Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: s4qfvvM6ubPwCm37HHQSANZHJ3786Orbrb84rIA3ydQ=
Subject key identifier: D9:58:96:A9:EC:49:5C:F7:52:3C:13:BD:B9:ED:8F:F8:12:91:D9:12
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 0193568900CFD67D71443FDD85EB129F8808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 0FB3
Signing time: Sat 23 Nov 2024 01:00:39 +0000
Manifest this update: Sat 23 Nov 2024 01:00:39 +0000
Manifest next update: Sun 24 Nov 2024 01:00:39 +0000
Files and hashes: 1: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: 25H14Jv/u5TZrXhb1Hc49OMiaZ5PsR2o+XCjtqWOCO0=)
2: vWgcEKTNxMC7tFT2zjOOtE_XzpQ.roa (hash: sUu7KyfF5P6WMStvQSbenwdIkyxcpmg0mRoKZmh0QN8=)
3: zmPS2ffR8OQr49t2pC-gQaf4MeI.roa (hash: v46iL4g8sGm3kAh6G8Omx6KlQ7R9qlsfIwvMTIrKh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:00:cf:d6:7d:71:44:3f:dd:85:eb:12:9f:88:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Nov 23 01:00:39 2024 GMT
Not After : Nov 24 01:00:39 2024 GMT
Subject: CN=d95896a9ec495cf7523c13bdb9ed8ff81291d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:ac:28:18:38:75:7d:e4:57:64:58:80:01:
b2:29:14:51:40:ad:eb:c8:e8:f1:2c:65:e3:9b:e4:
db:d0:66:25:83:1c:08:f4:a3:40:53:1f:2b:4a:6d:
97:d0:b5:5b:02:4a:34:47:71:7d:34:c8:c1:1d:af:
f6:77:ee:7d:a2:86:18:09:1b:b7:5f:fd:8a:b3:2c:
85:af:e3:74:d8:8d:bb:28:55:b1:1a:26:24:ee:53:
67:5c:94:7d:0a:58:60:6e:16:37:3b:81:c7:8d:c3:
70:7e:52:2b:20:33:80:ec:42:85:61:7f:37:6a:66:
41:ef:01:de:2d:02:f2:ff:e6:f1:24:d5:04:b9:f3:
85:65:59:06:c0:5b:c0:6a:5e:a2:90:f3:6d:5e:77:
c7:15:30:48:20:dd:54:3c:a6:25:13:b7:24:89:5c:
1e:44:f0:57:62:27:af:f5:6e:dc:c2:04:99:ec:eb:
fb:7d:37:56:18:ac:54:46:89:c0:e6:31:3d:f5:db:
4f:96:5c:e6:09:e8:20:d4:d5:b0:dd:b9:ac:ea:5a:
15:b1:1b:9f:3a:39:ee:84:8d:73:a4:98:72:96:07:
f2:c3:e7:85:dd:b2:01:a2:07:24:47:f9:29:9b:db:
01:46:e6:8a:a7:0e:f3:52:d9:de:7f:10:df:db:47:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:58:96:A9:EC:49:5C:F7:52:3C:13:BD:B9:ED:8F:F8:12:91:D9:12
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:f3:bf:f4:ae:07:62:20:e8:28:26:9a:94:3a:3f:55:cf:
99:1b:ab:e4:75:0b:25:f4:31:5e:64:f7:71:a7:37:d7:02:5c:
94:f6:3b:c2:20:6f:a6:63:dd:90:56:f1:e4:c4:cb:67:c8:89:
7b:21:7f:05:5c:8f:c1:6f:9f:12:b5:08:b5:60:e7:51:41:65:
66:5c:18:20:2e:4b:f8:27:2e:70:20:ba:02:47:e0:a0:8e:2e:
b3:1c:3a:88:d4:55:c9:38:5e:bb:b8:6a:82:6f:e1:d8:97:11:
83:37:47:64:53:3b:25:47:be:bf:54:bf:f7:34:ae:0b:c6:c3:
93:51:68:f0:7a:96:7d:b4:41:64:a8:b4:0d:f6:3a:62:82:9c:
c4:b7:87:b4:28:bf:c1:cc:d0:ac:e2:09:98:67:e9:de:c4:ce:
3f:f7:b1:c9:ae:3c:2e:e7:66:cb:ab:68:fb:a9:b4:04:1d:18:
49:6f:91:da:0b:de:20:eb:f3:da:fd:fc:ee:c9:65:99:0a:f2:
c3:83:b9:b6:fe:97:fe:66:1c:e8:17:61:72:62:f1:c1:81:48:
4f:e0:06:e2:3e:f5:e2:2d:2b:d2:80:35:62:95:4f:d3:9e:5f:
48:2b:36:ed:aa:8b:11:23:b0:6d:16:a5:f2:e5:28:88:03:f5:
a8:b6:d5:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiQDP1n1xRD/dhesSn4gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjQxMTIzMDEwMDM5WhcNMjQxMTI0MDEwMDM5WjAzMTEwLwYDVQQD
EyhkOTU4OTZhOWVjNDk1Y2Y3NTIzYzEzYmRiOWVkOGZmODEyOTFkOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoCsKBg4dX3kV2RYgAGyKRRRQK3r
yOjxLGXjm+Tb0GYlgxwI9KNAUx8rSm2X0LVbAko0R3F9NMjBHa/2d+59ooYYCRu3
X/2KsyyFr+N02I27KFWxGiYk7lNnXJR9ClhgbhY3O4HHjcNwflIrIDOA7EKFYX83
amZB7wHeLQLy/+bxJNUEufOFZVkGwFvAal6ikPNtXnfHFTBIIN1UPKYlE7ckiVwe
RPBXYiev9W7cwgSZ7Ov7fTdWGKxURonA5jE99dtPllzmCegg1NWw3bms6loVsRuf
OjnuhI1zpJhylgfyw+eF3bIBogckR/kpm9sBRuaKpw7zUtnefxDf20cOUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlYlqnsSVz3UjwTvbntj/gSkdkSMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbDzv/Su
B2Ig6CgmmpQ6P1XPmRur5HULJfQxXmT3cac31wJclPY7wiBvpmPdkFbx5MTLZ8iJ
eyF/BVyPwW+fErUItWDnUUFlZlwYIC5L+CcucCC6AkfgoI4usxw6iNRVyTheu7hq
gm/h2JcRgzdHZFM7JUe+v1S/9zSuC8bDk1Fo8HqWfbRBZKi0DfY6YoKcxLeHtCi/
wczQrOIJmGfp3sTOP/exya48Ludmy6to+6m0BB0YSW+R2gveIOvz2v387sllmQry
w4O5tv6X/mYc6BdhcmLxwYFIT+AG4j714i0r0oA1YpVP055fSCs27aqLESOwbRal
8uUoiAP1qLbVQA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:17 2024 by rpki-client on console-fra.rpki-client.org