Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: M3xaSwHpKP7LSBoLyHeKhnxvctZlrNGr2vL+ylRAA2s=
Subject key identifier: 1C:31:64:EB:6A:72:48:0A:E1:DD:BC:92:BA:3B:F3:2E:3E:5F:7A:91
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0193549A858A109D73361F2FF71CBB63EA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0BDD
Signing time: Fri 22 Nov 2024 16:00:33 +0000
Manifest this update: Fri 22 Nov 2024 16:00:33 +0000
Manifest next update: Sat 23 Nov 2024 16:00:33 +0000
Files and hashes: 1: 4RUSg9BkYny-7nx_kPJH_Bq_HyA.roa (hash: Tnvk1jIDAVFUcAt6MUNVMgi7BdNDcljPHW8VPtENd4U=)
2: QYJWvs5hmnzOyA5Cvcp-mJ90ODc.roa (hash: aJ16KdYUKT7Z327OUheXYDWNMibFzv+n+SAasooSeOg=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: oQjKGd2oQnPX6b0mggBjNWmjnjeXSW2gjrOK2qF1Cjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:85:8a:10:9d:73:36:1f:2f:f7:1c:bb:63:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Nov 22 16:00:33 2024 GMT
Not After : Nov 23 16:00:33 2024 GMT
Subject: CN=1c3164eb6a72480ae1ddbc92ba3bf32e3e5f7a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:98:1a:b1:38:e3:7c:a6:87:1e:80:03:53:
fb:38:9c:87:18:5a:ed:08:e6:9e:5b:68:5e:9b:f2:
51:a4:00:48:d5:05:28:64:3d:3c:1c:11:23:52:d1:
25:3f:35:e0:a9:0e:b5:82:5d:20:fc:aa:15:d6:54:
3d:bd:4e:ea:df:1a:40:ea:8c:f1:03:b4:fd:56:7f:
ce:ab:9c:9d:9c:99:80:0f:ab:6e:c1:fc:41:07:5d:
71:25:4a:12:3d:85:86:48:36:43:b6:66:ee:6c:e6:
04:53:60:59:34:2f:2f:3f:7a:99:40:e5:77:02:ba:
9a:85:e7:cb:b3:f5:69:b8:38:1c:e7:25:45:6a:bf:
70:02:71:ed:7e:bf:b1:5a:1f:f5:70:f0:4f:15:1e:
e3:48:83:85:28:ce:59:1e:88:ee:d9:a9:20:91:b7:
d1:d8:56:b6:a9:80:90:d3:a3:b9:ed:f7:1f:e3:d8:
51:3f:9f:46:7b:e2:38:e2:55:c3:f1:ad:12:c4:07:
7b:0c:a3:2c:22:22:84:d6:97:d0:9b:fe:a9:0f:62:
1f:38:11:9a:f5:42:d1:f1:0d:2b:a9:6c:14:f4:ff:
b8:da:0a:45:f1:35:f5:40:f1:b3:25:6a:35:79:24:
64:3f:4b:0a:a5:17:0f:0f:d9:66:e6:c3:1a:de:f2:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:64:EB:6A:72:48:0A:E1:DD:BC:92:BA:3B:F3:2E:3E:5F:7A:91
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:e0:9e:24:3f:22:2b:19:0e:88:ca:c6:09:8a:bc:ad:af:
bb:db:93:de:a9:07:fc:97:30:d6:d5:fc:9e:4b:e7:a5:4f:bf:
97:0b:e6:1c:21:cd:4c:28:28:75:df:da:81:3e:a1:4a:a4:b3:
6b:6b:1c:3b:6a:a1:48:c6:cc:40:ce:34:5b:80:9c:37:6f:40:
95:1a:06:bf:a5:53:c6:94:80:84:64:1e:bc:fb:57:cd:bc:cf:
55:78:b0:34:c7:ce:0b:24:06:19:2a:7f:98:75:ed:aa:d9:2a:
56:c2:5d:66:82:f6:de:a9:00:72:9c:62:ab:62:be:a6:6e:ea:
55:0d:7c:60:2c:c9:71:8a:07:8c:7c:75:ca:7c:06:7e:f3:b7:
09:8e:bb:1c:d0:b8:22:1a:b6:2d:17:4b:35:18:a7:3b:f8:cb:
87:90:38:17:c7:38:d9:0c:15:6f:23:40:7f:4f:6e:cd:2e:12:
d5:37:e4:38:4b:5f:73:17:54:97:49:80:15:13:47:b1:ea:63:
2f:67:2a:82:b1:94:e1:6f:6a:5f:84:4b:04:74:ea:89:a4:e5:
3f:5a:ce:3a:92:44:69:66:eb:51:0b:d3:75:25:f6:96:c5:95:
78:ef:07:e1:06:51:49:08:23:13:62:b2:7a:e2:ec:cc:5f:c0:
46:3a:e4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmoWKEJ1zNh8v9xy7Y+pvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjQxMTIyMTYwMDMzWhcNMjQxMTIzMTYwMDMzWjAzMTEwLwYDVQQD
EygxYzMxNjRlYjZhNzI0ODBhZTFkZGJjOTJiYTNiZjMyZTNlNWY3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWmYGrE443ymhx6AA1P7OJyHGFrt
COaeW2hem/JRpABI1QUoZD08HBEjUtElPzXgqQ61gl0g/KoV1lQ9vU7q3xpA6ozx
A7T9Vn/Oq5ydnJmAD6tuwfxBB11xJUoSPYWGSDZDtmbubOYEU2BZNC8vP3qZQOV3
ArqahefLs/VpuDgc5yVFar9wAnHtfr+xWh/1cPBPFR7jSIOFKM5ZHoju2akgkbfR
2Fa2qYCQ06O57fcf49hRP59Ge+I44lXD8a0SxAd7DKMsIiKE1pfQm/6pD2IfOBGa
9ULR8Q0rqWwU9P+42gpF8TX1QPGzJWo1eSRkP0sKpRcPD9lm5sMa3vLRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwxZOtqckgK4d28kro78y4+X3qRMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQorgniQ/
IisZDojKxgmKvK2vu9uT3qkH/Jcw1tX8nkvnpU+/lwvmHCHNTCgodd/agT6hSqSz
a2scO2qhSMbMQM40W4CcN29AlRoGv6VTxpSAhGQevPtXzbzPVXiwNMfOCyQGGSp/
mHXtqtkqVsJdZoL23qkAcpxiq2K+pm7qVQ18YCzJcYoHjHx1ynwGfvO3CY67HNC4
Ihq2LRdLNRinO/jLh5A4F8c42QwVbyNAf09uzS4S1TfkOEtfcxdUl0mAFRNHsepj
L2cqgrGU4W9qX4RLBHTqiaTlP1rOOpJEaWbrUQvTdSX2lsWVeO8H4QZRSQgjE2Ky
euLszF/ARjrkyQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:48 2024 by rpki-client on console-fra.rpki-client.org