Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: j4ym3qhmPO0j2a864P47p8pktfsPPcIEBh4udk5dPvo=
Subject key identifier: 7E:60:07:AD:93:B7:8B:5D:74:C3:85:24:55:43:EB:CE:11:FB:F7:11
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019357D2CDFCDE39963EC244C70C628750B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 07:00:53 +0000
Manifest this update: Sat 23 Nov 2024 07:00:53 +0000
Manifest next update: Sun 24 Nov 2024 07:00:53 +0000
Files and hashes: 1: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: qGe/FFAXXoY1N08SASd4imY4EDvP400lycmWgAVFse8=)
2: sCb1NNGMhe3DGYIcEupY2i3uccU.roa (hash: QoLlvQLZAf5tcjEY70N8/58r/Tpc4dfd3BsCZxALMdo=)
3: vKxtgXNEWl3HfAsosrkeKIGsi24.roa (hash: N1XLSdK6QlfIW/kg6yzMjy7EcDXODsx5+qRMfeDlJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:cd:fc:de:39:96:3e:c2:44:c7:0c:62:87:50:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Nov 23 07:00:53 2024 GMT
Not After : Nov 24 07:00:53 2024 GMT
Subject: CN=7e6007ad93b78b5d74c385245543ebce11fbf711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:48:8a:c1:de:1a:53:86:6c:7a:05:f8:68:
8f:33:a7:22:2e:0a:f4:b0:43:ff:9e:92:b1:97:e6:
99:53:fb:35:bf:19:9a:de:37:50:e8:5c:15:11:2e:
17:de:3e:19:4d:12:a8:c7:93:2e:d4:cf:ed:11:97:
4e:2a:77:8a:3d:5e:2f:2a:fb:8f:16:62:39:aa:6c:
3d:ac:ae:9d:80:4d:20:a8:ff:e9:db:52:e0:3b:7a:
fa:07:56:96:e5:ec:e1:67:3f:b9:ac:b8:1b:df:74:
76:68:d2:74:6f:ca:0d:77:43:8d:82:bc:8c:b8:dd:
9c:21:0f:46:2d:c4:a0:fe:1c:06:54:9d:0e:c1:95:
5f:7c:c1:a2:96:ee:bc:4b:8a:32:68:40:4d:cc:34:
4b:95:91:ad:40:38:a4:a9:1a:99:42:bf:9d:44:f0:
de:0e:55:b9:24:c6:d8:22:cd:f4:3a:7c:eb:a6:58:
1a:63:65:f6:87:b8:eb:8d:b6:f6:45:86:cf:18:8e:
ca:c2:37:b1:2e:0a:c9:9f:29:40:a5:55:f5:3c:03:
8f:b7:6c:95:d0:0f:e0:7c:f8:53:e3:f0:c1:6c:b8:
49:c3:e4:46:5e:29:de:ae:3c:94:7f:ba:7e:c5:18:
bb:76:5d:3f:ee:c3:85:93:16:5d:a1:d1:41:d2:4c:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:07:AD:93:B7:8B:5D:74:C3:85:24:55:43:EB:CE:11:FB:F7:11
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f0:f3:ca:44:6b:6d:0b:2f:78:98:90:67:33:ad:79:30:56:
90:2f:5a:d7:e5:9c:f8:cc:55:c3:93:6e:6f:4f:b3:f8:4b:eb:
24:39:e2:19:d8:ab:62:50:d8:32:f0:51:10:90:26:4e:6e:1a:
83:af:e9:75:0b:a7:d2:96:0a:26:97:1b:93:86:15:42:fd:95:
c7:15:8b:3d:0b:1f:54:ac:d4:9d:1d:ca:9f:8f:11:9d:46:2f:
03:3f:1b:ac:a5:08:d5:b2:7f:7a:2c:c2:33:82:ab:a4:f3:d1:
1d:9f:1f:fb:06:b5:4c:95:67:ae:c8:6d:62:f5:48:d4:88:9f:
50:d6:c3:75:c0:4a:51:d4:ee:aa:1b:e0:22:bf:28:42:d2:96:
af:37:b7:c4:a8:0b:85:8e:dd:48:b8:f1:cf:0d:a3:f6:15:a5:
47:be:d6:18:45:1f:07:13:44:39:f1:4a:79:d8:c0:07:ee:a4:
4d:36:5e:c7:ff:7e:87:94:b4:d9:61:a1:d7:04:33:96:53:17:
82:79:6a:72:88:c4:87:41:e1:75:0c:e2:4e:be:47:a8:9b:90:
22:10:d5:1f:5f:91:ef:85:6d:b6:cf:6f:8c:23:3b:2a:b3:56:
e5:16:84:e4:f1:b8:16:73:30:d2:41:c5:1d:eb:69:21:61:4b:
e2:f9:a7:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0s383jmWPsJExwxih1CxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi
MjhkNzUwHhcNMjQxMTIzMDcwMDUzWhcNMjQxMTI0MDcwMDUzWjAzMTEwLwYDVQQD
Eyg3ZTYwMDdhZDkzYjc4YjVkNzRjMzg1MjQ1NTQzZWJjZTExZmJmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmhIisHeGlOGbHoF+GiPM6ciLgr0
sEP/npKxl+aZU/s1vxma3jdQ6FwVES4X3j4ZTRKox5Mu1M/tEZdOKneKPV4vKvuP
FmI5qmw9rK6dgE0gqP/p21LgO3r6B1aW5ezhZz+5rLgb33R2aNJ0b8oNd0ONgryM
uN2cIQ9GLcSg/hwGVJ0OwZVffMGilu68S4oyaEBNzDRLlZGtQDikqRqZQr+dRPDe
DlW5JMbYIs30OnzrplgaY2X2h7jrjbb2RYbPGI7KwjexLgrJnylApVX1PAOPt2yV
0A/gfPhT4/DBbLhJw+RGXinerjyUf7p+xRi7dl0/7sOFkxZdodFB0kyjswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5gB62Tt4tddMOFJFVD684R+/cRMB8GA1UdIwQY
MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt
YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3
LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPDzykRr
bQsveJiQZzOteTBWkC9a1+Wc+MxVw5Nub0+z+EvrJDniGdirYlDYMvBREJAmTm4a
g6/pdQun0pYKJpcbk4YVQv2VxxWLPQsfVKzUnR3Kn48RnUYvAz8brKUI1bJ/eizC
M4KrpPPRHZ8f+wa1TJVnrshtYvVI1IifUNbDdcBKUdTuqhvgIr8oQtKWrze3xKgL
hY7dSLjxzw2j9hWlR77WGEUfBxNEOfFKedjAB+6kTTZex/9+h5S02WGh1wQzllMX
gnlqcojEh0HhdQziTr5HqJuQIhDVH1+R74Vtts9vjCM7KrNW5RaE5PG4FnMw0kHF
HetpIWFL4vmn4g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:51 2024 by rpki-client on console-fra.rpki-client.org