Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: k6zxtJJpIgykWFCDyD0IMcJfV7gmAml8xOO3tLGbr9U=
Subject key identifier: BB:89:72:88:1E:2F:EC:05:3B:64:7D:ED:6E:E7:09:64:35:94:00:B8
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 018F882458714668D020FEAC0FB05193E16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 117C
Signing time: Fri 17 May 2024 20:00:34 +0000
Manifest this update: Fri 17 May 2024 20:00:34 +0000
Manifest next update: Sat 18 May 2024 20:00:34 +0000
Files and hashes: 1: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: frhRraiH7+46+L5+RFhZO2NL2aAAgVNjxN8T54idDQc=)
2: W1SQmisJz6YHu1ASu95fXwA21Go.roa (hash: MGWjQRhgNZPo0aqExSc9oUQA35rwjqxBoSzAFtRHJK4=)
3: gfnNOK1MYtQ8ir-JS3aa1JZ9338.roa (hash: ogPGbfF8iou7SMFjOUlEiKeAiBoIn1Ck3cPPuSBSYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:58:71:46:68:d0:20:fe:ac:0f:b0:51:93:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: May 17 20:00:34 2024 GMT
Not After : May 18 20:00:34 2024 GMT
Subject: CN=bb8972881e2fec053b647ded6ee70964359400b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:ed:a1:4f:5d:64:c4:58:b9:dd:ed:6c:44:
00:52:0b:2b:5b:64:6c:5b:58:f9:34:5d:5e:52:d0:
4d:89:4d:a8:b0:22:da:6e:1b:db:5e:38:6d:73:47:
99:c4:35:f5:7a:9d:e0:df:0e:70:49:87:38:d2:f7:
75:73:2d:11:eb:6e:2d:b6:5a:2d:5c:4c:08:69:65:
a6:05:5e:e7:01:46:cf:e5:31:7d:c3:69:ca:45:59:
c3:06:5a:29:2f:9b:e0:6e:19:81:78:0f:05:32:a3:
48:31:82:e6:48:ed:7c:35:a5:03:f5:71:8a:45:6a:
38:35:ce:d3:3f:b6:35:cc:87:f1:78:31:9c:2e:b5:
24:ee:9a:92:ad:32:5f:fb:51:a4:41:4d:85:aa:99:
23:d7:63:d8:85:e3:68:b2:be:e1:05:bb:dd:06:09:
6f:ce:aa:82:55:97:5c:85:3f:bb:85:89:82:e5:18:
8e:44:f8:4d:b4:78:d0:1f:1a:02:f0:d9:ed:ea:80:
cd:86:fa:a0:08:06:b7:07:ce:1a:36:e2:85:23:90:
5f:29:ab:a8:70:6a:64:8b:e1:9f:52:3b:b9:87:b7:
e2:c7:6d:e2:16:ae:85:18:5c:15:1c:40:c6:bd:d1:
7d:b0:ea:03:1d:9f:91:7a:d6:82:21:83:ba:aa:49:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:72:88:1E:2F:EC:05:3B:64:7D:ED:6E:E7:09:64:35:94:00:B8
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:24:04:88:51:28:c2:f7:43:91:58:17:13:ae:a4:94:40:7e:
cb:09:38:ed:e5:59:ac:29:eb:9c:90:e7:50:dd:b5:82:85:c4:
35:68:b1:8e:a4:2a:23:74:3e:44:b5:85:f3:a5:b3:08:38:be:
1d:a8:20:8a:84:fb:36:e0:19:11:f1:27:e4:3b:1e:0b:82:10:
ff:8f:c0:50:dd:08:36:14:21:61:ff:d5:1d:a5:68:b4:98:4f:
6f:90:64:d2:af:e8:87:d9:95:5a:07:3d:f8:b8:43:47:db:25:
00:a8:ed:2e:c4:2a:51:ec:4a:37:c4:25:36:74:fd:68:b6:6f:
ec:5c:2a:e8:e6:b9:c5:83:2d:12:0f:ea:3e:71:55:4a:ee:d7:
68:c7:04:80:99:0c:23:93:62:e1:44:dc:53:48:46:85:df:21:
42:13:cf:44:63:c8:d1:10:a3:5f:18:7d:27:bc:5e:87:65:aa:
d0:1c:4e:e1:89:ab:2d:56:f0:c7:87:25:0d:60:fe:b7:6a:b6:
ee:b3:cc:55:0b:e8:e7:13:f7:21:16:7c:62:a3:75:34:70:18:
96:0d:8e:12:8c:af:3f:10:3f:30:97:be:a1:35:f6:aa:a8:32:
55:87:31:58:bb:c6:3d:1a:27:4e:50:bb:96:5e:a7:09:f4:48:
63:0e:f6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJFhxRmjQIP6sD7BRk+FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2
NTA2ODkwHhcNMjQwNTE3MjAwMDM0WhcNMjQwNTE4MjAwMDM0WjAzMTEwLwYDVQQD
EyhiYjg5NzI4ODFlMmZlYzA1M2I2NDdkZWQ2ZWU3MDk2NDM1OTQwMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HtoU9dZMRYud3tbEQAUgsrW2Rs
W1j5NF1eUtBNiU2osCLabhvbXjhtc0eZxDX1ep3g3w5wSYc40vd1cy0R624ttlot
XEwIaWWmBV7nAUbP5TF9w2nKRVnDBlopL5vgbhmBeA8FMqNIMYLmSO18NaUD9XGK
RWo4Nc7TP7Y1zIfxeDGcLrUk7pqSrTJf+1GkQU2Fqpkj12PYheNosr7hBbvdBglv
zqqCVZdchT+7hYmC5RiORPhNtHjQHxoC8Nnt6oDNhvqgCAa3B84aNuKFI5BfKauo
cGpki+GfUju5h7fix23iFq6FGFwVHEDGvdF9sOoDHZ+RetaCIYO6qklwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuJcogeL+wFO2R97W7nCWQ1lAC4MB8GA1UdIwQY
MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct
MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4
LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCQEiFEo
wvdDkVgXE66klEB+ywk47eVZrCnrnJDnUN21goXENWixjqQqI3Q+RLWF86WzCDi+
HaggioT7NuAZEfEn5DseC4IQ/4/AUN0INhQhYf/VHaVotJhPb5Bk0q/oh9mVWgc9
+LhDR9slAKjtLsQqUexKN8QlNnT9aLZv7Fwq6Oa5xYMtEg/qPnFVSu7XaMcEgJkM
I5Ni4UTcU0hGhd8hQhPPRGPI0RCjXxh9J7xeh2Wq0BxO4YmrLVbwx4clDWD+t2q2
7rPMVQvo5xP3IRZ8YqN1NHAYlg2OEoyvPxA/MJe+oTX2qqgyVYcxWLvGPRonTlC7
ll6nCfRIYw72Lw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:00:18 2024 by rpki-client on console-fra.rpki-client.org