Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: kY/+Adr4WbrZhByxGH0fONDgwAyCQnl0LtLpXxo48Bc=
Subject key identifier: AF:74:E6:93:E6:4B:9C:FD:A2:A0:0C:A9:D6:41:8F:1B:F5:8A:77:F7
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 019356F6FB235BDAAF62C5BAC87842C5E5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 1118
Signing time: Sat 23 Nov 2024 03:00:46 +0000
Manifest this update: Sat 23 Nov 2024 03:00:46 +0000
Manifest next update: Sun 24 Nov 2024 03:00:46 +0000
Files and hashes: 1: bAGREH7Yp5iHjK0zYf-4daHbwes.roa (hash: 4m6qHWZlq7o1L7UQ6wapfpU9IX+0ljqCHqnzFKh1/6s=)
2: jcYWzULPoJ1jpearr-vKUz9gRvQ.roa (hash: 4hh4Rp+/lWku3L2Rp2so1Rz3RTSFlGoa0TpWswus9CY=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: VEJ8CVTqtXVZJ3yNRxG0PdH9yKws13joI+0KoyZomVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:fb:23:5b:da:af:62:c5:ba:c8:78:42:c5:e5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Nov 23 03:00:46 2024 GMT
Not After : Nov 24 03:00:46 2024 GMT
Subject: CN=af74e693e64b9cfda2a00ca9d6418f1bf58a77f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:1c:64:04:ff:94:c2:ce:e4:2c:4f:a1:7c:
f7:ba:19:ef:69:85:1a:30:0e:52:ab:29:09:50:e4:
79:a2:cb:e1:5c:d7:5b:15:64:00:6d:d3:4e:75:78:
43:fd:c5:84:93:56:11:53:f9:05:b1:1e:49:c6:ea:
f9:de:b2:8a:17:3a:32:24:53:ce:65:f6:85:8d:79:
4c:4d:f5:7c:c7:bb:ba:34:34:b1:5e:98:cf:54:02:
1c:2b:65:9c:14:e8:27:d4:7c:12:ff:2e:d3:61:20:
76:e2:63:9a:eb:2c:2f:95:04:81:d5:d4:ce:93:24:
05:90:e6:f2:09:e2:db:51:e4:e8:53:f9:53:56:16:
10:a8:a4:a0:32:a6:16:e7:50:8b:ed:92:eb:23:5d:
a3:0e:d9:07:cd:29:06:27:3b:53:d1:ef:97:81:10:
41:e0:b3:eb:63:8e:47:da:c7:98:4a:08:ef:ca:6e:
e1:6b:4e:96:36:c1:ab:ce:61:75:67:ea:88:cf:0e:
d9:0d:79:09:e9:7d:5f:e9:a3:fe:5f:3c:77:4e:68:
32:5a:a3:50:7e:87:04:40:3a:a5:40:12:7a:90:7e:
04:e9:34:6e:c4:87:4e:d9:cb:0b:64:d1:54:1f:8a:
02:c0:15:a4:72:16:e3:41:9c:47:c9:4f:b2:ed:ac:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:E6:93:E6:4B:9C:FD:A2:A0:0C:A9:D6:41:8F:1B:F5:8A:77:F7
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:a3:be:d3:13:3e:38:3b:11:da:a3:2a:71:32:52:53:bd:
76:5b:43:f1:5c:04:57:00:ca:46:55:6a:28:a8:bf:01:73:86:
6f:46:64:47:73:d7:88:58:79:7f:42:9b:7a:d9:f4:98:21:86:
2a:ad:10:86:4f:e7:e3:57:2f:a6:5b:9e:00:b2:a9:0f:76:72:
92:e8:d4:37:a3:7d:ab:d7:c3:e6:6b:b0:a3:af:31:17:0c:32:
de:7a:7c:76:b6:c9:ae:4e:86:7e:ba:02:41:78:a0:da:f8:26:
81:be:c8:75:30:5e:20:cd:52:0f:a1:7e:db:80:07:17:2c:03:
e9:c2:2d:ea:44:ef:97:a4:5e:b1:82:4c:8c:0c:8a:0e:2f:df:
c6:fa:e2:84:1a:41:b3:81:db:9d:d8:e6:71:87:f0:f3:be:49:
77:ba:50:13:ad:22:56:2f:97:c7:1c:50:f5:a0:36:87:04:d0:
f0:97:01:bd:36:6d:84:d4:f0:af:35:55:d4:ae:9f:a1:41:14:
ae:7e:a0:eb:29:6f:26:40:41:72:be:bf:0c:50:bc:22:c3:4a:
c0:2b:9a:86:49:96:20:2a:ea:b4:4c:c9:bf:ca:a9:38:59:1f:
3e:e5:f8:e3:41:a1:3a:4e:ea:06:53:c0:1e:9f:7c:38:69:0c:
2d:b0:7a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9vsjW9qvYsW6yHhCxeXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTU1ODg1M2ZlYmM3OWQ4MTNlYjJjMGNlNWNiNzM2ZmI3
M2MwZGYwHhcNMjQxMTIzMDMwMDQ2WhcNMjQxMTI0MDMwMDQ2WjAzMTEwLwYDVQQD
EyhhZjc0ZTY5M2U2NGI5Y2ZkYTJhMDBjYTlkNjQxOGYxYmY1OGE3N2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhMcZAT/lMLO5CxPoXz3uhnvaYUa
MA5SqykJUOR5osvhXNdbFWQAbdNOdXhD/cWEk1YRU/kFsR5Jxur53rKKFzoyJFPO
ZfaFjXlMTfV8x7u6NDSxXpjPVAIcK2WcFOgn1HwS/y7TYSB24mOa6ywvlQSB1dTO
kyQFkObyCeLbUeToU/lTVhYQqKSgMqYW51CL7ZLrI12jDtkHzSkGJztT0e+XgRBB
4LPrY45H2seYSgjvym7ha06WNsGrzmF1Z+qIzw7ZDXkJ6X1f6aP+Xzx3TmgyWqNQ
focEQDqlQBJ6kH4E6TRuxIdO2csLZNFUH4oCwBWkchbjQZxHyU+y7awYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK905pPmS5z9oqAMqdZBjxv1inf3MB8GA1UdIwQY
MBaAFKgVWIU/68edgT6ywM5ctzb7c8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81Y2E0OGItYzk2Ni00ZTYzLTg2OGQt
YTg1YzFiMmVjMWNlLzEvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81Y2E0OGItYzk2Ni00ZTYzLTg2OGQtYTg1YzFiMmVjMWNl
LzEvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoejvtMT
Pjg7EdqjKnEyUlO9dltD8VwEVwDKRlVqKKi/AXOGb0ZkR3PXiFh5f0Kbetn0mCGG
Kq0Qhk/n41cvplueALKpD3ZykujUN6N9q9fD5muwo68xFwwy3np8drbJrk6GfroC
QXig2vgmgb7IdTBeIM1SD6F+24AHFywD6cIt6kTvl6ResYJMjAyKDi/fxvrihBpB
s4HbndjmcYfw875Jd7pQE60iVi+XxxxQ9aA2hwTQ8JcBvTZthNTwrzVV1K6foUEU
rn6g6ylvJkBBcr6/DFC8IsNKwCuahkmWICrqtEzJv8qpOFkfPuX440GhOk7qBlPA
Hp98OGkMLbB6XQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:36 2024 by rpki-client on console-fra.rpki-client.org