Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: mRn35cpRDB1JYMQKbs9ubvETE1Hgc1IklQQgme5qRic=
Subject key identifier: 5F:F2:AB:C7:16:39:DC:CD:C1:91:17:5E:DA:8A:0A:83:1F:05:97:F2
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019044F8502A49AF35B77639164615472ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 110E
Signing time: Sun 23 Jun 2024 12:00:42 +0000
Manifest this update: Sun 23 Jun 2024 12:00:42 +0000
Manifest next update: Mon 24 Jun 2024 12:00:42 +0000
Files and hashes: 1: bZP-cto19TrOHBNuQoGq-plcH4A.roa (hash: TcuSOqHOgSfGF6GOWj8uOYgUJfEzdorC3fZCig0XH+w=)
2: dslFE3HuFr1W8EFmBHRRwoOuRuQ.roa (hash: 2b2KRtQr3cdubUqOO/rkWFnohXc79cMTbSjPWr8hC90=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: GSxYgIpzP8tZaJ2EvnwIT1BVMvvHtraH7D2SZD6xOYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:50:2a:49:af:35:b7:76:39:16:46:15:47:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jun 23 12:00:42 2024 GMT
Not After : Jun 24 12:00:42 2024 GMT
Subject: CN=5ff2abc71639dccdc191175eda8a0a831f0597f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:64:4c:60:9d:61:74:70:72:72:0c:7a:c0:
5b:ae:91:b0:08:45:45:05:a8:ea:d6:ef:06:34:18:
73:92:c0:80:a6:a1:82:fc:ab:85:cf:40:25:89:0c:
c8:a4:2e:71:75:49:ca:f2:2d:fc:ce:be:c9:39:ca:
86:be:d2:e5:4c:4e:e0:00:94:9a:49:6e:a9:b4:70:
f2:85:2e:6c:dd:e2:8f:b2:56:b1:d5:4b:57:4d:8e:
51:4c:57:fc:b1:1d:2b:68:45:43:52:6d:71:3c:93:
07:f3:14:df:c5:68:68:ef:16:e5:34:ba:bf:5a:f0:
9f:47:fc:c1:74:33:7d:b4:d8:17:ba:af:41:00:68:
46:f1:84:e6:a5:a2:fa:be:5e:de:5e:2d:2e:31:ef:
71:3a:36:d3:c5:64:e4:79:ce:47:b7:83:ac:33:3b:
b1:ed:c2:88:98:b0:25:eb:85:e6:78:c1:e6:57:f3:
02:3a:02:85:59:87:f5:f1:ef:ae:44:30:37:aa:cb:
06:7d:fd:fa:fb:c1:45:66:f2:2e:50:2b:49:6c:0a:
59:68:49:f4:9c:77:33:bb:31:14:21:85:5c:43:0b:
39:f5:c7:01:fb:d5:68:1c:aa:2c:a4:50:62:90:dd:
3e:77:f4:c3:ba:81:79:3e:f9:64:6e:51:c9:a9:57:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:AB:C7:16:39:DC:CD:C1:91:17:5E:DA:8A:0A:83:1F:05:97:F2
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:94:76:e2:b9:dd:e3:04:ef:20:b6:da:83:a8:0e:1f:11:b3:
94:23:5c:f3:cb:fd:77:57:e9:e9:63:67:cd:8b:9e:fc:b5:d1:
52:7e:95:7d:e7:16:38:cb:43:18:bd:ee:fd:f7:a4:94:f7:1f:
06:95:90:94:3e:33:f1:ea:18:7b:da:44:77:6e:04:b6:ad:47:
65:39:06:e6:62:93:e4:a0:74:c9:91:ec:a3:62:6f:92:b4:a6:
e9:de:e7:42:40:49:94:4b:dd:58:4d:ab:87:67:9a:95:9f:0e:
77:af:9d:bd:49:28:08:52:a6:82:be:72:6a:2b:57:58:2b:10:
18:49:e0:ca:48:41:54:24:0b:60:c2:a9:69:27:8c:79:fa:0d:
6a:e4:63:fe:00:0e:0d:ff:cd:16:3a:df:42:ca:7c:a1:db:b8:
77:7e:a4:02:4c:38:c8:e1:64:10:3b:13:25:53:77:39:4b:14:
11:9a:1f:6a:d5:a4:c8:bf:da:a6:b9:f0:d0:1f:12:d1:c8:45:
a2:55:75:ad:cf:a3:d8:bd:fb:ee:74:6b:b0:29:d0:45:49:7b:
a2:91:92:39:9b:64:f1:0a:c0:52:f4:32:36:b4:df:dc:34:92:
57:84:06:0d:31:d0:0e:df:5a:e5:77:98:63:63:79:62:4a:59:
6a:5a:44:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+FAqSa81t3Y5FkYVRyq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjQwNjIzMTIwMDQyWhcNMjQwNjI0MTIwMDQyWjAzMTEwLwYDVQQD
Eyg1ZmYyYWJjNzE2MzlkY2NkYzE5MTE3NWVkYThhMGE4MzFmMDU5N2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnlkTGCdYXRwcnIMesBbrpGwCEVF
Bajq1u8GNBhzksCApqGC/KuFz0AliQzIpC5xdUnK8i38zr7JOcqGvtLlTE7gAJSa
SW6ptHDyhS5s3eKPslax1UtXTY5RTFf8sR0raEVDUm1xPJMH8xTfxWho7xblNLq/
WvCfR/zBdDN9tNgXuq9BAGhG8YTmpaL6vl7eXi0uMe9xOjbTxWTkec5Ht4OsMzux
7cKImLAl64XmeMHmV/MCOgKFWYf18e+uRDA3qssGff36+8FFZvIuUCtJbApZaEn0
nHczuzEUIYVcQws59ccB+9VoHKospFBikN0+d/TDuoF5PvlkblHJqVelVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/yq8cWOdzNwZEXXtqKCoMfBZfyMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZR24rnd
4wTvILbag6gOHxGzlCNc88v9d1fp6WNnzYue/LXRUn6VfecWOMtDGL3u/feklPcf
BpWQlD4z8eoYe9pEd24Etq1HZTkG5mKT5KB0yZHso2JvkrSm6d7nQkBJlEvdWE2r
h2ealZ8Od6+dvUkoCFKmgr5yaitXWCsQGEngykhBVCQLYMKpaSeMefoNauRj/gAO
Df/NFjrfQsp8odu4d36kAkw4yOFkEDsTJVN3OUsUEZofatWkyL/aprnw0B8S0chF
olV1rc+j2L377nRrsCnQRUl7opGSOZtk8QrAUvQyNrTf3DSSV4QGDTHQDt9a5XeY
Y2N5YkpZalpEnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:51:53 2024 by rpki-client on console-ams.rpki-client.org