Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: tAZVa8yqQ8IOMZUPLFLh0PHdbyRXYnrB5+cTZyDE6iM=
Subject key identifier: 8C:E1:EE:F8:07:9F:A1:90:DE:B9:DD:83:00:79:B2:74:CE:80:00:A1
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 019355089391EA293FBA0D6D5FB6FC720A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 0274
Signing time: Fri 22 Nov 2024 18:00:45 +0000
Manifest this update: Fri 22 Nov 2024 18:00:45 +0000
Manifest next update: Sat 23 Nov 2024 18:00:45 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: J+5Lf0xaYPd/6EtYHQvLygvvSKEP3JA8GDTMMsaBHNI=)
2: lr7o-wDe4-DQ3EDBYahsjTpR_So.roa (hash: 3+oufTWsehyJZQNfxpds6hsmLvVLtbFnFA72v/zBhUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:93:91:ea:29:3f:ba:0d:6d:5f:b6:fc:72:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Nov 22 18:00:45 2024 GMT
Not After : Nov 23 18:00:45 2024 GMT
Subject: CN=8ce1eef8079fa190deb9dd830079b274ce8000a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:51:b9:c0:75:92:b9:02:0a:3c:10:48:9d:
66:74:3c:ec:75:1b:40:df:a5:80:bb:b1:33:29:ac:
7d:56:0a:78:ce:be:a4:60:7f:9e:7e:39:2d:29:44:
ef:35:c5:ed:0e:3d:34:cd:d8:7b:6b:dd:75:f5:04:
b1:2f:3e:72:ac:93:10:9d:67:9b:1a:3c:00:1b:08:
7f:b4:26:3e:31:1b:7c:f7:08:c9:d7:ab:6b:25:08:
15:fa:6b:21:20:a5:4c:b3:47:33:c4:f6:8e:6e:08:
e2:b9:46:5e:5e:68:3f:ac:fc:fe:a7:dd:2c:50:c1:
6d:fe:23:33:c2:86:15:eb:1e:13:30:59:70:c1:c2:
cb:01:38:30:1f:3c:14:55:bd:85:b5:11:d8:8b:41:
65:20:42:3c:9d:fa:42:72:ee:c5:8b:07:90:5c:00:
4c:2b:88:85:52:4b:55:b7:3f:0c:8b:a8:7a:25:46:
72:85:e5:0e:09:05:98:c7:00:13:06:9d:53:51:8c:
ee:1e:43:c7:f9:30:c8:43:81:40:b4:5f:e7:6e:16:
ff:ab:3c:66:04:d2:12:86:85:65:ce:82:82:48:12:
bc:71:b6:a3:23:bb:c1:91:bb:88:21:39:58:35:26:
cd:35:e9:d8:72:03:1c:5a:22:49:f4:31:cc:3c:c4:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:EE:F8:07:9F:A1:90:DE:B9:DD:83:00:79:B2:74:CE:80:00:A1
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:38:af:4b:fb:83:87:b8:5b:e9:fb:e1:f0:e0:fb:11:6d:
20:49:07:e6:4c:f8:ac:63:1c:03:22:40:e2:e6:37:9b:dd:2e:
18:de:89:98:d2:0c:10:41:ae:ed:e2:76:a3:f7:5e:f6:d9:f8:
c1:2f:e2:9b:13:1c:31:8e:3d:94:b7:b4:9d:27:9b:10:52:ac:
10:24:c4:e0:bb:21:c9:01:80:05:45:a0:9b:f7:65:24:f7:8b:
02:54:dd:be:3f:f7:78:78:db:35:9e:03:24:4f:d8:79:96:25:
ee:bf:7d:d4:b3:3d:dd:28:69:9b:31:4b:75:7d:72:13:ff:d8:
52:40:37:d4:81:13:d1:b2:c9:ee:03:0b:21:82:1d:f3:60:9f:
40:f8:16:33:8b:7c:ab:d7:8f:14:45:65:39:31:bf:9d:86:a2:
e8:0c:77:b2:df:84:e2:31:54:0b:ee:96:04:dd:c7:05:5d:8e:
e2:2c:43:38:92:e3:fb:10:ba:dd:6d:6e:79:55:2e:e2:5a:25:
5e:cf:63:17:1c:cc:47:a0:17:ba:82:dd:dc:33:31:8b:4c:7b:
1d:c8:f0:43:7c:93:d6:3a:9b:70:1d:67:52:3e:8d:50:e5:bf:
ce:a4:16:62:86:c1:1c:62:0d:0e:e1:11:f4:a6:76:74:5a:41:
9f:b5:cf:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCJOR6ik/ug1tX7b8cgpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0
YmQ5MDUwHhcNMjQxMTIyMTgwMDQ1WhcNMjQxMTIzMTgwMDQ1WjAzMTEwLwYDVQQD
Eyg4Y2UxZWVmODA3OWZhMTkwZGViOWRkODMwMDc5YjI3NGNlODAwMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9RucB1krkCCjwQSJ1mdDzsdRtA
36WAu7EzKax9Vgp4zr6kYH+efjktKUTvNcXtDj00zdh7a9119QSxLz5yrJMQnWeb
GjwAGwh/tCY+MRt89wjJ16trJQgV+mshIKVMs0czxPaObgjiuUZeXmg/rPz+p90s
UMFt/iMzwoYV6x4TMFlwwcLLATgwHzwUVb2FtRHYi0FlIEI8nfpCcu7FiweQXABM
K4iFUktVtz8Mi6h6JUZyheUOCQWYxwATBp1TUYzuHkPH+TDIQ4FAtF/nbhb/qzxm
BNIShoVlzoKCSBK8cbajI7vBkbuIITlYNSbNNenYcgMcWiJJ9DHMPMTn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzh7vgHn6GQ3rndgwB5snTOgAChMB8GA1UdIwQY
MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt
NjRiZmI3OTkwMGQ2LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1ZjktNjRiZmI3OTkwMGQ2
LzEvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2Q4r0v7
g4e4W+n74fDg+xFtIEkH5kz4rGMcAyJA4uY3m90uGN6JmNIMEEGu7eJ2o/de9tn4
wS/imxMcMY49lLe0nSebEFKsECTE4LshyQGABUWgm/dlJPeLAlTdvj/3eHjbNZ4D
JE/YeZYl7r991LM93ShpmzFLdX1yE//YUkA31IET0bLJ7gMLIYId82CfQPgWM4t8
q9ePFEVlOTG/nYai6Ax3st+E4jFUC+6WBN3HBV2O4ixDOJLj+xC63W1ueVUu4lol
Xs9jFxzMR6AXuoLd3DMxi0x7HcjwQ3yT1jqbcB1nUj6NUOW/zqQWYobBHGINDuER
9KZ2dFpBn7XPxg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:39 2024 by rpki-client on console-ams.rpki-client.org