Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: A/TVL6hr80prhB0ZoQLRNEYqgLhblILZoz0oiCfmYbI=
Subject key identifier: B3:DF:44:48:B5:EF:B5:DE:DE:59:65:6C:28:51:C0:6F:82:37:EB:DC
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 018F86361E985C9C86BEEF654E93095B12C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 11:00:44 +0000
Manifest this update: Fri 17 May 2024 11:00:44 +0000
Manifest next update: Sat 18 May 2024 11:00:44 +0000
Files and hashes: 1: 12k5gDGcRdoVeSBX7hVE29WDJq4.roa (hash: St9YGSl/yh4JuBIqSPstvbIC7HflUEG9qt1itliknSo=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: G6I0jUBJlpg/QltZOUlgJaJff9Qg02nFlp3f5wlwGms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:36:1e:98:5c:9c:86:be:ef:65:4e:93:09:5b:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: May 17 11:00:44 2024 GMT
Not After : May 18 11:00:44 2024 GMT
Subject: CN=b3df4448b5efb5dede59656c2851c06f8237ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:ba:17:5b:4b:54:7d:50:74:97:0b:8c:26:
e5:e3:12:09:41:99:9d:6a:cd:eb:ac:f5:fe:b1:35:
ca:44:25:4c:4c:28:92:f1:fb:16:69:f3:9f:b4:04:
95:e9:a2:d0:e0:80:13:60:a6:c1:38:e4:ef:dc:bd:
90:ba:6e:e0:48:25:ce:09:97:b3:60:24:9d:ce:da:
29:df:7f:e3:ac:df:bf:3c:b1:cf:46:c8:a6:56:2f:
27:46:5b:5e:dd:73:e6:43:e7:d0:34:e6:6c:73:37:
d6:4f:bf:95:f3:66:90:99:33:ad:ad:0f:50:43:42:
9f:d3:bc:81:e5:05:7b:53:66:e9:d8:dd:73:b0:e3:
62:46:87:10:c1:65:3e:c4:f9:9f:57:3c:a8:96:c6:
ec:25:38:9b:a2:0d:a3:8b:65:c7:8e:7d:95:99:92:
4c:6c:f2:70:37:09:d3:45:e1:f1:d8:b9:58:ff:6e:
6e:be:af:31:39:24:a6:1b:ea:00:90:8c:c0:98:99:
71:fb:4d:c7:ee:32:a1:88:b5:6d:16:bb:d6:84:d5:
43:43:b5:55:e2:5a:2c:56:a9:97:a1:5f:f2:a9:31:
98:7f:2c:59:da:69:d8:45:d4:4a:e7:02:27:dc:1f:
88:00:51:00:6d:59:5f:7d:db:4d:4b:a6:c9:9c:36:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:44:48:B5:EF:B5:DE:DE:59:65:6C:28:51:C0:6F:82:37:EB:DC
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8d:5c:30:3f:bc:6d:65:24:f9:47:10:3f:bc:84:cb:de:e6:
7b:85:91:86:52:b3:e5:ee:7b:4b:7d:60:a3:d3:ce:03:f5:f7:
f5:9c:b0:04:a1:5c:7a:46:3d:23:9d:64:a6:b9:a7:16:ae:a0:
37:50:bb:6a:6d:94:af:02:34:0e:ff:a9:0f:72:3c:42:a1:cd:
80:43:c0:80:ce:84:29:2f:0c:64:28:f8:11:75:77:a5:39:30:
4f:67:94:7d:e6:2f:bc:16:8f:9a:0a:08:2c:4a:ee:70:a4:a5:
fa:f5:b6:ee:64:1e:0c:ee:76:d0:e6:64:40:7e:e8:7a:0c:d1:
04:08:4d:15:91:d3:8a:e8:c8:ed:0a:37:43:f4:96:51:84:a2:
4d:00:2c:97:1d:56:75:59:03:39:c7:e3:fc:14:ce:6e:00:32:
de:e0:d9:7d:7e:98:ab:ee:0a:48:71:13:4f:08:bd:71:54:1f:
d3:ed:5f:ac:ca:a4:f8:aa:f6:44:b0:67:b2:29:5d:e7:be:96:
7c:bd:6f:30:66:fc:23:4a:53:e6:40:13:8f:77:19:66:ce:11:
09:28:4c:eb:e2:ab:22:cb:83:27:70:33:13:97:5e:e4:27:cc:
d6:76:63:18:fa:0c:3e:4f:1b:08:35:7e:48:ac:64:d7:4f:2f:
0e:18:b1:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNh6YXJyGvu9lTpMJWxLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmQ5ZmY4NmUzNjNkYjM0ZDA1NTZlYzE2NDUxZjJmN2Yz
MDNkMjQwHhcNMjQwNTE3MTEwMDQ0WhcNMjQwNTE4MTEwMDQ0WjAzMTEwLwYDVQQD
EyhiM2RmNDQ0OGI1ZWZiNWRlZGU1OTY1NmMyODUxYzA2ZjgyMzdlYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtga6F1tLVH1QdJcLjCbl4xIJQZmd
as3rrPX+sTXKRCVMTCiS8fsWafOftASV6aLQ4IATYKbBOOTv3L2Qum7gSCXOCZez
YCSdztop33/jrN+/PLHPRsimVi8nRlte3XPmQ+fQNOZsczfWT7+V82aQmTOtrQ9Q
Q0Kf07yB5QV7U2bp2N1zsONiRocQwWU+xPmfVzyolsbsJTibog2ji2XHjn2VmZJM
bPJwNwnTReHx2LlY/25uvq8xOSSmG+oAkIzAmJlx+03H7jKhiLVtFrvWhNVDQ7VV
4losVqmXoV/yqTGYfyxZ2mnYRdRK5wIn3B+IAFEAbVlffdtNS6bJnDbj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPfREi177Xe3lllbChRwG+CN+vcMB8GA1UdIwQY
MBaAFMstn/huNj2zTQVW7BZFHy9/MD0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTkt
NDI1ZWU5NjhkZjBiLzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTktNDI1ZWU5NjhkZjBi
LzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI1cMD+8
bWUk+UcQP7yEy97me4WRhlKz5e57S31go9POA/X39ZywBKFcekY9I51kprmnFq6g
N1C7am2UrwI0Dv+pD3I8QqHNgEPAgM6EKS8MZCj4EXV3pTkwT2eUfeYvvBaPmgoI
LErucKSl+vW27mQeDO520OZkQH7oegzRBAhNFZHTiujI7Qo3Q/SWUYSiTQAslx1W
dVkDOcfj/BTObgAy3uDZfX6Yq+4KSHETTwi9cVQf0+1frMqk+Kr2RLBnsild576W
fL1vMGb8I0pT5kATj3cZZs4RCShM6+KrIsuDJ3AzE5de5CfM1nZjGPoMPk8bCDV+
SKxk108vDhix/A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:21:40 2024 by rpki-client on console-ams.rpki-client.org