Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: GFPwOFarZO+wLd7jxj9c0oJ6aXOWGIVUJTap772tYB0=
Subject key identifier: 34:51:52:FE:EF:AA:76:E1:F8:E4:41:28:AB:56:55:E6:C8:3D:6F:96
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0192376EE71EAFFD60A5B94F861A2C88E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0729
Signing time: Sat 28 Sep 2024 07:01:07 +0000
Manifest this update: Sat 28 Sep 2024 07:01:07 +0000
Manifest next update: Sun 29 Sep 2024 07:01:07 +0000
Files and hashes: 1: NNk_Z2os7e1hTHEam5I9zipUYSw.roa (hash: fCjfeHmiWhEAyE+qdZ4P9KxpYiAbMVGOXkqfAGSyQzM=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: e3fEzRmM21ckEyzb9JQQUdLXb4q44qN2lPCoT7/39ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:6e:e7:1e:af:fd:60:a5:b9:4f:86:1a:2c:88:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Sep 28 07:01:07 2024 GMT
Not After : Sep 29 07:01:07 2024 GMT
Subject: CN=345152feefaa76e1f8e44128ab5655e6c83d6f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:35:a2:1a:4b:dc:4e:54:a0:a2:05:8c:04:
ee:c8:13:06:63:fd:f2:61:41:64:5a:e4:a8:ae:5f:
da:fe:fd:56:c1:c4:be:d5:9e:8c:a3:f8:d0:9d:3a:
46:b0:0a:d2:63:75:00:63:22:bb:02:35:35:62:2f:
0e:75:66:58:d2:01:d9:95:60:67:ad:49:9c:fc:98:
91:17:e5:56:d6:83:2a:59:f9:1e:96:9a:84:5d:01:
1a:74:58:20:97:f2:74:f6:3a:e1:b0:13:f9:91:50:
40:76:12:74:81:33:f2:12:38:1d:b5:b8:79:38:33:
d6:ee:89:98:4f:1e:34:a0:43:20:1b:d2:95:43:cc:
cc:57:05:cc:c0:55:fc:92:bf:1a:32:fe:f9:c6:c6:
8e:28:4e:00:74:29:fd:34:74:10:62:c5:38:e1:c3:
7d:a6:a2:5e:d7:1a:3d:7c:a6:df:e9:a7:00:c5:f7:
a4:d7:97:7e:7c:9b:e8:4c:29:9b:b6:6f:6c:a3:5b:
13:5c:17:4f:5c:72:6b:9d:d6:70:57:66:95:36:7e:
5d:b2:6e:d8:1f:99:87:86:83:cb:11:e0:e9:e9:c3:
b2:de:71:6d:11:46:9f:47:7f:0e:da:53:f2:4f:92:
87:0a:7d:be:8a:42:2a:38:59:fb:13:6a:78:60:67:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:52:FE:EF:AA:76:E1:F8:E4:41:28:AB:56:55:E6:C8:3D:6F:96
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:0f:12:02:8a:db:6c:02:6a:01:ab:89:34:da:f4:4d:13:
6e:7c:03:54:6e:fa:3e:cc:5b:67:25:78:bf:4e:51:6b:35:46:
54:03:12:96:80:14:61:04:ef:52:3c:e5:99:00:a7:23:34:ad:
42:9e:3d:37:2d:44:04:29:c4:3f:87:35:7d:cd:e6:65:5f:de:
13:0f:a8:6d:6b:3a:e1:68:6e:90:99:31:ff:d2:ed:4a:34:f5:
9c:ee:10:3a:58:a6:54:0e:68:5c:46:bd:3c:00:2a:7d:d6:c6:
13:91:2f:23:9f:69:e1:8c:5f:c9:3e:05:e2:1d:70:94:49:21:
3d:3e:9d:34:7b:5a:a5:a1:4f:f2:9a:66:90:17:ee:cc:a7:5f:
73:9e:61:aa:12:87:ed:c7:73:36:7a:94:d1:c7:cb:7a:05:83:
6f:d6:63:4f:a3:9e:a9:eb:38:58:6a:51:34:39:56:af:59:d4:
9d:5f:23:56:04:2a:b3:79:36:23:55:66:17:89:a6:4c:1c:60:
7a:ef:58:aa:55:8c:7f:50:14:4c:b1:c0:c0:5a:c5:17:ed:d7:
47:57:b1:69:19:f0:02:34:05:bf:5c:e0:21:30:de:44:a8:13:
1e:fc:60:97:95:50:e3:dc:a2:7a:c7:04:a3:9f:05:20:0e:f7:
3e:6e:8f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI3bucer/1gpblPhhosiOMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjE3ODAwZjE5NDNhZjFjNTE0Mjg0Y2MzYmU3ODBlOWMy
MWRkNzgwHhcNMjQwOTI4MDcwMTA3WhcNMjQwOTI5MDcwMTA3WjAzMTEwLwYDVQQD
EygzNDUxNTJmZWVmYWE3NmUxZjhlNDQxMjhhYjU2NTVlNmM4M2Q2Zjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LU1ohpL3E5UoKIFjATuyBMGY/3y
YUFkWuSorl/a/v1WwcS+1Z6Mo/jQnTpGsArSY3UAYyK7AjU1Yi8OdWZY0gHZlWBn
rUmc/JiRF+VW1oMqWfkelpqEXQEadFggl/J09jrhsBP5kVBAdhJ0gTPyEjgdtbh5
ODPW7omYTx40oEMgG9KVQ8zMVwXMwFX8kr8aMv75xsaOKE4AdCn9NHQQYsU44cN9
pqJe1xo9fKbf6acAxfek15d+fJvoTCmbtm9so1sTXBdPXHJrndZwV2aVNn5dsm7Y
H5mHhoPLEeDp6cOy3nFtEUafR38O2lPyT5KHCn2+ikIqOFn7E2p4YGceOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRRUv7vqnbh+ORBKKtWVebIPW+WMB8GA1UdIwQY
MBaAFMrxeADxlDrxxRQoTMO+eA6cId14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2Ut
ODA1OTdlYjQ0NDI2LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjlhY2UtZjg2NC00NGQ3LWEwN2UtODA1OTdlYjQ0NDI2
LzEveXZGNEFQR1VPdkhGRkNoTXc3NTREcHdoM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesgPEgKK
22wCagGriTTa9E0TbnwDVG76PsxbZyV4v05RazVGVAMSloAUYQTvUjzlmQCnIzSt
Qp49Ny1EBCnEP4c1fc3mZV/eEw+obWs64WhukJkx/9LtSjT1nO4QOlimVA5oXEa9
PAAqfdbGE5EvI59p4YxfyT4F4h1wlEkhPT6dNHtapaFP8ppmkBfuzKdfc55hqhKH
7cdzNnqU0cfLegWDb9ZjT6Oeqes4WGpRNDlWr1nUnV8jVgQqs3k2I1VmF4mmTBxg
eu9YqlWMf1AUTLHAwFrFF+3XR1exaRnwAjQFv1zgITDeRKgTHvxgl5VQ49yiescE
o58FIA73Pm6PHw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:17:56 2024 by rpki-client on console-fra.rpki-client.org