Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
File: kYKD14XMiO-FIIYqwWHye1YwvBQ.mft (raw, json)
Hash identifier: jTU0Lc86YyswUzxKns/6UOI+mpMnTGl0Ygz7MpcGtMg=
Subject key identifier: 78:89:4B:AB:2D:D6:6D:FA:DA:56:36:3C:45:34:7C:6F:E4:C6:FD:E1
Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
Certificate issuer: /CN=918283d785cc88ef8520862ac161f27b5630bc14
Certificate serial: 0193568A72A55112096D94CCA830D8AF2CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:14 +0000
Manifest this update: Sat 23 Nov 2024 01:02:14 +0000
Manifest next update: Sun 24 Nov 2024 01:02:14 +0000
Files and hashes: 1: fTXt2lNKdgdWLDzsplbttjMDISw.roa (hash: G6FUq6a9hPnO3pKfGTqwzrKz9cDzORlyasNYQfgeuhw=)
2: kYKD14XMiO-FIIYqwWHye1YwvBQ.crl (hash: /lB2gxNIWKJ0ewKLUhFi6Yl9jBXfUYeV577q0bW1NqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:72:a5:51:12:09:6d:94:cc:a8:30:d8:af:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14
Validity
Not Before: Nov 23 01:02:14 2024 GMT
Not After : Nov 24 01:02:14 2024 GMT
Subject: CN=78894bab2dd66dfada56363c45347c6fe4c6fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:e5:d6:e6:bc:a2:46:b5:28:17:5e:62:ca:
1f:b4:51:48:01:bc:8f:56:7a:24:e8:9f:87:f2:b7:
8c:3c:85:8b:46:d6:39:af:dd:ea:27:5e:6a:19:31:
18:47:d3:e5:59:95:56:8d:28:e2:00:cd:c5:44:19:
d8:02:fa:20:bd:ff:00:7e:5c:60:4f:59:ef:c8:77:
1c:01:59:61:37:c5:cd:3f:03:87:fc:be:74:42:0a:
dc:3f:23:fb:26:91:05:d6:11:ff:54:09:85:54:fb:
42:e1:3d:f6:ae:a5:0d:06:fe:e8:07:e2:52:1b:4e:
9c:b0:b5:b5:da:76:45:ba:60:69:0b:d8:32:ce:92:
aa:6a:f1:ef:b6:5f:3e:80:12:d5:5f:7d:5a:9c:5a:
5e:c7:10:a6:c4:ae:0a:a7:d0:aa:ab:5f:5b:92:9c:
7d:85:f1:6c:98:2d:5b:50:51:71:6d:f8:47:79:ad:
c6:ce:d1:80:47:8c:2e:c1:54:58:bb:65:d5:da:da:
c0:1b:0e:5b:62:55:a5:57:ee:2a:6f:5a:fa:25:05:
c2:7d:82:7b:cd:25:4e:62:4a:05:21:0f:ae:b8:e7:
41:96:bd:0e:14:d5:4e:91:b7:e2:e3:47:91:ec:0d:
bd:f5:8b:d6:fd:e2:ca:e5:fd:ab:26:7e:ec:1d:25:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:4B:AB:2D:D6:6D:FA:DA:56:36:3C:45:34:7C:6F:E4:C6:FD:E1
X509v3 Authority Key Identifier:
keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b5:f8:94:f6:a3:dc:46:31:92:e8:3c:45:5a:fd:5d:b1:dc:
03:19:82:34:01:75:8b:00:d1:ce:b7:35:71:7a:48:74:91:9d:
c9:f6:28:1c:02:f1:d9:f7:21:57:f9:5d:c5:fb:93:98:37:d4:
70:9a:2d:a5:64:ac:66:44:eb:35:1b:d9:3e:3c:57:4a:1a:96:
90:e0:4d:7c:11:96:7b:f6:42:11:d6:13:d1:c6:57:e8:85:2d:
83:e9:97:d1:0e:f5:bb:e7:fa:0f:69:a6:2b:a0:45:7d:a2:1c:
0f:1c:a4:f7:40:50:60:78:99:ce:19:84:e3:18:0c:f9:9f:d0:
d1:92:e6:9c:f2:79:4d:5c:8f:0b:21:93:5e:f4:a7:3e:fc:e1:
e9:fc:96:5e:34:26:5c:f0:00:1b:56:a1:7a:0c:ed:1f:91:e4:
87:a5:c7:1f:46:d0:6f:96:da:51:b6:96:e6:e5:8c:f6:d0:42:
8c:37:04:a1:92:a4:ae:34:c9:24:1c:55:cc:77:67:d8:66:1d:
91:45:21:ed:4e:68:9e:5f:a0:9d:44:e4:a7:70:c5:6f:3f:73:
5b:e9:aa:44:ec:ec:94:45:65:4c:64:49:28:d3:47:ac:fa:63:
b1:00:cc:f2:a7:3f:d1:16:fe:c8:32:f8:79:f8:bc:94:42:d0:
1c:bb:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWinKlURIJbZTMqDDYryyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODI4M2Q3ODVjYzg4ZWY4NTIwODYyYWMxNjFmMjdiNTYz
MGJjMTQwHhcNMjQxMTIzMDEwMjE0WhcNMjQxMTI0MDEwMjE0WjAzMTEwLwYDVQQD
Eyg3ODg5NGJhYjJkZDY2ZGZhZGE1NjM2M2M0NTM0N2M2ZmU0YzZmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywLl1ua8oka1KBdeYsoftFFIAbyP
Vnok6J+H8reMPIWLRtY5r93qJ15qGTEYR9PlWZVWjSjiAM3FRBnYAvogvf8Aflxg
T1nvyHccAVlhN8XNPwOH/L50QgrcPyP7JpEF1hH/VAmFVPtC4T32rqUNBv7oB+JS
G06csLW12nZFumBpC9gyzpKqavHvtl8+gBLVX31anFpexxCmxK4Kp9Cqq19bkpx9
hfFsmC1bUFFxbfhHea3GztGAR4wuwVRYu2XV2trAGw5bYlWlV+4qb1r6JQXCfYJ7
zSVOYkoFIQ+uuOdBlr0OFNVOkbfi40eR7A299YvW/eLK5f2rJn7sHSX/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiJS6st1m362lY2PEU0fG/kxv3hMB8GA1UdIwQY
MBaAFJGCg9eFzIjvhSCGKsFh8ntWMLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lLRDE0WE1pTy1GSUlZcXdXSHllMVl3dkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jY2E0NzYtYTNjOC00YTY1LThjMGMt
ZjMyMjYwZTA1NzAwLzEva1lLRDE0WE1pTy1GSUlZcXdXSHllMVl3dkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jY2E0NzYtYTNjOC00YTY1LThjMGMtZjMyMjYwZTA1NzAw
LzEva1lLRDE0WE1pTy1GSUlZcXdXSHllMVl3dkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7X4lPaj
3EYxkug8RVr9XbHcAxmCNAF1iwDRzrc1cXpIdJGdyfYoHALx2fchV/ldxfuTmDfU
cJotpWSsZkTrNRvZPjxXShqWkOBNfBGWe/ZCEdYT0cZX6IUtg+mX0Q71u+f6D2mm
K6BFfaIcDxyk90BQYHiZzhmE4xgM+Z/Q0ZLmnPJ5TVyPCyGTXvSnPvzh6fyWXjQm
XPAAG1ahegztH5Hkh6XHH0bQb5baUbaW5uWM9tBCjDcEoZKkrjTJJBxVzHdn2GYd
kUUh7U5onl+gnUTkp3DFbz9zW+mqROzslEVlTGRJKNNHrPpjsQDM8qc/0Rb+yDL4
efi8lELQHLtG2Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:32 2024 by rpki-client on console-fra.rpki-client.org