Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: f2+3tMaf+JVlf4BXV4SgNjqCq4iYpyy8Kcn15pWoWWU=
Subject key identifier: F3:88:91:1D:19:F5:D5:E4:DF:82:EC:84:EE:7C:DD:D3:CD:4A:A1:D5
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01920F17B7D94D094B6AAC3902ADD7AE7639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 077D
Signing time: Fri 20 Sep 2024 11:01:05 +0000
Manifest this update: Fri 20 Sep 2024 11:01:05 +0000
Manifest next update: Sat 21 Sep 2024 11:01:05 +0000
Files and hashes: 1: LnpOD7dP6ExFBX4MRMD3rgpbQJI.roa (hash: q/d1+8A9HcNX8j10AfLZgr8+lPkkjyUYFOV5YuGPEGA=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: Wsddr47vsiwSakCqdg1jRbwXd8bbwZfQFFDxtpvz1eA=)
3: Wd0ZGBSPOW5hbh7oUFgjn1FKc5E.roa (hash: 6H2eFA5BzmC/ibF7FU+PauwgI4ry1aTDqj7AUxxrPVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:17:b7:d9:4d:09:4b:6a:ac:39:02:ad:d7:ae:76:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Sep 20 11:01:05 2024 GMT
Not After : Sep 21 11:01:05 2024 GMT
Subject: CN=f388911d19f5d5e4df82ec84ee7cddd3cd4aa1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:18:79:d9:76:ff:77:28:5a:87:e7:5b:6f:
98:03:f7:9f:3f:a9:f1:db:91:4a:4c:c2:03:ac:b0:
da:a5:38:67:7e:7e:a8:d8:ed:5d:cd:00:af:5d:38:
7f:a0:1f:42:94:14:86:e4:14:0c:64:89:ec:5c:f4:
c0:fd:f5:c4:44:1f:58:f6:9b:06:b9:1f:f6:21:ec:
10:e4:00:b2:ff:57:8e:32:02:da:d0:6f:7d:90:92:
cc:0f:c1:c9:a8:7c:3a:3a:03:89:6e:21:d8:e6:ac:
16:db:b5:66:8d:c3:92:ec:3f:82:50:27:41:e9:cc:
46:5c:cc:df:a0:b3:e9:e6:af:d0:85:27:47:d6:61:
e6:5d:fb:77:6a:1a:ad:c3:11:8d:b0:2f:96:02:a2:
1a:15:52:96:38:ed:87:44:3e:0d:d3:c5:22:20:89:
7c:b8:c9:0e:14:70:db:7c:41:6d:3a:80:44:28:6e:
4e:49:26:97:37:41:ee:f8:64:da:cc:e6:b9:f8:7d:
02:5d:b8:aa:28:db:f4:ce:0c:7e:38:ff:9f:4f:2d:
f4:0e:d7:b3:96:82:d8:c2:f4:73:e8:cf:8c:07:b2:
db:b0:d7:5c:c8:f6:c9:9d:31:a4:7c:7d:cc:5a:03:
be:5d:7d:73:71:0c:c9:9c:95:be:0a:23:31:32:53:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:91:1D:19:F5:D5:E4:DF:82:EC:84:EE:7C:DD:D3:CD:4A:A1:D5
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:46:56:9c:30:4f:63:e3:d3:cb:21:69:d1:e1:63:6c:f5:
ad:41:96:3a:cf:21:04:0b:70:15:0c:3f:d8:15:18:bc:2e:ff:
12:4f:0a:b6:08:9e:5f:8f:10:9d:1e:6a:8c:2b:a6:17:33:b1:
95:81:f1:86:40:92:61:e9:5d:ff:70:d2:a7:26:b9:06:41:fe:
39:ba:b6:a9:11:fb:d4:98:a9:be:45:71:61:d8:af:b7:79:e2:
8b:b0:67:03:72:4e:2d:36:e2:04:01:76:e6:2b:9e:c9:09:61:
9f:bb:4e:af:2b:42:66:da:e6:48:14:75:0a:3d:c7:39:3c:3b:
3a:0f:d1:51:d5:ad:c7:ef:72:b3:bc:06:c3:c1:34:0d:93:3e:
ea:b9:6a:6c:a0:fb:06:8d:d3:f7:14:5e:37:7f:60:3d:f1:5f:
de:e1:fe:a1:cd:58:c4:8a:03:ec:9a:10:bc:6a:09:dd:dd:e7:
9e:b7:1c:e3:7a:87:d4:65:fd:4f:75:e1:5a:38:ef:9a:77:eb:
5e:43:6c:48:30:6a:46:91:52:8e:57:f5:72:b1:0a:be:29:08:
fa:1c:14:c3:6f:0c:88:72:c4:c0:c1:de:16:bf:c1:bf:8e:48:
fc:51:7a:b5:51:25:87:63:50:67:71:56:0d:d0:04:0b:5c:f8:
5a:62:b4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIPF7fZTQlLaqw5Aq3XrnY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw
ZGU4YTAwHhcNMjQwOTIwMTEwMTA1WhcNMjQwOTIxMTEwMTA1WjAzMTEwLwYDVQQD
EyhmMzg4OTExZDE5ZjVkNWU0ZGY4MmVjODRlZTdjZGRkM2NkNGFhMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIYYedl2/3coWofnW2+YA/efP6nx
25FKTMIDrLDapThnfn6o2O1dzQCvXTh/oB9ClBSG5BQMZInsXPTA/fXERB9Y9psG
uR/2IewQ5ACy/1eOMgLa0G99kJLMD8HJqHw6OgOJbiHY5qwW27VmjcOS7D+CUCdB
6cxGXMzfoLPp5q/QhSdH1mHmXft3ahqtwxGNsC+WAqIaFVKWOO2HRD4N08UiIIl8
uMkOFHDbfEFtOoBEKG5OSSaXN0Hu+GTazOa5+H0CXbiqKNv0zgx+OP+fTy30Dtez
loLYwvRz6M+MB7LbsNdcyPbJnTGkfH3MWgO+XX1zcQzJnJW+CiMxMlMAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOIkR0Z9dXk34LshO583dPNSqHVMB8GA1UdIwQY
MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt
NTM4NTA5ZjNhNzg5LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5
LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikFGVpww
T2Pj08shadHhY2z1rUGWOs8hBAtwFQw/2BUYvC7/Ek8KtgieX48QnR5qjCumFzOx
lYHxhkCSYeld/3DSpya5BkH+Obq2qRH71JipvkVxYdivt3nii7BnA3JOLTbiBAF2
5iueyQlhn7tOrytCZtrmSBR1Cj3HOTw7Og/RUdWtx+9ys7wGw8E0DZM+6rlqbKD7
Bo3T9xReN39gPfFf3uH+oc1YxIoD7JoQvGoJ3d3nnrcc43qH1GX9T3XhWjjvmnfr
XkNsSDBqRpFSjlf1crEKvikI+hwUw28MiHLEwMHeFr/Bv45I/FF6tVElh2NQZ3FW
DdAEC1z4WmK0kA==
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org