Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: qn+H10sIOieewR/LacBKDPzjmYFs8ZKJJSfGr/Zm2GQ=
Subject key identifier: CD:F6:DC:28:8B:AF:0C:0B:FB:FC:8F:E1:4E:4B:0B:CB:FC:4D:55:26
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019052108C83421C6C6DE7B54F4B5D7B4AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0875
Signing time: Wed 26 Jun 2024 01:02:14 +0000
Manifest this update: Wed 26 Jun 2024 01:02:14 +0000
Manifest next update: Thu 27 Jun 2024 01:02:14 +0000
Files and hashes: 1: 1zhbjfm2IIXrv-myvFqRiAUu4Q8.roa (hash: vV/19nYRFnA8RjZBBqhfPXIWvJl10dGgAhrWcJEaj1Q=)
2: 72dbJ5fLH5CPw3Gcd64Qv2XnAm4.roa (hash: X11wFua92jJAJdTV/b4lbAiuNa3nSGZAd59E96D6lKM=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: n/05cml7v/cPM7h66mnC+n1W7zvpbUdz5pHOhP2zC7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:10:8c:83:42:1c:6c:6d:e7:b5:4f:4b:5d:7b:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jun 26 01:02:14 2024 GMT
Not After : Jun 27 01:02:14 2024 GMT
Subject: CN=cdf6dc288baf0c0bfbfc8fe14e4b0bcbfc4d5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:bb:c1:51:f0:20:8d:63:75:ab:39:09:00:
e4:15:89:b6:0a:16:1c:18:d4:15:26:7e:bd:7b:d8:
54:09:4f:22:20:9f:48:e7:a3:f2:33:8f:36:71:32:
52:ea:f5:7f:7b:e4:5f:80:02:de:d9:86:0e:9a:f7:
a0:72:fe:5f:9e:1c:78:85:68:a7:33:aa:1c:b3:0e:
09:b5:65:a5:ce:ac:f0:f3:13:1b:27:12:e8:fa:06:
b2:c9:b7:72:a6:f2:b9:e6:de:9d:d5:a0:8e:dd:19:
77:20:23:66:f2:d2:3d:c3:ed:95:68:f0:61:f3:ea:
ea:40:61:3d:b4:5b:ba:45:dc:e5:34:82:c0:58:17:
a6:ee:f0:f1:b0:95:7c:75:41:07:a2:78:e5:0d:fb:
78:86:6c:c8:7c:9d:12:07:db:92:62:1e:bc:db:18:
2b:ae:f7:7b:e6:21:ac:9f:72:e1:95:aa:ea:db:ef:
02:46:d6:14:d8:a5:af:40:24:fc:b2:10:fb:3d:d7:
1a:50:af:57:38:60:df:0d:75:93:09:bc:1c:47:e9:
50:6c:20:d0:c9:0b:86:9b:5e:ad:54:f1:f1:b7:3f:
7b:54:4a:3e:de:6b:ab:db:56:c7:88:5b:37:0b:57:
41:98:34:d4:2e:0e:d1:4c:aa:11:01:7c:b8:6b:61:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:DC:28:8B:AF:0C:0B:FB:FC:8F:E1:4E:4B:0B:CB:FC:4D:55:26
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:a6:af:a0:e5:de:f0:41:91:7f:0b:c5:30:e7:ff:db:cc:
24:fc:1d:3b:d9:04:c9:d6:39:82:1f:fa:be:aa:1f:75:d6:3e:
93:a2:2c:64:b4:c0:a6:e6:47:43:ab:69:12:e0:48:91:e4:5b:
9a:7f:02:79:0c:c4:75:7f:20:ac:8d:11:02:40:78:41:dd:9b:
e6:a6:23:aa:72:1c:3a:c3:ac:0e:29:27:23:0c:ba:78:fd:75:
91:ee:f9:9c:da:c3:b6:c4:1c:6a:57:ed:12:a2:07:a1:3d:6e:
61:c5:ec:b5:f7:d4:02:11:cf:da:00:06:c6:00:8d:1a:86:56:
2b:86:fc:88:f7:a2:51:54:06:75:75:e3:25:1b:d5:42:a9:e9:
51:90:1f:59:65:ea:97:49:25:82:c1:cb:02:f5:94:bc:8b:ba:
b0:cb:99:41:6b:56:72:5e:2f:ba:cd:c8:66:3c:1f:d3:43:c6:
30:60:ec:4f:28:0e:b9:55:33:f5:f0:fe:8b:fd:81:b0:95:e7:
61:7e:20:ae:d4:15:67:79:c3:b6:09:76:38:fb:5f:5c:17:e4:
a8:d9:ea:2d:50:78:7a:99:20:bb:6a:4a:7a:45:e7:bb:43:1e:
0b:37:88:79:30:4c:79:56:e2:3a:59:9d:bd:b3:83:95:ac:46:
09:6c:08:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBSEIyDQhxsbee1T0tde0rWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjQwNjI2MDEwMjE0WhcNMjQwNjI3MDEwMjE0WjAzMTEwLwYDVQQD
EyhjZGY2ZGMyODhiYWYwYzBiZmJmYzhmZTE0ZTRiMGJjYmZjNGQ1NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7i7wVHwII1jdas5CQDkFYm2ChYc
GNQVJn69e9hUCU8iIJ9I56PyM482cTJS6vV/e+RfgALe2YYOmvegcv5fnhx4hWin
M6ocsw4JtWWlzqzw8xMbJxLo+gayybdypvK55t6d1aCO3Rl3ICNm8tI9w+2VaPBh
8+rqQGE9tFu6RdzlNILAWBem7vDxsJV8dUEHonjlDft4hmzIfJ0SB9uSYh682xgr
rvd75iGsn3Lhlarq2+8CRtYU2KWvQCT8shD7PdcaUK9XOGDfDXWTCbwcR+lQbCDQ
yQuGm16tVPHxtz97VEo+3mur21bHiFs3C1dBmDTULg7RTKoRAXy4a2ETHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM323CiLrwwL+/yP4U5LC8v8TVUmMB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT+mr6Dl
3vBBkX8LxTDn/9vMJPwdO9kEydY5gh/6vqofddY+k6IsZLTApuZHQ6tpEuBIkeRb
mn8CeQzEdX8grI0RAkB4Qd2b5qYjqnIcOsOsDiknIwy6eP11ke75nNrDtsQcalft
EqIHoT1uYcXstffUAhHP2gAGxgCNGoZWK4b8iPeiUVQGdXXjJRvVQqnpUZAfWWXq
l0klgsHLAvWUvIu6sMuZQWtWcl4vus3IZjwf00PGMGDsTygOuVUz9fD+i/2BsJXn
YX4grtQVZ3nDtgl2OPtfXBfkqNnqLVB4epkgu2pKekXnu0MeCzeIeTBMeVbiOlmd
vbODlaxGCWwIVw==
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:38:49 2024 by rpki-client on console-fra.rpki-client.org