Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File: t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier: 52Ikqrbxm04y7AiF2f+W7bJDvuGfunop9YblWbh/5aQ=
Subject key identifier: 22:E9:22:18:A8:F8:FE:BE:6B:7F:BD:F5:1C:AA:BD:00:21:C5:1A:B3
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer: /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial: 01935878133CA00D840D9C7091D5B704E309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number: 0C9B
Signing time: Sat 23 Nov 2024 10:01:24 +0000
Manifest this update: Sat 23 Nov 2024 10:01:24 +0000
Manifest next update: Sun 24 Nov 2024 10:01:24 +0000
Files and hashes: 1: Dc4xWznLBPr8dtNP-A9K6CQdFmE.roa (hash: 6XfuZNLn2YVgKp2BqHukFfXMSp0wNsSdp9XZsIKawGA=)
2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: kqSYIebyDm0G3tQEseUW8RuZbUcQIl9XUvH6jomgQz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:13:3c:a0:0d:84:0d:9c:70:91:d5:b7:04:e3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Validity
Not Before: Nov 23 10:01:24 2024 GMT
Not After : Nov 24 10:01:24 2024 GMT
Subject: CN=22e92218a8f8febe6b7fbdf51caabd0021c51ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:00:90:04:93:93:a5:64:70:bf:d3:4f:0c:
6b:00:09:35:31:65:50:63:ab:74:77:ae:4e:84:1b:
7c:e7:bf:fa:0f:30:b8:3a:40:1e:a5:4d:c8:65:22:
c8:ef:f3:1d:a3:85:08:2d:32:7a:98:86:44:3c:67:
5c:2f:21:49:36:d4:99:89:a4:7f:19:f2:bf:35:6e:
0e:b2:a4:92:1d:b4:85:8f:f1:c7:f7:b3:ac:11:f1:
71:9b:37:be:7e:94:26:b6:60:b0:c8:51:59:18:37:
b0:41:0e:25:5b:eb:da:95:94:a6:37:13:32:ed:5c:
c6:02:23:bd:a6:f7:0a:86:a8:d8:2d:26:32:14:82:
02:19:80:80:7c:8e:1a:e9:06:86:de:30:f9:d6:26:
e6:bc:90:9b:c3:fd:01:84:86:3c:51:ad:d8:b9:b7:
20:66:1e:5a:31:fc:23:58:7b:e6:75:f5:56:a8:57:
23:0c:58:dd:5c:d0:d0:13:c1:8c:23:df:d4:9d:11:
54:f1:77:e0:e7:3c:b1:b5:70:83:4c:03:ad:6d:8f:
c0:78:0a:f5:b5:72:76:8e:0f:0c:3a:88:2c:5a:14:
a5:46:28:82:78:20:79:c6:f4:75:0f:cc:1d:4a:e4:
1e:70:9d:ee:af:bc:85:a7:6d:75:b6:c3:7e:25:15:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:22:18:A8:F8:FE:BE:6B:7F:BD:F5:1C:AA:BD:00:21:C5:1A:B3
X509v3 Authority Key Identifier:
keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:de:53:99:e4:ec:00:4b:42:09:2e:59:f5:a4:e3:ef:2f:83:
46:8c:58:ab:9d:73:ce:85:bc:a5:3e:c9:52:87:8c:4b:e9:40:
00:16:c5:b2:2e:08:68:d4:e4:ba:8d:e8:45:3f:20:f4:17:2e:
70:f0:d1:c6:72:37:b8:6e:73:50:43:c1:70:3d:f1:aa:4a:57:
48:e2:18:b1:f2:0a:bf:0d:54:a2:f7:bc:8d:05:39:65:74:3d:
20:a3:19:02:ce:2c:d8:e8:f4:31:cc:92:65:13:dd:da:73:bd:
50:57:4f:9a:88:c0:f1:ce:41:46:38:ae:e5:13:38:1b:44:0f:
7b:36:9d:03:89:19:e1:e4:d5:f7:2f:71:9e:a6:9b:b1:3c:80:
bf:97:60:93:5a:cf:31:43:42:63:d2:22:57:16:4c:09:0d:36:
38:4c:f2:cb:8f:4e:5c:26:0c:c1:ee:82:a5:41:ba:da:7c:c5:
8f:4a:b0:14:56:37:1b:98:e6:b8:f3:ce:53:f0:38:00:83:a1:
5a:ec:6a:58:ac:91:ac:fe:a0:c1:41:29:91:6e:5e:a8:99:b5:
06:c4:bf:50:40:4f:52:74:f8:c6:6c:76:13:c4:6b:c8:31:7f:
5b:10:47:ba:c7:3d:37:23:fa:4b:d7:0a:10:63:77:a8:7b:ea:
4c:f9:fc:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeBM8oA2EDZxwkdW3BOMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjQxMTIzMTAwMTI0WhcNMjQxMTI0MTAwMTI0WjAzMTEwLwYDVQQD
EygyMmU5MjIxOGE4ZjhmZWJlNmI3ZmJkZjUxY2FhYmQwMDIxYzUxYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEQAkASTk6VkcL/TTwxrAAk1MWVQ
Y6t0d65OhBt857/6DzC4OkAepU3IZSLI7/Mdo4UILTJ6mIZEPGdcLyFJNtSZiaR/
GfK/NW4OsqSSHbSFj/HH97OsEfFxmze+fpQmtmCwyFFZGDewQQ4lW+valZSmNxMy
7VzGAiO9pvcKhqjYLSYyFIICGYCAfI4a6QaG3jD51ibmvJCbw/0BhIY8Ua3Yubcg
Zh5aMfwjWHvmdfVWqFcjDFjdXNDQE8GMI9/UnRFU8Xfg5zyxtXCDTAOtbY/AeAr1
tXJ2jg8MOogsWhSlRiiCeCB5xvR1D8wdSuQecJ3ur7yFp211tsN+JRXgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLpIhio+P6+a3+99RyqvQAhxRqzMB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO95TmeTs
AEtCCS5Z9aTj7y+DRoxYq51zzoW8pT7JUoeMS+lAABbFsi4IaNTkuo3oRT8g9Bcu
cPDRxnI3uG5zUEPBcD3xqkpXSOIYsfIKvw1Uove8jQU5ZXQ9IKMZAs4s2Oj0McyS
ZRPd2nO9UFdPmojA8c5BRjiu5RM4G0QPezadA4kZ4eTV9y9xnqabsTyAv5dgk1rP
MUNCY9IiVxZMCQ02OEzyy49OXCYMwe6CpUG62nzFj0qwFFY3G5jmuPPOU/A4AIOh
WuxqWKyRrP6gwUEpkW5eqJm1BsS/UEBPUnT4xmx2E8RryDF/WxBHusc9NyP6S9cK
EGN3qHvqTPn8KQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:36 2024 by rpki-client on console-ams.rpki-client.org