Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: HRqlGsWK44i35QuWzizxF8P+/tCTzIktN34jjx70LbM=
Subject key identifier: BE:E2:6C:CE:A1:91:8D:7B:FB:5D:A9:8D:2F:A9:0F:70:99:F2:00:11
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 0193549BAA1A0F66469B0C0E12C1EE8951F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 0435
Signing time: Fri 22 Nov 2024 16:01:47 +0000
Manifest this update: Fri 22 Nov 2024 16:01:47 +0000
Manifest next update: Sat 23 Nov 2024 16:01:47 +0000
Files and hashes: 1: J8-PqKXLKprLZa67IT7Okq7NDEA.roa (hash: cCSd54AzWFQJHcMzHD6IJiHasyEimZEu0nUKC/p8NvY=)
2: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: wBL3vPcvHu3Ytw/OB1kEHZvvEboNZ4GtYR6sApzIWss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:aa:1a:0f:66:46:9b:0c:0e:12:c1:ee:89:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Nov 22 16:01:47 2024 GMT
Not After : Nov 23 16:01:47 2024 GMT
Subject: CN=bee26ccea1918d7bfb5da98d2fa90f7099f20011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:ac:78:0d:9e:d1:f8:9c:5a:e3:b6:db:36:
72:54:38:52:ee:ed:d9:c2:50:1e:cd:a1:37:8f:ee:
c0:e8:12:2e:6b:7e:19:fe:9d:c3:91:e8:80:41:d9:
5e:1f:d3:73:0c:32:c2:8e:ec:7f:9a:8b:37:98:81:
59:b9:a3:e6:1c:19:c2:73:68:43:d9:e5:84:0b:99:
51:98:e4:f2:b8:05:81:d6:32:b9:51:76:54:7b:4f:
c3:9f:a3:ba:77:54:3b:db:5f:88:fb:39:f8:a8:ba:
5d:ab:bf:2f:ff:00:70:e5:c6:7f:76:76:fb:a4:17:
49:dc:5d:41:67:fe:78:2a:be:37:93:5e:13:d1:58:
64:11:10:66:68:1b:b6:3d:08:63:2e:d5:c9:11:b8:
bc:08:a9:70:11:cf:3c:59:a7:d8:f6:f9:28:10:b1:
9d:8b:e9:44:14:13:48:92:1a:80:d1:6e:53:e6:ed:
99:84:e7:18:1b:8e:0c:9a:f0:a6:af:b7:6b:5a:c6:
77:b0:c0:36:c9:0e:54:3d:67:27:4a:34:06:ba:23:
ad:29:10:33:07:8b:83:1f:f5:c8:dc:57:46:14:20:
b8:c1:a6:d3:d9:dc:c5:b0:12:06:4f:ff:cc:ec:f4:
5f:67:aa:47:90:d1:34:81:8c:df:e0:7d:66:e4:a6:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:6C:CE:A1:91:8D:7B:FB:5D:A9:8D:2F:A9:0F:70:99:F2:00:11
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:f5:18:52:89:95:a4:bc:d9:1c:e6:b9:66:d0:51:f4:27:
64:27:f8:f2:ba:ba:51:d0:84:c7:7a:d8:39:38:27:98:ac:c6:
23:da:a0:ce:97:01:e8:cd:d6:be:2a:5c:61:5f:f8:14:56:67:
c7:6b:b0:94:41:59:84:ca:c3:2e:e0:fa:9f:c7:18:b4:f4:f6:
fa:55:61:ab:df:4e:51:b3:94:49:3f:ae:87:11:90:88:d8:d6:
12:7e:13:7f:d7:09:03:55:5f:45:cf:85:c1:8a:66:19:78:c6:
4e:9a:13:80:dc:2d:b5:5d:f6:08:45:9f:29:68:4f:5b:e6:66:
a9:2b:ef:6a:8d:6d:d3:79:12:09:45:13:00:1a:62:4b:1e:eb:
db:a3:bd:23:fb:be:85:c7:1a:70:83:c0:dd:ca:0e:62:0b:a2:
de:62:1d:f0:1b:0c:81:22:86:c2:e9:90:6b:9a:5a:7b:5d:9b:
83:6b:50:29:04:cd:eb:84:9e:42:58:6c:8f:eb:fd:56:8f:2c:
20:6a:18:8c:87:58:62:5a:22:85:e7:76:20:df:09:c4:29:85:
66:f8:e2:8d:c4:d6:ea:eb:a6:8b:53:77:31:0d:cc:13:5d:e1:
40:7b:30:19:5c:91:c8:39:c2:6c:6c:e5:90:3f:ea:09:08:86:
20:54:c4:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm6oaD2ZGmwwOEsHuiVH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjQxMTIyMTYwMTQ3WhcNMjQxMTIzMTYwMTQ3WjAzMTEwLwYDVQQD
EyhiZWUyNmNjZWExOTE4ZDdiZmI1ZGE5OGQyZmE5MGY3MDk5ZjIwMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU6seA2e0ficWuO22zZyVDhS7u3Z
wlAezaE3j+7A6BIua34Z/p3DkeiAQdleH9NzDDLCjux/mos3mIFZuaPmHBnCc2hD
2eWEC5lRmOTyuAWB1jK5UXZUe0/Dn6O6d1Q721+I+zn4qLpdq78v/wBw5cZ/dnb7
pBdJ3F1BZ/54Kr43k14T0VhkERBmaBu2PQhjLtXJEbi8CKlwEc88WafY9vkoELGd
i+lEFBNIkhqA0W5T5u2ZhOcYG44MmvCmr7drWsZ3sMA2yQ5UPWcnSjQGuiOtKRAz
B4uDH/XI3FdGFCC4wabT2dzFsBIGT//M7PRfZ6pHkNE0gYzf4H1m5KawgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7ibM6hkY17+12pjS+pD3CZ8gARMB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5f1GFKJ
laS82RzmuWbQUfQnZCf48rq6UdCEx3rYOTgnmKzGI9qgzpcB6M3WvipcYV/4FFZn
x2uwlEFZhMrDLuD6n8cYtPT2+lVhq99OUbOUST+uhxGQiNjWEn4Tf9cJA1VfRc+F
wYpmGXjGTpoTgNwttV32CEWfKWhPW+ZmqSvvao1t03kSCUUTABpiSx7r26O9I/u+
hccacIPA3coOYgui3mId8BsMgSKGwumQa5pae12bg2tQKQTN64SeQlhsj+v9Vo8s
IGoYjIdYYloihed2IN8JxCmFZvjijcTW6uumi1N3MQ3ME13hQHswGVyRyDnCbGzl
kD/qCQiGIFTEog==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:49 2024 by rpki-client on console-fra.rpki-client.org