Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: POd/jeZFxNOKgUSsHtOQyZY5U/pyPoFXKuL0qiOSzkI=
Subject key identifier: 49:A2:A6:2F:44:02:81:C6:39:1B:2D:5D:B7:B7:A5:1F:5E:E7:C5:B6
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 018F882464A90CEFDC9AA1799F060A09172C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0560
Signing time: Fri 17 May 2024 20:00:37 +0000
Manifest this update: Fri 17 May 2024 20:00:37 +0000
Manifest next update: Sat 18 May 2024 20:00:37 +0000
Files and hashes: 1: B0FGg804ellbBK0luHmJHMcIeCM.roa (hash: RjQNBPXgb5cNzcikLy0Dd2pQhxT1Q4r6SjAoj2xFFcs=)
2: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: Ze6egM7FfamEtK52J7n9GmPtACJk45Hqck9NQi+ypb8=)
3: W3foxkznU27gdbAIvCDdksgRneI.roa (hash: 2K+K9Ux3ePc4XVJlTqVAmIKO3Z59ECndjujKuGnXxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:64:a9:0c:ef:dc:9a:a1:79:9f:06:0a:09:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: May 17 20:00:37 2024 GMT
Not After : May 18 20:00:37 2024 GMT
Subject: CN=49a2a62f440281c6391b2d5db7b7a51f5ee7c5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:eb:c5:13:8f:32:f6:02:a5:5b:9c:2f:b7:c0:
04:8b:e1:df:31:c0:66:00:86:90:cf:5f:26:e2:e3:
bc:01:22:7d:15:d9:53:ed:61:52:b7:b1:70:72:d2:
2d:9f:b1:94:d6:72:3b:ea:82:71:2f:57:dc:f3:3a:
95:84:0f:02:c9:d3:d3:17:19:fb:6e:60:05:59:cb:
ea:6c:1f:30:78:49:53:71:15:04:25:8d:51:b1:de:
66:b6:e1:43:dd:65:5c:de:1b:05:86:de:b7:5a:59:
74:72:f7:1f:b7:d9:5f:fa:10:bb:18:f7:22:73:ea:
82:51:5a:df:68:56:d5:02:9a:e8:9e:5b:82:a9:81:
19:09:8f:c5:f0:15:df:9a:8a:f5:e7:b9:34:55:49:
83:c9:5a:06:36:d7:bf:da:63:aa:a1:a7:f9:f6:c5:
52:b9:f9:58:15:a6:c0:c9:21:73:e4:f2:be:e5:30:
4d:67:f3:ec:f8:ff:b2:4a:61:72:72:a8:06:57:02:
df:ca:8e:b1:2a:45:e6:71:92:c5:e3:bf:eb:21:7b:
e4:fc:2b:3b:f9:08:74:b3:39:51:a3:54:57:a2:bb:
63:84:31:3c:2b:58:3d:da:98:e2:16:0c:12:f0:46:
21:13:84:b4:7f:5d:e1:37:25:ce:51:66:73:18:2c:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:A6:2F:44:02:81:C6:39:1B:2D:5D:B7:B7:A5:1F:5E:E7:C5:B6
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:3b:23:04:d2:2e:d3:c5:f1:de:73:da:6c:26:41:9b:db:
6d:67:49:75:86:bb:b4:3b:7e:f2:7f:99:a6:63:f9:48:c5:9f:
ee:15:67:5d:70:5f:2e:c3:6b:5b:00:c6:fb:33:64:a7:f5:3f:
fa:d3:de:5c:a7:94:ce:32:45:d5:b4:f6:60:ad:97:b1:56:30:
39:98:14:9a:c4:2f:84:92:c5:0b:3b:80:20:bb:2b:89:d6:19:
16:3b:5c:95:ad:bf:c1:ef:63:22:c1:7e:19:ae:1f:24:51:19:
6e:a8:95:2d:ad:19:c9:72:72:fb:b1:65:d9:78:93:a8:5b:93:
5a:9f:2e:a2:fb:cd:39:df:43:d0:a7:e2:7b:4d:a5:dd:52:f1:
59:36:a3:bc:c3:4b:06:ac:b5:3e:e0:cf:c1:e4:a8:da:82:2e:
4e:28:ea:5b:f9:c5:56:db:25:20:cb:9c:f7:8b:6d:2a:f2:c9:
af:34:fa:0a:45:3a:d6:38:b7:26:80:23:80:5a:28:ca:79:69:
79:31:8f:6e:36:d0:98:47:ad:ce:dd:46:bd:81:ab:2b:dd:29:
0b:fe:e3:9e:bc:d6:ce:0f:bd:43:2a:29:03:a6:48:16:61:43:
f6:ef:70:57:5f:14:17:6b:49:71:ac:c4:93:b6:a6:22:ac:6e:
d0:08:1c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGSpDO/cmqF5nwYKCRcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh
ZGIxMmQwHhcNMjQwNTE3MjAwMDM3WhcNMjQwNTE4MjAwMDM3WjAzMTEwLwYDVQQD
Eyg0OWEyYTYyZjQ0MDI4MWM2MzkxYjJkNWRiN2I3YTUxZjVlZTdjNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+vFE48y9gKlW5wvt8AEi+HfMcBm
AIaQz18m4uO8ASJ9FdlT7WFSt7FwctItn7GU1nI76oJxL1fc8zqVhA8CydPTFxn7
bmAFWcvqbB8weElTcRUEJY1Rsd5mtuFD3WVc3hsFht63Wll0cvcft9lf+hC7GPci
c+qCUVrfaFbVApronluCqYEZCY/F8BXfmor157k0VUmDyVoGNte/2mOqoaf59sVS
uflYFabAySFz5PK+5TBNZ/Ps+P+ySmFycqgGVwLfyo6xKkXmcZLF47/rIXvk/Cs7
+Qh0szlRo1RXortjhDE8K1g92pjiFgwS8EYhE4S0f13hNyXOUWZzGCxnIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmipi9EAoHGORstXbe3pR9e58W2MB8GA1UdIwQY
MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt
NDQwZGQwMTJiMTQxLzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx
LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1g7IwTS
LtPF8d5z2mwmQZvbbWdJdYa7tDt+8n+ZpmP5SMWf7hVnXXBfLsNrWwDG+zNkp/U/
+tPeXKeUzjJF1bT2YK2XsVYwOZgUmsQvhJLFCzuAILsridYZFjtcla2/we9jIsF+
Ga4fJFEZbqiVLa0ZyXJy+7Fl2XiTqFuTWp8uovvNOd9D0Kfie02l3VLxWTajvMNL
Bqy1PuDPweSo2oIuTijqW/nFVtslIMuc94ttKvLJrzT6CkU61ji3JoAjgFooynlp
eTGPbjbQmEetzt1GvYGrK90pC/7jnrzWzg+9QyopA6ZIFmFD9u9wV18UF2tJcazE
k7amIqxu0AgcOg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:02:52 2024 by rpki-client on console-fra.rpki-client.org