Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
File: YFmTc7C28EMZ0Ivsta1XkqE72pI.mft (raw, json)
Hash identifier: +MRdETbC61oBcgGE1rTvPhwzYWsZyB7U4Khd6TCKDXM=
Subject key identifier: 20:4A:7C:59:2E:EF:C6:F6:61:B4:A7:44:04:32:2B:DB:2F:44:89:EA
Authority key identifier: 60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
Certificate issuer: /CN=60599373b0b6f04319d08becb5ad5792a13bda92
Certificate serial: 01901E21A2772A18A5FB703A0A50965FCED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
Manifest number: 0DD3
Signing time: Sat 15 Jun 2024 23:00:39 +0000
Manifest this update: Sat 15 Jun 2024 23:00:39 +0000
Manifest next update: Sun 16 Jun 2024 23:00:39 +0000
Files and hashes: 1: 1EZ2cqVLIoynCYa-wnKi0wLMays.roa (hash: 7zSX4rrSmtQfFRAaQZOd98qa86Uxa8uae78uZ3+o+g0=)
2: YFmTc7C28EMZ0Ivsta1XkqE72pI.crl (hash: NTkLQrksvHCkuuM6EYJ123JVXe0KhrBLBOlhF4QEvLk=)
3: iNceDSdpaiQUoMzgtG9pp1ducas.roa (hash: n3QPtyZ6PKNMBZWE0I+8yEeprhqRdNErkD7c5BxCwrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:a2:77:2a:18:a5:fb:70:3a:0a:50:96:5f:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60599373b0b6f04319d08becb5ad5792a13bda92
Validity
Not Before: Jun 15 23:00:39 2024 GMT
Not After : Jun 16 23:00:39 2024 GMT
Subject: CN=204a7c592eefc6f661b4a74404322bdb2f4489ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:c7:fa:ab:d6:51:ba:90:ad:dc:b7:bd:fa:
ba:d8:28:ff:7f:c8:c5:26:38:d1:06:86:b8:19:5a:
85:0b:05:9b:ea:c2:9c:46:77:ba:95:0c:89:1b:dd:
6c:bd:cf:e5:d6:44:78:6a:00:03:2b:0e:d2:1b:dd:
8c:ec:9e:09:09:b9:68:bc:73:72:ec:a2:6b:4d:94:
a8:26:57:9f:d5:af:8b:35:07:4d:ef:c2:96:b6:8b:
86:dd:91:61:2b:4c:0f:e9:45:29:4d:dc:4a:bd:7c:
42:bd:3d:42:dd:01:70:27:39:0a:11:d6:f1:b7:e0:
0b:dc:ae:09:58:84:99:2c:75:f4:37:d3:06:c0:13:
5d:6f:90:bb:50:1b:6b:02:93:68:96:35:22:36:e2:
90:9b:48:97:95:10:f7:70:a8:43:b0:da:99:52:ac:
4d:e8:55:68:4c:33:49:ed:75:7c:7f:6e:b5:04:c2:
1d:ba:ea:8c:eb:1e:87:95:43:9f:f3:23:17:75:27:
67:de:68:e6:14:16:23:4e:3f:94:47:b5:17:f9:65:
51:2b:38:af:b2:3d:a1:dc:c3:f6:9f:ee:4f:82:a4:
76:86:65:2b:f6:65:ab:ae:e2:e5:b5:11:8d:77:c7:
29:2d:4b:58:38:d0:96:3c:49:ed:a9:89:db:d7:4b:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:7C:59:2E:EF:C6:F6:61:B4:A7:44:04:32:2B:DB:2F:44:89:EA
X509v3 Authority Key Identifier:
keyid:60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:78:ef:a0:2a:cd:e0:18:1c:d4:13:33:2c:a2:6e:55:00:f2:
53:36:18:7e:01:40:97:be:78:1a:4e:85:68:3d:38:c7:50:34:
59:b4:52:00:de:63:43:cc:b9:ac:15:51:e4:e4:f4:56:6a:8c:
20:15:43:9f:40:05:fa:1f:ea:33:b6:59:a7:17:d5:2f:ff:37:
9e:d1:9b:1c:aa:4c:7c:65:64:76:f2:0c:ca:1c:66:6f:ce:4d:
45:40:0d:0f:80:ec:cb:32:c3:64:c6:07:f2:0c:3f:99:d0:c1:
77:ed:b4:e7:b4:94:42:8b:52:53:43:6b:36:3c:8b:d6:e2:56:
f2:8d:8e:55:e5:88:9f:98:12:87:a1:34:f9:8c:56:cc:57:94:
50:75:9e:6c:a3:6e:c3:40:e5:07:6f:53:99:cb:28:ee:ae:4d:
69:ba:a1:64:f0:a8:13:70:d7:c9:b3:3d:85:ac:b8:8d:7e:8e:
9a:c0:07:5e:72:3a:a0:a1:c2:e2:58:0c:3d:4c:09:c0:e9:a9:
7a:62:d1:90:4b:f4:52:60:7f:ec:79:b6:22:9e:8f:c8:29:b6:
4f:74:96:77:2e:98:6e:d9:7c:b1:54:e8:b6:6e:04:bf:17:35:
80:6a:a6:eb:68:2a:b1:b0:d7:82:af:8a:98:9e:84:09:79:2c:
07:dd:25:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIaJ3Khil+3A6ClCWX87VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTk5MzczYjBiNmYwNDMxOWQwOGJlY2I1YWQ1NzkyYTEz
YmRhOTIwHhcNMjQwNjE1MjMwMDM5WhcNMjQwNjE2MjMwMDM5WjAzMTEwLwYDVQQD
EygyMDRhN2M1OTJlZWZjNmY2NjFiNGE3NDQwNDMyMmJkYjJmNDQ4OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA/H+qvWUbqQrdy3vfq62Cj/f8jF
JjjRBoa4GVqFCwWb6sKcRne6lQyJG91svc/l1kR4agADKw7SG92M7J4JCblovHNy
7KJrTZSoJlef1a+LNQdN78KWtouG3ZFhK0wP6UUpTdxKvXxCvT1C3QFwJzkKEdbx
t+AL3K4JWISZLHX0N9MGwBNdb5C7UBtrApNoljUiNuKQm0iXlRD3cKhDsNqZUqxN
6FVoTDNJ7XV8f261BMIduuqM6x6HlUOf8yMXdSdn3mjmFBYjTj+UR7UX+WVRKziv
sj2h3MP2n+5PgqR2hmUr9mWrruLltRGNd8cpLUtYONCWPEntqYnb10tVBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBKfFku78b2YbSnRAQyK9svRInqMB8GA1UdIwQY
MBaAFGBZk3OwtvBDGdCL7LWtV5KhO9qSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjI3YjMtNzExMC00ZDhjLWEwZDgt
MDMxMDljMTU1MTBkLzEvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjI3YjMtNzExMC00ZDhjLWEwZDgtMDMxMDljMTU1MTBk
LzEvWUZtVGM3QzI4RU1aMEl2c3RhMVhrcUU3MnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHjvoCrN
4Bgc1BMzLKJuVQDyUzYYfgFAl754Gk6FaD04x1A0WbRSAN5jQ8y5rBVR5OT0VmqM
IBVDn0AF+h/qM7ZZpxfVL/83ntGbHKpMfGVkdvIMyhxmb85NRUAND4DsyzLDZMYH
8gw/mdDBd+2057SUQotSU0NrNjyL1uJW8o2OVeWIn5gSh6E0+YxWzFeUUHWebKNu
w0DlB29Tmcso7q5NabqhZPCoE3DXybM9hay4jX6OmsAHXnI6oKHC4lgMPUwJwOmp
emLRkEv0UmB/7Hm2Ip6PyCm2T3SWdy6Ybtl8sVTotm4Evxc1gGqm62gqsbDXgq+K
mJ6ECXksB90lZw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:53 2024 by rpki-client on console-ams.rpki-client.org