Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: 41E6MjlEIJr//ET7C541MneUu00JxFYJ28l4vdE3+Hg=
Subject key identifier: 88:BC:1D:19:84:10:DC:5A:4D:90:80:65:D5:5D:01:7E:EB:2B:F2:5F
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 018F88248EAF252991294F4D5378E37FD919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 0321
Signing time: Fri 17 May 2024 20:00:48 +0000
Manifest this update: Fri 17 May 2024 20:00:48 +0000
Manifest next update: Sat 18 May 2024 20:00:48 +0000
Files and hashes: 1: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: 6HXa40et5Szr+EBbVTnORjXnVpZWG7Ghj1AoeaVSz+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:8e:af:25:29:91:29:4f:4d:53:78:e3:7f:d9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: May 17 20:00:48 2024 GMT
Not After : May 18 20:00:48 2024 GMT
Subject: CN=88bc1d198410dc5a4d908065d55d017eeb2bf25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:41:d3:71:59:2d:07:ad:87:61:81:e7:71:
67:96:e7:85:4f:7f:bb:5e:2a:00:a8:3c:6d:7c:c8:
4d:8a:b5:06:2d:d5:5b:50:0b:ef:91:c4:9a:5d:e2:
08:ac:87:ed:3e:a3:00:65:b0:e7:44:3c:5a:4f:1f:
55:82:94:74:e4:92:17:09:61:1b:df:36:f0:28:d6:
06:ae:2a:69:ad:ef:1f:88:7d:dd:f0:b9:4a:a0:07:
4a:72:fc:56:18:60:a0:de:d2:5d:5d:5f:ca:24:dc:
ec:00:98:dd:cd:0d:f8:a1:5d:22:2e:b2:53:df:0a:
95:fa:b9:4d:7e:95:f8:f2:1d:5c:13:a1:70:d2:97:
36:37:5d:00:9c:a5:7c:50:c7:4f:11:91:8c:37:69:
c9:4a:91:39:09:86:6e:61:d9:71:9f:8e:f7:a8:93:
c1:ee:7a:51:89:5e:fa:da:7f:b0:ea:80:c9:15:38:
13:c9:ca:5e:63:b5:0a:9e:93:8c:c4:4e:7b:67:dc:
53:3a:50:d4:0b:e5:f6:a7:e5:84:d7:3c:4e:a8:aa:
a3:db:28:8b:87:21:46:17:de:87:a6:86:10:59:0d:
07:f1:e1:57:a7:f0:95:3d:ba:01:b9:d5:c0:0c:ac:
f1:0d:28:ec:3b:f8:dd:1c:ae:82:60:30:76:fb:c4:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:1D:19:84:10:DC:5A:4D:90:80:65:D5:5D:01:7E:EB:2B:F2:5F
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a2:5d:f0:44:04:14:8f:aa:91:b2:a2:52:b1:4c:9a:ae:48:
81:59:de:86:0c:34:e6:58:44:cf:ed:bd:c6:72:9a:3c:08:4c:
c7:88:00:3d:ad:2b:9d:bb:2d:05:8e:21:b4:a1:6a:83:70:c1:
e3:3d:7e:93:e4:f9:08:d1:3e:ae:77:c4:15:bb:a7:59:77:a3:
6c:1b:1b:b2:40:13:12:e9:39:c8:39:9b:be:e3:b8:27:4a:77:
2b:8b:c4:0a:46:d4:26:9c:63:a7:02:ac:03:99:c5:78:85:99:
9b:03:52:af:5a:d0:1d:a0:8d:02:7b:44:c2:27:68:a6:7e:12:
29:e1:6f:00:11:3a:53:48:6f:bb:c1:5f:22:fb:8b:1c:d1:f1:
9d:65:70:51:8e:66:18:b6:8b:08:7a:b3:39:79:1f:da:0d:5c:
53:82:00:8e:da:73:da:79:04:b5:24:2e:b1:5d:cc:c1:7d:7f:
6b:f1:b6:92:26:fb:f3:4c:9e:8a:31:d2:bc:f1:97:1c:fc:89:
c2:61:d2:b7:c8:e9:ea:0c:1c:07:0b:62:a7:05:85:e1:98:06:
65:a9:4d:8b:78:25:f7:07:37:46:7e:88:2c:2f:9d:65:4d:8d:
ff:34:f7:2f:cf:a4:6a:3f:87:38:19:e5:98:a2:fc:c1:73:6e:
64:fe:a0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJI6vJSmRKU9NU3jjf9kZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk
ZDBhYzcwHhcNMjQwNTE3MjAwMDQ4WhcNMjQwNTE4MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg4OGJjMWQxOTg0MTBkYzVhNGQ5MDgwNjVkNTVkMDE3ZWViMmJmMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndVB03FZLQeth2GB53FnlueFT3+7
XioAqDxtfMhNirUGLdVbUAvvkcSaXeIIrIftPqMAZbDnRDxaTx9VgpR05JIXCWEb
3zbwKNYGrippre8fiH3d8LlKoAdKcvxWGGCg3tJdXV/KJNzsAJjdzQ34oV0iLrJT
3wqV+rlNfpX48h1cE6Fw0pc2N10AnKV8UMdPEZGMN2nJSpE5CYZuYdlxn473qJPB
7npRiV762n+w6oDJFTgTycpeY7UKnpOMxE57Z9xTOlDUC+X2p+WE1zxOqKqj2yiL
hyFGF96HpoYQWQ0H8eFXp/CVPboBudXADKzxDSjsO/jdHK6CYDB2+8RaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi8HRmEENxaTZCAZdVdAX7rK/JfMB8GA1UdIwQY
MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt
NjU5YzY3MTkxMWYxLzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx
LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaJd8EQE
FI+qkbKiUrFMmq5IgVnehgw05lhEz+29xnKaPAhMx4gAPa0rnbstBY4htKFqg3DB
4z1+k+T5CNE+rnfEFbunWXejbBsbskATEuk5yDmbvuO4J0p3K4vECkbUJpxjpwKs
A5nFeIWZmwNSr1rQHaCNAntEwidopn4SKeFvABE6U0hvu8FfIvuLHNHxnWVwUY5m
GLaLCHqzOXkf2g1cU4IAjtpz2nkEtSQusV3MwX1/a/G2kib780yeijHSvPGXHPyJ
wmHSt8jp6gwcBwtipwWF4ZgGZalNi3gl9wc3Rn6ILC+dZU2N/zT3L8+kaj+HOBnl
mKL8wXNuZP6gcQ==
-----END CERTIFICATE-----
Generated at Fri May 17 21:01:48 2024 by rpki-client on console-fra.rpki-client.org