Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: ahMYzeqQERUVpesZdMo3HeefBZ3wosHhT0MyzESwf4U=
Subject key identifier: 44:D3:EB:B8:29:9E:1E:36:2E:32:D2:1D:24:01:98:17:8E:14:F1:26
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0193553F65009BE08C47C7659241D3C2D020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0D2D
Signing time: Fri 22 Nov 2024 19:00:38 +0000
Manifest this update: Fri 22 Nov 2024 19:00:38 +0000
Manifest next update: Sat 23 Nov 2024 19:00:38 +0000
Files and hashes: 1: gojNHpj46uDqsEnrNt_pEMKRTYQ.roa (hash: cNBsHoI0ZaBUjB+vbHIDSFg/HyQmBSbW2GFsYbv2rUg=)
2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: yyU1n27oDWgnzMHogEFJ//9jhGMADpqRorrZfkkxGBs=)
3: kQ5yRwTUMffUn-57_rCna6ff3sI.roa (hash: VoojJa6myjzN5C3xIahHNlsSjYskbbel1ejzSWEWH9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:65:00:9b:e0:8c:47:c7:65:92:41:d3:c2:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Nov 22 19:00:38 2024 GMT
Not After : Nov 23 19:00:38 2024 GMT
Subject: CN=44d3ebb8299e1e362e32d21d240198178e14f126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:31:e1:0c:0f:63:33:ac:41:d1:1e:b2:07:
64:e3:24:e2:46:36:a7:20:85:d7:6f:a5:d8:ea:c6:
46:5f:70:4d:81:67:7c:c7:ca:b0:26:54:f4:21:cc:
d2:5b:78:dc:3e:31:d0:6f:02:b8:a4:5b:09:61:9c:
da:4c:dc:d7:a3:52:2a:fe:c6:54:8c:25:fe:2a:a4:
74:be:2e:25:c9:f6:99:bf:1d:5c:00:8d:88:e1:fe:
fe:9e:0a:ef:a6:fa:8b:ad:cf:21:4a:f3:c6:11:2c:
6a:a5:53:92:9e:6d:cc:d5:89:3f:18:9e:2b:48:52:
4f:b8:45:b0:fa:d9:7a:d9:d9:15:23:7d:07:12:dd:
88:d1:ec:87:b3:fc:e1:26:c5:5e:d7:f2:ab:98:d4:
bb:ab:90:be:24:79:1c:d4:c5:a0:27:cd:e8:d1:e7:
ae:70:9c:ba:24:74:b3:ea:f9:86:48:26:02:7c:75:
e1:90:23:e0:ff:27:b8:51:93:15:8a:1e:3d:4e:66:
e1:f0:14:2f:d3:f2:db:60:f5:68:15:f2:69:a3:55:
1d:53:56:e8:40:0d:b9:4f:d0:55:c4:fb:64:8c:82:
bc:f6:7d:b9:a0:63:29:12:04:d1:2e:49:08:e1:97:
04:05:c2:60:25:21:bb:c1:7f:de:5b:44:a4:ed:82:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:EB:B8:29:9E:1E:36:2E:32:D2:1D:24:01:98:17:8E:14:F1:26
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0f:aa:47:fb:e9:f5:6c:e6:5b:93:f1:4f:07:a2:27:3d:0e:
ec:b0:47:2e:59:36:a6:53:8f:4b:5f:c0:82:82:2e:57:91:ba:
fb:f1:d9:33:0d:89:b6:a7:de:2d:12:21:bb:c7:07:3d:ac:34:
77:d2:13:61:c7:7c:b9:2c:b1:c6:df:16:20:50:1e:c3:4b:db:
15:b3:3d:b0:e9:4e:36:cc:1d:1a:2b:40:6d:7c:55:46:0a:38:
8e:41:14:07:2b:ab:b4:89:eb:45:d5:c2:8f:56:32:7a:ec:f6:
7e:bc:b9:54:2e:a2:55:88:92:20:bb:36:a8:3b:10:24:19:17:
cb:cf:a6:07:7f:8a:1d:9f:63:e2:f1:9f:51:56:bb:a1:b5:ec:
64:10:e1:d1:db:c2:25:e1:2a:15:5c:b0:2d:d2:be:b4:77:d9:
bf:e5:e2:3e:53:72:90:9c:c2:76:07:19:41:1f:2e:0c:26:dd:
f1:77:d2:6c:18:46:8a:13:72:6e:b7:19:b3:52:d9:1a:cd:f8:
7a:74:f9:81:cb:96:fe:a1:5e:cf:0b:14:fa:94:00:32:71:ac:
92:96:4d:4d:38:21:c8:b6:db:3f:a6:7f:c9:da:bb:31:df:66:
f5:77:2b:99:93:29:27:37:27:53:ce:08:77:9c:1d:0b:12:e8:
7a:d5:da:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP2UAm+CMR8dlkkHTwtAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjQxMTIyMTkwMDM4WhcNMjQxMTIzMTkwMDM4WjAzMTEwLwYDVQQD
Eyg0NGQzZWJiODI5OWUxZTM2MmUzMmQyMWQyNDAxOTgxNzhlMTRmMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/8x4QwPYzOsQdEesgdk4yTiRjan
IIXXb6XY6sZGX3BNgWd8x8qwJlT0IczSW3jcPjHQbwK4pFsJYZzaTNzXo1Iq/sZU
jCX+KqR0vi4lyfaZvx1cAI2I4f7+ngrvpvqLrc8hSvPGESxqpVOSnm3M1Yk/GJ4r
SFJPuEWw+tl62dkVI30HEt2I0eyHs/zhJsVe1/KrmNS7q5C+JHkc1MWgJ83o0eeu
cJy6JHSz6vmGSCYCfHXhkCPg/ye4UZMVih49Tmbh8BQv0/LbYPVoFfJpo1UdU1bo
QA25T9BVxPtkjIK89n25oGMpEgTRLkkI4ZcEBcJgJSG7wX/eW0Sk7YJBxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETT67gpnh42LjLSHSQBmBeOFPEmMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA+qR/vp
9WzmW5PxTweiJz0O7LBHLlk2plOPS1/AgoIuV5G6+/HZMw2JtqfeLRIhu8cHPaw0
d9ITYcd8uSyxxt8WIFAew0vbFbM9sOlONswdGitAbXxVRgo4jkEUByurtInrRdXC
j1Yyeuz2fry5VC6iVYiSILs2qDsQJBkXy8+mB3+KHZ9j4vGfUVa7obXsZBDh0dvC
JeEqFVywLdK+tHfZv+XiPlNykJzCdgcZQR8uDCbd8XfSbBhGihNybrcZs1LZGs34
enT5gcuW/qFezwsU+pQAMnGskpZNTTghyLbbP6Z/ydq7Md9m9XcrmZMpJzcnU84I
d5wdCxLoetXagw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:31 2024 by rpki-client on console-ams.rpki-client.org