Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: 4oJ+7WCCV0cQa8s/SUHLI/1b/i8NTKcpaIZoXDDSE08=
Subject key identifier: 26:C2:75:FE:28:D6:CF:A6:50:45:20:44:BA:9F:40:01:58:B7:9C:5B
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 019352AD793EBACE3F472B9BC8B8C25AB70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 07:02:00 +0000
Manifest this update: Fri 22 Nov 2024 07:02:00 +0000
Manifest next update: Sat 23 Nov 2024 07:02:00 +0000
Files and hashes: 1: QFVjGcBmqDgkmCxcPC-ydqjIa-w.roa (hash: Nt4AjtSOLcVnjtcNU/k+vz+3/otZC8mkXBF5v2kV9no=)
2: h0kmkGrFBOzt5v0CadgdRMML0Vs.roa (hash: KySeJR1ImOZjk3OXHk4uL03a+8VhH+bgym0fdLvSRMI=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: J0fpP7Izvo2j81ylgthQP97LdqaIjaV8Wg3GaNMUe+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:79:3e:ba:ce:3f:47:2b:9b:c8:b8:c2:5a:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Nov 22 07:02:00 2024 GMT
Not After : Nov 23 07:02:00 2024 GMT
Subject: CN=26c275fe28d6cfa650452044ba9f400158b79c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:12:37:38:13:e5:bd:2e:e6:42:e0:13:96:
09:3d:66:3d:f0:c9:af:9d:eb:fc:1d:fd:ac:7a:c7:
93:64:95:b7:71:15:38:70:cd:3c:f4:fc:3a:75:4b:
62:1a:ae:ac:df:88:68:70:12:28:a0:a1:d8:c1:8d:
54:7c:9f:5e:5e:03:3c:20:ca:e3:81:d7:2f:12:f8:
be:cb:b0:00:14:0c:8b:45:6c:82:65:9f:b1:04:5f:
8a:7b:77:e9:5a:98:92:57:33:80:88:fc:14:a3:2e:
f3:f1:91:7c:8f:b5:85:b9:92:5b:62:78:04:74:2e:
74:89:a9:b4:23:1d:e0:67:57:6f:e9:01:3a:35:8d:
5e:91:73:0e:d9:15:70:c8:61:e0:c3:3d:89:66:3b:
e4:ba:90:cc:85:36:6a:1c:4d:fc:44:3d:63:1e:bc:
a3:bf:3f:84:b5:ee:84:1c:54:b3:91:7b:d0:e2:ff:
7a:4e:60:54:6c:88:f9:02:cd:72:cb:c1:48:20:1d:
21:a2:1c:67:a6:2b:7b:77:93:4e:ba:91:d4:e3:77:
5f:fc:58:d3:26:35:ac:21:af:0c:be:e0:de:3b:d4:
4a:82:37:12:e9:27:a0:5c:1d:31:ab:b9:80:f1:b8:
1c:3e:ba:31:01:6a:7d:90:91:b4:23:63:51:94:c8:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:75:FE:28:D6:CF:A6:50:45:20:44:BA:9F:40:01:58:B7:9C:5B
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:a9:da:3a:1e:f1:2d:51:1f:45:ca:9f:26:91:52:aa:51:
6f:33:f5:04:f2:a2:d2:1b:bc:3d:ca:54:f3:20:ba:48:a7:25:
a2:2a:36:92:70:b7:76:8d:37:21:2e:9c:e7:b5:a1:fd:e0:f5:
96:7c:a3:bd:ea:68:4c:30:12:70:2c:44:ed:ea:89:65:d7:c6:
00:9c:05:2c:28:71:dc:db:8f:93:f2:0b:ab:51:91:3b:d0:ce:
a5:1e:46:20:a8:d5:7b:69:bf:94:29:c4:58:77:17:07:00:de:
55:3b:d8:34:39:f5:71:f4:bb:f2:e4:47:b2:be:fd:de:4f:34:
4d:03:3e:af:b2:49:89:df:eb:87:4b:bc:84:db:10:d7:26:29:
cb:2f:1b:10:30:13:00:55:89:ae:26:59:3b:12:c8:7d:34:53:
6d:b1:74:26:15:c2:26:0c:e2:00:29:f9:12:9f:c3:c6:2e:5a:
fc:ce:8a:16:a5:05:18:2a:bc:45:72:54:f6:c8:a4:d7:c3:45:
f4:d6:00:11:f3:ed:e9:ab:3d:2b:10:be:89:4d:ea:27:f6:79:
72:a1:e8:65:ec:f1:68:fa:26:83:53:9a:bf:16:24:c3:a9:4a:
f7:0e:d9:3d:30:82:8c:f1:91:5d:57:a9:9f:84:c4:cb:71:d9:
ba:1e:97:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrXk+us4/RyubyLjCWrcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl
MTRiZGIwHhcNMjQxMTIyMDcwMjAwWhcNMjQxMTIzMDcwMjAwWjAzMTEwLwYDVQQD
EygyNmMyNzVmZTI4ZDZjZmE2NTA0NTIwNDRiYTlmNDAwMTU4Yjc5YzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjwSNzgT5b0u5kLgE5YJPWY98Mmv
nev8Hf2seseTZJW3cRU4cM089Pw6dUtiGq6s34hocBIooKHYwY1UfJ9eXgM8IMrj
gdcvEvi+y7AAFAyLRWyCZZ+xBF+Ke3fpWpiSVzOAiPwUoy7z8ZF8j7WFuZJbYngE
dC50iam0Ix3gZ1dv6QE6NY1ekXMO2RVwyGHgwz2JZjvkupDMhTZqHE38RD1jHryj
vz+Ete6EHFSzkXvQ4v96TmBUbIj5As1yy8FIIB0hohxnpit7d5NOupHU43df/FjT
JjWsIa8MvuDeO9RKgjcS6SegXB0xq7mA8bgcProxAWp9kJG0I2NRlMgseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbCdf4o1s+mUEUgRLqfQAFYt5xbMB8GA1UdIwQY
MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt
ODQyMGFlOWUwNjIyLzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy
LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh+p2joe
8S1RH0XKnyaRUqpRbzP1BPKi0hu8PcpU8yC6SKcloio2knC3do03IS6c57Wh/eD1
lnyjvepoTDAScCxE7eqJZdfGAJwFLChx3NuPk/ILq1GRO9DOpR5GIKjVe2m/lCnE
WHcXBwDeVTvYNDn1cfS78uRHsr793k80TQM+r7JJid/rh0u8hNsQ1yYpyy8bEDAT
AFWJriZZOxLIfTRTbbF0JhXCJgziACn5Ep/Dxi5a/M6KFqUFGCq8RXJU9sik18NF
9NYAEfPt6as9KxC+iU3qJ/Z5cqHoZezxaPomg1OavxYkw6lK9w7ZPTCCjPGRXVep
n4TEy3HZuh6XpA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:10:13 2024 by rpki-client on console-ams.rpki-client.org