Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: dssvE7oG8b1FI8LHmfizxk4j5nNn0MUsoGm1OS5phXQ=
Subject key identifier: FB:60:21:7B:BD:19:66:51:E6:EB:DA:6D:61:10:68:C9:9B:57:68:86
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 018F83D952CAFE89835C73A60AA66470B912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1116
Signing time: Fri 17 May 2024 00:00:08 +0000
Manifest this update: Fri 17 May 2024 00:00:08 +0000
Manifest next update: Sat 18 May 2024 00:00:08 +0000
Files and hashes: 1: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: PQdpnaJcxlC4PSVpXN3PbepkdLcg+45HwdhG4I9/kwY=)
2: weX5IxwEtf1Kzap0RqlOCq-oipA.roa (hash: HxCf6rAQ7zN1km/BYMX2Wm5h2moHNW+fv2jE0LqW7ro=)
3: xkZpH4BGEouWAdy-TYgg7XXr23g.roa (hash: RsJyso//P0Kv1QvwUW/fWOWIUK++aD5oLT7elFV+Jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:d9:52:ca:fe:89:83:5c:73:a6:0a:a6:64:70:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: May 17 00:00:08 2024 GMT
Not After : May 18 00:00:08 2024 GMT
Subject: CN=fb60217bbd196651e6ebda6d611068c99b576886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:1f:c1:4f:90:c0:aa:2e:a8:97:9a:44:86:
85:ab:64:51:6e:3a:a0:6c:08:a5:1e:f9:96:a9:ed:
34:e3:ab:81:8c:67:fb:c2:0c:94:06:2c:3f:a1:ca:
3e:20:99:2b:5e:7a:2d:d1:96:d7:56:6a:c5:24:21:
85:c0:32:de:35:01:f4:a4:ca:e8:89:75:c6:f1:d5:
af:53:48:be:b1:e2:52:1a:fa:31:a9:d0:8f:90:71:
d9:e2:08:89:a8:79:f1:cb:b4:21:7a:92:11:04:8e:
f2:9a:15:15:8b:bc:fa:51:b8:b7:68:e7:ea:97:a5:
c2:dd:6e:74:26:a8:10:ec:f6:59:b1:9a:6b:19:f4:
dc:ee:cb:fc:14:58:93:30:52:38:6c:91:1a:c0:33:
d4:83:34:9e:f9:ff:16:72:5c:6c:43:7c:f9:26:3d:
0f:42:88:ba:20:08:dc:16:f3:ec:4b:4c:eb:e6:bd:
c3:11:13:30:93:7d:82:1a:d5:31:a0:50:d5:42:7d:
5f:1f:78:54:61:40:17:7e:06:b9:bf:a9:28:18:35:
fa:3f:cc:f0:c2:61:dd:fb:cc:99:41:34:3b:ee:53:
0f:6b:60:a8:39:4a:52:df:0a:28:fe:81:58:5c:5a:
41:f2:14:59:1b:79:c8:50:6d:8a:a4:55:93:e7:29:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:60:21:7B:BD:19:66:51:E6:EB:DA:6D:61:10:68:C9:9B:57:68:86
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:ad:64:33:13:9e:d7:a8:7a:d1:ec:c5:89:74:bf:8c:87:
b9:b6:bc:e8:37:5b:0e:70:89:73:d9:dc:8f:06:cf:5e:a8:14:
76:73:13:41:9c:6f:f2:be:68:79:f1:93:75:78:01:73:4b:8d:
f3:be:2a:78:89:21:98:1e:df:8e:56:31:1e:6b:7d:84:bc:71:
af:3c:ba:13:1c:ad:cf:9e:17:42:21:6a:57:93:bf:90:b7:29:
4d:ac:6b:2d:10:6f:0c:14:ec:72:60:43:14:0e:6a:de:52:7d:
9d:72:84:cc:cf:d2:1a:7a:b3:a0:31:20:ab:9d:7e:98:f9:90:
2d:f3:e6:04:ed:28:e6:d6:5f:bc:ed:ac:ec:03:d1:cb:60:12:
c8:92:a7:d2:bf:e7:86:27:2c:22:06:37:ca:49:51:97:05:0b:
d5:03:25:57:e8:44:74:50:b9:59:69:a1:16:5b:28:88:36:55:
9d:7c:0e:6f:56:bb:8a:a8:cc:f5:08:8f:4f:ce:a0:9d:38:47:
81:23:e7:44:68:a6:82:9d:6e:1a:52:e1:74:fc:28:0c:7d:e0:
cb:c9:76:69:3b:a9:7c:5f:46:07:26:39:54:51:ba:08:ae:71:
8c:c2:33:6c:9d:e9:e3:4e:08:42:aa:6e:9b:09:9f:b0:ae:b9:
24:d4:65:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+D2VLK/omDXHOmCqZkcLkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz
N2EwYzYwHhcNMjQwNTE3MDAwMDA4WhcNMjQwNTE4MDAwMDA4WjAzMTEwLwYDVQQD
EyhmYjYwMjE3YmJkMTk2NjUxZTZlYmRhNmQ2MTEwNjhjOTliNTc2ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4wfwU+QwKouqJeaRIaFq2RRbjqg
bAilHvmWqe0046uBjGf7wgyUBiw/oco+IJkrXnot0ZbXVmrFJCGFwDLeNQH0pMro
iXXG8dWvU0i+seJSGvoxqdCPkHHZ4giJqHnxy7QhepIRBI7ymhUVi7z6Ubi3aOfq
l6XC3W50JqgQ7PZZsZprGfTc7sv8FFiTMFI4bJEawDPUgzSe+f8WclxsQ3z5Jj0P
Qoi6IAjcFvPsS0zr5r3DERMwk32CGtUxoFDVQn1fH3hUYUAXfga5v6koGDX6P8zw
wmHd+8yZQTQ77lMPa2CoOUpS3woo/oFYXFpB8hRZG3nIUG2KpFWT5ykYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtgIXu9GWZR5uvabWEQaMmbV2iGMB8GA1UdIwQY
MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt
OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1
LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2KtZDMT
nteoetHsxYl0v4yHuba86DdbDnCJc9ncjwbPXqgUdnMTQZxv8r5oefGTdXgBc0uN
874qeIkhmB7fjlYxHmt9hLxxrzy6Exytz54XQiFqV5O/kLcpTaxrLRBvDBTscmBD
FA5q3lJ9nXKEzM/SGnqzoDEgq51+mPmQLfPmBO0o5tZfvO2s7APRy2ASyJKn0r/n
hicsIgY3yklRlwUL1QMlV+hEdFC5WWmhFlsoiDZVnXwOb1a7iqjM9QiPT86gnThH
gSPnRGimgp1uGlLhdPwoDH3gy8l2aTupfF9GByY5VFG6CK5xjMIzbJ3p404IQqpu
mwmfsK65JNRl1Q==
-----END CERTIFICATE-----
Generated at Fri May 17 01:10:48 2024 by rpki-client on console-fra.rpki-client.org