Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: /VFGyPC62OQAAQzyVMlg5rrBqqWoaOkum/vmFhvFYco=
Subject key identifier: 73:D2:C6:25:C0:71:85:14:E7:A7:07:51:8F:E8:0B:02:AD:09:63:C2
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 0193549A5D6DC33C20A2043050F1A9A97D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 0904
Signing time: Fri 22 Nov 2024 16:00:22 +0000
Manifest this update: Fri 22 Nov 2024 16:00:22 +0000
Manifest next update: Sat 23 Nov 2024 16:00:22 +0000
Files and hashes: 1: DViIKfg4Jag1eSqxqRzbARxP5No.roa (hash: 7cAXt0ge8AwdNoxn3kzpH5WnqaQ1U3NmmlMMZw3JlCM=)
2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: dbt8pbff8i74K//frl3nO1LbJZJ+PKpk8rLlXP06hyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:5d:6d:c3:3c:20:a2:04:30:50:f1:a9:a9:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Nov 22 16:00:22 2024 GMT
Not After : Nov 23 16:00:22 2024 GMT
Subject: CN=73d2c625c0718514e7a707518fe80b02ad0963c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:a0:20:95:1e:47:c7:b9:dc:eb:70:75:29:
b3:e1:24:73:22:cb:c3:58:91:b4:ae:28:6f:34:8a:
02:1f:b0:85:5c:3a:29:7b:d7:f3:7e:f9:71:88:5c:
1f:ac:a2:65:3f:74:52:80:a8:2a:d3:75:f3:20:d6:
3d:98:b5:98:25:6a:61:7d:06:2d:0d:67:e2:77:44:
74:05:eb:fd:d6:20:45:56:6d:3f:6c:54:9b:cf:f9:
dd:73:d2:f4:09:8e:1f:2d:65:99:b5:cd:41:f6:ec:
66:95:f0:71:01:a1:5a:ba:c7:f3:e9:10:4e:8c:b4:
43:92:8e:57:ce:b7:6d:7a:b0:8a:28:d0:eb:4d:b2:
6d:dc:46:b0:68:4d:3a:9b:f2:90:04:79:17:d2:09:
83:72:25:ab:61:4c:23:f0:db:9f:a9:6a:a3:12:c8:
da:e5:6d:6e:a9:f8:26:38:62:48:a2:2b:28:f9:4d:
19:ed:84:7c:5d:e0:e2:a0:62:66:7a:85:0a:28:59:
39:9c:b1:78:f2:9f:5c:fc:97:17:80:b8:51:5f:82:
35:2b:34:be:4b:33:fe:72:ee:ac:a2:a9:34:57:7f:
ce:e0:68:3d:96:62:3d:1e:b4:a4:e2:51:0c:aa:37:
54:ea:11:ac:50:7e:15:d5:b3:2f:06:db:28:20:0b:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:C6:25:C0:71:85:14:E7:A7:07:51:8F:E8:0B:02:AD:09:63:C2
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:41:84:2b:b7:24:08:24:eb:6f:ad:bf:a7:c7:ee:ea:23:e3:
23:a7:7b:de:19:19:c8:d5:c2:14:57:f1:6f:3c:95:f3:01:c1:
39:a7:11:97:70:91:15:27:83:22:49:63:94:a9:5d:2b:c7:9e:
2a:62:e3:e2:e3:db:ac:04:06:c9:c2:90:68:f5:71:c3:9e:f9:
5f:9e:4f:10:ce:09:4a:48:53:43:f1:f5:66:27:2d:54:15:32:
9b:60:0b:2e:a7:b1:54:12:68:c0:f8:04:88:1a:e4:c5:5f:16:
1e:58:02:d9:86:ab:51:0e:22:5e:d9:a7:8a:ca:da:56:bd:99:
3e:83:82:c8:df:66:57:7b:64:50:1f:48:81:80:0a:e4:ac:56:
a6:fa:b2:06:86:f6:9e:36:74:9c:fe:b1:9e:92:9f:1a:ac:88:
64:b7:25:fd:5c:47:7d:18:58:d2:0d:5e:7a:83:c0:76:5a:31:
ab:6d:ec:df:87:a3:f6:73:ca:12:5e:8b:63:ad:53:7b:98:94:
6b:9d:c4:43:34:55:b6:5c:df:e9:c4:62:be:f0:a0:59:b7:6c:
97:1f:5e:33:6a:b7:3a:c5:d8:f3:48:68:15:80:25:02:04:20:
6d:6e:b7:3d:0d:eb:11:fd:00:06:c1:fd:c6:54:83:51:bc:1c:
c2:f2:39:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUml1twzwgogQwUPGpqX0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjQxMTIyMTYwMDIyWhcNMjQxMTIzMTYwMDIyWjAzMTEwLwYDVQQD
Eyg3M2QyYzYyNWMwNzE4NTE0ZTdhNzA3NTE4ZmU4MGIwMmFkMDk2M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKKgIJUeR8e53OtwdSmz4SRzIsvD
WJG0rihvNIoCH7CFXDope9fzfvlxiFwfrKJlP3RSgKgq03XzINY9mLWYJWphfQYt
DWfid0R0Bev91iBFVm0/bFSbz/ndc9L0CY4fLWWZtc1B9uxmlfBxAaFausfz6RBO
jLRDko5XzrdterCKKNDrTbJt3EawaE06m/KQBHkX0gmDciWrYUwj8NufqWqjEsja
5W1uqfgmOGJIoiso+U0Z7YR8XeDioGJmeoUKKFk5nLF48p9c/JcXgLhRX4I1KzS+
SzP+cu6soqk0V3/O4Gg9lmI9HrSk4lEMqjdU6hGsUH4V1bMvBtsoIAtosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPSxiXAcYUU56cHUY/oCwKtCWPCMB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEGEK7ck
CCTrb62/p8fu6iPjI6d73hkZyNXCFFfxbzyV8wHBOacRl3CRFSeDIkljlKldK8ee
KmLj4uPbrAQGycKQaPVxw575X55PEM4JSkhTQ/H1ZictVBUym2ALLqexVBJowPgE
iBrkxV8WHlgC2YarUQ4iXtmnisraVr2ZPoOCyN9mV3tkUB9IgYAK5KxWpvqyBob2
njZ0nP6xnpKfGqyIZLcl/VxHfRhY0g1eeoPAdloxq23s34ej9nPKEl6LY61Te5iU
a53EQzRVtlzf6cRivvCgWbdslx9eM2q3OsXY80hoFYAlAgQgbW63PQ3rEf0ABsH9
xlSDUbwcwvI5hA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:08 2024 by rpki-client on console-fra.rpki-client.org