Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: 5KlXnUzkKM/zObRPeoDa+3do6GoVnCh+DDaBdT6ExGg=
Subject key identifier: E7:DC:C5:49:D9:78:D1:B4:95:19:16:D2:38:2B:C1:27:C5:FD:D6:DF
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019350F464E3C2CCA913B20A2130FB3D009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 136D
Signing time: Thu 21 Nov 2024 23:00:13 +0000
Manifest this update: Thu 21 Nov 2024 23:00:13 +0000
Manifest next update: Fri 22 Nov 2024 23:00:13 +0000
Files and hashes: 1: 9xPqFnRbDR3ATFDsUDrScTG_PNw.roa (hash: hlTbSEYaEj+ZMVOrAjpXa9SXDsiZzJvIglTuzxzFXFE=)
2: NKuMQFxvmybG-m3mXwwf2p18RBk.roa (hash: IPwwMjnq0YSGvTNuN1mg/kYLIJC0yrIzjOjuXrtJCtg=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: d6SUlnutCkWMb+4fxgExRpM9YTYjwbgRWxbO+w5pxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:64:e3:c2:cc:a9:13:b2:0a:21:30:fb:3d:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Nov 21 23:00:13 2024 GMT
Not After : Nov 22 23:00:13 2024 GMT
Subject: CN=e7dcc549d978d1b4951916d2382bc127c5fdd6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:8c:56:06:74:ae:44:ba:3c:c5:97:12:6e:
f8:b8:66:a3:e4:43:66:8f:67:d0:5e:1e:8b:01:2c:
31:eb:52:56:3c:9c:22:4e:2e:f3:78:72:8d:63:73:
43:f5:7a:1d:37:91:b4:0c:0c:49:2b:af:f2:e5:46:
06:dd:a1:e8:7e:15:91:1a:61:9f:82:d3:b2:47:27:
da:2c:05:e4:54:75:b9:30:c6:7d:93:be:5b:85:c2:
84:e7:9d:34:84:1d:fe:1a:9c:e4:fc:8c:9b:ed:a4:
48:f0:b4:15:ec:13:f5:a7:75:b9:45:93:52:3d:14:
71:39:68:e0:35:9e:21:d1:97:d4:73:d2:74:2b:ea:
db:22:a8:43:7f:d5:72:92:ca:9e:10:bb:f6:05:f4:
d2:da:ea:dc:15:ef:d8:3d:98:05:6e:5d:72:f4:ac:
65:c4:a1:7b:d0:98:52:b1:35:89:d3:48:07:32:b0:
40:06:a0:52:15:e9:61:93:88:f5:70:ef:be:2f:e2:
ea:eb:fc:b2:1d:24:17:82:71:24:2c:df:41:fa:da:
b9:8f:aa:c6:91:ce:f8:1f:50:3f:2f:6b:c6:c3:ce:
ed:f4:1e:fd:64:87:6c:83:13:65:91:cf:f5:e9:67:
da:68:21:a5:37:7b:45:e1:f1:f4:cc:17:89:03:50:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:C5:49:D9:78:D1:B4:95:19:16:D2:38:2B:C1:27:C5:FD:D6:DF
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:91:79:43:4c:aa:a9:57:a3:7c:c8:37:3a:8f:a5:aa:30:a8:
39:dd:29:dc:46:5b:cf:50:b4:4f:9b:cf:16:8b:2b:38:a2:bc:
8a:eb:2e:b2:16:b3:e8:9f:c3:f9:ea:d0:cc:30:89:a9:6e:47:
18:e6:92:b0:45:87:43:69:18:2b:07:01:f0:eb:4c:f6:56:9a:
c8:b9:b0:9c:ad:2f:1e:f2:7a:6c:4e:a4:58:cd:fb:5f:ab:48:
f7:f0:33:b3:fa:2c:23:42:59:c1:52:50:da:0c:28:20:f5:97:
ce:a0:1a:61:ad:de:be:a2:1c:dc:4a:0c:11:d9:62:3b:35:24:
6a:7c:ea:b7:d0:e7:be:01:23:b2:a3:07:ad:33:f9:df:10:a5:
59:85:51:2d:d0:95:97:0e:d7:f7:24:58:af:71:d5:7d:16:0c:
cf:44:0a:b5:90:b2:d7:e8:a8:61:5e:66:ac:8e:e7:d3:7c:2a:
f7:e0:fb:94:1f:3c:9c:c4:44:33:7f:92:88:22:f1:88:03:04:
3d:e4:30:d1:e5:72:4c:6a:96:22:ed:32:f3:b9:99:8a:22:a0:
02:79:2e:a5:b9:a0:77:4d:bb:f3:0c:37:08:85:aa:b6:79:d5:
dc:51:3a:0a:b2:9d:a2:2e:8b:dc:95:8c:51:a2:10:ae:5e:40:
8e:5c:b1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQ9GTjwsypE7IKITD7PQCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjQxMTIxMjMwMDEzWhcNMjQxMTIyMjMwMDEzWjAzMTEwLwYDVQQD
EyhlN2RjYzU0OWQ5NzhkMWI0OTUxOTE2ZDIzODJiYzEyN2M1ZmRkNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuMVgZ0rkS6PMWXEm74uGaj5ENm
j2fQXh6LASwx61JWPJwiTi7zeHKNY3ND9XodN5G0DAxJK6/y5UYG3aHofhWRGmGf
gtOyRyfaLAXkVHW5MMZ9k75bhcKE5500hB3+Gpzk/Iyb7aRI8LQV7BP1p3W5RZNS
PRRxOWjgNZ4h0ZfUc9J0K+rbIqhDf9VyksqeELv2BfTS2urcFe/YPZgFbl1y9Kxl
xKF70JhSsTWJ00gHMrBABqBSFelhk4j1cO++L+Lq6/yyHSQXgnEkLN9B+tq5j6rG
kc74H1A/L2vGw87t9B79ZIdsgxNlkc/16WfaaCGlN3tF4fH0zBeJA1DaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfcxUnZeNG0lRkW0jgrwSfF/dbfMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpF5Q0yq
qVejfMg3Oo+lqjCoOd0p3EZbz1C0T5vPFosrOKK8iusushaz6J/D+erQzDCJqW5H
GOaSsEWHQ2kYKwcB8OtM9laayLmwnK0vHvJ6bE6kWM37X6tI9/Azs/osI0JZwVJQ
2gwoIPWXzqAaYa3evqIc3EoMEdliOzUkanzqt9DnvgEjsqMHrTP53xClWYVRLdCV
lw7X9yRYr3HVfRYMz0QKtZCy1+ioYV5mrI7n03wq9+D7lB88nMREM3+SiCLxiAME
PeQw0eVyTGqWIu0y87mZiiKgAnkupbmgd0278ww3CIWqtnnV3FE6CrKdoi6L3JWM
UaIQrl5AjlyxVQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:40 2024 by rpki-client on console-ams.rpki-client.org