Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: X463va5/LGZt5uRx64Rg5L0QuzlPecLtYLcLZPNx2ek=
Subject key identifier: 4D:15:17:BC:43:A2:FC:48:A7:81:CA:4E:4D:2A:B9:44:0D:47:3D:21
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 0193568954CB370010D31E029A43C86CF395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 0E50
Signing time: Sat 23 Nov 2024 01:01:00 +0000
Manifest this update: Sat 23 Nov 2024 01:01:00 +0000
Manifest next update: Sun 24 Nov 2024 01:01:00 +0000
Files and hashes: 1: Ba_0fZpepMcwTK6pqfY1hqVlQQg.roa (hash: VhhluQNQsU9l8uP9wxcd4GaGaR9XO75jN6xAQzEHz0U=)
2: LUoRdNd7OUNidWKpI-Q4rXmUBNQ.roa (hash: ap5EBVX8w9EJ37Ed/2jDtcdGlwVG+YSJDBGfLzLdWtw=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: GbN71W11WksfT3thZnWw/j0wJ7Qb0Pbe1tMYUMxMs2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:54:cb:37:00:10:d3:1e:02:9a:43:c8:6c:f3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Nov 23 01:01:00 2024 GMT
Not After : Nov 24 01:01:00 2024 GMT
Subject: CN=4d1517bc43a2fc48a781ca4e4d2ab9440d473d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:99:8d:cd:89:4c:3e:54:76:74:84:55:9b:
86:eb:61:0c:7a:cb:e3:1c:25:87:69:f1:82:55:2d:
f7:a3:9c:36:c1:f3:58:9c:71:89:ff:0b:2c:6b:49:
e4:33:80:e2:9b:d8:37:1f:94:e5:cd:d2:23:30:3a:
cd:8c:cd:d2:4e:f0:a8:e8:d5:b5:80:68:59:6e:6a:
07:42:a9:ae:1b:8d:69:12:21:59:59:66:f7:4c:35:
8f:bc:e7:5b:91:f3:cb:0e:12:fe:7d:59:3d:d3:8e:
65:bf:a0:c4:fa:85:91:46:43:42:00:a5:88:60:01:
17:68:95:86:92:c8:ec:bc:84:02:c5:70:24:32:57:
fe:94:26:38:5c:1a:94:ce:d1:4a:62:8c:a5:c4:8a:
3d:d3:fe:10:d3:79:69:21:c9:d8:18:db:aa:39:c8:
e3:a3:ff:b0:ba:bd:b0:ca:fa:b6:79:42:ad:9b:a0:
a5:98:b6:3b:ea:49:79:45:a7:c9:04:56:96:f8:d9:
fc:3e:31:2a:81:2f:a3:38:f5:e7:27:df:38:21:22:
50:7f:c2:d6:87:47:42:4e:70:c0:ff:fb:f9:17:be:
5a:a5:88:ff:26:e4:e1:a8:01:29:74:04:2b:fa:ca:
db:2c:81:69:59:c3:a8:17:3b:cc:65:46:73:67:20:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:17:BC:43:A2:FC:48:A7:81:CA:4E:4D:2A:B9:44:0D:47:3D:21
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:51:91:f9:6b:2d:cc:36:72:17:32:c6:3b:29:ea:1d:3c:60:
b9:a3:a9:91:5d:19:eb:35:68:fa:12:48:bd:56:79:8f:fe:20:
d6:b6:98:32:a4:b5:6e:ea:4a:7b:7c:78:09:5a:4c:29:33:81:
07:1d:b2:86:48:b5:af:97:c1:8d:7b:3e:c7:6f:4d:b2:70:ef:
57:a8:11:78:84:38:b7:0c:33:fd:23:10:41:eb:9d:e0:d9:45:
9c:6a:33:04:40:74:07:98:ec:f5:0d:ee:1c:26:68:29:b9:f2:
6b:21:64:66:79:86:a1:44:02:32:98:fb:f4:2c:5a:78:39:d3:
e6:5b:e4:d1:0e:03:6f:f0:0f:07:22:8f:e9:5c:cc:ce:68:6b:
e6:a9:7e:b5:f5:7d:5d:16:5a:69:5a:c1:dd:e9:82:a9:70:c2:
40:b8:cd:32:93:2d:66:0c:9e:20:ff:e4:5d:c1:07:18:70:6d:
74:6e:b0:94:58:87:d9:12:f1:5f:f7:0b:b3:ec:2e:f9:8e:34:
e0:06:c6:95:45:86:04:22:e6:e8:cc:b4:42:51:5b:34:cf:9c:
ce:99:9d:33:80:1a:2b:5a:07:34:00:32:d1:55:eb:c1:99:19:
42:b3:1a:0b:63:9b:8a:91:2d:1e:6b:50:d1:6d:d0:3d:68:4c:
39:92:69:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiVTLNwAQ0x4CmkPIbPOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjQxMTIzMDEwMTAwWhcNMjQxMTI0MDEwMTAwWjAzMTEwLwYDVQQD
Eyg0ZDE1MTdiYzQzYTJmYzQ4YTc4MWNhNGU0ZDJhYjk0NDBkNDczZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww6Zjc2JTD5UdnSEVZuG62EMesvj
HCWHafGCVS33o5w2wfNYnHGJ/wssa0nkM4Dim9g3H5TlzdIjMDrNjM3STvCo6NW1
gGhZbmoHQqmuG41pEiFZWWb3TDWPvOdbkfPLDhL+fVk9045lv6DE+oWRRkNCAKWI
YAEXaJWGksjsvIQCxXAkMlf+lCY4XBqUztFKYoylxIo90/4Q03lpIcnYGNuqOcjj
o/+wur2wyvq2eUKtm6ClmLY76kl5RafJBFaW+Nn8PjEqgS+jOPXnJ984ISJQf8LW
h0dCTnDA//v5F75apYj/JuThqAEpdAQr+srbLIFpWcOoFzvMZUZzZyB9TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0VF7xDovxIp4HKTk0quUQNRz0hMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVGR+Wst
zDZyFzLGOynqHTxguaOpkV0Z6zVo+hJIvVZ5j/4g1raYMqS1bupKe3x4CVpMKTOB
Bx2yhki1r5fBjXs+x29NsnDvV6gReIQ4twwz/SMQQeud4NlFnGozBEB0B5js9Q3u
HCZoKbnyayFkZnmGoUQCMpj79CxaeDnT5lvk0Q4Db/APByKP6VzMzmhr5ql+tfV9
XRZaaVrB3emCqXDCQLjNMpMtZgyeIP/kXcEHGHBtdG6wlFiH2RLxX/cLs+wu+Y40
4AbGlUWGBCLm6My0QlFbNM+czpmdM4AaK1oHNAAy0VXrwZkZQrMaC2ObipEtHmtQ
0W3QPWhMOZJp4A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:58 2024 by rpki-client on console-ams.rpki-client.org