Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File: Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier: v12BjKjMjB73dH9HYONezZ9cWpKy69sRBp3Xc1uVZeA=
Subject key identifier: E0:35:3E:93:6F:A9:37:E2:96:AF:57:1B:79:EF:DA:4C:F8:61:53:5C
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer: /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial: 019368FCC0AC135FC37E13BEE7E129A6CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number: 0143
Signing time: Tue 26 Nov 2024 15:00:15 +0000
Manifest this update: Tue 26 Nov 2024 15:00:15 +0000
Manifest next update: Wed 27 Nov 2024 15:00:15 +0000
Files and hashes: 1: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: fGdZ5MyNRSAzy8fJQXp0tEhX4At6yIDZMAD6kpcBSq0=)
2: rx6rRtipVt2H37-YV6WFN28EFGo.roa (hash: 1PsHGv/ZutZI296JpZtY5Rwqjm8tK8zd8gzsuuKserQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fc:c0:ac:13:5f:c3:7e:13:be:e7:e1:29:a6:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Validity
Not Before: Nov 26 15:00:15 2024 GMT
Not After : Nov 27 15:00:15 2024 GMT
Subject: CN=e0353e936fa937e296af571b79efda4cf861535c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:b7:4f:ae:58:f5:95:88:62:7f:39:fa:b1:
03:cb:b6:c0:b5:11:bd:b1:39:0e:e1:64:0f:0b:9d:
f5:a0:2a:1d:39:26:01:ce:8b:00:c6:4e:da:38:06:
9e:2f:bc:0b:99:53:27:3a:8f:59:40:a8:79:b4:29:
e3:26:d4:d5:ec:6b:ef:1c:05:58:14:23:cc:86:12:
7f:d8:ac:14:3e:eb:6b:6d:ff:c4:49:a7:b8:2b:ad:
5c:5f:97:35:f2:f3:b2:cd:50:2d:58:81:69:9e:23:
54:92:94:e1:6e:5c:c8:37:ef:d9:f4:ec:e6:f2:f0:
15:34:7e:9f:2f:90:c6:0b:e5:b4:62:e3:f7:8f:f3:
5c:91:dd:cc:e6:b7:f0:36:1d:af:7f:da:72:b6:16:
92:5e:0d:4f:cb:ac:d5:9b:b0:de:89:54:f6:ab:80:
ed:ec:80:77:56:2e:45:ce:cc:36:b6:50:a6:8c:cf:
af:35:4a:57:15:11:f0:2f:a8:ce:e6:08:06:fb:13:
ff:58:0e:38:f4:6c:ec:ee:a9:7f:bc:8e:30:df:e0:
eb:26:80:71:71:87:01:cf:53:17:9d:0a:ea:77:87:
97:c7:21:11:2e:c8:d6:4c:fc:e3:33:1e:59:d1:e7:
1c:44:27:e8:66:e5:00:9a:32:81:f6:e2:09:8e:ab:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:3E:93:6F:A9:37:E2:96:AF:57:1B:79:EF:DA:4C:F8:61:53:5C
X509v3 Authority Key Identifier:
keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:dc:59:8b:44:ac:03:fe:fa:e0:58:e2:2d:1f:bb:c2:6d:
df:69:0f:6d:52:90:18:52:65:03:10:ba:27:fc:72:90:1a:e9:
dd:ea:91:1e:e4:ec:e4:f7:ae:70:3d:ed:cf:bf:de:56:ff:56:
ed:23:9e:11:d2:5e:40:ff:23:73:62:11:d7:24:07:76:3c:54:
21:dc:82:e8:7a:31:9e:87:8b:09:62:70:4f:b5:d0:c4:86:29:
17:fa:6f:bf:5b:93:15:9f:df:2c:97:3b:13:48:33:7e:f2:4b:
1b:77:95:aa:a6:f2:4c:80:9f:52:c8:00:ec:52:37:16:c3:1f:
6f:ca:2a:a9:53:9e:d9:fa:46:33:41:af:86:72:3a:4e:65:3b:
40:41:a9:31:d4:73:46:f0:cd:05:5c:bb:d1:fc:b2:5c:12:72:
e0:03:b9:13:1d:41:58:fe:e1:46:60:8d:73:78:7b:be:8a:2c:
65:9d:b3:bc:c0:73:40:d6:fd:cb:a5:29:f0:28:2c:a4:6e:d7:
3a:12:d8:b1:54:15:09:ca:fb:e2:8b:4e:49:a4:f2:14:8e:2d:
8d:44:f1:33:d3:a5:63:d3:6d:76:2c:e0:2a:21:12:ce:a8:fa:
d8:27:4e:69:b0:b5:f8:39:81:01:3a:99:b5:d5:f5:e5:2b:5f:
6c:d5:75:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNo/MCsE1/DfhO+5+EppssSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmIzMmQ5ZDNlYmM2ZWU0OWJkNmZhNmNkOTBlNGY1Yzdk
NTQ0ZTgwHhcNMjQxMTI2MTUwMDE1WhcNMjQxMTI3MTUwMDE1WjAzMTEwLwYDVQQD
EyhlMDM1M2U5MzZmYTkzN2UyOTZhZjU3MWI3OWVmZGE0Y2Y4NjE1MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbu3T65Y9ZWIYn85+rEDy7bAtRG9
sTkO4WQPC531oCodOSYBzosAxk7aOAaeL7wLmVMnOo9ZQKh5tCnjJtTV7GvvHAVY
FCPMhhJ/2KwUPutrbf/ESae4K61cX5c18vOyzVAtWIFpniNUkpThblzIN+/Z9Ozm
8vAVNH6fL5DGC+W0YuP3j/Nckd3M5rfwNh2vf9pythaSXg1Py6zVm7DeiVT2q4Dt
7IB3Vi5Fzsw2tlCmjM+vNUpXFRHwL6jO5ggG+xP/WA449Gzs7ql/vI4w3+DrJoBx
cYcBz1MXnQrqd4eXxyERLsjWTPzjMx5Z0eccRCfoZuUAmjKB9uIJjquDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA1PpNvqTfilq9XG3nv2kz4YVNcMB8GA1UdIwQY
MBaAFE5rMtnT68buSb1vps2Q5PXH1UToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjIt
MDk2ZWUyOWQ5OTdkLzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82Mjc0ZDctOGQxYy00OTNiLTljMjItMDk2ZWUyOWQ5OTdk
LzEvVG1zeTJkUHJ4dTVKdlctbXpaRGs5Y2ZWUk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL/cWYtE
rAP++uBY4i0fu8Jt32kPbVKQGFJlAxC6J/xykBrp3eqRHuTs5PeucD3tz7/eVv9W
7SOeEdJeQP8jc2IR1yQHdjxUIdyC6HoxnoeLCWJwT7XQxIYpF/pvv1uTFZ/fLJc7
E0gzfvJLG3eVqqbyTICfUsgA7FI3FsMfb8oqqVOe2fpGM0GvhnI6TmU7QEGpMdRz
RvDNBVy70fyyXBJy4AO5Ex1BWP7hRmCNc3h7voosZZ2zvMBzQNb9y6Up8CgspG7X
OhLYsVQVCcr74otOSaTyFI4tjUTxM9OlY9NtdizgKiESzqj62CdOabC1+DmBATqZ
tdX15StfbNV1Qw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:49 2024 by rpki-client on console-fra.rpki-client.org