Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
File: YWpyYPOGVhtDWOpQwDxeND1tDDM.mft (raw, json)
Hash identifier: ttmsQc29akK1lLe2r0HjO4wUbLQPYIQ3Ej2JYFNkh2U=
Subject key identifier: F3:ED:64:DA:FD:2E:89:CD:6B:1D:9D:58:91:9E:D0:31:50:EC:40:CB
Authority key identifier: 61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
Certificate issuer: /CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Certificate serial: 01935162AC38EF238951E5D0DB5B4A5EDF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
Manifest number: 0858
Signing time: Fri 22 Nov 2024 01:00:41 +0000
Manifest this update: Fri 22 Nov 2024 01:00:41 +0000
Manifest next update: Sat 23 Nov 2024 01:00:41 +0000
Files and hashes: 1: FUQLReyV1fYnKhUR2Py0suEpzo4.roa (hash: 9A/8Ki/ykGwmpOcu1/NNU+e0I6B+VL2oFMH48r7RSZA=)
2: YWpyYPOGVhtDWOpQwDxeND1tDDM.crl (hash: D3pnjOm5M9LF7JeVxyxmy4IX2QL5dfm23lPTIqXjyDw=)
3: bn-8w0IhBSiuS6xuFjpDgIuohzQ.roa (hash: +QhpotgMFXzmBJ570Cj1UTyTgz4LOzQrkl7OgjYZOQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:ac:38:ef:23:89:51:e5:d0:db:5b:4a:5e:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Validity
Not Before: Nov 22 01:00:41 2024 GMT
Not After : Nov 23 01:00:41 2024 GMT
Subject: CN=f3ed64dafd2e89cd6b1d9d58919ed03150ec40cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:ba:7a:9f:4e:57:25:f7:f6:75:e5:b5:aa:
0b:97:93:9b:4b:ac:4b:fa:70:c0:0e:57:84:b0:de:
46:2e:c8:c0:b5:9c:1a:27:10:a9:ab:92:3b:4f:7b:
0a:72:ee:f6:08:3f:d7:ea:d6:d0:18:3e:e4:23:cb:
dc:31:df:cd:9a:1d:1f:12:da:d3:70:59:b3:4f:31:
58:66:4d:1d:b5:fe:c7:cc:c0:12:bf:d7:7e:fb:54:
c7:79:ba:3e:09:c2:99:fa:81:6c:f8:c7:d7:06:3a:
ff:b4:e3:91:af:f2:58:9a:44:d7:84:48:0e:ca:f7:
dc:cc:ec:d8:76:35:5f:1e:f7:d8:3f:6c:4f:3c:57:
70:22:b4:64:e3:5b:df:5f:b3:a1:4b:45:04:e9:1e:
f3:0f:49:6f:f2:bd:bc:81:f6:55:bd:5d:f5:32:dc:
11:0b:13:84:3f:a6:cc:4b:09:5c:4c:40:fa:4f:ad:
4e:3a:8b:22:f7:3c:90:bd:2c:10:9e:17:6c:10:fb:
61:92:c0:00:9b:ba:02:1f:2e:9e:01:4f:12:c6:29:
7f:72:2a:d8:79:f0:a9:70:5d:3f:5e:36:cb:bf:8c:
03:6d:91:ca:e1:61:a3:9c:c2:f9:fd:42:2e:59:86:
55:1a:ca:fa:14:8c:e9:a8:a6:7a:44:a5:06:d0:c2:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:64:DA:FD:2E:89:CD:6B:1D:9D:58:91:9E:D0:31:50:EC:40:CB
X509v3 Authority Key Identifier:
keyid:61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:0c:0a:36:b5:6a:30:4d:0e:86:22:86:50:b3:5c:0c:1e:
cf:3a:68:72:cb:39:f5:b8:e8:eb:d4:c6:4d:74:ce:68:a4:19:
8e:ea:ef:73:0c:3d:5b:c8:65:bb:ff:4f:0c:97:1c:d3:df:ad:
61:fa:9a:41:79:95:98:1e:1a:22:ee:7d:c2:8f:0b:e2:16:7f:
a0:c6:d7:7f:16:8d:a6:52:23:10:9a:50:8e:31:da:6d:ab:dc:
f5:56:a6:12:00:96:13:ce:97:14:d0:38:7d:f4:3d:a8:41:51:
b2:39:98:7d:9c:8c:0d:fa:37:8a:b2:59:65:4c:4c:f3:7a:a4:
67:f5:f3:1d:31:ed:29:d3:bd:95:1c:00:cf:c3:95:1a:b9:05:
03:c3:40:e6:9b:24:4d:b9:c6:d8:62:e2:71:45:92:0f:4d:ab:
bc:a4:71:88:9f:92:3e:64:af:01:96:16:97:15:d9:cf:c5:b1:
ae:c7:0d:ed:65:43:77:09:7f:96:00:f1:13:37:fa:1f:fb:50:
bc:cc:9e:54:2b:91:03:d9:8c:95:14:8e:93:1f:a1:8d:4e:bc:
aa:fa:c8:cb:fc:0e:55:6a:cc:56:4c:db:9e:c4:f9:f3:28:80:
a2:6c:cb:a2:7e:f3:57:66:d0:09:6e:60:fb:61:1e:b1:7c:60:
af:29:99:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYqw47yOJUeXQ21tKXt8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNmE3MjYwZjM4NjU2MWI0MzU4ZWE1MGMwM2M1ZTM0M2Q2
ZDBjMzMwHhcNMjQxMTIyMDEwMDQxWhcNMjQxMTIzMDEwMDQxWjAzMTEwLwYDVQQD
EyhmM2VkNjRkYWZkMmU4OWNkNmIxZDlkNTg5MTllZDAzMTUwZWM0MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTm6ep9OVyX39nXltaoLl5ObS6xL
+nDADleEsN5GLsjAtZwaJxCpq5I7T3sKcu72CD/X6tbQGD7kI8vcMd/Nmh0fEtrT
cFmzTzFYZk0dtf7HzMASv9d++1THebo+CcKZ+oFs+MfXBjr/tOORr/JYmkTXhEgO
yvfczOzYdjVfHvfYP2xPPFdwIrRk41vfX7OhS0UE6R7zD0lv8r28gfZVvV31MtwR
CxOEP6bMSwlcTED6T61OOosi9zyQvSwQnhdsEPthksAAm7oCHy6eAU8Sxil/cirY
efCpcF0/XjbLv4wDbZHK4WGjnML5/UIuWYZVGsr6FIzpqKZ6RKUG0MKMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPtZNr9LonNax2dWJGe0DFQ7EDLMB8GA1UdIwQY
MBaAFGFqcmDzhlYbQ1jqUMA8XjQ9bQwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdweVlQT0dWaHREV09wUXdEeGVORDF0RERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NzY2OGEtMjFlNS00OTU0LWFhMjct
YzBlM2M5MDcyMDYyLzEvWVdweVlQT0dWaHREV09wUXdEeGVORDF0RERNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NzY2OGEtMjFlNS00OTU0LWFhMjctYzBlM2M5MDcyMDYy
LzEvWVdweVlQT0dWaHREV09wUXdEeGVORDF0RERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd4MCja1
ajBNDoYihlCzXAwezzpocss59bjo69TGTXTOaKQZjurvcww9W8hlu/9PDJcc09+t
YfqaQXmVmB4aIu59wo8L4hZ/oMbXfxaNplIjEJpQjjHabavc9VamEgCWE86XFNA4
ffQ9qEFRsjmYfZyMDfo3irJZZUxM83qkZ/XzHTHtKdO9lRwAz8OVGrkFA8NA5psk
TbnG2GLicUWSD02rvKRxiJ+SPmSvAZYWlxXZz8WxrscN7WVDdwl/lgDxEzf6H/tQ
vMyeVCuRA9mMlRSOkx+hjU68qvrIy/wOVWrMVkzbnsT58yiAomzLon7zV2bQCW5g
+2EesXxgrymZGA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:04 2024 by rpki-client on console-ams.rpki-client.org