Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: 9XRxnvG/hOeTCcytRC/kqIAcDgmleS+MOODXs2zwJcI=
Subject key identifier: 3E:0D:0D:F3:FF:38:E8:37:A6:77:B8:94:BB:A9:D4:B3:3E:7A:6D:50
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 018F22DDFFBDF16B9CB861FEC37EDBFD42B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1147
Signing time: Sun 28 Apr 2024 04:02:05 +0000
Manifest this update: Sun 28 Apr 2024 04:02:05 +0000
Manifest next update: Mon 29 Apr 2024 04:02:05 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: wZdkXli48jaQyUtay2PzA+LDphv7tbvgmqhfrO23K3Q=)
2: GIFrF92NPU5XTTIbNn3vuETTj0I.roa (hash: lI4Ezy96OD3L3JGwgmqKncVC9HU2kqwJdx8gIVMnd0o=)
3: WlJroNaZJioA2oIouqos2zM1UrU.roa (hash: 4xFOWnLD5opWfW6WyF3V8GpscNZw7gScNfX4Gvf2VKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:dd:ff:bd:f1:6b:9c:b8:61:fe:c3:7e:db:fd:42:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Apr 28 04:02:05 2024 GMT
Not After : Apr 29 04:02:05 2024 GMT
Subject: CN=3e0d0df3ff38e837a677b894bba9d4b33e7a6d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:ac:4a:17:ed:f7:f6:5c:1e:39:ec:e0:8f:
c9:7d:27:dc:07:aa:32:64:0f:d0:29:e8:61:f4:a5:
b0:c6:43:bc:52:a5:de:df:08:4c:73:fb:de:1b:a0:
f9:0e:99:ca:0d:41:3e:f0:d7:f2:1f:05:8d:8c:22:
1e:c8:08:c1:44:7c:60:d8:6c:13:ec:43:92:24:a9:
e8:75:00:2f:19:c8:30:4a:7d:5e:b5:9b:bf:19:05:
80:e0:70:b0:b9:b7:59:e4:f0:40:c7:59:de:c2:18:
16:88:c0:54:1d:d5:07:7a:ea:7a:4b:a4:fb:fd:92:
7c:d2:5b:fe:85:29:4f:99:f4:82:53:75:3b:d0:71:
d9:b3:5c:37:81:cb:e1:fc:ca:63:81:a3:87:82:15:
e0:ba:46:7e:a5:d8:46:ea:65:af:53:e4:fb:3a:4e:
57:56:38:d1:23:64:32:0e:47:3e:39:3c:96:01:d2:
73:0f:4d:91:c4:02:27:f5:10:64:e2:14:21:a4:70:
30:b4:97:c5:0d:de:21:5f:b5:3e:29:ca:eb:2b:98:
f7:b0:06:26:8e:4b:a9:63:d9:e2:01:4e:b0:0b:f9:
9c:6a:83:7c:1b:5e:e0:88:35:96:07:9c:a7:1f:5b:
ae:a9:a9:d0:53:cb:7d:6f:a2:64:3c:40:f3:3f:5f:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:0D:F3:FF:38:E8:37:A6:77:B8:94:BB:A9:D4:B3:3E:7A:6D:50
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:e8:7f:a0:cc:d5:48:68:be:45:8a:85:9f:a2:93:5e:51:
61:81:f6:dc:ba:81:cc:c9:59:a0:df:2f:5e:c8:02:39:da:9d:
cc:34:f6:b2:36:9e:55:b7:a8:3a:64:82:14:f9:8c:55:a6:3f:
a5:25:d9:af:ac:74:f1:fe:93:76:c3:86:01:d5:b6:82:2f:56:
16:32:e5:4e:ce:24:e1:8c:8c:c2:78:77:c5:3f:34:e3:6e:d8:
8c:9a:d3:69:70:b9:ba:31:b9:ed:82:bf:09:5a:f6:5c:10:7a:
0b:cc:be:a6:d8:f9:46:6e:7e:69:9b:be:ce:ac:59:28:96:87:
43:95:66:e7:fd:39:f7:e3:79:21:70:73:32:42:7b:1d:f7:03:
6a:fe:99:08:ce:6a:f9:26:fe:fe:99:4a:0f:38:3b:7b:34:e4:
48:3e:c9:6f:dc:07:80:a0:0b:e2:fd:0f:1b:4a:81:58:9b:5e:
d2:4e:11:2a:fb:21:1b:5e:d9:01:18:1d:a3:e3:97:49:56:66:
9d:ef:be:b9:09:e2:72:3f:1d:86:e4:d5:a4:df:48:33:db:1e:
d6:b0:7a:1c:2a:68:30:16:cb:26:b0:4b:17:30:f9:a2:08:7e:
da:85:22:bf:92:c3:fc:e1:b9:75:95:14:32:e7:68:8f:ec:d5:
f6:28:09:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8i3f+98WucuGH+w37b/UK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2
MjliNjgwHhcNMjQwNDI4MDQwMjA1WhcNMjQwNDI5MDQwMjA1WjAzMTEwLwYDVQQD
EygzZTBkMGRmM2ZmMzhlODM3YTY3N2I4OTRiYmE5ZDRiMzNlN2E2ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02CsShft9/ZcHjns4I/JfSfcB6oy
ZA/QKehh9KWwxkO8UqXe3whMc/veG6D5DpnKDUE+8NfyHwWNjCIeyAjBRHxg2GwT
7EOSJKnodQAvGcgwSn1etZu/GQWA4HCwubdZ5PBAx1newhgWiMBUHdUHeup6S6T7
/ZJ80lv+hSlPmfSCU3U70HHZs1w3gcvh/MpjgaOHghXgukZ+pdhG6mWvU+T7Ok5X
VjjRI2QyDkc+OTyWAdJzD02RxAIn9RBk4hQhpHAwtJfFDd4hX7U+KcrrK5j3sAYm
jkupY9niAU6wC/mcaoN8G17giDWWB5ynH1uuqanQU8t9b6JkPEDzP1/KuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4NDfP/OOg3pne4lLup1LM+em1QMB8GA1UdIwQY
MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt
NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh
LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArinof6DM
1UhovkWKhZ+ik15RYYH23LqBzMlZoN8vXsgCOdqdzDT2sjaeVbeoOmSCFPmMVaY/
pSXZr6x08f6TdsOGAdW2gi9WFjLlTs4k4YyMwnh3xT80427YjJrTaXC5ujG57YK/
CVr2XBB6C8y+ptj5Rm5+aZu+zqxZKJaHQ5Vm5/059+N5IXBzMkJ7HfcDav6ZCM5q
+Sb+/plKDzg7ezTkSD7Jb9wHgKAL4v0PG0qBWJte0k4RKvshG17ZARgdo+OXSVZm
ne++uQnicj8dhuTVpN9IM9se1rB6HCpoMBbLJrBLFzD5ogh+2oUiv5LD/OG5dZUU
Mudoj+zV9igJlw==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:43:46 2024 by rpki-client on console-ams.rpki-client.org