Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: s+JEmdCKR6z4RZ6PoiSRIEj71x7uNkQxL+CHuU/VSAY=
Subject key identifier: 21:6F:3B:11:6A:A6:DD:B9:9D:F3:00:96:31:C5:61:96:6D:1C:FB:9E
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019354D15E2CC51A00BEEE6DA9F94368D903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0276
Signing time: Fri 22 Nov 2024 17:00:27 +0000
Manifest this update: Fri 22 Nov 2024 17:00:27 +0000
Manifest next update: Sat 23 Nov 2024 17:00:27 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: 3eYy+9wZlA3ot/fMl4IDqL19xKwEWEe4KGXk/R2LHDI=)
2: pIAnkRcvLBdP_3Py1MjvxO1fhXI.roa (hash: h6SbBs0UezKV/16WT7LJpKLf5VbvuT81eL6ICgcWXpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d1:5e:2c:c5:1a:00:be:ee:6d:a9:f9:43:68:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Nov 22 17:00:27 2024 GMT
Not After : Nov 23 17:00:27 2024 GMT
Subject: CN=216f3b116aa6ddb99df3009631c561966d1cfb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:67:ac:a3:5f:f6:69:8c:8a:93:e0:94:2f:
90:11:7d:b4:ea:e0:61:85:75:b6:20:d8:67:18:26:
85:91:ff:ac:be:b3:cd:32:67:f2:47:db:ce:f1:56:
c6:8b:7c:ad:0a:34:35:bf:ed:4a:2d:61:81:d1:87:
48:7d:80:ba:d1:e6:e0:c7:a1:c6:86:06:e7:34:3a:
82:a9:64:5b:08:f3:c7:85:52:38:48:4b:4a:a2:c4:
d5:ab:4a:7e:15:09:c7:72:da:20:92:5d:56:a2:60:
61:9e:ed:54:e5:df:c0:b1:7e:3d:bf:53:c9:6e:64:
96:6a:e9:61:37:82:4f:aa:8a:b1:08:6b:cd:2d:09:
8f:e1:42:0b:3b:92:ff:f6:67:c4:ac:20:49:a3:3b:
da:e8:ca:67:1e:28:c8:a3:07:97:ac:3f:18:c6:cb:
c9:ac:1f:f1:20:12:85:6f:92:7c:e3:d1:3c:44:a6:
8a:42:37:d8:61:cd:70:45:12:9d:9c:96:6f:3f:a1:
08:6f:1c:4b:0b:a5:be:11:74:b3:7d:a1:40:b7:a2:
5c:f3:8f:f2:f2:bd:74:27:06:6f:4b:0b:43:0f:25:
04:b6:e5:cc:14:ba:a9:1c:73:5f:c2:83:84:84:ff:
94:74:dd:fb:d8:a1:24:b4:32:b4:4e:93:21:60:f4:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:3B:11:6A:A6:DD:B9:9D:F3:00:96:31:C5:61:96:6D:1C:FB:9E
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8c:13:fa:6e:b8:b8:fb:08:7c:5a:0a:d6:04:b1:42:be:dd:
cd:8a:0e:07:59:18:92:e6:8b:51:f4:cf:68:89:7b:36:41:67:
ff:57:91:d4:0f:97:06:c8:3e:85:9d:42:ee:ec:98:49:58:77:
d7:4a:d5:9e:18:da:c4:fb:af:11:ba:51:6c:b8:48:f3:80:1f:
ff:43:47:e0:c9:8d:f3:50:15:11:09:b2:dd:e8:a1:7c:d7:b8:
c4:97:28:ab:78:8b:53:d1:9b:ee:43:dd:76:8f:33:92:b0:18:
34:83:96:d8:c4:2a:71:10:de:cf:69:a2:33:39:6f:8e:0e:1c:
50:25:37:27:dc:2e:64:23:ea:c2:43:47:5c:c6:97:5b:3f:ad:
75:b0:59:51:1b:53:d6:0f:30:eb:e2:1b:9d:60:be:a8:89:27:
7a:49:93:f7:4f:0b:92:d3:dd:df:b8:4c:65:83:41:02:29:6d:
2f:cc:6e:79:ed:88:a1:5c:5e:37:42:3a:ae:8b:0b:5a:7d:9e:
18:5c:44:38:c6:40:e2:c8:59:af:a4:a0:da:70:f3:ce:7f:bd:
60:c5:5f:1d:86:4d:95:50:9a:7f:21:c7:fe:66:8b:d0:a9:6e:
28:b4:23:07:82:b9:b8:08:21:c9:00:86:8a:a5:ea:9b:91:4c:
c6:f7:3a:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNU0V4sxRoAvu5tqflDaNkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjQxMTIyMTcwMDI3WhcNMjQxMTIzMTcwMDI3WjAzMTEwLwYDVQQD
EygyMTZmM2IxMTZhYTZkZGI5OWRmMzAwOTYzMWM1NjE5NjZkMWNmYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDpnrKNf9mmMipPglC+QEX206uBh
hXW2INhnGCaFkf+svrPNMmfyR9vO8VbGi3ytCjQ1v+1KLWGB0YdIfYC60ebgx6HG
hgbnNDqCqWRbCPPHhVI4SEtKosTVq0p+FQnHctogkl1WomBhnu1U5d/AsX49v1PJ
bmSWaulhN4JPqoqxCGvNLQmP4UILO5L/9mfErCBJozva6MpnHijIoweXrD8YxsvJ
rB/xIBKFb5J849E8RKaKQjfYYc1wRRKdnJZvP6EIbxxLC6W+EXSzfaFAt6Jc84/y
8r10JwZvSwtDDyUEtuXMFLqpHHNfwoOEhP+UdN372KEktDK0TpMhYPQN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFvOxFqpt25nfMAljHFYZZtHPueMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIwT+m64
uPsIfFoK1gSxQr7dzYoOB1kYkuaLUfTPaIl7NkFn/1eR1A+XBsg+hZ1C7uyYSVh3
10rVnhjaxPuvEbpRbLhI84Af/0NH4MmN81AVEQmy3eihfNe4xJcoq3iLU9Gb7kPd
do8zkrAYNIOW2MQqcRDez2miMzlvjg4cUCU3J9wuZCPqwkNHXMaXWz+tdbBZURtT
1g8w6+IbnWC+qIknekmT908LktPd37hMZYNBAiltL8xuee2IoVxeN0I6rosLWn2e
GFxEOMZA4shZr6Sg2nDzzn+9YMVfHYZNlVCafyHH/maL0KluKLQjB4K5uAghyQCG
iqXqm5FMxvc6Ig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:10 2024 by rpki-client on console-fra.rpki-client.org