Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: 8QDg9Jd/i4ooN6CLyBvI1EjCeNPaT1oKmwuThY27qdo=
Subject key identifier: 68:5F:02:44:3A:40:00:28:18:33:8C:B8:88:DD:40:4B:12:CF:02:9B
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019362FAE417353CF269897B8613F5AF5898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0B66
Signing time: Mon 25 Nov 2024 11:00:29 +0000
Manifest this update: Mon 25 Nov 2024 11:00:29 +0000
Manifest next update: Tue 26 Nov 2024 11:00:29 +0000
Files and hashes: 1: 0oGUixz3g_XM7jpsAIt0NtM1G9s.roa (hash: /1nuyGRI++hNEbF1C+wbrztC/DLgq+bFy1aERR2l7gQ=)
2: 9PbxSYN1nxUyXkXsAJLu4gBD8Jw.roa (hash: hygvX+5KvNhaVW4Z693TyU+kdSwDzMwMst/depWKIXg=)
3: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: yIoHHs3YP5UiZonl9urck4EYAHzVORi7tvuo9KPEOZk=)
4: cKzUBylJP8IKZ1hcSmgSgwUQMSk.roa (hash: uDz+ED6UuTmBQKH09BDSKMj/fY4MQQi1xQ8DkA/Czig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:fa:e4:17:35:3c:f2:69:89:7b:86:13:f5:af:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Nov 25 11:00:29 2024 GMT
Not After : Nov 26 11:00:29 2024 GMT
Subject: CN=685f02443a40002818338cb888dd404b12cf029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:21:0e:86:42:58:38:f6:3d:05:c0:b9:73:
4c:b9:99:d8:24:1a:a3:6e:d9:0f:b5:2f:3c:c6:a1:
c4:24:e6:25:27:e9:28:a3:1b:ff:06:61:f8:1e:f4:
d8:3a:49:bf:64:a3:a0:e3:53:bc:6b:fd:17:a5:20:
8e:ef:57:7a:f2:8c:b5:49:36:5d:24:98:43:7b:39:
2c:90:6f:50:39:9d:2b:49:70:a4:cc:57:c0:a8:3c:
70:bc:24:7b:3e:71:bf:81:8e:25:cc:3b:bf:fc:e6:
22:3f:84:05:22:9c:f2:1d:20:de:22:be:48:2d:db:
6f:8e:07:8f:2c:2f:da:ee:1e:ae:8a:34:a1:ad:56:
7e:bf:26:58:18:ed:14:42:81:9f:50:64:f0:3e:c0:
78:db:a4:0b:ee:f8:e7:91:c7:6e:37:45:ed:a6:6c:
53:e7:07:27:ff:aa:1d:8d:54:da:73:45:4a:2b:d7:
ce:66:f3:5e:61:7b:92:a6:b3:ef:44:af:90:ea:d2:
a0:0f:90:7b:c7:f5:c7:23:45:6c:b8:9f:c8:71:2f:
bd:7b:51:f0:d9:57:71:ca:12:2b:32:1d:ee:29:4b:
75:e8:b5:18:e3:a5:2b:1c:f1:4d:59:0e:86:a0:47:
0c:12:5e:85:4a:84:e0:93:79:35:79:f3:00:bb:12:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:02:44:3A:40:00:28:18:33:8C:B8:88:DD:40:4B:12:CF:02:9B
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1f:41:05:9e:bb:ed:a7:a8:54:92:46:47:4e:a0:e1:11:92:
2a:f5:4f:39:bb:d9:c9:8d:56:4e:2d:6c:50:3e:09:4b:40:ea:
b6:37:42:f2:5c:72:25:90:95:cb:c6:ca:b6:d4:f7:8a:65:7a:
a7:83:62:17:ec:72:cf:73:4d:6c:de:55:f2:4a:65:20:b9:83:
39:02:04:f1:29:f0:57:53:e1:d4:3e:ec:38:e0:47:57:a3:ff:
cf:e6:03:92:13:83:6c:48:59:25:b9:44:62:e9:43:55:89:0c:
7e:de:3f:6b:e1:13:e0:94:6e:2c:5f:40:75:bb:c2:85:64:3b:
8c:57:fd:1b:7d:ce:f9:e8:5a:6d:09:5d:1c:d8:4e:1d:b4:2c:
aa:c6:73:e0:30:4b:eb:9f:2e:6e:ad:0a:e1:5f:3a:05:92:76:
b6:9c:80:78:9a:26:02:b7:ab:ae:81:05:6e:c3:de:d4:eb:ad:
16:7f:24:20:63:4a:91:8f:72:44:7f:dc:bb:3d:e5:2d:a1:7e:
d3:40:76:a4:78:52:23:21:79:e5:1f:0a:cf:c6:49:9c:ad:0a:
b0:5f:48:b3:32:32:89:5e:ac:17:2f:82:62:5f:46:22:d4:5c:
fc:41:74:bd:71:14:0a:c3:ca:3f:15:7e:f0:07:c9:3a:c8:fb:
bb:94:8e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNi+uQXNTzyaYl7hhP1r1iYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjQxMTI1MTEwMDI5WhcNMjQxMTI2MTEwMDI5WjAzMTEwLwYDVQQD
Eyg2ODVmMDI0NDNhNDAwMDI4MTgzMzhjYjg4OGRkNDA0YjEyY2YwMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB8hDoZCWDj2PQXAuXNMuZnYJBqj
btkPtS88xqHEJOYlJ+kooxv/BmH4HvTYOkm/ZKOg41O8a/0XpSCO71d68oy1STZd
JJhDezkskG9QOZ0rSXCkzFfAqDxwvCR7PnG/gY4lzDu//OYiP4QFIpzyHSDeIr5I
LdtvjgePLC/a7h6uijShrVZ+vyZYGO0UQoGfUGTwPsB426QL7vjnkcduN0XtpmxT
5wcn/6odjVTac0VKK9fOZvNeYXuSprPvRK+Q6tKgD5B7x/XHI0VsuJ/IcS+9e1Hw
2VdxyhIrMh3uKUt16LUY46UrHPFNWQ6GoEcMEl6FSoTgk3k1efMAuxKLNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhfAkQ6QAAoGDOMuIjdQEsSzwKbMB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB9BBZ67
7aeoVJJGR06g4RGSKvVPObvZyY1WTi1sUD4JS0DqtjdC8lxyJZCVy8bKttT3imV6
p4NiF+xyz3NNbN5V8kplILmDOQIE8SnwV1Ph1D7sOOBHV6P/z+YDkhODbEhZJblE
YulDVYkMft4/a+ET4JRuLF9AdbvChWQ7jFf9G33O+ehabQldHNhOHbQsqsZz4DBL
658ubq0K4V86BZJ2tpyAeJomArerroEFbsPe1OutFn8kIGNKkY9yRH/cuz3lLaF+
00B2pHhSIyF55R8Kz8ZJnK0KsF9IszIyiV6sFy+CYl9GItRc/EF0vXEUCsPKPxV+
8AfJOsj7u5SOUQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:04 2024 by rpki-client on console-fra.rpki-client.org