Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: 4mNnNyOUjRHKf2QnRF/AOzJjTJa2mTNV1lEvk91KBQI=
Subject key identifier: EB:44:15:77:2B:DE:78:18:9B:36:AE:72:0E:6F:28:CA:BC:9E:BF:EC
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 01935688E276FDB9561A6679BD9EC194C65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 035D
Signing time: Sat 23 Nov 2024 01:00:31 +0000
Manifest this update: Sat 23 Nov 2024 01:00:31 +0000
Manifest next update: Sun 24 Nov 2024 01:00:31 +0000
Files and hashes: 1: d6A8CkwUqu5eQDRWZPq4Vch-5Io.roa (hash: p6aY4FcBl6kTsTHE3bTFxT5VKyuMkqBdvFDpiym/MPE=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: jiVyC5tpMkKxWcC6+2B61RTbDLEMxg6a+xkfL9v6pZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:e2:76:fd:b9:56:1a:66:79:bd:9e:c1:94:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Nov 23 01:00:31 2024 GMT
Not After : Nov 24 01:00:31 2024 GMT
Subject: CN=eb4415772bde78189b36ae720e6f28cabc9ebfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:58:75:ea:24:84:c0:d4:fd:cf:ad:e4:08:
fa:b3:af:8f:fa:6d:06:89:3e:5e:54:79:96:13:ed:
e2:4b:db:71:ba:d7:7e:ab:01:c2:e4:91:7d:d9:ec:
6e:a7:a1:42:88:42:c7:f3:be:53:ac:66:92:b0:96:
83:ac:df:61:eb:43:72:52:a3:da:de:03:c2:96:ad:
6a:14:7a:be:27:aa:56:2c:9e:f5:8c:d4:db:40:46:
9c:40:6e:eb:19:05:a6:95:e4:38:5c:ed:b4:a0:a7:
25:31:a0:5b:75:1e:12:24:f9:27:ba:98:68:31:55:
76:a6:73:e9:7c:08:2d:7b:8b:33:6c:94:52:60:0b:
d0:db:7c:40:c4:6e:dc:1f:6f:62:44:17:ce:a2:da:
6a:d5:06:b2:32:8d:d7:e6:43:af:f1:cc:14:97:b7:
c1:0c:fd:f9:19:ed:f0:00:0e:7a:e1:cb:f7:4e:80:
2f:a6:38:0b:7c:08:3e:0f:1f:fd:19:4c:81:05:20:
ed:35:50:37:cc:24:90:31:ef:fd:1c:3c:5c:e5:18:
06:6d:74:5c:d0:3d:6d:55:78:a9:d0:43:1e:11:1e:
8a:15:1e:fa:19:ba:be:35:67:d4:c1:e7:f2:6a:14:
94:93:e7:8b:7e:b4:63:0f:07:0f:35:70:42:2c:50:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:15:77:2B:DE:78:18:9B:36:AE:72:0E:6F:28:CA:BC:9E:BF:EC
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:c8:7b:09:ea:36:4e:d6:bf:f1:96:31:96:64:76:fa:e8:
7b:6c:d6:a7:ec:56:20:49:56:d0:29:ac:bf:a6:ba:e0:73:96:
96:77:95:df:cc:3a:7a:cc:c9:14:a4:1c:2b:61:66:71:95:8f:
70:6a:27:d2:7b:a1:3d:9f:c9:f7:8d:42:7d:12:e5:00:e6:e3:
ba:71:9a:83:7b:1b:8d:2e:7c:8b:81:10:1f:e1:3a:db:6a:a9:
f9:3e:23:13:be:94:78:cf:1b:33:f2:fb:0a:8c:00:95:a7:ed:
f0:02:a7:e5:a5:b8:8e:3f:1d:24:53:cd:1e:a0:a6:e5:d2:0e:
a4:2a:90:47:ff:c1:cd:1d:10:06:de:5f:c0:61:0a:ac:06:43:
c4:12:1d:bb:3d:2b:21:c7:15:b0:c1:c1:f5:1f:33:f1:d3:9e:
5f:ae:9e:eb:32:10:05:43:87:61:eb:e1:d5:d8:36:7e:2d:88:
28:cf:48:4e:ad:b2:d9:9e:b7:70:cb:8e:cd:0b:89:12:17:99:
9f:13:82:51:04:4e:38:8a:c7:6a:ce:44:60:ea:93:82:ef:d4:
58:c1:81:4b:06:09:d8:3b:35:64:bc:c0:7f:02:b7:ad:e8:6e:
b9:9c:31:8b:39:ff:f3:16:a3:aa:dd:fc:09:9e:ed:fb:b2:89:
9b:10:af:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOJ2/blWGmZ5vZ7BlMZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjA4YThiODViY2I4MDdjYWQ2NDEzODU0MzI2M2FjYjIw
NDQ0OGIwHhcNMjQxMTIzMDEwMDMxWhcNMjQxMTI0MDEwMDMxWjAzMTEwLwYDVQQD
EyhlYjQ0MTU3NzJiZGU3ODE4OWIzNmFlNzIwZTZmMjhjYWJjOWViZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq45YdeokhMDU/c+t5Aj6s6+P+m0G
iT5eVHmWE+3iS9txutd+qwHC5JF92exup6FCiELH875TrGaSsJaDrN9h60NyUqPa
3gPClq1qFHq+J6pWLJ71jNTbQEacQG7rGQWmleQ4XO20oKclMaBbdR4SJPknupho
MVV2pnPpfAgte4szbJRSYAvQ23xAxG7cH29iRBfOotpq1QayMo3X5kOv8cwUl7fB
DP35Ge3wAA564cv3ToAvpjgLfAg+Dx/9GUyBBSDtNVA3zCSQMe/9HDxc5RgGbXRc
0D1tVXip0EMeER6KFR76Gbq+NWfUwefyahSUk+eLfrRjDwcPNXBCLFDuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtEFXcr3ngYmzaucg5vKMq8nr/sMB8GA1UdIwQY
MBaAFMcgiouFvLgHytZBOFQyY6yyBESLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgt
MGY2YzQxMmNmM2RmLzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgtMGY2YzQxMmNmM2Rm
LzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6vIewnq
Nk7Wv/GWMZZkdvroe2zWp+xWIElW0Cmsv6a64HOWlneV38w6eszJFKQcK2FmcZWP
cGon0nuhPZ/J941CfRLlAObjunGag3sbjS58i4EQH+E622qp+T4jE76UeM8bM/L7
CowAlaft8AKn5aW4jj8dJFPNHqCm5dIOpCqQR//BzR0QBt5fwGEKrAZDxBIduz0r
IccVsMHB9R8z8dOeX66e6zIQBUOHYevh1dg2fi2IKM9ITq2y2Z63cMuOzQuJEheZ
nxOCUQROOIrHas5EYOqTgu/UWMGBSwYJ2Ds1ZLzAfwK3rehuuZwxizn/8xajqt38
CZ7t+7KJmxCvBA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:56 2024 by rpki-client on console-fra.rpki-client.org