Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: Ih2rPMLAjBbL1YzyJFhlTRguewfzgfqiRQ77cmrJfkk=
Subject key identifier: 0E:AD:12:2C:95:B7:8C:B3:F7:70:F9:12:73:C8:4D:80:FA:B3:CF:AF
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019353F5B92931423376D410E6F553715DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 13:00:32 +0000
Manifest this update: Fri 22 Nov 2024 13:00:32 +0000
Manifest next update: Sat 23 Nov 2024 13:00:32 +0000
Files and hashes: 1: 1-be0yyBKCKWxtn5-HCjwF_OAUbk.roa (hash: PG2IRU73mz3HkJpAE/tq4+CtuJWNV7FeLzj3BDXzRrU=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: l7tq3IlqjfJa3EFz6+PF8TmJP1yezE1NivyHLNvrHYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f5:b9:29:31:42:33:76:d4:10:e6:f5:53:71:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Nov 22 13:00:32 2024 GMT
Not After : Nov 23 13:00:32 2024 GMT
Subject: CN=0ead122c95b78cb3f770f91273c84d80fab3cfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:47:2e:c9:c9:5b:1d:9b:be:ba:85:45:ef:
e3:54:06:2e:03:aa:41:e7:3a:10:19:e7:df:48:da:
3c:ce:83:6d:99:46:d6:f3:ce:8f:b3:92:08:36:94:
2c:86:1b:bf:61:85:1b:32:e8:bd:7d:dd:c6:bd:ca:
0d:f4:ce:08:26:3e:7d:3d:03:04:07:ad:8b:d7:82:
4e:28:d7:5b:03:43:18:bf:88:8f:a0:de:49:9f:8a:
74:2c:e4:c5:90:96:9a:41:54:0f:82:3e:54:4d:82:
29:27:3a:75:8a:b0:dc:c9:0d:4a:68:b5:89:21:79:
2d:ec:4c:ae:b5:f2:ba:0e:a7:d0:4a:d3:74:47:91:
a9:09:dc:79:be:d3:b8:4c:53:e6:ae:8c:40:e7:b3:
d8:ea:8e:fb:8a:18:23:01:94:2a:73:9a:3c:3e:18:
ea:bb:a2:ea:eb:c2:82:8f:5c:01:1b:26:3e:17:dd:
28:a1:d8:08:40:a6:6c:a2:d0:c5:77:c5:15:a9:34:
44:39:27:d6:1a:9d:09:ea:d2:0d:fe:ff:e4:69:4c:
f9:49:aa:17:c2:12:21:81:5c:ea:94:98:72:a5:9d:
96:77:e8:55:10:af:af:67:30:25:35:1e:33:6b:ea:
05:70:5d:d6:e9:56:e5:81:1e:f9:e9:45:91:2d:eb:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:12:2C:95:B7:8C:B3:F7:70:F9:12:73:C8:4D:80:FA:B3:CF:AF
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:2c:65:00:04:16:59:0c:77:96:e1:e7:50:33:6b:fa:d9:
f1:ef:36:79:43:16:fb:30:03:54:f5:a2:e7:a0:f0:1c:f6:2f:
0c:bc:8c:6b:61:04:73:7a:56:83:eb:b5:4e:72:24:cc:6d:a0:
d7:d7:71:e4:67:66:ea:83:38:fa:a2:ca:46:53:7a:dc:dd:e6:
83:b6:4b:41:a8:64:02:16:b5:73:fe:2f:0e:51:3c:f7:4a:75:
67:8b:28:dc:08:a4:63:ef:94:3f:bf:84:41:c5:6e:1e:5c:23:
ec:64:76:e3:e6:7a:42:de:3a:51:91:04:d9:a7:70:f7:52:03:
37:36:b1:55:9e:9f:bf:69:3b:9e:da:23:11:b9:4d:fd:bf:72:
ef:1c:f0:02:6d:67:28:45:39:ab:87:5b:30:bc:c3:ff:fa:0c:
0a:e3:7f:be:2d:e0:42:6e:28:89:60:a4:4b:f5:04:2d:af:c2:
ae:ca:3f:93:eb:8e:2e:bb:fe:5e:56:f4:75:4c:f3:5d:31:f1:
17:d8:fa:45:a2:40:31:28:e4:43:9a:30:e1:61:47:bf:31:1d:
29:b8:f9:1d:7c:48:1e:f8:d6:df:a8:1b:41:83:32:fc:34:21:
31:27:84:a8:57:d7:46:cc:7c:61:fe:03:e6:37:b3:a1:ef:d9:
99:28:c7:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNT9bkpMUIzdtQQ5vVTcV3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh
Y2I0NGQwHhcNMjQxMTIyMTMwMDMyWhcNMjQxMTIzMTMwMDMyWjAzMTEwLwYDVQQD
EygwZWFkMTIyYzk1Yjc4Y2IzZjc3MGY5MTI3M2M4NGQ4MGZhYjNjZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncFHLsnJWx2bvrqFRe/jVAYuA6pB
5zoQGeffSNo8zoNtmUbW886Ps5IINpQshhu/YYUbMui9fd3GvcoN9M4IJj59PQME
B62L14JOKNdbA0MYv4iPoN5Jn4p0LOTFkJaaQVQPgj5UTYIpJzp1irDcyQ1KaLWJ
IXkt7EyutfK6DqfQStN0R5GpCdx5vtO4TFPmroxA57PY6o77ihgjAZQqc5o8Phjq
u6Lq68KCj1wBGyY+F90oodgIQKZsotDFd8UVqTREOSfWGp0J6tIN/v/kaUz5SaoX
whIhgVzqlJhypZ2Wd+hVEK+vZzAlNR4za+oFcF3W6VblgR756UWRLevVUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6tEiyVt4yz93D5EnPITYD6s8+vMB8GA1UdIwQY
MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt
MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj
LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXposZQAE
FlkMd5bh51Aza/rZ8e82eUMW+zADVPWi56DwHPYvDLyMa2EEc3pWg+u1TnIkzG2g
19dx5Gdm6oM4+qLKRlN63N3mg7ZLQahkAha1c/4vDlE890p1Z4so3AikY++UP7+E
QcVuHlwj7GR24+Z6Qt46UZEE2adw91IDNzaxVZ6fv2k7ntojEblN/b9y7xzwAm1n
KEU5q4dbMLzD//oMCuN/vi3gQm4oiWCkS/UELa/Crso/k+uOLrv+Xlb0dUzzXTHx
F9j6RaJAMSjkQ5ow4WFHvzEdKbj5HXxIHvjW36gbQYMy/DQhMSeEqFfXRsx8Yf4D
5jezoe/ZmSjHfg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:37:38 2024 by rpki-client on console-ams.rpki-client.org