Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: rhf+JqWZZ2h5daY8BlObi+U3p/VWHSs57d6sSTSsEcM=
Subject key identifier: 19:EA:3A:88:A6:C8:B0:96:50:EC:86:EF:7E:CB:2B:7A:CC:5F:C4:2F
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 018F8823F6196B2EABD97574E5AC77CF2153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0AF4
Signing time: Fri 17 May 2024 20:00:08 +0000
Manifest this update: Fri 17 May 2024 20:00:08 +0000
Manifest next update: Sat 18 May 2024 20:00:08 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: uFXjVzfDuNc4PP8Qs6x++wtPcpMSVHm7S6EHn9G77/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:23:f6:19:6b:2e:ab:d9:75:74:e5:ac:77:cf:21:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: May 17 20:00:08 2024 GMT
Not After : May 18 20:00:08 2024 GMT
Subject: CN=19ea3a88a6c8b09650ec86ef7ecb2b7acc5fc42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:37:c1:2b:59:4a:90:c9:67:18:15:74:15:
a9:fb:fe:0e:dd:c5:e7:3b:2d:7e:4d:ae:cf:ac:9a:
9c:9a:34:6b:71:43:c1:94:85:1a:b6:90:72:d0:3d:
bc:52:fa:89:d3:41:87:f4:da:e6:28:4c:0a:6d:69:
71:9d:5f:ae:1d:4c:98:69:3e:ea:78:17:d2:97:b2:
da:fb:98:b7:12:43:52:1e:cd:4a:f0:58:5d:a4:17:
73:cf:18:88:8d:58:e6:7f:7f:2a:2d:2a:25:f3:b0:
b9:32:ef:9c:c0:4f:3d:27:86:29:0d:aa:b0:18:ab:
af:d8:dd:67:d4:e8:e1:7a:0b:3f:70:f9:c0:24:74:
03:99:16:9f:99:79:fd:8c:6a:60:80:4d:79:12:02:
0d:bf:fb:8f:08:70:88:ff:00:bc:08:3b:0d:b8:92:
4a:df:d7:0a:20:03:dc:1a:43:2e:af:73:6e:5c:52:
20:de:58:b7:c5:ff:d2:a1:96:ef:65:65:1c:d2:4d:
18:50:95:bc:5b:2a:ef:1a:0b:9e:c7:68:2f:e3:15:
57:c9:d7:98:14:38:2e:d2:69:be:3c:f5:0c:5d:90:
41:ee:75:b1:ba:76:1b:79:e6:fe:29:40:4b:ab:db:
b5:a3:d6:20:7b:36:18:d2:f0:9a:c4:87:5e:24:a3:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:3A:88:A6:C8:B0:96:50:EC:86:EF:7E:CB:2B:7A:CC:5F:C4:2F
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5e:0e:d2:55:6c:e0:0d:b5:50:0f:e0:8c:f4:21:15:c8:5b:
a6:ca:f3:a1:01:f2:71:d4:4c:fa:e2:51:01:be:fb:0e:d3:7e:
33:bc:78:df:6e:f4:34:72:c6:40:ac:d8:0c:33:dd:26:45:64:
d4:50:20:29:fb:5b:11:74:e1:07:a7:d8:fe:09:d4:06:6c:d8:
e8:c9:1b:01:b1:61:a2:55:e2:ab:ba:f3:8c:72:ad:6c:1b:d8:
56:c6:78:79:cf:ef:50:dd:87:20:08:3c:df:64:07:49:74:79:
3b:14:6e:5b:9d:ed:9d:53:41:c0:9c:56:c0:6e:ab:9a:9d:30:
71:87:a5:9b:c5:53:44:89:13:1b:8e:06:cd:7a:88:2e:0d:b2:
e8:89:a1:37:6f:f3:57:f9:9b:28:3e:99:5c:5f:b6:d4:d9:fe:
e4:76:94:6f:a0:6b:e3:a0:8a:3b:70:4b:ca:a3:99:59:0e:83:
cc:0f:98:54:cb:25:78:9e:33:c3:bb:7d:4b:5f:4e:0b:93:ba:
b9:9f:f9:13:24:9a:a1:61:a9:3d:53:b3:4a:1b:31:f7:5d:45:
a5:02:b6:73:3a:f8:cc:83:b2:b5:64:01:6f:3d:bf:35:b2:47:
f1:aa:2d:61:82:ca:51:09:3d:77:9d:26:20:58:17:ea:b6:6d:
01:c1:29:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II/YZay6r2XV05ax3zyFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2ZWVjYTZhZmVhODQ0Y2E0Njg4MjU4Y2UzMzAwZDJh
MzkzZmUwHhcNMjQwNTE3MjAwMDA4WhcNMjQwNTE4MjAwMDA4WjAzMTEwLwYDVQQD
EygxOWVhM2E4OGE2YzhiMDk2NTBlYzg2ZWY3ZWNiMmI3YWNjNWZjNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotU3wStZSpDJZxgVdBWp+/4O3cXn
Oy1+Ta7PrJqcmjRrcUPBlIUatpBy0D28UvqJ00GH9NrmKEwKbWlxnV+uHUyYaT7q
eBfSl7La+5i3EkNSHs1K8FhdpBdzzxiIjVjmf38qLSol87C5Mu+cwE89J4YpDaqw
GKuv2N1n1Ojhegs/cPnAJHQDmRafmXn9jGpggE15EgINv/uPCHCI/wC8CDsNuJJK
39cKIAPcGkMur3NuXFIg3li3xf/SoZbvZWUc0k0YUJW8WyrvGguex2gv4xVXydeY
FDgu0mm+PPUMXZBB7nWxunYbeeb+KUBLq9u1o9YgezYY0vCaxIdeJKPHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnqOoimyLCWUOyG737LK3rMX8QvMB8GA1UdIwQY
MBaAFEPBbuymr+qETKRogljOMwDSo5P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUt
YjM5NzdmNjQ0N2IzLzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUtYjM5NzdmNjQ0N2Iz
LzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl4O0lVs
4A21UA/gjPQhFchbpsrzoQHycdRM+uJRAb77DtN+M7x43270NHLGQKzYDDPdJkVk
1FAgKftbEXThB6fY/gnUBmzY6MkbAbFholXiq7rzjHKtbBvYVsZ4ec/vUN2HIAg8
32QHSXR5OxRuW53tnVNBwJxWwG6rmp0wcYelm8VTRIkTG44GzXqILg2y6ImhN2/z
V/mbKD6ZXF+21Nn+5HaUb6Br46CKO3BLyqOZWQ6DzA+YVMsleJ4zw7t9S19OC5O6
uZ/5EySaoWGpPVOzShsx911FpQK2czr4zIOytWQBbz2/NbJH8aotYYLKUQk9d50m
IFgX6rZtAcEpAw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:12:59 2024 by rpki-client on console-ams.rpki-client.org