Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: /cyIeqPUvtB+N+8PRaF2xgUTMR0699LpDM7LR5r/y+8=
Subject key identifier: 69:FF:12:B2:73:79:16:14:13:52:0B:03:EE:F2:E0:05:6E:E0:48:C6
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0193568A7E952D6612FDE8CEAFA398A1E5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 01:02:16 +0000
Manifest this update: Sat 23 Nov 2024 01:02:16 +0000
Manifest next update: Sun 24 Nov 2024 01:02:16 +0000
Files and hashes: 1: 9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa (hash: Ck4IhA/LVj6yeY7ypf62CEmT7z98j+tSvQrn7SZ/UfQ=)
2: DGd_nQA9s6gY7y5x6kYUhNc4dS8.roa (hash: p4/HEMZHHkoyE5xPXbF7RGfBm23kEjnk41tuDSFDOhQ=)
3: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: IscXDTJBWEHgHHUzZWhgPPBge0Fmq7TkX2yAhfg+7tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:7e:95:2d:66:12:fd:e8:ce:af:a3:98:a1:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Nov 23 01:02:16 2024 GMT
Not After : Nov 24 01:02:16 2024 GMT
Subject: CN=69ff12b27379161413520b03eef2e0056ee048c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:60:c5:69:b5:5b:22:bf:e7:1d:31:1a:27:
3b:75:e9:ac:7b:f3:2e:74:13:92:32:fb:0d:89:c3:
6b:db:ea:e9:00:5a:98:7e:ad:25:49:60:73:15:54:
9d:80:84:f9:ee:72:9d:4b:0a:cd:7a:57:f1:34:6e:
54:a0:e4:35:9d:4d:53:ac:5b:03:a4:38:5d:15:6d:
48:77:ee:80:b7:74:9d:ab:c0:bb:7a:da:2c:fb:0f:
12:54:b1:77:00:be:b2:3e:fa:d2:fa:7b:84:0e:4c:
fa:45:8b:3c:df:f4:8c:0f:a0:b1:03:51:9e:1a:89:
e9:ed:60:33:c1:00:eb:ec:85:e2:2c:a6:6c:9b:ae:
a3:60:33:78:49:08:0f:67:7f:46:5b:66:d7:f8:ef:
7f:04:4f:7a:1a:d7:97:3e:3b:cd:2e:03:59:71:e9:
d0:dd:7c:dc:2c:14:ad:be:2e:45:e1:b7:d4:8c:0f:
04:80:a9:39:71:05:c3:5a:5c:ce:43:2a:be:04:de:
95:eb:45:c1:3c:b4:a7:2a:e3:a1:20:0f:e7:bf:1c:
6c:08:9b:1d:d9:4e:82:1b:38:c3:1c:d5:9a:71:47:
27:e6:8e:dc:ca:e1:f9:f9:54:4c:34:10:e7:c8:eb:
17:64:4d:d1:57:16:1c:1a:64:5b:93:cb:7b:87:5c:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:12:B2:73:79:16:14:13:52:0B:03:EE:F2:E0:05:6E:E0:48:C6
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:39:d6:93:8c:ed:b3:cf:4b:e8:ce:e8:ba:25:2a:47:cc:
d9:f0:08:b8:45:f3:59:f5:05:5e:ea:97:37:41:f6:b4:da:65:
d0:97:f4:e5:62:65:96:5c:f4:a9:4a:44:69:26:82:5f:3f:53:
60:31:56:07:dc:a8:a6:94:68:f8:68:41:d6:30:58:25:f3:cd:
e0:78:fb:e8:7b:28:b1:bf:ef:f5:39:8f:eb:ee:92:8f:62:a9:
7e:07:b7:e6:14:fa:c6:d9:92:0f:43:54:64:e7:37:a0:a6:5c:
99:32:9a:77:75:0e:ba:e9:49:0f:64:58:42:68:03:97:e3:aa:
67:88:3b:b8:6c:b0:fe:58:04:42:00:15:56:c5:11:0c:3c:50:
55:ba:c5:fb:7e:43:09:fd:f6:2f:5e:99:81:9d:69:e3:3c:b4:
9c:71:c4:84:7f:f7:ce:ae:31:89:1d:bc:86:91:7e:0b:d7:03:
a1:ed:a6:f3:7b:2b:ce:9f:58:a8:22:d0:bd:a5:5f:2a:3f:cb:
28:32:1a:a0:40:2d:31:db:00:f0:12:e9:e3:76:b6:2c:fb:f5:
a3:ba:68:76:ca:64:31:46:a3:07:0b:9f:05:9a:0b:37:f8:58:
42:10:34:4b:4d:19:9d:7c:29:2d:d7:5b:2d:2d:52:30:39:41:
de:1b:a8:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWin6VLWYS/ejOr6OYoeWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzA1YzZlNTgyOTRhZDBlZDUxNjJmYTg0MjlkYTUxNjU2
NTM5MzAwHhcNMjQxMTIzMDEwMjE2WhcNMjQxMTI0MDEwMjE2WjAzMTEwLwYDVQQD
Eyg2OWZmMTJiMjczNzkxNjE0MTM1MjBiMDNlZWYyZTAwNTZlZTA0OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZlgxWm1WyK/5x0xGic7demse/Mu
dBOSMvsNicNr2+rpAFqYfq0lSWBzFVSdgIT57nKdSwrNelfxNG5UoOQ1nU1TrFsD
pDhdFW1Id+6At3Sdq8C7etos+w8SVLF3AL6yPvrS+nuEDkz6RYs83/SMD6CxA1Ge
Gonp7WAzwQDr7IXiLKZsm66jYDN4SQgPZ39GW2bX+O9/BE96GteXPjvNLgNZcenQ
3XzcLBStvi5F4bfUjA8EgKk5cQXDWlzOQyq+BN6V60XBPLSnKuOhIA/nvxxsCJsd
2U6CGzjDHNWacUcn5o7cyuH5+VRMNBDnyOsXZE3RVxYcGmRbk8t7h1xiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn/ErJzeRYUE1ILA+7y4AVu4EjGMB8GA1UdIwQY
MBaAFKgwXG5YKUrQ7VFi+oQp2lFlZTkwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzIt
MDJkYjhiNzdkMDg3LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzItMDJkYjhiNzdkMDg3
LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjc51pOM
7bPPS+jO6LolKkfM2fAIuEXzWfUFXuqXN0H2tNpl0Jf05WJlllz0qUpEaSaCXz9T
YDFWB9yoppRo+GhB1jBYJfPN4Hj76Hsosb/v9TmP6+6Sj2Kpfge35hT6xtmSD0NU
ZOc3oKZcmTKad3UOuulJD2RYQmgDl+OqZ4g7uGyw/lgEQgAVVsURDDxQVbrF+35D
Cf32L16ZgZ1p4zy0nHHEhH/3zq4xiR28hpF+C9cDoe2m83srzp9YqCLQvaVfKj/L
KDIaoEAtMdsA8BLp43a2LPv1o7podspkMUajBwufBZoLN/hYQhA0S00ZnXwpLddb
LS1SMDlB3huooA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:00 2024 by rpki-client on console-fra.rpki-client.org