Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: oyKbCgjIKjCBBLF8V4ejOVMSsSbsDwgpfI41BFYDPL4=
Subject key identifier: 6B:AA:2F:FA:01:AD:58:C3:70:E5:CF:A1:49:E6:20:1C:4A:28:53:BB
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 01901DED1AD15A8CAE65E2290DB4E2AD8632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:03:16 +0000
Manifest this update: Sat 15 Jun 2024 22:03:16 +0000
Manifest next update: Sun 16 Jun 2024 22:03:16 +0000
Files and hashes: 1: 6EZkMG2ttg2ylYDdEUEFbJH39n4.roa (hash: X0U6j0mLLxjrFNhuHOdWK35++RiTs0B6ljCEUiOxP48=)
2: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: sXTvCRHuRUYjKxYiGQZWz694qT5+ddhq0+tOfN4kHXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:1a:d1:5a:8c:ae:65:e2:29:0d:b4:e2:ad:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Jun 15 22:03:16 2024 GMT
Not After : Jun 16 22:03:16 2024 GMT
Subject: CN=6baa2ffa01ad58c370e5cfa149e6201c4a2853bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:3d:e0:53:ee:b9:97:ad:79:d9:7b:58:be:
95:98:23:81:bc:90:ac:84:01:e1:af:22:d6:09:b0:
6d:82:0e:d7:98:4c:37:10:8f:c6:cf:7b:08:f1:c9:
c5:2c:88:cb:4a:f8:9e:70:a2:67:8a:62:8d:39:31:
44:56:80:50:f9:5c:19:a3:f2:2e:5e:63:34:d2:68:
08:8d:b3:ea:db:ed:40:e2:e3:21:14:ab:74:f3:30:
18:82:25:d0:8d:e1:9b:e4:54:8a:ba:44:b6:fd:b2:
51:3c:06:36:4e:f4:fc:3a:29:36:24:14:15:56:65:
a5:27:5e:5f:f0:43:56:f6:ae:9b:61:3d:79:e2:8a:
7b:f0:5c:c4:33:56:53:5f:49:e9:a2:43:08:c2:73:
7b:38:e5:7c:76:d4:8b:af:5a:7b:40:11:bc:1f:86:
78:da:2f:eb:f1:97:23:25:34:2b:80:92:7f:dd:65:
15:1f:75:32:69:74:91:c3:84:76:0c:a7:6c:39:ef:
ee:ce:88:81:93:7a:03:82:36:05:90:7e:1a:90:3f:
5a:1b:66:61:84:24:81:c2:48:7a:63:c4:c1:0b:65:
b6:0d:f7:51:15:95:d9:1f:28:70:b9:e7:c3:9a:7a:
15:9c:b9:df:47:0c:1c:6d:37:92:97:fa:8d:39:77:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:2F:FA:01:AD:58:C3:70:E5:CF:A1:49:E6:20:1C:4A:28:53:BB
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d1:f9:0a:7a:75:d6:e6:ee:45:b5:92:55:e4:06:53:97:47:
2e:7d:27:28:d3:72:24:a7:6e:6a:d7:c6:56:8c:4e:50:4d:f0:
42:07:09:37:f8:b6:da:f4:b4:65:cf:ff:0f:1d:66:75:07:ca:
22:8a:b1:92:dc:1f:76:83:dd:80:2c:20:ed:56:12:77:ed:34:
26:12:76:56:58:2a:89:00:0d:81:45:be:91:20:4a:f9:dc:ae:
17:94:43:e3:6b:bc:96:1c:68:3b:5b:a2:12:62:ad:9c:70:cd:
18:a4:b5:4f:03:bc:18:19:a4:ae:44:fe:8e:16:02:c2:bf:27:
18:4d:44:db:1a:a0:8c:45:d8:82:98:d1:24:ae:20:ef:bb:a9:
fe:62:bb:ab:28:b4:64:83:0e:8c:99:1e:ee:d2:d7:76:b1:9b:
86:2d:2f:f5:64:4e:99:17:0b:99:e8:46:ea:f0:fe:90:a2:de:
79:59:5b:d2:06:cc:6c:56:1a:b6:32:15:ca:94:db:60:60:e0:
f2:8c:9b:4d:96:ef:b9:f4:94:9b:c2:f2:12:00:d2:02:fc:3c:
25:54:46:3a:29:a0:04:dd:21:75:fc:9f:ad:31:3f:c7:9c:a2:
4e:1d:3b:0d:8f:95:08:f2:22:fb:d8:05:9c:b9:d0:86:fe:d1:
25:d1:fb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7RrRWoyuZeIpDbTirYYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjQwNjE1MjIwMzE2WhcNMjQwNjE2MjIwMzE2WjAzMTEwLwYDVQQD
Eyg2YmFhMmZmYTAxYWQ1OGMzNzBlNWNmYTE0OWU2MjAxYzRhMjg1M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5U94FPuuZetedl7WL6VmCOBvJCs
hAHhryLWCbBtgg7XmEw3EI/Gz3sI8cnFLIjLSviecKJnimKNOTFEVoBQ+VwZo/Iu
XmM00mgIjbPq2+1A4uMhFKt08zAYgiXQjeGb5FSKukS2/bJRPAY2TvT8Oik2JBQV
VmWlJ15f8ENW9q6bYT154op78FzEM1ZTX0npokMIwnN7OOV8dtSLr1p7QBG8H4Z4
2i/r8ZcjJTQrgJJ/3WUVH3UyaXSRw4R2DKdsOe/uzoiBk3oDgjYFkH4akD9aG2Zh
hCSBwkh6Y8TBC2W2DfdRFZXZHyhwuefDmnoVnLnfRwwcbTeSl/qNOXcd7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuqL/oBrVjDcOXPoUnmIBxKKFO7MB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNH5Cnp1
1ubuRbWSVeQGU5dHLn0nKNNyJKduatfGVoxOUE3wQgcJN/i22vS0Zc//Dx1mdQfK
IoqxktwfdoPdgCwg7VYSd+00JhJ2VlgqiQANgUW+kSBK+dyuF5RD42u8lhxoO1ui
EmKtnHDNGKS1TwO8GBmkrkT+jhYCwr8nGE1E2xqgjEXYgpjRJK4g77up/mK7qyi0
ZIMOjJke7tLXdrGbhi0v9WROmRcLmehG6vD+kKLeeVlb0gbMbFYatjIVypTbYGDg
8oybTZbvufSUm8LyEgDSAvw8JVRGOimgBN0hdfyfrTE/x5yiTh07DY+VCPIi+9gF
nLnQhv7RJdH7ug==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:08 2024 by rpki-client on console-ams.rpki-client.org