Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
File: 59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft (raw, json)
Hash identifier: xsi0Lr0sio21+ksBuNtNqpMMEX1lCIF0tBA3RzYaKao=
Subject key identifier: 89:05:7B:E0:FA:1B:77:EC:4D:93:79:97:D5:F6:73:96:0D:0F:AC:CF
Authority key identifier: 59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
Certificate issuer: /CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
Certificate serial: 6223924ED5C4BE8C9CC0B30B74A544182116DECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
Manifest number: 0284
Signing time: Fri 22 Nov 2024 03:00:07 +0000
Manifest this update: Fri 22 Nov 2024 02:55:07 +0000
Manifest next update: Sat 23 Nov 2024 05:57:07 +0000
Files and hashes: 1: 59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl (hash: HbPvYULtyDQJkTgdvUbOMbmq+LMO49cgk56UXfbVsK8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:23:92:4e:d5:c4:be:8c:9c:c0:b3:0b:74:a5:44:18:21:16:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
Validity
Not Before: Nov 22 02:55:07 2024 GMT
Not After : Nov 23 05:57:07 2024 GMT
Subject: CN=89057BE0FA1B77EC4D937997D5F673960D0FACCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:6a:a3:17:83:9e:52:ab:b6:73:b9:a6:86:
cf:90:b5:40:70:4e:bc:de:94:f8:cf:97:31:d9:f9:
9e:d1:d7:69:e5:f7:d6:3d:b3:e3:1f:08:11:e4:8f:
97:93:24:62:ed:00:81:e5:62:d5:96:0c:1e:28:82:
cd:b5:a0:50:3f:2d:1d:90:05:2b:98:3d:06:32:1a:
c8:89:e2:ae:00:4d:45:5d:62:d8:e1:65:19:c6:76:
74:ac:39:cb:fb:11:12:e2:6e:1c:97:cd:60:f0:67:
27:b6:7b:d7:b3:f2:1d:0d:92:e6:c7:9d:b5:3a:1d:
59:f1:69:e9:87:24:69:ee:7a:eb:53:18:94:8a:ee:
19:e9:aa:ca:1d:ab:fd:11:1f:39:67:24:76:74:7f:
a2:da:23:7b:49:06:3e:77:db:d8:9b:2c:a2:39:68:
af:4d:b5:20:13:0e:8c:7b:d7:e3:7f:25:d5:5b:65:
88:69:e0:9d:44:5b:d0:f0:d2:48:0b:0c:30:76:6c:
e8:2c:e1:ca:74:f5:87:73:13:8c:ea:0b:3a:ff:ad:
1d:ec:f8:88:7b:17:23:ad:1e:71:fc:3a:98:48:f8:
f6:7c:82:b3:8b:6d:92:09:9c:b9:cd:08:b4:29:77:
b4:0b:17:ee:ab:16:68:2a:35:23:ea:c5:ff:c6:1d:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:7B:E0:FA:1B:77:EC:4D:93:79:97:D5:F6:73:96:0D:0F:AC:CF
X509v3 Authority Key Identifier:
keyid:59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:a6:f9:2d:f5:df:c3:10:16:2a:7b:ea:a7:7f:72:c6:cc:
70:bb:66:75:f2:71:5e:aa:a6:ec:8b:fa:00:b8:3e:05:f2:d3:
ce:30:7d:42:12:36:86:5c:16:34:67:56:4f:b9:20:51:76:98:
54:04:57:d9:cc:7d:1d:10:27:15:d2:79:15:f2:a8:ed:08:59:
5d:a5:b5:b5:ff:19:1f:34:bd:1a:0e:d3:01:78:d0:2e:3c:c0:
16:4a:1e:22:f7:12:92:bd:d8:ee:46:f6:49:11:14:ee:75:b7:
79:0a:89:29:6f:f8:8d:ba:68:9c:48:61:77:13:5f:37:69:bb:
1f:32:a2:03:6b:f9:5a:74:1e:9e:42:9e:38:48:99:e5:db:a3:
58:1f:65:be:23:8b:b6:cb:4c:a5:c2:46:f5:60:ff:c5:54:5c:
0b:77:25:14:fb:a7:f8:9e:e3:b2:d9:21:3d:46:5c:be:d3:48:
02:4a:87:86:ec:1d:d0:b0:08:11:bc:64:3c:c4:5e:93:02:81:
da:89:59:80:6d:ad:a1:4b:de:5a:f2:82:eb:27:e1:e2:f0:06:
28:84:0b:f5:fc:e5:dc:85:46:7e:db:64:9d:38:e2:24:9f:d5:
c1:c6:6d:4d:42:76:98:b3:47:ad:59:21:4b:32:f8:1c:1c:a5:
8f:84:07:73
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUYiOSTtXEvoycwLMLdKVEGCEW3s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTllMjcwNGE4YWNmODdjNTQ4OTJhN2RiM2VmOThjNzdm
MjIzMjZhOTAeFw0yNDExMjIwMjU1MDdaFw0yNDExMjMwNTU3MDdaMDMxMTAvBgNV
BAMTKDg5MDU3QkUwRkExQjc3RUM0RDkzNzk5N0Q1RjY3Mzk2MEQwRkFDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOd2qjF4OeUqu2c7mmhs+QtUBw
TrzelPjPlzHZ+Z7R12nl99Y9s+MfCBHkj5eTJGLtAIHlYtWWDB4ogs21oFA/LR2Q
BSuYPQYyGsiJ4q4ATUVdYtjhZRnGdnSsOcv7ERLibhyXzWDwZye2e9ez8h0NkubH
nbU6HVnxaemHJGnueutTGJSK7hnpqsodq/0RHzlnJHZ0f6LaI3tJBj5329ibLKI5
aK9NtSATDox71+N/JdVbZYhp4J1EW9Dw0kgLDDB2bOgs4cp09YdzE4zqCzr/rR3s
+Ih7FyOtHnH8OphI+PZ8grOLbZIJnLnNCLQpd7QLF+6rFmgqNSPqxf/GHb8vAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUiQV74Pobd+xNk3mX1fZzlg0PrM8wHwYDVR0j
BBgwFoAUWeJwSorPh8VIkqfbPvmMd/IjJqkwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xMy81OUUyNzA0QThBQ0Y4N0M1NDg5MkE3REIzRUY5OEM3N0YyMjMyNkE5
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvV2VKd1NvclBoOFZJa3FmYlB2bU1k
X0lqSnFrLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVl
Yy0wOGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMTMvNTlFMjcwNEE4QUNGODdD
NTQ4OTJBN0RCM0VGOThDNzdGMjIzMjZBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJpppvkt9d/DEBYq
e+qnf3LGzHC7ZnXycV6qpuyL+gC4PgXy084wfUISNoZcFjRnVk+5IFF2mFQEV9nM
fR0QJxXSeRXyqO0IWV2ltbX/GR80vRoO0wF40C48wBZKHiL3EpK92O5G9kkRFO51
t3kKiSlv+I26aJxIYXcTXzdpux8yogNr+Vp0Hp5CnjhImeXbo1gfZb4ji7bLTKXC
RvVg/8VUXAt3JRT7p/ie47LZIT1GXL7TSAJKh4bsHdCwCBG8ZDzEXpMCgdqJWYBt
raFL3lrygusn4eLwBiiEC/X85dyFRn7bZJ044iSf1cHGbU1CdpizR61ZIUsy+Bwc
pY+EB3M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org