Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: nPuuuWHzT3XTHV9BMIwv0aMkoD3WTA4lGBj6qZG9H2k=
Subject key identifier: BF:48:61:35:59:52:3E:32:27:BD:78:E9:C7:13:ED:32:46:E2:98:BE
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019355AD3A9458A79BAA33B133EB894BF5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 21:00:36 +0000
Manifest this update: Fri 22 Nov 2024 21:00:36 +0000
Manifest next update: Sat 23 Nov 2024 21:00:36 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: ABQRQbc5okTzm+Cv26FJLSSVfJTG43WQVWOYVuFZIiU=)
2: fZy0bBIeBkep5lNh4xptaHNgTvc.roa (hash: Ej+2caQzLCPLdPDl32okZ8/KjtUIW1/Z8hUzURtVseg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:3a:94:58:a7:9b:aa:33:b1:33:eb:89:4b:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Nov 22 21:00:36 2024 GMT
Not After : Nov 23 21:00:36 2024 GMT
Subject: CN=bf48613559523e3227bd78e9c713ed3246e298be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:d5:35:bf:87:34:2f:a3:df:96:13:31:a3:
b1:a4:92:38:e6:17:b3:22:3e:3f:7b:56:2f:cd:fc:
d3:2a:0d:7d:2f:4d:8c:a3:19:0e:42:0b:fd:94:01:
43:df:ec:53:fc:bb:d0:21:1a:53:61:49:fc:05:08:
e4:34:ae:22:54:fd:98:b1:d8:12:31:6b:da:cc:49:
59:f8:dd:40:b7:5d:5d:02:c4:fe:87:fe:72:a1:53:
d3:10:c8:b7:b2:82:73:3f:32:58:1d:6b:2d:58:93:
2c:53:6f:bd:c6:49:93:4a:06:c7:fa:a1:65:cf:c5:
cf:e5:61:65:c2:ef:bf:aa:28:0c:3f:7d:4a:8f:d5:
ba:96:1c:da:a0:1c:14:df:f6:de:38:8f:4e:07:07:
b8:38:53:41:ad:b2:44:ca:6a:2a:1f:e6:b3:e6:37:
0e:6a:87:d8:57:ce:7e:ef:81:c2:4c:57:4b:0f:f3:
3d:7f:c3:d2:ab:46:86:8e:fc:98:a0:85:86:88:08:
fe:d2:0e:bc:7a:57:b8:2c:d8:da:f9:7f:ef:8d:89:
78:8f:7b:9a:76:b4:9b:a4:8d:96:ae:c1:56:b2:9d:
6c:87:f6:73:05:2a:85:4f:c7:56:bf:89:79:7f:4f:
2f:47:d2:46:49:73:f3:5e:9f:83:24:95:fe:35:3f:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:61:35:59:52:3E:32:27:BD:78:E9:C7:13:ED:32:46:E2:98:BE
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:00:e6:62:1e:90:04:ef:08:6f:23:9e:4e:ba:ed:25:6e:
5f:06:54:1f:79:f9:65:7f:e0:34:ac:4b:39:3e:c1:c4:4e:03:
1b:a2:e7:51:7e:54:b7:b0:3c:97:9e:53:a2:50:de:45:b0:d2:
5a:1b:c3:40:c1:0d:aa:b9:e4:fa:89:6d:b4:eb:57:48:dc:f1:
39:94:d1:25:c6:0d:d3:3b:8d:65:e3:60:67:6a:d2:a2:7c:a0:
96:73:0e:15:9f:9c:50:c9:7c:ab:b4:8c:d4:10:a3:8f:6a:6e:
2a:99:d3:99:8d:b7:c7:d0:a0:49:d1:38:ed:49:82:8f:e7:7a:
68:73:b5:a9:a1:da:14:6a:c8:bf:ec:36:54:32:74:5e:42:c3:
be:78:69:a2:59:22:0a:59:2a:f3:0e:ff:74:cc:33:39:28:d5:
54:08:7c:48:7b:30:42:b2:b6:9f:d4:d7:85:c4:f4:f6:8b:42:
1e:3c:a8:89:7f:9b:d3:3d:fb:3a:47:63:18:61:5a:18:70:46:
28:ee:ec:ea:f9:f9:b6:c5:5f:15:19:a5:51:27:77:c8:99:ff:
37:81:b2:c0:21:9f:b2:6d:4f:ed:af:2b:90:75:97:2f:96:80:
f1:ed:ba:29:75:4e:15:cc:52:79:d9:4d:8c:a5:d3:01:15:38:
f4:ed:28:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrTqUWKebqjOxM+uJS/XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjQxMTIyMjEwMDM2WhcNMjQxMTIzMjEwMDM2WjAzMTEwLwYDVQQD
EyhiZjQ4NjEzNTU5NTIzZTMyMjdiZDc4ZTljNzEzZWQzMjQ2ZTI5OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj3VNb+HNC+j35YTMaOxpJI45hez
Ij4/e1YvzfzTKg19L02MoxkOQgv9lAFD3+xT/LvQIRpTYUn8BQjkNK4iVP2YsdgS
MWvazElZ+N1At11dAsT+h/5yoVPTEMi3soJzPzJYHWstWJMsU2+9xkmTSgbH+qFl
z8XP5WFlwu+/qigMP31Kj9W6lhzaoBwU3/beOI9OBwe4OFNBrbJEymoqH+az5jcO
aofYV85+74HCTFdLD/M9f8PSq0aGjvyYoIWGiAj+0g68ele4LNja+X/vjYl4j3ua
drSbpI2WrsFWsp1sh/ZzBSqFT8dWv4l5f08vR9JGSXPzXp+DJJX+NT/SJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9IYTVZUj4yJ7146ccT7TJG4pi+MB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe8A5mIe
kATvCG8jnk667SVuXwZUH3n5ZX/gNKxLOT7BxE4DG6LnUX5Ut7A8l55TolDeRbDS
WhvDQMENqrnk+olttOtXSNzxOZTRJcYN0zuNZeNgZ2rSonyglnMOFZ+cUMl8q7SM
1BCjj2puKpnTmY23x9CgSdE47UmCj+d6aHO1qaHaFGrIv+w2VDJ0XkLDvnhpolki
Clkq8w7/dMwzOSjVVAh8SHswQrK2n9TXhcT09otCHjyoiX+b0z37OkdjGGFaGHBG
KO7s6vn5tsVfFRmlUSd3yJn/N4GywCGfsm1P7a8rkHWXL5aA8e26KXVOFcxSedlN
jKXTARU49O0oRg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:20 2024 by rpki-client on console-ams.rpki-client.org