Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: 7vmoMhFXcP0t5Dz2uAkN2ZyH8d3hdbZDHyW7cWEd3ec=
Subject key identifier: 74:13:FB:D8:64:72:97:08:2C:03:11:7A:E9:E0:C0:14:77:8D:E5:BD
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019351D05FCC8364438D4C35FF1661F49219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 05B0
Signing time: Fri 22 Nov 2024 03:00:30 +0000
Manifest this update: Fri 22 Nov 2024 03:00:30 +0000
Manifest next update: Sat 23 Nov 2024 03:00:30 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: D0oH5sPRUxIRNBerHrd9hCH0rdc9G9s4Dk8cMdn5dYY=)
2: OY4rkVFwAXLFA9K8PFt6WvsDiZs.roa (hash: qTQW2zWV5NZPUls4qw6bK8eGxT07Yfyc0cRLGNPr+Kk=)
3: Z65dooN8C78K2nTiNDviNF-GEJ8.roa (hash: 4hlmB0cN80Fc8IokYfJhvh6cNiXIOUwNSOaMcLmwtJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:5f:cc:83:64:43:8d:4c:35:ff:16:61:f4:92:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Nov 22 03:00:30 2024 GMT
Not After : Nov 23 03:00:30 2024 GMT
Subject: CN=7413fbd8647297082c03117ae9e0c014778de5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:99:34:a1:e3:43:e9:9e:98:a1:79:d4:ac:
81:8d:f9:e5:31:89:87:98:6e:e7:2e:bc:ce:29:42:
12:96:a2:7b:d7:7e:61:e7:cc:a5:d5:13:94:2f:f8:
ba:7c:2a:b7:0c:69:7f:3f:7f:f1:77:8e:07:43:9c:
fb:bb:b0:7a:01:e0:90:12:09:5e:a7:98:df:77:d5:
20:83:d3:5d:00:f3:d6:73:e2:31:22:0a:09:81:d4:
80:ad:99:58:db:42:6a:a2:06:58:25:ec:ea:c3:e3:
e3:f7:fe:77:9d:f9:d9:be:03:53:ff:2e:58:9a:45:
5d:d2:36:d9:9f:be:aa:c6:6c:d0:eb:75:54:7a:49:
93:c5:4c:ba:b0:a7:06:dc:f5:9e:aa:7c:18:27:49:
c2:ba:ab:38:99:3d:9c:90:c7:dc:9c:c8:eb:e4:93:
b9:d5:c2:a8:4d:3b:40:66:42:f3:ee:30:08:76:b7:
47:93:92:a2:3e:45:a7:a6:34:29:2b:2b:6a:cf:d9:
e9:de:f1:86:aa:79:87:cf:40:06:93:6f:ef:04:ee:
d4:5f:d8:a6:fb:30:7a:28:b9:12:a8:bc:ba:91:34:
65:11:8e:ef:8d:2d:6a:18:f0:b4:a5:20:5d:75:ab:
cf:df:28:5f:ea:d1:cd:35:f9:87:04:6f:f3:d0:1b:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:FB:D8:64:72:97:08:2C:03:11:7A:E9:E0:C0:14:77:8D:E5:BD
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:8e:5f:9a:df:89:7a:c3:34:d9:a7:be:41:e7:1d:8b:75:
28:d9:dc:25:d6:d6:65:e1:15:74:64:b7:42:7a:f1:c9:2c:24:
90:4e:8d:d7:e1:e6:02:67:02:c7:71:2c:7a:ac:19:3a:4c:af:
52:d5:57:c9:c0:19:c2:7c:e2:41:e7:b2:8f:a0:29:00:6a:74:
dc:ce:b1:0e:8f:c3:fd:55:3a:4c:52:0f:4a:2d:b5:ad:f6:d1:
5a:f0:c3:63:35:ba:2c:e2:a5:b8:27:1a:88:97:06:2e:ac:0f:
d9:56:9c:30:82:22:50:2b:07:28:0c:52:e8:7b:12:77:bb:cc:
99:1d:a1:bf:63:37:83:12:42:f7:7f:5b:5d:31:83:1b:ba:d2:
13:47:b1:64:96:63:88:86:71:01:ff:b9:0c:0e:fa:71:fc:6c:
20:88:a8:43:d4:98:da:82:b5:f1:86:1b:34:7a:ae:33:16:48:
6f:f7:dc:1f:4c:09:96:c2:e7:fe:28:89:76:de:18:e6:92:9c:
ba:9d:6d:4a:ec:9f:b6:36:61:8d:01:2a:bc:e0:fa:7b:12:3d:
3e:02:6d:f7:bc:e5:a5:a6:82:bc:a3:d3:9e:c2:56:e6:21:c2:
58:3f:98:b7:f0:7e:ec:c4:ed:96:05:06:80:0f:89:f2:67:8e:
c6:d7:c3:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0F/Mg2RDjUw1/xZh9JIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5
ZmY3MjkwHhcNMjQxMTIyMDMwMDMwWhcNMjQxMTIzMDMwMDMwWjAzMTEwLwYDVQQD
Eyg3NDEzZmJkODY0NzI5NzA4MmMwMzExN2FlOWUwYzAxNDc3OGRlNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2uZNKHjQ+memKF51KyBjfnlMYmH
mG7nLrzOKUISlqJ7135h58yl1ROUL/i6fCq3DGl/P3/xd44HQ5z7u7B6AeCQEgle
p5jfd9Ugg9NdAPPWc+IxIgoJgdSArZlY20JqogZYJezqw+Pj9/53nfnZvgNT/y5Y
mkVd0jbZn76qxmzQ63VUekmTxUy6sKcG3PWeqnwYJ0nCuqs4mT2ckMfcnMjr5JO5
1cKoTTtAZkLz7jAIdrdHk5KiPkWnpjQpKytqz9np3vGGqnmHz0AGk2/vBO7UX9im
+zB6KLkSqLy6kTRlEY7vjS1qGPC0pSBddavP3yhf6tHNNfmHBG/z0BuVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQT+9hkcpcILAMReungwBR3jeW9MB8GA1UdIwQY
MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt
Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl
LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/KOX5rf
iXrDNNmnvkHnHYt1KNncJdbWZeEVdGS3QnrxySwkkE6N1+HmAmcCx3EseqwZOkyv
UtVXycAZwnziQeeyj6ApAGp03M6xDo/D/VU6TFIPSi21rfbRWvDDYzW6LOKluCca
iJcGLqwP2VacMIIiUCsHKAxS6HsSd7vMmR2hv2M3gxJC939bXTGDG7rSE0exZJZj
iIZxAf+5DA76cfxsIIioQ9SY2oK18YYbNHquMxZIb/fcH0wJlsLn/iiJdt4Y5pKc
up1tSuyftjZhjQEqvOD6exI9PgJt97zlpaaCvKPTnsJW5iHCWD+Yt/B+7MTtlgUG
gA+J8meOxtfDEw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:10 2024 by rpki-client on console-ams.rpki-client.org