Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: 7QuqguM10QIU7uInCBz2gqFZSKUHhIUWnuAHbpctq60=
Subject key identifier: A8:B3:E6:3D:66:45:DD:70:D4:C7:F5:27:B4:39:9C:BC:BF:C5:5B:1B
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 01935688C57F9F3B13E2347A5E11B5355BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:00:23 +0000
Manifest this update: Sat 23 Nov 2024 01:00:23 +0000
Manifest next update: Sun 24 Nov 2024 01:00:23 +0000
Files and hashes: 1: 3D0NYkfS4WU1Yvt9q-lSepQXBHk.roa (hash: qwXmLougtuKjUKnbAJzPrX4+YntC36HY7RyUd1Qs8/Y=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: cPLdduoinG4W7UT4rPUPdekfcUTKqDyc/1aUeXeSYcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:c5:7f:9f:3b:13:e2:34:7a:5e:11:b5:35:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Nov 23 01:00:23 2024 GMT
Not After : Nov 24 01:00:23 2024 GMT
Subject: CN=a8b3e63d6645dd70d4c7f527b4399cbcbfc55b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:7a:3d:41:eb:0a:07:49:f9:fc:86:61:5f:
df:f5:be:ff:a6:64:af:09:f2:fb:4c:b2:87:dd:1b:
2e:de:14:90:5c:aa:d0:10:92:87:e6:9e:80:03:12:
df:29:1c:35:bc:89:19:f1:fe:92:38:72:36:fe:58:
85:e9:02:f4:3a:2f:2e:a7:6b:0e:ee:4c:58:12:09:
c5:b9:38:46:ff:0c:17:9f:39:e1:c7:64:5c:2b:c2:
50:2e:ae:ff:67:fc:fa:95:58:3c:d0:80:4e:1f:f2:
88:14:6b:44:57:01:20:a2:c3:f5:29:2c:88:b7:41:
c2:4e:96:3e:e0:43:6f:19:c3:2a:bb:cf:09:43:d9:
be:8c:e6:9a:fb:34:31:c5:ad:90:4a:82:41:4d:58:
72:35:67:10:8e:f8:da:f8:9f:57:08:15:a7:55:a8:
1c:6c:9d:e9:0d:7b:db:9c:0c:56:9e:56:dc:99:fc:
90:d4:73:74:6f:bf:d1:c2:e8:ee:22:62:aa:b9:d1:
18:77:5d:91:46:04:2a:8f:f4:30:eb:19:66:a4:fd:
ba:23:78:c0:87:01:73:04:13:21:90:ec:1f:f0:a4:
fa:91:02:a8:7e:a5:65:47:6e:cd:17:35:9b:e4:9b:
f7:cd:7f:92:34:55:a9:0a:df:67:c5:5a:4e:26:12:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:E6:3D:66:45:DD:70:D4:C7:F5:27:B4:39:9C:BC:BF:C5:5B:1B
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:56:4b:8b:03:dd:5e:16:a2:7b:74:16:b2:d0:0b:01:03:42:
2a:a7:2b:f5:5c:ca:5c:20:7e:08:b5:44:b4:98:a4:26:3c:89:
74:30:53:76:62:74:27:70:c8:24:a8:0e:fc:63:46:69:a9:c8:
9b:81:13:a6:35:2d:83:b3:75:00:31:d5:78:a5:b3:1b:dd:b5:
a8:66:54:d2:e0:c9:4b:23:7c:6b:ed:72:51:b5:46:39:57:0d:
b8:0a:f7:1d:a9:9b:67:31:99:46:d1:88:5f:4b:ae:f8:5f:44:
f7:87:4e:0d:3e:6c:05:f5:95:f6:6d:32:4e:ea:63:c3:f5:09:
a8:5a:b2:4d:81:01:ed:96:1e:d8:46:3e:f2:d7:d2:ef:70:a0:
c2:7f:54:bc:52:c7:4b:41:ca:23:66:4c:29:f1:90:95:9a:b2:
d6:76:de:e8:5f:d4:cc:8a:5a:e5:f0:c1:01:24:4b:b5:55:83:
d6:5d:46:b4:7c:46:c1:65:ca:24:fa:0d:8d:32:b2:f0:4c:5d:
32:f5:93:d0:8f:1b:63:a2:f2:d0:d6:f9:9d:01:d5:c7:ce:2f:
c9:0d:30:fd:0d:4a:b7:00:d5:03:25:12:82:00:ff:10:f8:c0:
49:9b:e2:f9:0e:ee:3d:60:a5:5e:cd:dd:43:47:57:06:52:b8:
92:81:7e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiMV/nzsT4jR6XhG1NVukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl
YWRiODgwHhcNMjQxMTIzMDEwMDIzWhcNMjQxMTI0MDEwMDIzWjAzMTEwLwYDVQQD
EyhhOGIzZTYzZDY2NDVkZDcwZDRjN2Y1MjdiNDM5OWNiY2JmYzU1YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE56PUHrCgdJ+fyGYV/f9b7/pmSv
CfL7TLKH3Rsu3hSQXKrQEJKH5p6AAxLfKRw1vIkZ8f6SOHI2/liF6QL0Oi8up2sO
7kxYEgnFuThG/wwXnznhx2RcK8JQLq7/Z/z6lVg80IBOH/KIFGtEVwEgosP1KSyI
t0HCTpY+4ENvGcMqu88JQ9m+jOaa+zQxxa2QSoJBTVhyNWcQjvja+J9XCBWnVagc
bJ3pDXvbnAxWnlbcmfyQ1HN0b7/RwujuImKqudEYd12RRgQqj/Qw6xlmpP26I3jA
hwFzBBMhkOwf8KT6kQKofqVlR27NFzWb5Jv3zX+SNFWpCt9nxVpOJhIU5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiz5j1mRd1w1Mf1J7Q5nLy/xVsbMB8GA1UdIwQY
MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt
ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw
LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplZLiwPd
Xhaie3QWstALAQNCKqcr9VzKXCB+CLVEtJikJjyJdDBTdmJ0J3DIJKgO/GNGaanI
m4ETpjUtg7N1ADHVeKWzG921qGZU0uDJSyN8a+1yUbVGOVcNuAr3HambZzGZRtGI
X0uu+F9E94dODT5sBfWV9m0yTupjw/UJqFqyTYEB7ZYe2EY+8tfS73Cgwn9UvFLH
S0HKI2ZMKfGQlZqy1nbe6F/UzIpa5fDBASRLtVWD1l1GtHxGwWXKJPoNjTKy8Exd
MvWT0I8bY6Ly0Nb5nQHVx84vyQ0w/Q1KtwDVAyUSggD/EPjASZvi+Q7uPWClXs3d
Q0dXBlK4koF+QQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:04 2024 by rpki-client on console-ams.rpki-client.org