Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: kOuo4Xg5k+8MYumgXfj67o6OFLZvMYzmmCa3+ishEHA=
Subject key identifier: 14:62:51:C8:10:91:48:AC:43:AD:8C:15:7B:9E:18:B6:9E:5B:1B:A8
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0193553F4BFF877B8FA5377E492C5570EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 0FBF
Signing time: Fri 22 Nov 2024 19:00:31 +0000
Manifest this update: Fri 22 Nov 2024 19:00:31 +0000
Manifest next update: Sat 23 Nov 2024 19:00:31 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 8HXZOeNMD9S10482d52eGVb18ppZEdYyAfyf9ZNH1fQ=)
2: SuOwtMbuU-Z96TNV8ykX60wQcAA.roa (hash: XZipaCIidQfi/ERoF9Ii0CSbt4ytQJhD8tTSLBWZVGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:4b:ff:87:7b:8f:a5:37:7e:49:2c:55:70:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Nov 22 19:00:31 2024 GMT
Not After : Nov 23 19:00:31 2024 GMT
Subject: CN=146251c8109148ac43ad8c157b9e18b69e5b1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:06:c9:41:25:b3:19:f5:35:81:73:35:30:
12:9d:7b:4f:6b:75:57:bf:d0:af:75:61:08:77:f0:
65:e6:18:4f:a8:fe:9d:70:31:37:dd:3e:24:b5:b0:
9e:17:69:b8:55:4c:46:b7:04:77:67:b0:ae:5a:8e:
ce:2c:7c:5a:b8:d8:ba:2e:6c:c0:94:ae:b0:cb:a8:
ee:8b:3b:cb:5e:e4:fc:35:b5:56:84:28:58:44:7b:
8f:32:8c:fa:df:b0:d3:c6:de:4f:57:ae:f3:5d:2f:
2a:97:5a:b5:44:0e:4c:d8:42:da:80:6d:76:af:13:
12:7f:c7:48:13:8b:d3:a4:17:fa:f2:7b:13:4a:fc:
c3:08:fa:7d:d3:cd:81:cd:43:01:3b:af:3c:c9:1e:
45:e1:5e:8e:dd:2a:2d:69:13:74:67:02:6e:01:87:
8e:43:67:08:9b:28:4d:ef:4b:57:b0:08:88:ac:e0:
16:3b:b3:53:45:88:09:af:a5:06:2d:c0:17:44:ca:
e3:58:4c:2e:d1:ad:76:9c:c9:49:d4:b3:66:1b:f8:
46:36:49:e2:90:9d:19:03:27:4c:41:a9:bb:a0:39:
86:66:54:c7:39:c1:85:4f:7b:ad:81:92:0b:bd:69:
90:55:2d:94:3e:d7:fb:31:b8:db:d8:de:65:dd:c3:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:51:C8:10:91:48:AC:43:AD:8C:15:7B:9E:18:B6:9E:5B:1B:A8
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c9:f8:a9:8d:53:c2:85:1b:69:57:10:1a:63:f3:e1:f7:76:
80:2c:88:9c:e9:15:e7:01:f3:bd:86:69:08:49:bc:5e:2d:0a:
19:65:33:4c:98:29:f8:ae:1d:17:d7:ad:17:cc:1d:67:0a:25:
7c:f2:c4:09:15:b8:9d:90:c4:82:0b:fe:17:2f:ed:dd:af:4e:
c2:03:41:ee:44:9d:24:cd:e1:06:b6:df:90:96:0b:a2:5e:5d:
6a:f6:51:f6:1b:26:88:07:f8:d3:98:f7:c3:b5:de:1b:03:d9:
84:0d:1c:27:73:a0:4e:8b:09:4a:da:8b:de:4b:7a:59:50:dd:
84:c9:fe:b4:87:ce:1a:e0:79:45:38:a8:82:6a:55:7e:77:48:
0b:30:01:c3:7f:81:4e:9d:95:a5:f7:0f:cd:79:60:58:b3:5f:
a4:e4:72:59:a1:c9:36:41:24:f3:bc:fb:3e:04:54:72:7d:2c:
d7:60:02:c7:43:16:ef:69:59:47:81:e6:ef:a0:7b:25:58:59:
c2:fc:cd:f8:6b:d5:9f:ee:6e:5a:10:24:57:6f:47:16:93:a9:
1d:c7:7b:c5:ec:d1:44:86:60:64:8b:21:21:4e:96:a6:15:7b:
7c:03:c9:fc:e0:0a:28:c7:e1:dd:1e:60:d1:99:f4:f0:6e:05:
bc:77:77:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP0v/h3uPpTd+SSxVcO3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjQxMTIyMTkwMDMxWhcNMjQxMTIzMTkwMDMxWjAzMTEwLwYDVQQD
EygxNDYyNTFjODEwOTE0OGFjNDNhZDhjMTU3YjllMThiNjllNWIxYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB0GyUElsxn1NYFzNTASnXtPa3VX
v9CvdWEId/Bl5hhPqP6dcDE33T4ktbCeF2m4VUxGtwR3Z7CuWo7OLHxauNi6LmzA
lK6wy6juizvLXuT8NbVWhChYRHuPMoz637DTxt5PV67zXS8ql1q1RA5M2ELagG12
rxMSf8dIE4vTpBf68nsTSvzDCPp9082BzUMBO688yR5F4V6O3SotaRN0ZwJuAYeO
Q2cImyhN70tXsAiIrOAWO7NTRYgJr6UGLcAXRMrjWEwu0a12nMlJ1LNmG/hGNkni
kJ0ZAydMQam7oDmGZlTHOcGFT3utgZILvWmQVS2UPtf7Mbjb2N5l3cOO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRiUcgQkUisQ62MFXueGLaeWxuoMB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMn4qY1T
woUbaVcQGmPz4fd2gCyInOkV5wHzvYZpCEm8Xi0KGWUzTJgp+K4dF9etF8wdZwol
fPLECRW4nZDEggv+Fy/t3a9OwgNB7kSdJM3hBrbfkJYLol5davZR9hsmiAf405j3
w7XeGwPZhA0cJ3OgTosJStqL3kt6WVDdhMn+tIfOGuB5RTiogmpVfndICzABw3+B
Tp2VpfcPzXlgWLNfpORyWaHJNkEk87z7PgRUcn0s12ACx0MW72lZR4Hm76B7JVhZ
wvzN+GvVn+5uWhAkV29HFpOpHcd7xezRRIZgZIshIU6WphV7fAPJ/OAKKMfh3R5g
0Zn08G4FvHd3Wg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:45 2024 by rpki-client on console-fra.rpki-client.org