Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: GGRU6Cz6BqdmN4TPPkZYMzpEgdIrHRD7mqvp5pRg20o=
Subject key identifier: 83:DF:2A:8F:E3:53:C1:0F:34:F9:06:44:4A:BD:82:8C:53:3F:E1:30
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0193579BDB28C695D1A121BC1E6068B35938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 06:00:52 +0000
Manifest this update: Sat 23 Nov 2024 06:00:52 +0000
Manifest next update: Sun 24 Nov 2024 06:00:52 +0000
Files and hashes: 1: 1tJ6tx_OhaNeQcvWEkIQFm9ybbw.roa (hash: E7rCT+8Zdc0u0F9rqJQY+NedDT+3a4FxS56pBuDRAgU=)
2: Ajvlgk29yZFTcQvAbsIrCSzw6Bs.roa (hash: 4L/k51BNzKihGUV7xUoInBQ548iErhf2q88rgV12xSo=)
3: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: vXbAyStv8FaJlJmpj+W0VE7UJ2ZJ8IG6x3B/jJZxlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:db:28:c6:95:d1:a1:21:bc:1e:60:68:b3:59:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Nov 23 06:00:52 2024 GMT
Not After : Nov 24 06:00:52 2024 GMT
Subject: CN=83df2a8fe353c10f34f906444abd828c533fe130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:58:2c:8b:ab:9f:8b:d5:b1:1b:9f:0a:b9:
ab:67:08:f1:f1:1f:f7:ff:d7:71:b9:a4:87:d1:b7:
6c:fe:01:0d:2c:32:b5:09:31:c5:2f:51:ff:9e:c0:
2a:70:06:59:ca:b8:ef:12:c3:cc:de:1f:95:49:2d:
5b:f1:80:c5:d7:79:99:6f:7b:ee:41:a7:a2:9a:a5:
92:a5:9d:9f:09:53:a1:c4:bf:02:aa:35:11:90:75:
c0:12:ae:fa:60:3c:0d:d3:b5:48:35:e9:23:bc:7e:
66:d3:87:69:76:1a:38:65:21:c4:e9:98:68:0a:00:
df:7d:2f:f6:7b:99:33:5a:fa:5b:cd:2f:db:61:6c:
1a:cb:18:2b:17:90:23:f8:9f:a3:c7:a8:a8:d7:55:
2d:a0:c1:e1:bb:53:42:3b:95:33:79:e4:51:54:52:
0e:58:34:fb:24:91:08:c2:40:29:6a:a9:7d:f2:60:
d9:52:61:8d:cb:b1:71:26:e8:7f:c0:4b:18:fe:d6:
59:60:84:16:0c:df:a1:50:28:2e:4d:da:eb:22:09:
e4:92:96:56:b9:b9:5e:c0:b2:be:2e:41:59:fc:06:
c7:b3:4c:9c:88:5a:16:7a:78:d5:52:c4:55:8c:f7:
63:00:45:a3:74:ec:86:1b:c3:cb:2a:a0:c9:e1:40:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:2A:8F:E3:53:C1:0F:34:F9:06:44:4A:BD:82:8C:53:3F:E1:30
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:41:b8:ae:b1:bf:32:6f:0f:5f:b1:c1:7c:67:25:7d:d3:
d1:1c:47:2a:66:34:fb:ba:08:bd:3c:71:54:fb:e2:c7:c7:31:
69:51:3c:7e:71:2e:9c:42:fb:7d:7d:94:a3:58:c9:a5:b7:28:
1e:3c:e8:37:77:26:d6:89:b1:7e:29:2b:8b:25:39:53:5b:6e:
aa:27:51:80:37:db:b2:cc:a4:21:d1:53:b6:16:1f:b7:8c:2b:
dc:b7:4c:96:df:16:eb:8e:c5:26:4b:b0:f0:f7:2d:8c:6c:c6:
40:ab:c2:c5:f3:fb:43:26:82:ed:c5:50:f3:d3:f3:b3:2f:4d:
c6:cd:84:ce:ee:9a:fd:9a:fa:cb:cd:ae:84:0a:59:a1:f2:65:
04:69:db:0c:5e:28:23:30:65:82:ad:73:a6:e3:d2:6a:65:be:
38:7f:49:dd:f8:00:78:ad:6a:11:d6:2a:b2:33:c5:07:14:78:
83:6c:4e:37:b5:bd:25:cd:85:66:20:84:63:fa:c2:b5:10:45:
7b:06:c7:d7:f4:04:11:e5:ac:d8:a9:b6:b4:56:ad:0b:9f:28:
25:be:89:6c:76:80:ea:f5:19:53:3f:c7:6f:d6:f5:50:01:41:
49:a5:e1:de:a8:4d:1b:79:ab:f3:d3:c6:08:69:02:d2:f7:e4:
41:7e:74:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm9soxpXRoSG8HmBos1k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx
ODk0ZmQwHhcNMjQxMTIzMDYwMDUyWhcNMjQxMTI0MDYwMDUyWjAzMTEwLwYDVQQD
Eyg4M2RmMmE4ZmUzNTNjMTBmMzRmOTA2NDQ0YWJkODI4YzUzM2ZlMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrtYLIurn4vVsRufCrmrZwjx8R/3
/9dxuaSH0bds/gENLDK1CTHFL1H/nsAqcAZZyrjvEsPM3h+VSS1b8YDF13mZb3vu
QaeimqWSpZ2fCVOhxL8CqjURkHXAEq76YDwN07VINekjvH5m04dpdho4ZSHE6Zho
CgDffS/2e5kzWvpbzS/bYWwayxgrF5Aj+J+jx6io11UtoMHhu1NCO5UzeeRRVFIO
WDT7JJEIwkApaql98mDZUmGNy7FxJuh/wEsY/tZZYIQWDN+hUCguTdrrIgnkkpZW
ublewLK+LkFZ/AbHs0yciFoWenjVUsRVjPdjAEWjdOyGG8PLKqDJ4UAwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPfKo/jU8EPNPkGREq9goxTP+EwMB8GA1UdIwQY
MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt
MGJjZTgwZDRkZmY5LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5
LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD5BuK6x
vzJvD1+xwXxnJX3T0RxHKmY0+7oIvTxxVPvix8cxaVE8fnEunEL7fX2Uo1jJpbco
HjzoN3cm1omxfikriyU5U1tuqidRgDfbssykIdFTthYft4wr3LdMlt8W647FJkuw
8PctjGzGQKvCxfP7QyaC7cVQ89Pzsy9Nxs2Ezu6a/Zr6y82uhApZofJlBGnbDF4o
IzBlgq1zpuPSamW+OH9J3fgAeK1qEdYqsjPFBxR4g2xON7W9Jc2FZiCEY/rCtRBF
ewbH1/QEEeWs2Km2tFatC58oJb6JbHaA6vUZUz/Hb9b1UAFBSaXh3qhNG3mr89PG
CGkC0vfkQX50JA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:25 2024 by rpki-client on console-fra.rpki-client.org