Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: 4WxISfsCMGGRsqJ+N1J1LSy4Wl+fbSk5WxTj/yyh1DI=
Subject key identifier: 74:F8:B9:44:90:D9:C9:2F:A7:64:6F:E6:0E:F7:D2:81:8D:36:D6:B1
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019350BDF421EC517D4E56183005EECDC827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 136D
Signing time: Thu 21 Nov 2024 22:00:46 +0000
Manifest this update: Thu 21 Nov 2024 22:00:46 +0000
Manifest next update: Fri 22 Nov 2024 22:00:46 +0000
Files and hashes: 1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: rzfvA1ZZxOw/+0hy2KG/zOJ+hMZRJjAb2gjmzJyU/iM=)
2: gX2O5YdaW5pGGuBB3Pm6dGJswec.roa (hash: xXSvsOAikuiU/cbpEKXTIjYoYofHOSA6Z9NNGe/7zrE=)
3: iULy8Djl5_TRgw9hP5o9m5dr8_I.roa (hash: X9gVLxAwGXxjXDVoXh2pcgB/+kq9kXhcfltwOHw8Pjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bd:f4:21:ec:51:7d:4e:56:18:30:05:ee:cd:c8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Nov 21 22:00:46 2024 GMT
Not After : Nov 22 22:00:46 2024 GMT
Subject: CN=74f8b94490d9c92fa7646fe60ef7d2818d36d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:d4:ab:1d:75:23:74:d9:5e:6f:dc:39:a6:
62:92:31:fe:bd:bb:6a:fa:c7:8e:01:3f:5c:1e:fd:
2d:76:f1:08:91:b0:bb:e2:62:b4:cf:b0:98:54:eb:
85:a9:01:4e:ac:f4:5c:f1:31:a6:25:ac:44:a3:87:
ad:71:1e:ad:31:70:1f:8b:4d:e8:32:1f:e9:5c:48:
92:4f:40:f8:7f:ae:e1:4a:fa:8b:00:54:53:22:00:
15:ed:68:e5:88:dd:f1:65:84:48:e5:ba:c0:10:db:
17:6f:d4:74:f5:79:03:31:9d:ec:54:b4:c0:5a:75:
4e:29:5c:b6:23:4b:4e:6d:e0:39:7c:60:7e:07:79:
cb:3f:b8:5c:05:2c:10:d7:f7:d8:01:c4:c9:7f:ef:
0b:ff:8e:28:b2:0b:ca:6e:b5:39:fd:92:86:5c:81:
1e:ff:3e:b6:04:e5:5e:99:81:85:bd:f4:5c:81:cd:
5c:56:25:d8:c8:50:62:54:d3:c2:64:3a:ed:28:1f:
d6:aa:0b:0b:a2:41:ea:10:4f:5f:fa:69:eb:2a:be:
4e:e2:dd:b0:09:a9:d4:c4:2d:8c:bc:fb:0e:3f:66:
7b:fb:9c:48:36:28:3e:af:44:53:24:24:f0:20:27:
be:ae:8b:d7:1c:3f:60:59:9b:68:b5:a1:62:a9:1d:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:B9:44:90:D9:C9:2F:A7:64:6F:E6:0E:F7:D2:81:8D:36:D6:B1
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:36:bd:50:ed:70:71:a9:e0:b7:b1:ce:86:06:5f:9e:94:
0e:8e:88:6d:7d:b4:87:84:35:4b:58:67:f6:a3:bc:fe:0c:e6:
ec:27:2a:28:08:41:e9:94:e0:13:87:df:5d:49:3a:42:c8:ab:
c5:d3:27:e6:3a:f1:50:a2:72:29:e9:e0:54:d4:dd:0d:00:54:
e9:bb:84:6f:56:b7:c1:a8:26:02:fe:f5:c7:e2:43:57:09:07:
21:52:1b:53:e1:6f:55:87:4c:a7:40:84:d7:72:f0:de:90:a6:
a3:8e:ca:39:49:77:f4:cb:7c:31:f0:84:38:9a:fb:5b:7a:60:
68:16:ba:81:ea:10:fa:17:dc:99:d8:c4:ca:2b:d3:99:cb:c9:
95:e3:5e:16:33:b7:7e:c4:39:13:4c:32:c4:43:b1:14:95:a4:
6f:ab:3b:c5:30:cf:de:f4:52:f1:65:9d:e2:b4:36:b2:22:b6:
1f:ea:98:cd:bd:76:bc:fe:09:85:04:23:47:25:a1:51:26:93:
e6:c4:b7:a0:74:d4:1c:a9:b6:86:17:7e:14:07:24:1a:03:b5:
5f:a5:af:73:18:23:ed:40:9c:8e:3c:a6:eb:e2:3d:38:47:cd:
ca:a2:c0:66:8d:01:1e:6e:7e:ca:ca:3c:6a:79:02:96:ec:85:
49:9f:31:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQvfQh7FF9TlYYMAXuzcgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWEyYTk0MDViZGExNjcxYzEwNzc2ZjQ0MjYyNzNjOTA0
ZTRhZDAwHhcNMjQxMTIxMjIwMDQ2WhcNMjQxMTIyMjIwMDQ2WjAzMTEwLwYDVQQD
Eyg3NGY4Yjk0NDkwZDljOTJmYTc2NDZmZTYwZWY3ZDI4MThkMzZkNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68/Uqx11I3TZXm/cOaZikjH+vbtq
+seOAT9cHv0tdvEIkbC74mK0z7CYVOuFqQFOrPRc8TGmJaxEo4etcR6tMXAfi03o
Mh/pXEiST0D4f67hSvqLAFRTIgAV7WjliN3xZYRI5brAENsXb9R09XkDMZ3sVLTA
WnVOKVy2I0tObeA5fGB+B3nLP7hcBSwQ1/fYAcTJf+8L/44osgvKbrU5/ZKGXIEe
/z62BOVemYGFvfRcgc1cViXYyFBiVNPCZDrtKB/WqgsLokHqEE9f+mnrKr5O4t2w
CanUxC2MvPsOP2Z7+5xINig+r0RTJCTwICe+rovXHD9gWZtotaFiqR23fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT4uUSQ2ckvp2Rv5g730oGNNtaxMB8GA1UdIwQY
MBaAFEEaKpQFvaFnHBB3b0QmJzyQTkrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQt
OGM1MmU2NjZhOGEyLzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTY4NzAtMDk5MC00YzIxLTllNGQtOGM1MmU2NjZhOGEy
LzEvUVJvcWxBVzlvV2NjRUhkdlJDWW5QSkJPU3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioQ2vVDt
cHGp4LexzoYGX56UDo6IbX20h4Q1S1hn9qO8/gzm7CcqKAhB6ZTgE4ffXUk6Qsir
xdMn5jrxUKJyKengVNTdDQBU6buEb1a3wagmAv71x+JDVwkHIVIbU+FvVYdMp0CE
13Lw3pCmo47KOUl39Mt8MfCEOJr7W3pgaBa6geoQ+hfcmdjEyivTmcvJleNeFjO3
fsQ5E0wyxEOxFJWkb6s7xTDP3vRS8WWd4rQ2siK2H+qYzb12vP4JhQQjRyWhUSaT
5sS3oHTUHKm2hhd+FAckGgO1X6Wvcxgj7UCcjjym6+I9OEfNyqLAZo0BHm5+yso8
ankCluyFSZ8x4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:55 2024 by rpki-client on console-fra.rpki-client.org