Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File: YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier: frakC4T+R0ceh9cHQlqJFK2M1g8/x3r143Y91fs3EMk=
Subject key identifier: 81:46:5B:97:80:67:01:8C:A4:FB:BC:50:64:89:96:4A:29:70:22:59
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer: /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial: 019356F72D7AAFDC3FEBD3BF5D615C01C45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number: 0354
Signing time: Sat 23 Nov 2024 03:00:59 +0000
Manifest this update: Sat 23 Nov 2024 03:00:59 +0000
Manifest next update: Sun 24 Nov 2024 03:00:59 +0000
Files and hashes: 1: 36mBMPc4SBWeAJFM3wrv-ue2r58.roa (hash: oYTjopznTfwToeZSNcPOXbufQ8VZC71GBt3HE0KMYps=)
2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: LrQjKo7IEKaVplrRbQQWrXlbnZjzWVlqN2/CzYBDTOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:2d:7a:af:dc:3f:eb:d3:bf:5d:61:5c:01:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Validity
Not Before: Nov 23 03:00:59 2024 GMT
Not After : Nov 24 03:00:59 2024 GMT
Subject: CN=81465b978067018ca4fbbc506489964a29702259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:36:84:63:2a:35:78:85:c9:cb:ef:1b:b5:
2a:65:1a:7c:b5:e9:38:1d:98:e3:49:21:e3:0c:40:
61:16:a8:47:44:34:89:cd:d2:36:eb:58:3f:26:31:
26:46:b9:e5:f2:25:a9:f3:6e:ac:54:e9:55:ae:da:
73:3f:e0:b5:51:25:16:c1:f0:12:fb:51:c7:fb:d1:
df:69:76:49:0d:be:85:0f:e8:cf:ae:3f:1c:38:44:
27:d9:8e:5e:48:70:a8:2f:fc:14:53:74:9b:92:4c:
44:f2:63:e2:82:38:73:03:aa:84:8e:5f:c2:a1:a4:
bf:56:4f:7a:d3:d8:a4:6e:b8:6a:97:66:29:95:52:
e8:91:1e:2e:c2:a1:42:34:a0:85:51:e9:4b:08:23:
81:6f:0d:f9:4a:35:53:a4:40:56:79:24:d2:6a:40:
2a:52:28:9c:25:cd:09:bb:1d:ba:ff:31:98:5b:95:
b3:1d:80:b2:28:26:6a:73:6e:21:46:9a:9c:4b:99:
f1:cd:51:19:87:97:3d:f3:fb:de:8f:e7:8d:ff:9c:
f8:46:b1:c0:51:dd:cc:3a:8b:81:35:53:02:01:0f:
47:af:7b:a3:52:77:ff:15:85:19:44:d7:e2:e2:db:
ee:3d:18:86:b4:92:cf:53:d0:09:3a:f7:28:4e:2c:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:5B:97:80:67:01:8C:A4:FB:BC:50:64:89:96:4A:29:70:22:59
X509v3 Authority Key Identifier:
keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e4:48:9e:08:b7:17:54:f8:ba:e7:82:cb:35:ec:ef:c5:6e:
69:55:3e:79:4f:e4:d4:2b:27:de:b7:03:ab:31:52:d3:73:1b:
be:e4:07:92:8e:b4:fa:39:b0:61:55:84:53:e7:ef:d7:47:e8:
c0:9f:6c:09:9c:92:7e:bf:08:77:24:e0:e1:78:41:10:53:ac:
f4:21:17:e3:ac:05:1c:dc:2f:90:19:b5:38:35:18:96:3f:45:
91:f6:e8:fb:c9:e1:b6:15:0d:05:29:3a:6a:ec:e9:52:6f:1f:
31:0c:e1:67:37:de:83:ad:bf:3d:09:bb:dc:20:a3:3b:1d:eb:
4b:da:38:84:67:6a:3d:6a:1d:26:c0:5c:c5:b3:19:7f:68:a7:
76:8c:e5:d6:cf:6e:ea:d4:b8:e7:d3:96:5e:b1:45:7e:f6:63:
30:17:57:62:5e:09:72:b4:f8:de:8b:de:06:2d:35:25:a6:33:
df:7d:2d:c0:f0:82:76:8d:44:48:0f:31:53:5b:2c:f9:02:c1:
b7:e6:f1:a7:91:7e:ad:25:4d:07:5b:4e:58:0c:b0:9e:47:c8:
45:f0:4d:ed:0d:8a:4c:c0:4d:95:b5:60:c3:a4:03:4b:e0:bf:
0b:3f:74:9d:2b:b9:25:18:29:2e:fb:e2:c7:d8:cf:7d:c4:af:
85:f0:b3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9y16r9w/69O/XWFcAcRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDFiOTUzYzZiZTFmOTE4MzFkNjhhNWMwMTE1YzIwZTBj
ZDdmOWEwHhcNMjQxMTIzMDMwMDU5WhcNMjQxMTI0MDMwMDU5WjAzMTEwLwYDVQQD
Eyg4MTQ2NWI5NzgwNjcwMThjYTRmYmJjNTA2NDg5OTY0YTI5NzAyMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWQ2hGMqNXiFycvvG7UqZRp8tek4
HZjjSSHjDEBhFqhHRDSJzdI261g/JjEmRrnl8iWp826sVOlVrtpzP+C1USUWwfAS
+1HH+9HfaXZJDb6FD+jPrj8cOEQn2Y5eSHCoL/wUU3SbkkxE8mPigjhzA6qEjl/C
oaS/Vk9609ikbrhql2YplVLokR4uwqFCNKCFUelLCCOBbw35SjVTpEBWeSTSakAq
UiicJc0Jux26/zGYW5WzHYCyKCZqc24hRpqcS5nxzVEZh5c98/vej+eN/5z4RrHA
Ud3MOouBNVMCAQ9Hr3ujUnf/FYUZRNfi4tvuPRiGtJLPU9AJOvcoTiwUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFGW5eAZwGMpPu8UGSJlkopcCJZMB8GA1UdIwQY
MBaAFGABuVPGvh+Rgx1opcARXCDgzX+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTNiZTYtZWNiOS00MzAwLTgzNDYt
YTY0NzY3NWY0NmI2LzEvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMTNiZTYtZWNiOS00MzAwLTgzNDYtYTY0NzY3NWY0NmI2
LzEvWUFHNVU4YS1INUdESFdpbHdCRmNJT0ROZjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeRIngi3
F1T4uueCyzXs78VuaVU+eU/k1Csn3rcDqzFS03MbvuQHko60+jmwYVWEU+fv10fo
wJ9sCZySfr8IdyTg4XhBEFOs9CEX46wFHNwvkBm1ODUYlj9Fkfbo+8nhthUNBSk6
auzpUm8fMQzhZzfeg62/PQm73CCjOx3rS9o4hGdqPWodJsBcxbMZf2indozl1s9u
6tS459OWXrFFfvZjMBdXYl4JcrT43oveBi01JaYz330twPCCdo1ESA8xU1ss+QLB
t+bxp5F+rSVNB1tOWAywnkfIRfBN7Q2KTMBNlbVgw6QDS+C/Cz90nSu5JRgpLvvi
x9jPfcSvhfCzug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:42 2024 by rpki-client on console-fra.rpki-client.org