Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: RIt6jh7SJPxxt9T3Xp1mzThF3adunHivW5K4ArmHpZU=
Subject key identifier: 27:D5:D2:64:5A:1B:11:74:5E:8E:4C:89:F8:72:A3:69:6C:20:70:AF
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0193549B287F6264DA3BC9E4EB8A84E2226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0559
Signing time: Fri 22 Nov 2024 16:01:14 +0000
Manifest this update: Fri 22 Nov 2024 16:01:14 +0000
Manifest next update: Sat 23 Nov 2024 16:01:14 +0000
Files and hashes: 1: 1cFDlNo0Chn7JkbdPAlimCGNQE4.roa (hash: Z+4FEpLwXtWecJwfCey3FLdg1ChDIufzdjbLIT57DNM=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: ooJJM5us/AB1sCUr4kRpBsUEjZPrL3ml9L5wECz4s+Y=)
3: eyQvK29JgahCGAgYcLb6YNe3-Jc.roa (hash: RabhGqIatcoajOJCb3/HGCvkcqMo8FBFAtZfifKFyAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:28:7f:62:64:da:3b:c9:e4:eb:8a:84:e2:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Nov 22 16:01:14 2024 GMT
Not After : Nov 23 16:01:14 2024 GMT
Subject: CN=27d5d2645a1b11745e8e4c89f872a3696c2070af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:c0:ce:c4:f6:65:e3:39:06:81:9c:3e:e2:
c4:04:8d:c6:bd:e0:3b:f4:24:29:4f:94:28:1b:7c:
e5:19:57:01:4b:9a:3d:12:b0:67:79:14:56:65:40:
ae:fe:41:73:32:61:33:1b:06:ec:36:39:94:1a:83:
fd:98:d5:b4:70:d5:65:40:42:4b:20:3b:65:ad:e9:
40:be:15:fc:dd:47:4a:42:cc:3d:a1:91:68:59:8c:
3b:d9:90:62:23:65:09:b1:d7:de:24:9c:89:4b:02:
e9:ac:d6:38:d2:47:1d:ea:7d:d2:84:07:e4:da:20:
82:84:a1:8f:3b:69:dc:83:b6:c2:7f:7c:ee:9d:a5:
ca:a6:fa:b9:21:1a:5b:ca:dc:6d:f0:1f:eb:f7:ce:
12:5c:cd:5e:fa:e1:ff:3c:b3:7c:03:47:f7:b9:c9:
31:a9:e6:8b:5c:b9:8b:4d:07:6d:5c:dc:09:98:24:
16:5c:3e:54:66:ac:2c:c8:25:6b:0a:43:60:15:69:
76:40:f8:33:21:72:62:26:4f:7c:b0:5b:09:52:7f:
ad:23:c1:2b:2a:eb:f2:55:20:2b:08:0e:83:75:65:
23:08:54:0e:ad:9c:01:c5:3b:69:36:53:6e:7c:cb:
27:35:2b:18:ca:ed:0c:2a:d0:8c:5e:9d:c9:52:70:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:D2:64:5A:1B:11:74:5E:8E:4C:89:F8:72:A3:69:6C:20:70:AF
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:b0:b9:4a:c8:b8:75:8a:ed:b0:c2:aa:93:59:a1:e8:c0:
5e:c5:20:83:60:4c:3f:4b:3b:c6:cc:36:7c:57:f1:b2:90:c6:
da:78:ff:ce:e5:61:76:c9:a8:7d:a4:52:86:bc:14:32:9a:69:
2c:dc:1d:2d:eb:a3:ed:07:82:88:8e:cf:49:dd:15:36:aa:5b:
23:39:9d:65:0a:50:61:da:db:6e:89:d7:2f:9c:a7:93:0a:14:
47:2a:e4:68:a5:7c:47:6e:65:0e:9f:a6:6d:32:c1:e9:e9:dd:
c6:dd:1d:fa:9b:3d:07:70:1b:6a:ca:5a:63:e3:3a:f7:84:f5:
e3:4a:97:b1:46:c9:d0:6e:ee:6d:55:b5:55:54:05:27:88:a2:
ca:2a:36:81:e9:39:56:2e:0a:96:77:50:03:c1:67:a0:22:62:
54:cb:2e:b4:a1:6e:f2:a0:fd:65:0a:d6:60:d8:55:49:ef:ff:
79:a1:fb:2b:45:e6:22:9d:e3:e8:f6:e8:e6:41:1d:6c:64:6d:
fa:1c:e4:c6:5e:af:9e:38:68:3e:b8:62:9c:06:71:16:29:6d:
bb:58:32:f4:f6:9a:27:6c:44:9f:24:da:8b:61:f3:bf:16:e5:
74:32:74:66:7f:1b:7d:37:fe:db:0e:dc:4a:a6:fd:6a:96:a4:
c8:9a:ec:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmyh/YmTaO8nk64qE4iJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0
NGQ2ZDAwHhcNMjQxMTIyMTYwMTE0WhcNMjQxMTIzMTYwMTE0WjAzMTEwLwYDVQQD
EygyN2Q1ZDI2NDVhMWIxMTc0NWU4ZTRjODlmODcyYTM2OTZjMjA3MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndbAzsT2ZeM5BoGcPuLEBI3GveA7
9CQpT5QoG3zlGVcBS5o9ErBneRRWZUCu/kFzMmEzGwbsNjmUGoP9mNW0cNVlQEJL
IDtlrelAvhX83UdKQsw9oZFoWYw72ZBiI2UJsdfeJJyJSwLprNY40kcd6n3ShAfk
2iCChKGPO2ncg7bCf3zunaXKpvq5IRpbytxt8B/r984SXM1e+uH/PLN8A0f3uckx
qeaLXLmLTQdtXNwJmCQWXD5UZqwsyCVrCkNgFWl2QPgzIXJiJk98sFsJUn+tI8Er
KuvyVSArCA6DdWUjCFQOrZwBxTtpNlNufMsnNSsYyu0MKtCMXp3JUnBfWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfV0mRaGxF0Xo5Mifhyo2lsIHCvMB8GA1UdIwQY
MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt
NzA1NWMyZTA0NzZmLzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm
LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDCwuUrI
uHWK7bDCqpNZoejAXsUgg2BMP0s7xsw2fFfxspDG2nj/zuVhdsmofaRShrwUMppp
LNwdLeuj7QeCiI7PSd0VNqpbIzmdZQpQYdrbbonXL5ynkwoURyrkaKV8R25lDp+m
bTLB6endxt0d+ps9B3AbaspaY+M694T140qXsUbJ0G7ubVW1VVQFJ4iiyio2gek5
Vi4KlndQA8FnoCJiVMsutKFu8qD9ZQrWYNhVSe//eaH7K0XmIp3j6Pbo5kEdbGRt
+hzkxl6vnjhoPrhinAZxFiltu1gy9PaaJ2xEnyTai2HzvxbldDJ0Zn8bfTf+2w7c
Sqb9apakyJrsLg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:37 2024 by rpki-client on console-ams.rpki-client.org