Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: 6S0HlCMbZIMDrZEELW9rDPBv6swxB2G4mz6lVwheD3Y=
Subject key identifier: 49:31:19:34:99:39:ED:37:EF:CB:A1:E7:BA:BA:EE:2D:7D:56:CC:4F
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 018F882413398FFF1E13B6FEC3775BE4A380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 117D
Signing time: Fri 17 May 2024 20:00:16 +0000
Manifest this update: Fri 17 May 2024 20:00:16 +0000
Manifest next update: Sat 18 May 2024 20:00:16 +0000
Files and hashes: 1: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: UtrnO43+EDSr/iTXhFYY41j6Kop2wKGFH0b5XtNDXBU=)
2: jHQWNU9OQrAE9I-I54MmgxOjh58.roa (hash: s0yztP4U3jLZ0oBvcoBdUGpARVwT0yvVlehkvJ26UiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:13:39:8f:ff:1e:13:b6:fe:c3:77:5b:e4:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: May 17 20:00:16 2024 GMT
Not After : May 18 20:00:16 2024 GMT
Subject: CN=493119349939ed37efcba1e7babaee2d7d56cc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:f2:30:1a:f0:11:a8:a5:5b:3e:ad:4d:44:
ea:35:7e:b6:ea:7a:24:4d:ae:94:9a:d5:5f:b7:7c:
ee:ec:be:46:fc:23:45:39:e1:8d:a1:4f:14:c8:a5:
15:56:bb:27:ee:62:ce:f0:7d:b7:f7:26:6a:d0:5b:
c1:ac:59:84:35:2f:bc:ed:78:11:c2:c3:ba:56:97:
ea:6f:a3:36:6f:1a:57:d2:6d:eb:82:06:32:68:5b:
41:23:39:28:1d:7e:5c:08:f2:8e:14:49:8f:da:c4:
d8:f1:c7:70:53:3e:f0:e0:b8:57:c6:a0:8a:06:a2:
6c:0c:66:e6:7a:ae:21:e1:4a:eb:c6:ab:08:41:a7:
cf:6f:6c:2d:0a:2b:c6:f3:72:27:f3:66:05:62:1d:
7e:18:e6:a4:a9:44:d6:9c:d8:3c:2c:55:cb:7e:a0:
ef:96:5b:fa:03:5e:77:79:09:8b:4a:c6:e6:f5:f6:
4e:0c:33:75:c8:d0:f3:12:e9:9d:f8:96:55:23:13:
57:5a:48:b7:8e:f3:0d:86:9f:76:a7:37:9a:8c:2e:
42:5c:3f:b3:fb:04:c3:b9:e5:eb:98:99:3d:e7:bb:
d6:ef:cc:c6:85:e1:f0:0a:3d:9c:73:a4:61:86:30:
dc:34:ba:3d:f2:ac:c0:2c:7a:98:88:99:c0:fd:29:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:19:34:99:39:ED:37:EF:CB:A1:E7:BA:BA:EE:2D:7D:56:CC:4F
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:32:e7:f1:98:f7:b5:aa:9a:fb:a0:48:03:13:91:8c:12:
1f:f7:4c:8a:6e:ab:c8:a3:42:4b:80:d1:fe:22:2a:3b:27:3b:
74:6a:5b:2a:36:49:3a:3d:0c:20:e0:9f:2d:15:30:ef:44:e7:
e7:b1:78:98:58:0d:80:bd:75:90:d9:6c:e5:80:bd:65:59:93:
0e:23:35:2e:91:4d:b5:1c:7c:24:2c:bb:c2:54:a3:5b:c6:15:
73:f1:44:81:29:60:15:46:61:f3:3b:46:47:e6:90:2f:26:ec:
5a:92:a6:04:78:db:e9:1b:18:54:f2:5b:62:5a:f9:b6:70:28:
a8:02:71:ea:69:15:ae:3a:1b:76:85:0a:0f:92:d1:af:e5:52:
f2:b1:c7:e8:b7:fc:5d:e4:fe:97:9d:52:65:8a:fe:db:ba:97:
5f:63:fb:04:09:b5:73:86:68:4e:b8:3d:bc:97:2c:0e:d9:01:
2d:de:ef:ae:52:7c:19:fe:65:6c:cf:c6:58:f0:d9:0b:16:4d:
92:6d:df:81:6c:22:fe:a9:c7:5f:35:fa:90:60:ec:c8:4b:38:
62:eb:ec:57:fc:15:cf:66:69:2f:ca:f4:8f:c3:07:75:12:20:
7c:9f:b7:d3:9e:79:42:11:7f:e2:34:38:1c:e3:b0:a1:e0:a6:
2b:40:e9:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJBM5j/8eE7b+w3db5KOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjQwNTE3MjAwMDE2WhcNMjQwNTE4MjAwMDE2WjAzMTEwLwYDVQQD
Eyg0OTMxMTkzNDk5MzllZDM3ZWZjYmExZTdiYWJhZWUyZDdkNTZjYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAXyMBrwEailWz6tTUTqNX626nok
Ta6UmtVft3zu7L5G/CNFOeGNoU8UyKUVVrsn7mLO8H239yZq0FvBrFmENS+87XgR
wsO6Vpfqb6M2bxpX0m3rggYyaFtBIzkoHX5cCPKOFEmP2sTY8cdwUz7w4LhXxqCK
BqJsDGbmeq4h4UrrxqsIQafPb2wtCivG83In82YFYh1+GOakqUTWnNg8LFXLfqDv
llv6A153eQmLSsbm9fZODDN1yNDzEumd+JZVIxNXWki3jvMNhp92pzeajC5CXD+z
+wTDueXrmJk957vW78zGheHwCj2cc6RhhjDcNLo98qzALHqYiJnA/SlkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkxGTSZOe0378uh57q67i19VsxPMB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1oy5/GY
97WqmvugSAMTkYwSH/dMim6ryKNCS4DR/iIqOyc7dGpbKjZJOj0MIOCfLRUw70Tn
57F4mFgNgL11kNls5YC9ZVmTDiM1LpFNtRx8JCy7wlSjW8YVc/FEgSlgFUZh8ztG
R+aQLybsWpKmBHjb6RsYVPJbYlr5tnAoqAJx6mkVrjobdoUKD5LRr+VS8rHH6Lf8
XeT+l51SZYr+27qXX2P7BAm1c4ZoTrg9vJcsDtkBLd7vrlJ8Gf5lbM/GWPDZCxZN
km3fgWwi/qnHXzX6kGDsyEs4YuvsV/wVz2ZpL8r0j8MHdRIgfJ+30555QhF/4jQ4
HOOwoeCmK0DpiA==
-----END CERTIFICATE-----
Generated at Fri May 17 21:00:39 2024 by rpki-client on console-fra.rpki-client.org