Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: hLmdUod9WFQw/kPcpwtDuJoRme/vUobaLmL7s3BMLSM=
Subject key identifier: 86:CD:EF:72:75:4B:1E:14:9A:34:A6:4D:7F:4E:DF:F2:46:D0:F3:C9
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 01935689F7F0BE1E84200B4E7E4B7641C6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0984
Signing time: Sat 23 Nov 2024 01:01:42 +0000
Manifest this update: Sat 23 Nov 2024 01:01:42 +0000
Manifest next update: Sun 24 Nov 2024 01:01:42 +0000
Files and hashes: 1: NlKWDvWV6A8kmXOVjzvKEoIndxY.roa (hash: h+UhxW9S4nTfdgzeYFnXO2ayiFyXxgExy2Nk5oisGQY=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: sWIemFBWLssUsUr+tG/UuHqkpeBhxeRNxPGzLfZ9wqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:f7:f0:be:1e:84:20:0b:4e:7e:4b:76:41:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Nov 23 01:01:42 2024 GMT
Not After : Nov 24 01:01:42 2024 GMT
Subject: CN=86cdef72754b1e149a34a64d7f4edff246d0f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:0c:f4:0f:2c:27:49:da:50:ff:77:c7:17:
22:dd:3e:a0:90:ed:e7:84:32:76:1c:bd:04:8b:8c:
13:36:03:40:b0:86:87:ce:88:07:f5:4a:04:b3:5d:
0c:92:50:22:76:20:af:d7:23:da:1a:56:db:cd:63:
61:70:a8:18:3f:a2:fe:b7:7e:d0:25:b4:d8:ce:1c:
ec:14:86:7a:f1:37:b3:01:fd:fa:bb:d2:1e:eb:5c:
9a:a1:99:a4:f8:ec:16:de:0b:4f:1a:4f:25:10:3f:
e8:97:94:08:b5:d3:8f:87:b5:b5:fa:01:07:5a:62:
94:c8:02:6d:ff:a0:09:88:e4:ea:2c:7f:80:bb:8e:
a8:6b:6f:07:3c:c2:75:a6:71:19:cd:73:59:a6:fd:
32:bc:37:84:8e:08:c4:54:e1:10:2a:22:d1:b9:0a:
91:0a:09:6d:f4:c5:73:c9:1d:0a:47:10:f8:48:82:
fc:2b:74:83:a0:2e:a2:1d:af:19:41:2f:7a:3d:f6:
ef:43:3a:85:e1:25:22:43:c7:b0:13:1e:7a:b2:63:
d3:89:e9:33:69:b0:0d:cf:13:86:ef:3e:67:76:2e:
f4:51:fb:c8:31:26:cf:03:36:4a:20:49:6f:f7:11:
a2:60:fc:bf:fc:20:a3:79:4a:33:94:29:83:35:93:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:EF:72:75:4B:1E:14:9A:34:A6:4D:7F:4E:DF:F2:46:D0:F3:C9
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:26:dd:a9:ed:98:ca:29:46:e7:e4:e7:a0:76:e9:cd:89:23:
d0:ab:b1:03:83:c6:7e:8a:5a:2b:6f:aa:49:30:70:d8:a2:a9:
15:ed:55:cf:cb:92:f6:7b:78:4a:eb:36:d9:af:84:db:b0:af:
32:f3:73:b3:d5:25:c1:71:b2:7c:c4:9b:02:c5:cf:f5:3f:af:
5e:75:0d:7c:f3:57:1a:c8:23:35:0e:8f:ef:df:61:aa:12:51:
93:b2:a1:e0:e7:fa:d9:83:c7:d3:e6:42:c4:0e:37:7c:2a:fc:
6d:18:9e:f2:eb:fc:fd:92:38:bc:5c:30:b9:9e:7b:c2:f0:00:
a1:2c:72:c8:b8:ca:36:fe:6b:67:c0:1a:65:ac:c1:d8:30:fb:
89:03:b1:04:3a:98:c5:04:97:b6:e0:64:ed:1d:0e:20:82:93:
03:7f:cf:49:c9:99:c9:5d:a8:24:49:45:35:95:b0:e0:70:1b:
11:bf:5d:05:9f:36:69:ba:3e:7b:5a:27:a4:5e:39:6a:5a:85:
6a:c0:e8:84:9b:33:41:d6:57:13:76:89:d2:e0:f2:2d:09:d8:
46:73:34:f5:43:d5:b7:f9:25:87:7a:6f:7c:46:ea:f7:b2:0e:
c5:dd:e8:e6:1d:4c:92:ac:5c:e9:4d:65:68:cb:b2:48:5f:09:
d3:ad:c4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiffwvh6EIAtOfkt2QcalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzA1YWZhMGRjOWE1ZjhmNjE4YzNlZDJlZWM2NzJlYzM4
ZjZmZWYwHhcNMjQxMTIzMDEwMTQyWhcNMjQxMTI0MDEwMTQyWjAzMTEwLwYDVQQD
Eyg4NmNkZWY3Mjc1NGIxZTE0OWEzNGE2NGQ3ZjRlZGZmMjQ2ZDBmM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1wM9A8sJ0naUP93xxci3T6gkO3n
hDJ2HL0Ei4wTNgNAsIaHzogH9UoEs10MklAidiCv1yPaGlbbzWNhcKgYP6L+t37Q
JbTYzhzsFIZ68TezAf36u9Ie61yaoZmk+OwW3gtPGk8lED/ol5QItdOPh7W1+gEH
WmKUyAJt/6AJiOTqLH+Au46oa28HPMJ1pnEZzXNZpv0yvDeEjgjEVOEQKiLRuQqR
Cglt9MVzyR0KRxD4SIL8K3SDoC6iHa8ZQS96PfbvQzqF4SUiQ8ewEx56smPTiekz
abANzxOG7z5ndi70UfvIMSbPAzZKIElv9xGiYPy//CCjeUozlCmDNZNBTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbN73J1Sx4UmjSmTX9O3/JG0PPJMB8GA1UdIwQY
MBaAFGPAWvoNyaX49hjD7S7sZy7Dj2/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYt
MjNlMDk2NTJiM2Q4LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYtMjNlMDk2NTJiM2Q4
LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSbdqe2Y
yilG5+TnoHbpzYkj0KuxA4PGfopaK2+qSTBw2KKpFe1Vz8uS9nt4Sus22a+E27Cv
MvNzs9UlwXGyfMSbAsXP9T+vXnUNfPNXGsgjNQ6P799hqhJRk7Kh4Of62YPH0+ZC
xA43fCr8bRie8uv8/ZI4vFwwuZ57wvAAoSxyyLjKNv5rZ8AaZazB2DD7iQOxBDqY
xQSXtuBk7R0OIIKTA3/PScmZyV2oJElFNZWw4HAbEb9dBZ82abo+e1onpF45alqF
asDohJszQdZXE3aJ0uDyLQnYRnM09UPVt/klh3pvfEbq97IOxd3o5h1Mkqxc6U1l
aMuySF8J063EiA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:24 2024 by rpki-client on console-ams.rpki-client.org