 23 Jun 2024 07:00:52 +0000
Files and hashes: 1: 2dGAU9HdMqGvTHzhqKHjTpCsK8Q.roa (hash: mLalQ/BF3idj7yfAPZVT0aNzX6CdHoDlA2NUdQrPLNk=)
2: 47cifHe4Tv4LsjBU5fG1bUYr5bg.roa (hash: w2ZjN5sDl4wrNrqvGfS9CgtWV3YSg0eNsZvJWaxsnvg=)
3: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: KAu7Nd6oGCoZMleRL6jZQmpqj+0V8s6w38ribUmewfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:bf:73:fd:99:75:49:84:0b:51:bf:dc:8a:aa:66:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jun 22 07:00:52 2024 GMT
Not After : Jun 23 07:00:52 2024 GMT
Subject: CN=335b34dfacaa4e7a9ac3d5aaeebb70c630d26769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:8a:b3:35:42:e9:9a:b8:63:34:a2:ca:6c:
02:4c:c3:96:16:e3:78:40:3c:52:27:38:2c:53:fd:
b7:d1:19:3f:c0:f6:6d:86:3b:95:df:3b:94:eb:ea:
59:48:d0:8a:90:55:e2:75:f1:59:ed:69:b8:f0:11:
12:a6:2f:34:d6:c0:aa:32:36:26:0d:0a:26:d4:6f:
70:90:cc:43:55:30:4c:9f:0e:4d:a2:f0:92:62:d7:
c1:19:f5:53:54:a7:96:8b:1d:01:e1:6a:72:ef:64:
4c:e0:90:4a:cc:4f:58:2d:11:65:ac:c2:0f:1b:04:
54:1d:ea:b6:e6:02:4c:87:65:58:0e:5f:bc:a9:4a:
dd:e2:04:6e:31:be:2a:cd:cf:27:6e:13:6a:0b:d2:
c0:3b:05:54:77:6b:f0:1a:38:5e:6b:ce:9c:f3:1e:
b9:af:e9:de:6e:44:24:a8:09:a7:21:d7:68:9f:05:
4e:7d:f8:24:5b:0c:cc:b1:c7:0d:b4:1c:20:13:3d:
2d:b5:48:34:7e:6d:c8:7e:07:2c:57:2e:58:e2:85:
2a:22:35:34:48:82:b2:3c:72:df:38:3f:bf:5c:8b:
6a:95:78:8a:0b:b2:03:82:ed:8b:e5:ba:f1:f3:34:
75:d9:c2:8d:eb:70:a7:81:08:99:6f:c4:c3:2a:ea:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:34:DF:AC:AA:4E:7A:9A:C3:D5:AA:EE:BB:70:C6:30:D2:67:69
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:e2:bf:f1:08:69:31:4b:0c:76:bc:b8:d5:46:89:c4:c4:
db:c9:12:82:1e:37:8b:36:23:8d:9a:7d:82:78:e1:87:64:27:
33:7d:7a:5f:13:9d:c4:cd:2f:36:41:65:10:10:06:fc:45:96:
dd:53:15:fd:92:69:6c:02:6b:29:d5:a5:bf:7a:77:67:55:0c:
e4:3a:b3:86:32:b0:c7:28:44:1f:2e:bc:e0:57:cf:50:88:54:
9e:da:09:a2:e6:fc:9d:db:70:16:63:c6:d5:54:56:9d:fd:46:
a2:84:5f:32:08:bd:70:e3:aa:9a:eb:20:78:1b:28:1e:80:a4:
47:68:bb:6a:15:af:ce:05:46:c8:07:b2:49:88:da:19:b7:c7:
3a:a9:03:d1:f1:73:c0:03:2d:d1:b8:df:bb:2c:11:e5:6b:80:
7d:cc:83:5c:ca:35:9f:c0:cc:31:fd:5e:66:c2:4a:bc:89:91:
27:22:10:08:5c:8b:3a:60:f3:a2:b7:fc:2e:f9:48:d9:03:82:
11:a1:bc:5f:84:48:90:9c:83:37:4d:2f:ed:6a:b9:d0:b3:0d:
c8:a5:65:56:2c:bd:dd:1d:40:11:95:ac:5c:6b:59:ce:23:f5:
7a:a2:1d:b9:a1:30:f2:80:03:3c:5b:8a:ac:39:23:4f:c7:4f:
82:8e:10:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA+v3P9mXVJhAtRv9yKqmbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2I0M2Y1MzhmMGFlNzIwZTUyN2IyYTZjMGI4YTg3NmQ5
NmM5NDcwHhcNMjQwNjIyMDcwMDUyWhcNMjQwNjIzMDcwMDUyWjAzMTEwLwYDVQQD
EygzMzViMzRkZmFjYWE0ZTdhOWFjM2Q1YWFlZWJiNzBjNjMwZDI2NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuKszVC6Zq4YzSiymwCTMOWFuN4
QDxSJzgsU/230Rk/wPZthjuV3zuU6+pZSNCKkFXidfFZ7Wm48BESpi801sCqMjYm
DQom1G9wkMxDVTBMnw5NovCSYtfBGfVTVKeWix0B4Wpy72RM4JBKzE9YLRFlrMIP
GwRUHeq25gJMh2VYDl+8qUrd4gRuMb4qzc8nbhNqC9LAOwVUd2vwGjhea86c8x65
r+nebkQkqAmnIddonwVOffgkWwzMsccNtBwgEz0ttUg0fm3IfgcsVy5Y4oUqIjU0
SIKyPHLfOD+/XItqlXiKC7IDgu2L5brx8zR12cKN63CngQiZb8TDKupTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNbNN+sqk56msPVqu67cMYw0mdpMB8GA1UdIwQY
MBaAFGd7Q/U48K5yDlJ7KmwLiodtlslHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGIt
Mjg3ODIwM2EwMDlkLzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGItMjg3ODIwM2EwMDlk
LzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfLiv/EI
aTFLDHa8uNVGicTE28kSgh43izYjjZp9gnjhh2QnM316XxOdxM0vNkFlEBAG/EWW
3VMV/ZJpbAJrKdWlv3p3Z1UM5DqzhjKwxyhEHy684FfPUIhUntoJoub8ndtwFmPG
1VRWnf1GooRfMgi9cOOqmusgeBsoHoCkR2i7ahWvzgVGyAeySYjaGbfHOqkD0fFz
wAMt0bjfuywR5WuAfcyDXMo1n8DMMf1eZsJKvImRJyIQCFyLOmDzorf8LvlI2QOC
EaG8X4RIkJyDN00v7Wq50LMNyKVlViy93R1AEZWsXGtZziP1eqIduaEw8oADPFuK
rDkjT8dPgo4QJw==
-----END CERTIFICATE-----
Generated at Sat Jun 22 09:50:44 2024 by rpki-client on console-ams.rpki-client.org