Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: oll0+ESpWZ6h141qnISom7/e2S7Ebp0iovO7tfeY2XM=
Subject key identifier: 28:C9:71:55:26:C1:FD:34:01:62:4A:36:22:53:EA:6B:DD:20:97:A0
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 01935689BEF5E636F477CFE30FCBB3ED1417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 1208
Signing time: Sat 23 Nov 2024 01:01:28 +0000
Manifest this update: Sat 23 Nov 2024 01:01:28 +0000
Manifest next update: Sun 24 Nov 2024 01:01:28 +0000
Files and hashes: 1: FHLTz7eMLek_aYecVPBRBgPGQhQ.roa (hash: Na8GtSKEphzVEf9bolaQpGxI+1spXDJXJsiq6zvKyUc=)
2: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: uW6mXUtjP49E29Hl54K9nVCdXEzwJAkyoCSrinzr4OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:be:f5:e6:36:f4:77:cf:e3:0f:cb:b3:ed:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Nov 23 01:01:28 2024 GMT
Not After : Nov 24 01:01:28 2024 GMT
Subject: CN=28c9715526c1fd3401624a362253ea6bdd2097a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:90:89:99:4d:c9:05:38:96:2f:95:a8:11:
6b:d8:d8:02:c6:bd:9f:59:43:77:c6:f8:07:2e:c3:
95:24:30:77:54:31:26:c6:21:86:0f:31:76:1f:56:
68:8a:0f:61:12:c0:6a:5b:b1:46:3b:2f:27:9a:f7:
89:f3:e7:12:3d:70:3d:99:55:25:09:2a:51:5b:9c:
ac:a6:a9:44:da:ed:5a:11:eb:19:7e:00:28:f7:30:
56:14:42:72:24:70:6f:3f:69:b3:dc:ce:a4:44:be:
fc:8c:a7:ed:2a:64:e0:a7:9c:fc:f2:59:51:f2:fe:
21:55:94:ff:ce:13:f4:e2:27:36:06:b5:d2:fc:fd:
1d:80:d8:d8:54:cf:37:f7:0a:6e:48:96:1a:63:e0:
38:d6:47:8a:5e:ab:2a:02:c1:40:75:c9:e4:4c:32:
54:57:c4:ae:99:94:b9:db:2e:47:7c:d6:dd:7b:78:
df:f7:d6:00:71:fd:b0:a0:48:e0:3a:4c:1b:54:96:
84:0e:8a:56:5b:c4:aa:58:55:f5:64:1e:5d:2d:76:
57:3d:bd:cc:8f:a5:fe:0b:69:a5:7c:60:f4:bb:f0:
d4:a4:56:e5:0c:33:aa:13:74:50:6a:f1:48:2f:72:
a2:53:c8:cc:54:eb:78:07:2f:a8:a3:19:b1:0e:ea:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:71:55:26:C1:FD:34:01:62:4A:36:22:53:EA:6B:DD:20:97:A0
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7e:51:f3:bf:1e:e6:f5:30:86:b9:84:13:40:a9:ba:51:02:
35:ce:3c:47:98:b0:fe:1d:f4:29:b0:1c:01:c6:a1:9a:6e:9d:
34:81:60:03:57:95:f6:05:33:da:74:1f:19:ca:68:be:24:ed:
28:8c:fe:53:3c:67:40:56:ca:3c:f2:0d:fe:40:76:3c:62:67:
24:46:ce:f7:5c:08:d0:f1:e1:55:c9:24:0f:47:b4:c1:17:80:
0e:51:67:d1:88:1c:8d:63:d6:a0:6d:5c:d3:cb:70:fd:ac:4e:
4e:64:e5:aa:c2:90:35:47:55:e5:dc:9d:74:67:8c:d1:65:0c:
ad:61:35:83:b9:eb:ff:8e:40:8a:5c:d3:83:7b:ff:17:e6:8e:
79:8d:d3:16:3f:93:7b:46:0c:1f:0a:ed:81:bd:19:c1:76:e4:
c1:6f:fc:ab:f4:a3:1c:de:96:51:f9:67:a0:79:4e:61:80:97:
36:b1:06:6a:9f:c0:72:9a:26:b8:8b:96:93:e9:1e:e9:ef:d7:
f5:ac:f5:e0:47:61:ac:44:f4:15:24:c6:7e:b3:4e:7f:3f:de:
26:70:d3:b4:49:a2:54:c3:7d:88:49:24:a3:7e:d0:d6:af:81:
01:6c:1d:57:9b:fe:c0:1d:dc:5b:db:75:d8:a0:3a:90:b7:f2:
0c:0e:4f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWib715jb0d8/jD8uz7RQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjFjN2ZiMDQxNTM4MjlkOTZhMWMwMzhmMGRmNzE0ZGE1
OTU0MDQwHhcNMjQxMTIzMDEwMTI4WhcNMjQxMTI0MDEwMTI4WjAzMTEwLwYDVQQD
EygyOGM5NzE1NTI2YzFmZDM0MDE2MjRhMzYyMjUzZWE2YmRkMjA5N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofyQiZlNyQU4li+VqBFr2NgCxr2f
WUN3xvgHLsOVJDB3VDEmxiGGDzF2H1Zoig9hEsBqW7FGOy8nmveJ8+cSPXA9mVUl
CSpRW5yspqlE2u1aEesZfgAo9zBWFEJyJHBvP2mz3M6kRL78jKftKmTgp5z88llR
8v4hVZT/zhP04ic2BrXS/P0dgNjYVM839wpuSJYaY+A41keKXqsqAsFAdcnkTDJU
V8SumZS52y5HfNbde3jf99YAcf2woEjgOkwbVJaEDopWW8SqWFX1ZB5dLXZXPb3M
j6X+C2mlfGD0u/DUpFblDDOqE3RQavFIL3KiU8jMVOt4By+ooxmxDupbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjJcVUmwf00AWJKNiJT6mvdIJegMB8GA1UdIwQY
MBaAFEEhx/sEFTgp2WocA48N9xTaWVQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGIt
ZDE5ODFkZDQ0NmNmLzEvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGItZDE5ODFkZDQ0NmNm
LzEvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqX5R878e
5vUwhrmEE0CpulECNc48R5iw/h30KbAcAcahmm6dNIFgA1eV9gUz2nQfGcpoviTt
KIz+UzxnQFbKPPIN/kB2PGJnJEbO91wI0PHhVckkD0e0wReADlFn0YgcjWPWoG1c
08tw/axOTmTlqsKQNUdV5dyddGeM0WUMrWE1g7nr/45AilzTg3v/F+aOeY3TFj+T
e0YMHwrtgb0ZwXbkwW/8q/SjHN6WUflnoHlOYYCXNrEGap/AcpomuIuWk+ke6e/X
9az14EdhrET0FSTGfrNOfz/eJnDTtEmiVMN9iEkko37Q1q+BAWwdV5v+wB3cW9t1
2KA6kLfyDA5PJQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:50 2024 by rpki-client on console-fra.rpki-client.org