Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: ZJ9xPeVacGtw/kwl9JpV/5AwVTn36JiL0m6Gera+z4Y=
Subject key identifier: F7:99:62:4A:FB:C4:26:F7:81:14:FD:58:83:BC:33:1F:40:84:00:35
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0193519961BE0DDEB8C7E02992E5642FE425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 113D
Signing time: Fri 22 Nov 2024 02:00:26 +0000
Manifest this update: Fri 22 Nov 2024 02:00:26 +0000
Manifest next update: Sat 23 Nov 2024 02:00:26 +0000
Files and hashes: 1: BLw3i85CYVgfTcuTkHzCAZRoSAE.roa (hash: HArbQPMd6Wu1WucM7piKjydLgEATkrrXiYMsnAxeDNg=)
2: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: e/xiPKayPW8gRaPG+/syTAtqRJ704I9t4LqcTF8jpTU=)
3: xiNSRry8fF1cfUKFv9oQktvR80k.roa (hash: CnHr4ILhnsQcv61EGzt2CxWn2FskciYuUF6w128C5KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:61:be:0d:de:b8:c7:e0:29:92:e5:64:2f:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Nov 22 02:00:26 2024 GMT
Not After : Nov 23 02:00:26 2024 GMT
Subject: CN=f799624afbc426f78114fd5883bc331f40840035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:f7:b8:15:5d:24:f0:de:29:c6:55:c4:86:
74:33:9a:ec:17:d3:56:d2:d5:c2:d3:b1:8d:02:86:
3c:65:55:8d:9a:28:da:8b:e8:57:d6:02:a5:57:71:
7f:f7:54:2e:6f:35:12:ec:5b:f5:20:0f:10:17:8a:
a7:e8:f9:4a:e8:c7:72:b2:22:b5:a8:f8:45:92:12:
41:0c:47:5d:59:f9:14:49:99:36:51:6b:d9:fe:04:
e1:eb:b5:23:0f:0d:e0:74:c3:20:81:85:07:91:03:
4d:04:dd:8a:2d:34:b9:de:ae:b5:39:7b:d7:6b:66:
02:31:22:92:6b:03:4e:3b:95:d7:a2:89:ef:de:1a:
f4:b2:d1:5e:ca:a9:3d:3f:50:84:bc:42:87:ec:60:
8d:27:32:38:52:6f:98:07:ea:9b:9c:7c:54:43:8c:
ca:d9:26:e1:8d:f9:bc:bd:35:1f:28:ef:ad:f6:fc:
f3:80:66:3c:28:bc:2a:03:2d:d4:8d:08:a9:ca:9e:
d2:c8:e4:ac:97:89:b3:02:2c:97:a4:93:28:ce:41:
37:1e:00:d0:1f:75:8d:68:7d:e2:b3:f7:12:59:9d:
34:25:17:40:ea:38:24:a2:49:26:e1:67:6e:c0:eb:
01:ce:f5:10:8b:5e:11:d5:33:ef:2c:86:94:96:4e:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:99:62:4A:FB:C4:26:F7:81:14:FD:58:83:BC:33:1F:40:84:00:35
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c7:99:23:ec:6e:6d:88:96:6e:61:32:d4:d9:f8:30:0e:04:
98:38:d6:93:e9:e1:78:a6:91:83:c8:83:b0:47:ee:de:46:2b:
d0:4e:62:38:02:04:dd:d3:0b:f8:c4:70:98:af:49:e8:92:7e:
11:f0:d1:18:44:c7:29:45:0e:c5:e7:fa:49:42:0c:ab:d5:e5:
c8:d7:62:ec:0d:f3:49:41:9d:63:ad:06:1e:81:dc:d8:64:8b:
f4:4d:aa:32:c6:c8:2f:1d:6a:61:e0:98:6a:db:ac:ca:fc:ba:
f8:df:d8:47:88:93:a6:7c:64:ed:2a:c9:03:d1:8e:51:45:19:
9e:c9:41:cf:22:52:ed:79:43:74:5d:87:7a:72:75:e0:5f:5e:
03:50:6e:72:4a:7a:76:c9:a1:10:eb:44:b2:d7:fa:85:7d:e7:
20:65:5e:7d:99:61:52:1a:f5:da:df:80:c0:ef:77:1b:59:bf:
0b:dd:78:33:e5:8f:86:c7:e4:97:70:d0:e0:80:d3:e6:d4:62:
e2:4c:cf:0f:9b:ed:dd:5a:e3:27:36:5f:a3:5f:72:31:38:d2:
02:60:d2:17:46:c7:a1:21:c4:e9:61:8a:aa:11:8c:fe:ce:eb:
98:d9:94:23:79:e0:ab:d5:14:12:97:33:d1:8d:25:3c:c4:74:
46:ef:68:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmWG+Dd64x+ApkuVkL+QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1
MTI5MzkwHhcNMjQxMTIyMDIwMDI2WhcNMjQxMTIzMDIwMDI2WjAzMTEwLwYDVQQD
EyhmNzk5NjI0YWZiYzQyNmY3ODExNGZkNTg4M2JjMzMxZjQwODQwMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlH3uBVdJPDeKcZVxIZ0M5rsF9NW
0tXC07GNAoY8ZVWNmijai+hX1gKlV3F/91QubzUS7Fv1IA8QF4qn6PlK6MdysiK1
qPhFkhJBDEddWfkUSZk2UWvZ/gTh67UjDw3gdMMggYUHkQNNBN2KLTS53q61OXvX
a2YCMSKSawNOO5XXoonv3hr0stFeyqk9P1CEvEKH7GCNJzI4Um+YB+qbnHxUQ4zK
2Sbhjfm8vTUfKO+t9vzzgGY8KLwqAy3UjQipyp7SyOSsl4mzAiyXpJMozkE3HgDQ
H3WNaH3is/cSWZ00JRdA6jgkokkm4WduwOsBzvUQi14R1TPvLIaUlk6+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeZYkr7xCb3gRT9WIO8Mx9AhAA1MB8GA1UdIwQY
MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt
ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx
LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8eZI+xu
bYiWbmEy1Nn4MA4EmDjWk+nheKaRg8iDsEfu3kYr0E5iOAIE3dML+MRwmK9J6JJ+
EfDRGETHKUUOxef6SUIMq9XlyNdi7A3zSUGdY60GHoHc2GSL9E2qMsbILx1qYeCY
atusyvy6+N/YR4iTpnxk7SrJA9GOUUUZnslBzyJS7XlDdF2HenJ14F9eA1Buckp6
dsmhEOtEstf6hX3nIGVefZlhUhr12t+AwO93G1m/C914M+WPhsfkl3DQ4IDT5tRi
4kzPD5vt3VrjJzZfo19yMTjSAmDSF0bHoSHE6WGKqhGM/s7rmNmUI3ngq9UUEpcz
0Y0lPMR0Ru9oDA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:28 2024 by rpki-client on console-fra.rpki-client.org