Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: h5j09OzDQU96IoQ0+627j+FkVSNpo1RU4Yvo6/k3I4w=
Subject key identifier: 6E:4C:62:65:3D:4B:BB:56:D6:88:E1:63:F9:C9:78:FD:CC:AE:E0:AF
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 0193568A0F03C295DBB9895375334574EFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 052F
Signing time: Sat 23 Nov 2024 01:01:48 +0000
Manifest this update: Sat 23 Nov 2024 01:01:48 +0000
Manifest next update: Sun 24 Nov 2024 01:01:48 +0000
Files and hashes: 1: FBYuzNABNIISKIbWuGy0n6f73c0.roa (hash: C1qXJqPyBfyq+ZjURSAxfLc5JG62I6PWusSF08WZ8Cg=)
2: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: u+6ExBSU0dKKtiqtkZQcj8g0jY/GwGf9WkQxdLbRgoI=)
3: jpXabWjOOXfOEWEJvhaXaZdb2mI.roa (hash: bGeS3nnwnLp0nLIlmZMWjnvEpETrzZF2dfHfQgMQmg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:0f:03:c2:95:db:b9:89:53:75:33:45:74:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Nov 23 01:01:48 2024 GMT
Not After : Nov 24 01:01:48 2024 GMT
Subject: CN=6e4c62653d4bbb56d688e163f9c978fdccaee0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:8d:91:c4:5a:70:3c:ea:24:0a:1c:03:83:
94:4a:b9:be:3b:01:81:f1:95:bb:91:fa:b9:c5:2c:
b5:79:19:f9:2c:85:91:a1:23:d3:cf:89:8c:42:12:
f8:5b:aa:19:ad:9d:d3:47:6d:be:ee:6e:2a:c5:08:
5b:83:1b:c7:e1:c7:78:2a:da:d9:b8:2f:d4:0b:6f:
de:8d:8e:8e:c5:ef:96:41:f4:7d:d9:23:73:fa:fa:
19:18:e8:f7:e6:18:7a:a3:6e:47:06:70:1d:41:d4:
ed:c7:b6:d8:0f:30:26:dd:0e:b7:73:30:96:96:56:
8e:a7:69:89:e2:73:5d:e5:8b:c2:31:5a:58:35:06:
01:fb:82:d4:76:4e:71:82:8a:20:c2:56:85:18:7f:
9c:ff:31:3c:62:99:3b:56:2c:95:b5:cb:ae:f3:53:
32:3c:d1:20:ef:a6:99:48:ab:36:43:77:1b:e8:5f:
26:45:c8:63:80:7b:f9:3b:af:51:93:07:d4:a7:af:
5f:4f:59:c5:40:a9:d2:5b:41:84:8d:68:f6:e8:ff:
e4:68:41:16:3f:f4:ef:a9:a8:ed:87:33:08:81:e1:
0b:e0:b4:88:1f:b8:79:f7:7c:37:8b:29:1a:67:96:
f1:a0:c7:66:46:bd:28:13:bc:09:c1:5e:4a:10:6d:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4C:62:65:3D:4B:BB:56:D6:88:E1:63:F9:C9:78:FD:CC:AE:E0:AF
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:93:b4:2b:c5:29:0d:d7:d1:c2:ef:9b:03:df:ba:62:8e:bb:
fd:52:f5:1e:72:af:e2:a3:a8:51:53:bf:1c:e5:b8:79:64:5f:
bc:e1:ef:08:c5:60:2c:d9:5b:41:cc:fd:23:fe:4b:69:7d:81:
84:75:a3:2e:de:31:3b:f2:56:1c:85:51:12:48:a4:d6:d0:89:
5f:3b:58:8c:6b:57:b2:fd:05:cc:be:61:98:f2:57:ed:83:2f:
e9:9c:a9:07:f5:30:f3:50:06:11:25:a7:14:4e:ec:23:00:1e:
b1:91:45:63:0b:36:e6:48:ba:85:f9:da:7d:5f:1f:41:47:71:
e9:db:d8:e4:9e:71:f1:d2:fe:8f:fa:76:34:3f:16:39:91:ee:
0a:37:5d:ff:fa:77:4c:25:75:c0:d8:f2:35:a1:5f:3c:49:a8:
3c:9a:61:3b:f8:15:01:32:de:31:0f:f4:3e:b8:98:16:6c:35:
8f:c7:8f:4d:01:f8:2b:f2:e7:32:23:a4:73:97:c0:9a:fc:cf:
53:10:9d:71:2b:8b:94:97:77:c2:09:29:0b:da:e5:5d:ef:04:
fe:37:67:cd:69:38:be:6f:75:bf:02:e6:68:4d:b9:be:23:72:
72:22:ce:af:71:58:c1:25:e3:04:9e:1e:49:63:44:e3:3b:a0:
6f:7c:ae:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWig8DwpXbuYlTdTNFdO/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYTU5YjA5NjBlYTY1ZDZiOTIzOTNlZTAzNDdhMWE4MzJm
OWI5ODQwHhcNMjQxMTIzMDEwMTQ4WhcNMjQxMTI0MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg2ZTRjNjI2NTNkNGJiYjU2ZDY4OGUxNjNmOWM5NzhmZGNjYWVlMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xuNkcRacDzqJAocA4OUSrm+OwGB
8ZW7kfq5xSy1eRn5LIWRoSPTz4mMQhL4W6oZrZ3TR22+7m4qxQhbgxvH4cd4KtrZ
uC/UC2/ejY6Oxe+WQfR92SNz+voZGOj35hh6o25HBnAdQdTtx7bYDzAm3Q63czCW
llaOp2mJ4nNd5YvCMVpYNQYB+4LUdk5xgoogwlaFGH+c/zE8Ypk7ViyVtcuu81My
PNEg76aZSKs2Q3cb6F8mRchjgHv5O69RkwfUp69fT1nFQKnSW0GEjWj26P/kaEEW
P/TvqajthzMIgeEL4LSIH7h593w3iykaZ5bxoMdmRr0oE7wJwV5KEG1HvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5MYmU9S7tW1ojhY/nJeP3MruCvMB8GA1UdIwQY
MBaAFEGlmwlg6mXWuSOT7gNHoagy+bmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt
YmZkZWMwYzExMmUzLzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz
LzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJO0K8Up
DdfRwu+bA9+6Yo67/VL1HnKv4qOoUVO/HOW4eWRfvOHvCMVgLNlbQcz9I/5LaX2B
hHWjLt4xO/JWHIVREkik1tCJXztYjGtXsv0FzL5hmPJX7YMv6ZypB/Uw81AGESWn
FE7sIwAesZFFYws25ki6hfnafV8fQUdx6dvY5J5x8dL+j/p2ND8WOZHuCjdd//p3
TCV1wNjyNaFfPEmoPJphO/gVATLeMQ/0PriYFmw1j8ePTQH4K/LnMiOkc5fAmvzP
UxCdcSuLlJd3wgkpC9rlXe8E/jdnzWk4vm91vwLmaE25viNyciLOr3FYwSXjBJ4e
SWNE4zugb3yuXg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:27 2024 by rpki-client on console-fra.rpki-client.org