Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: ydqpAjus6xPyTKS1VoX3zx6X/Z5LwIEcVVZOz1ZexB8=
Subject key identifier: C2:43:EC:7F:BE:45:51:3A:2C:0B:3A:A2:1A:70:97:56:4B:53:C9:7D
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018F88C8C8B8EBC7DF5201CD45AF58B8856A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 0DE7
Signing time: Fri 17 May 2024 23:00:10 +0000
Manifest this update: Fri 17 May 2024 23:00:10 +0000
Manifest next update: Sat 18 May 2024 23:00:10 +0000
Files and hashes: 1: 1DAJXXrivuscgW0iOZh6aCBYqTo.roa (hash: BQqVMoROLT3FfEF/IwrXi7W2D1e0TI3qWzGOGCskKE4=)
2: 6So1IzRK1T8pR05awDPlZ9N1znc.roa (hash: 74ZTMFoSJrDgu8SqwSIaPheGy94mV5SxO6sCgC3HlQI=)
3: 99P57c1zVNrWmpI-GxycHqN_2JU.roa (hash: y3ZHsTEmqnBKeqUU0a+uM9GUfwciN45PrDaLaV6327Y=)
4: ECsaUVVVgDAH2GYlpyNNw0pEssQ.roa (hash: j5os1gTUeKTy3VxPuvmnYF85DJ/cjuNiNsiwm73RyBA=)
5: IDxG78PQxIN0TCrkzyYuVdJHdBA.roa (hash: fixTjWdDvSCdL00534lofwBIu75Xm36agFhZ9bnIBVk=)
6: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: W8qSLXddUbJ5wY0GqpxVdQKJLBQRJ4nzeD8huf8QTXs=)
7: Y0KBcsCNAi5RccIGBrFbLkM5T54.roa (hash: NvYthpub3WoBw+3y0gP61w72qKDf1gP2s/VCqfrDD6M=)
8: YZYZLivlmcL-vSFt1e8m0ZBepa4.roa (hash: k3f0s8UwFdkY6XgsRysuBGCecHrlsViAPdINVvudADI=)
9: jqSSnGxPMLBtHiXv47eMBAvrb_8.roa (hash: GddhtWOXLHoU1zIbORIvnmaMzYMgpUsNnxOAOZnpmgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:c8:c8:b8:eb:c7:df:52:01:cd:45:af:58:b8:85:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: May 17 23:00:10 2024 GMT
Not After : May 18 23:00:10 2024 GMT
Subject: CN=c243ec7fbe45513a2c0b3aa21a7097564b53c97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:8d:c6:e7:39:5a:75:79:65:97:be:06:3c:
42:bf:d9:1f:5a:6f:c1:07:3b:fa:c1:4d:e2:b2:82:
7a:f5:29:b3:a3:6f:d7:15:3a:ae:0a:36:b6:f4:4a:
c0:07:81:30:40:9e:1a:2e:a9:99:5a:b5:f1:1a:6d:
5e:41:e1:57:78:65:3d:47:75:c0:b1:8c:e8:66:25:
57:30:25:74:3f:41:60:68:c5:03:60:3a:f8:e3:6d:
3e:d9:f7:4f:b2:21:74:9d:07:54:5e:8e:07:74:53:
9b:6d:e4:15:54:d4:78:58:af:43:0a:d5:2b:57:4f:
5f:4d:fa:57:7f:11:e2:56:95:de:56:c7:93:32:99:
79:48:48:da:0b:4b:2e:11:84:41:2a:d5:ee:85:2a:
89:95:98:60:55:8e:08:d3:1d:41:6d:86:d0:38:4a:
b4:eb:c4:a3:11:9a:7e:15:28:57:df:bd:9f:66:ca:
4a:b3:28:18:f8:4b:6c:82:d7:3e:18:79:ae:5a:53:
8b:ad:ab:86:e7:45:c7:f8:1d:ec:ff:76:65:5d:69:
8a:59:ba:06:6f:bb:6d:ed:df:d3:ea:46:3a:cd:35:
d5:af:bd:52:59:27:63:dd:43:9f:cc:17:cc:0b:a0:
96:5d:e6:54:12:12:63:6d:89:a4:ad:3c:ba:a7:3c:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:EC:7F:BE:45:51:3A:2C:0B:3A:A2:1A:70:97:56:4B:53:C9:7D
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:47:2b:d8:bf:78:4f:2d:86:52:39:95:fb:9f:6e:b4:2c:
a3:a0:72:7b:d8:f3:d7:bd:51:ce:dc:6e:e9:96:b4:20:65:5c:
8e:c7:ea:0d:bb:38:57:94:19:92:1e:cf:7b:5c:68:43:67:57:
df:25:dd:8b:41:ba:eb:9d:fe:db:fc:63:a7:c0:eb:6e:b6:a3:
81:f7:fc:6d:65:1a:16:74:d7:3d:93:c8:1d:ab:b8:c7:9e:9d:
17:a2:e6:ef:31:fa:e4:8e:4b:1f:1e:6a:70:ff:a9:cc:2a:b1:
ba:93:43:3f:2d:e9:b0:d2:01:49:c5:57:fa:97:91:7b:ff:26:
65:cd:e8:6a:57:74:97:17:b1:41:9d:f7:7a:48:3c:11:1e:26:
bf:46:e6:f5:d8:3b:e0:8b:2b:92:90:b8:ad:b6:30:48:be:d4:
3a:1d:61:c2:e2:e5:5e:b8:fc:21:11:e2:26:91:05:08:18:de:
26:65:74:60:50:c8:fc:db:85:10:c3:bb:22:40:50:2d:cc:ee:
83:cd:32:9b:e2:2a:a3:55:8a:2d:a5:93:1a:08:24:7b:ae:3f:
9d:8c:11:9b:dd:10:4a:be:e1:4b:cd:06:ee:50:9b:cb:40:70:
7f:7a:93:76:c1:62:f7:40:09:2e:56:f1:04:3d:60:d6:9c:21:
5a:2c:24:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IyMi468ffUgHNRa9YuIVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjQwNTE3MjMwMDEwWhcNMjQwNTE4MjMwMDEwWjAzMTEwLwYDVQQD
EyhjMjQzZWM3ZmJlNDU1MTNhMmMwYjNhYTIxYTcwOTc1NjRiNTNjOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy+Nxuc5WnV5ZZe+BjxCv9kfWm/B
Bzv6wU3isoJ69Smzo2/XFTquCja29ErAB4EwQJ4aLqmZWrXxGm1eQeFXeGU9R3XA
sYzoZiVXMCV0P0FgaMUDYDr4420+2fdPsiF0nQdUXo4HdFObbeQVVNR4WK9DCtUr
V09fTfpXfxHiVpXeVseTMpl5SEjaC0suEYRBKtXuhSqJlZhgVY4I0x1BbYbQOEq0
68SjEZp+FShX372fZspKsygY+Etsgtc+GHmuWlOLrauG50XH+B3s/3ZlXWmKWboG
b7tt7d/T6kY6zTXVr71SWSdj3UOfzBfMC6CWXeZUEhJjbYmkrTy6pzzuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJD7H++RVE6LAs6ohpwl1ZLU8l9MB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJupHK9i/
eE8thlI5lfufbrQso6Bye9jz171Rztxu6Za0IGVcjsfqDbs4V5QZkh7Pe1xoQ2dX
3yXdi0G6653+2/xjp8Drbrajgff8bWUaFnTXPZPIHau4x56dF6Lm7zH65I5LHx5q
cP+pzCqxupNDPy3psNIBScVX+peRe/8mZc3oald0lxexQZ33ekg8ER4mv0bm9dg7
4IsrkpC4rbYwSL7UOh1hwuLlXrj8IRHiJpEFCBjeJmV0YFDI/NuFEMO7IkBQLczu
g80ym+Iqo1WKLaWTGggke64/nYwRm90QSr7hS80G7lCby0Bwf3qTdsFi90AJLlbx
BD1g1pwhWiwkeA==
-----END CERTIFICATE-----
Generated at Sat May 18 01:56:37 2024 by rpki-client on console-fra.rpki-client.org