Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
File: tlMWam8fM-RyDmfSTdMuRFgDUvA.mft (raw, json)
Hash identifier: dCqYE0d3l9nVV5LT21A8nAWNTRaNBBkntDJBgCShdQk=
Subject key identifier: 21:13:C0:E3:EE:6F:98:49:8C:6B:96:FC:3E:56:ED:1D:03:5F:8C:B3
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 0193557681EF470B5B64CE66C660D9C53FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 20:00:50 +0000
Manifest this update: Fri 22 Nov 2024 20:00:50 +0000
Manifest next update: Sat 23 Nov 2024 20:00:50 +0000
Files and hashes: 1: 9H1LQjGw1C8PnJD4wbHs1naFP2U.roa (hash: eexSul/G6hqGg8kuA3vUiPydTGMguIAjfrVCSAS2Cdc=)
2: VEgbf5lwWAAQsXIq16EM00Uiu3o.roa (hash: Ps1U2sv2j3GBEJv7F8Cv1EdfmLDHEXjOpzECTfiMuZc=)
3: tlMWam8fM-RyDmfSTdMuRFgDUvA.crl (hash: a+U+NPgpiF9ASX4QGURZyfQcKKUT0YSJFNuBrAH7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:81:ef:47:0b:5b:64:ce:66:c6:60:d9:c5:3f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Nov 22 20:00:50 2024 GMT
Not After : Nov 23 20:00:50 2024 GMT
Subject: CN=2113c0e3ee6f98498c6b96fc3e56ed1d035f8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:81:10:4b:43:86:9a:86:81:39:3a:6f:69:5e:
0c:e4:0b:0f:ba:55:2c:8f:0f:15:27:46:6e:0a:17:
ba:6e:57:bf:c9:55:00:ed:69:17:13:7e:d1:64:f4:
97:f7:a5:a9:16:5f:a2:c5:51:9f:52:f0:51:8d:bb:
bc:90:b2:e5:38:59:24:ea:a1:2c:44:06:a8:56:95:
6f:12:52:df:98:0c:2f:e3:6c:d7:7d:92:1b:a7:c6:
d8:77:a9:eb:47:33:6c:29:00:38:2c:87:62:a4:c4:
49:9d:57:18:90:90:50:a2:ca:e4:ac:8c:b2:8b:ab:
4f:40:9e:5f:55:0c:8b:fb:30:b0:c5:47:4e:77:5e:
b7:8a:01:d1:ca:0d:c8:87:1b:14:92:a5:11:f2:08:
fb:da:5d:50:79:80:56:d3:e4:58:b9:67:2e:6a:cb:
82:ff:ce:ee:3f:41:ab:d0:76:ca:67:40:bb:9f:cf:
e9:24:35:cf:07:24:7f:66:35:f5:9b:26:bf:cd:b6:
b7:0b:bc:18:c0:b0:68:b3:ea:b3:df:f4:50:0a:19:
39:1f:a5:12:70:5a:33:50:5b:d2:d2:55:3c:5e:c3:
33:b9:c6:2b:9d:42:47:d5:2f:ef:a8:be:79:db:d1:
30:8b:38:48:52:da:96:41:1d:98:d3:09:a4:6b:de:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:C0:E3:EE:6F:98:49:8C:6B:96:FC:3E:56:ED:1D:03:5F:8C:B3
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b9:4e:44:3b:0b:02:de:9f:5e:33:ba:93:cd:7f:54:2a:d8:
9a:1d:5d:7a:84:e3:ae:fd:0c:bb:8a:e6:5c:bf:77:e4:dc:73:
b3:0f:1a:84:98:77:04:7e:62:b7:bf:a2:4c:60:51:e7:96:55:
b4:b4:af:57:47:af:7e:d9:49:72:27:75:6e:d6:7d:a0:93:b8:
c8:31:d6:62:da:a4:d7:70:8f:37:45:2f:7c:a5:e0:b8:d4:a3:
b0:b2:a4:29:28:dd:1a:e7:0d:70:08:0a:9b:6d:9a:5c:79:39:
3d:0c:b6:c8:eb:aa:91:17:68:b2:81:d3:b7:a6:98:18:49:e5:
2a:3d:d9:fd:7f:32:ae:88:72:04:93:26:fd:6a:9b:94:44:b0:
8f:b4:80:69:1a:a1:4a:64:0d:81:33:e5:86:37:02:d3:6b:e9:
dc:61:ed:30:4c:e7:15:ec:a9:58:b0:03:ca:aa:fb:3d:26:c8:
92:d5:90:c6:3e:6f:ea:0a:01:90:e6:d0:d8:6e:81:e3:06:d2:
ac:de:52:61:db:1d:0a:c4:ac:fb:e4:84:17:6b:9c:a3:87:4b:
a1:dd:52:97:5b:8b:48:19:01:64:0e:72:d5:31:48:f7:77:31:
5f:b1:20:a9:a4:3a:5f:cc:61:14:14:06:d9:5b:ff:33:38:8c:
71:9a:f9:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdoHvRwtbZM5mxmDZxT++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjQxMTIyMjAwMDUwWhcNMjQxMTIzMjAwMDUwWjAzMTEwLwYDVQQD
EygyMTEzYzBlM2VlNmY5ODQ5OGM2Yjk2ZmMzZTU2ZWQxZDAzNWY4Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IEQS0OGmoaBOTpvaV4M5AsPulUs
jw8VJ0ZuChe6ble/yVUA7WkXE37RZPSX96WpFl+ixVGfUvBRjbu8kLLlOFkk6qEs
RAaoVpVvElLfmAwv42zXfZIbp8bYd6nrRzNsKQA4LIdipMRJnVcYkJBQosrkrIyy
i6tPQJ5fVQyL+zCwxUdOd163igHRyg3IhxsUkqUR8gj72l1QeYBW0+RYuWcuasuC
/87uP0Gr0HbKZ0C7n8/pJDXPByR/ZjX1mya/zba3C7wYwLBos+qz3/RQChk5H6US
cFozUFvS0lU8XsMzucYrnUJH1S/vqL5529EwizhIUtqWQR2Y0wmka96vhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCETwOPub5hJjGuW/D5W7R0DX4yzMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMblORDsL
At6fXjO6k81/VCrYmh1deoTjrv0Mu4rmXL935Nxzsw8ahJh3BH5it7+iTGBR55ZV
tLSvV0evftlJcid1btZ9oJO4yDHWYtqk13CPN0UvfKXguNSjsLKkKSjdGucNcAgK
m22aXHk5PQy2yOuqkRdosoHTt6aYGEnlKj3Z/X8yrohyBJMm/WqblESwj7SAaRqh
SmQNgTPlhjcC02vp3GHtMEznFeypWLADyqr7PSbIktWQxj5v6goBkObQ2G6B4wbS
rN5SYdsdCsSs++SEF2uco4dLod1Sl1uLSBkBZA5y1TFI93cxX7EgqaQ6X8xhFBQG
2Vv/MziMcZr5iA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:07 2024 by rpki-client on console-fra.rpki-client.org