Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: ez5/CFMUdS2pmto2mfmW3IpYbKoH5kYXABPSfknQ1b8=
Subject key identifier: 4F:E1:B4:B2:4C:3D:3D:81:9C:7E:F4:18:9C:FD:F8:A5:87:C6:CF:D4
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01935879275741BFEAF40311D5650F3093E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0507
Signing time: Sat 23 Nov 2024 10:02:35 +0000
Manifest this update: Sat 23 Nov 2024 10:02:35 +0000
Manifest next update: Sun 24 Nov 2024 10:02:35 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: Qg6bWFX2xd4BadT0O4EEkHlxR41dAtKYguJI3jvtrhI=)
2: vLWu8WB4Y1V2VHFufbsG9r-rAKs.roa (hash: mMzI3PTp4tWt4jxz/CvcAI7hwyPcP/8l6OAjplICGuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:27:57:41:bf:ea:f4:03:11:d5:65:0f:30:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Nov 23 10:02:35 2024 GMT
Not After : Nov 24 10:02:35 2024 GMT
Subject: CN=4fe1b4b24c3d3d819c7ef4189cfdf8a587c6cfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:e3:ba:1a:cc:f7:7c:21:e5:4b:4a:98:66:
98:d7:7c:87:67:f7:45:38:44:d9:91:ff:01:97:8f:
46:4d:7c:b1:90:6a:e0:39:de:80:c5:96:fe:a4:86:
cf:79:44:eb:70:92:59:d1:8e:d8:b5:c6:df:fe:d6:
a2:ee:64:d0:ca:ea:d0:51:65:2f:f2:93:d8:5d:ec:
c5:1c:7b:d2:f4:d6:fb:75:df:a4:02:a9:61:90:9d:
53:e9:c3:d0:47:8e:27:7d:6f:a2:b4:3f:70:b4:a3:
19:97:16:82:2c:3a:7b:49:62:1e:7f:96:91:63:16:
3f:90:8b:b9:f5:3d:33:af:17:dc:85:a8:66:3e:62:
25:58:80:85:b4:c0:6a:ad:c7:a7:dc:27:cf:45:17:
33:60:90:8e:c0:19:fc:a9:d7:68:c8:bb:6c:09:14:
c0:d5:c1:9f:0d:b4:29:bc:46:10:02:78:75:5d:52:
81:a9:b2:79:69:36:12:bb:a3:8a:87:53:4f:1f:1d:
20:87:0c:f5:18:f4:20:33:42:66:aa:d6:69:4d:d0:
7c:66:52:65:7f:c0:b7:b6:84:6e:b4:fc:02:24:78:
e8:24:65:b1:ff:00:3a:2a:b2:83:b2:6e:fa:e6:29:
a0:8e:37:2f:f1:f0:88:6c:50:c9:3c:59:ec:b6:d5:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:B4:B2:4C:3D:3D:81:9C:7E:F4:18:9C:FD:F8:A5:87:C6:CF:D4
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f1:af:f0:4e:c1:c3:69:0b:a5:e8:87:47:a8:ed:b0:79:6e:
00:30:e0:0a:0f:30:bc:b0:cc:80:5d:6c:bd:1c:64:d5:4e:dc:
a0:92:54:e8:98:a4:c1:0d:ff:6d:63:8c:39:62:ef:e5:82:83:
c7:16:d0:86:67:4b:ae:18:30:1d:52:83:f5:e9:58:d9:6c:ae:
2a:e7:d8:55:db:cd:29:04:ce:51:24:5a:22:ad:7c:be:92:e7:
58:6f:9b:13:98:b9:ca:41:d9:d4:73:ab:ab:10:5d:87:e9:da:
a8:f3:bc:f8:fe:6d:4f:d5:a1:0a:72:19:d6:19:62:8b:94:0d:
63:9a:87:09:bb:20:e0:6f:17:37:73:dc:bf:5a:a6:0f:6d:bd:
13:2d:86:4f:45:98:ed:91:d2:1e:7d:2a:df:83:c3:1e:50:0b:
99:42:34:fa:54:eb:f8:45:aa:18:f2:9b:6d:f3:04:d8:12:a1:
50:5c:97:6c:27:b1:f2:f1:af:93:88:83:93:32:77:2e:f7:03:
1d:c7:83:dd:c0:18:5b:35:cc:a8:a4:34:5a:d4:65:b8:77:ea:
ac:a5:dd:f9:f8:34:79:bf:86:53:98:99:14:d6:0e:34:27:43:
c0:3f:bd:94:7f:6a:3e:0b:4f:2f:df:bd:a6:d5:da:30:82:94:
a4:a8:eb:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeSdXQb/q9AMR1WUPMJPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh
YWUyMjgwHhcNMjQxMTIzMTAwMjM1WhcNMjQxMTI0MTAwMjM1WjAzMTEwLwYDVQQD
Eyg0ZmUxYjRiMjRjM2QzZDgxOWM3ZWY0MTg5Y2ZkZjhhNTg3YzZjZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKXjuhrM93wh5UtKmGaY13yHZ/dF
OETZkf8Bl49GTXyxkGrgOd6AxZb+pIbPeUTrcJJZ0Y7Ytcbf/tai7mTQyurQUWUv
8pPYXezFHHvS9Nb7dd+kAqlhkJ1T6cPQR44nfW+itD9wtKMZlxaCLDp7SWIef5aR
YxY/kIu59T0zrxfchahmPmIlWICFtMBqrcen3CfPRRczYJCOwBn8qddoyLtsCRTA
1cGfDbQpvEYQAnh1XVKBqbJ5aTYSu6OKh1NPHx0ghwz1GPQgM0JmqtZpTdB8ZlJl
f8C3toRutPwCJHjoJGWx/wA6KrKDsm765imgjjcv8fCIbFDJPFnsttVHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/htLJMPT2BnH70GJz9+KWHxs/UMB8GA1UdIwQY
MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt
MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl
LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvGv8E7B
w2kLpeiHR6jtsHluADDgCg8wvLDMgF1svRxk1U7coJJU6JikwQ3/bWOMOWLv5YKD
xxbQhmdLrhgwHVKD9elY2WyuKufYVdvNKQTOUSRaIq18vpLnWG+bE5i5ykHZ1HOr
qxBdh+naqPO8+P5tT9WhCnIZ1hlii5QNY5qHCbsg4G8XN3Pcv1qmD229Ey2GT0WY
7ZHSHn0q34PDHlALmUI0+lTr+EWqGPKbbfME2BKhUFyXbCex8vGvk4iDkzJ3LvcD
HceD3cAYWzXMqKQ0WtRluHfqrKXd+fg0eb+GU5iZFNYONCdDwD+9lH9qPgtPL9+9
ptXaMIKUpKjrBg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:00:39 2024 by rpki-client on console-fra.rpki-client.org