Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: mnaMhUWZMtdGN1GUUbPOVbwkzKVmw/X0A4WprYjuP5E=
Subject key identifier: 4A:EE:97:80:4D:3A:9B:57:29:90:F3:BC:0F:64:62:8E:86:BB:D3:1F
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 018F3BF8F51F097C8E9D94B283BE008D3F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1152
Signing time: Fri 03 May 2024 01:02:02 +0000
Manifest this update: Fri 03 May 2024 01:02:02 +0000
Manifest next update: Sat 04 May 2024 01:02:02 +0000
Files and hashes: 1: 8s4IkYO9ZNc9rJp7RxCM3Qs3iO4.roa (hash: dHJKL/D6M5rRqAd5fbvGNtB3b0VvA+cXK1LxnmBsL5A=)
2: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: EUFup87wd0xbmgkBRWRo7TbkMLzheeAIc1n/fIMGGKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:f8:f5:1f:09:7c:8e:9d:94:b2:83:be:00:8d:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: May 3 01:02:02 2024 GMT
Not After : May 4 01:02:02 2024 GMT
Subject: CN=4aee97804d3a9b572990f3bc0f64628e86bbd31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:83:02:02:be:24:45:41:9d:78:74:43:fa:
d8:40:c2:0b:f2:b7:d9:16:7f:7f:54:32:d0:bc:7c:
5c:c6:5c:3d:7e:c4:fc:a9:fc:7a:d5:72:25:bc:93:
e8:82:40:70:c0:17:30:34:85:1c:9e:f8:18:26:0f:
26:50:c3:4c:61:c1:d2:8b:d8:c9:4a:ae:f8:e1:c0:
ea:9b:d8:90:23:5a:d4:87:66:b9:79:46:12:9b:ed:
0c:71:77:44:27:fa:32:28:6a:2d:d6:b0:f3:52:b3:
5d:af:71:a9:24:7a:f7:a3:aa:92:d7:35:fe:ce:8c:
e2:34:2f:02:78:ca:fd:e8:c7:df:c2:9b:bf:ff:eb:
31:5e:e1:c5:c7:d6:99:49:3e:81:e2:52:f8:a8:66:
8b:84:7d:ad:1c:68:aa:4c:66:04:72:0d:ad:7a:1f:
1a:cf:09:9a:32:80:67:6f:cb:9c:f9:ea:cc:2d:86:
8d:6b:bc:bf:89:71:04:68:d0:6d:70:d7:64:a5:76:
2a:1a:41:af:5b:c8:ab:83:f2:70:1e:3a:5b:82:90:
fb:0e:29:2f:c2:f2:e1:e6:55:dd:e9:32:ad:bb:1a:
d6:92:68:5e:86:1f:24:49:b4:44:e2:3e:68:dd:03:
ed:fa:86:d4:80:85:a9:b1:d6:38:ed:ad:73:bf:d3:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:97:80:4D:3A:9B:57:29:90:F3:BC:0F:64:62:8E:86:BB:D3:1F
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e3:f7:71:d0:6f:b3:0d:27:92:27:99:b0:0e:b5:60:bd:ba:
1a:50:3a:b5:8e:83:87:6e:55:b4:81:29:51:5e:41:cb:48:52:
43:9b:9f:19:a8:52:8e:51:70:98:00:67:b6:df:b3:d3:74:3e:
d5:24:68:cd:a9:43:ca:d5:74:04:25:0a:20:24:4d:05:99:7b:
9d:0b:c0:76:c1:f0:cb:c2:ec:28:84:b9:1b:db:65:b9:88:11:
77:5d:dd:f1:fc:63:dc:06:38:b6:51:44:5c:7c:fe:2e:68:81:
1a:47:08:8d:4b:43:c5:84:d8:f5:0e:ac:95:70:b8:9b:b9:c9:
58:2a:9d:37:0e:84:1b:c6:02:0a:cb:d3:65:7d:fd:01:18:4c:
93:98:8b:e9:14:4e:8d:18:c8:1e:9b:a7:13:12:0c:06:2d:84:
30:bf:59:6f:d8:d0:e7:98:2d:59:2b:b6:cd:38:91:4a:18:d1:
40:e4:61:cc:92:0b:ba:45:8b:04:0a:76:4c:48:5a:bf:cb:c6:
5e:c8:80:6e:18:cc:e0:82:78:93:81:3b:36:aa:14:99:52:5b:
96:d9:1b:af:36:0c:3f:85:92:3f:c4:c3:59:43:aa:03:84:4e:
66:61:aa:f6:58:c3:48:8e:5e:9c:74:94:ae:01:40:4e:74:09:
7c:0e:b7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+PUfCXyOnZSyg74AjT9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjQwNTAzMDEwMjAyWhcNMjQwNTA0MDEwMjAyWjAzMTEwLwYDVQQD
Eyg0YWVlOTc4MDRkM2E5YjU3Mjk5MGYzYmMwZjY0NjI4ZTg2YmJkMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA2DAgK+JEVBnXh0Q/rYQMIL8rfZ
Fn9/VDLQvHxcxlw9fsT8qfx61XIlvJPogkBwwBcwNIUcnvgYJg8mUMNMYcHSi9jJ
Sq744cDqm9iQI1rUh2a5eUYSm+0McXdEJ/oyKGot1rDzUrNdr3GpJHr3o6qS1zX+
zoziNC8CeMr96Mffwpu//+sxXuHFx9aZST6B4lL4qGaLhH2tHGiqTGYEcg2teh8a
zwmaMoBnb8uc+erMLYaNa7y/iXEEaNBtcNdkpXYqGkGvW8irg/JwHjpbgpD7Dikv
wvLh5lXd6TKtuxrWkmhehh8kSbRE4j5o3QPt+obUgIWpsdY47a1zv9Mi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErul4BNOptXKZDzvA9kYo6Gu9MfMB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeP3cdBv
sw0nkieZsA61YL26GlA6tY6Dh25VtIEpUV5By0hSQ5ufGahSjlFwmABntt+z03Q+
1SRozalDytV0BCUKICRNBZl7nQvAdsHwy8LsKIS5G9tluYgRd13d8fxj3AY4tlFE
XHz+LmiBGkcIjUtDxYTY9Q6slXC4m7nJWCqdNw6EG8YCCsvTZX39ARhMk5iL6RRO
jRjIHpunExIMBi2EML9Zb9jQ55gtWSu2zTiRShjRQORhzJILukWLBAp2TEhav8vG
XsiAbhjM4IJ4k4E7NqoUmVJbltkbrzYMP4WSP8TDWUOqA4ROZmGq9ljDSI5enHSU
rgFATnQJfA63Iw==
-----END CERTIFICATE-----
Generated at Fri May 3 06:40:08 2024 by rpki-client on console-fra.rpki-client.org