Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: 5pHaGSgjooYOuFX76ajO3ESGv8FGflvEbRV9olSg1NI=
Subject key identifier: D4:63:F9:98:D4:E1:B0:73:13:14:AA:10:1F:28:38:B8:4A:86:34:40
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 01935508396BB7BA9E665ED5C6F78D3CCCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 0ECB
Signing time: Fri 22 Nov 2024 18:00:22 +0000
Manifest this update: Fri 22 Nov 2024 18:00:22 +0000
Manifest next update: Sat 23 Nov 2024 18:00:22 +0000
Files and hashes: 1: BCDfkGWZ4j5sg071XDgyasOADDs.roa (hash: Jkprtz8Jaz1IFk3JeeY/eiWdxo9MdB88uQ2ZAB8xCSE=)
2: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: IeBD1WLUcwC4ud+MefChR3GFo6Yxft4lwXytoaY6Br0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:39:6b:b7:ba:9e:66:5e:d5:c6:f7:8d:3c:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Nov 22 18:00:22 2024 GMT
Not After : Nov 23 18:00:22 2024 GMT
Subject: CN=d463f998d4e1b0731314aa101f2838b84a863440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:68:2b:7f:ab:9e:f6:9b:1e:17:8c:89:f4:
33:c5:80:42:2c:30:60:8c:94:2d:96:ed:ef:68:f0:
44:81:9d:2d:16:4b:62:7c:21:67:b6:79:92:9b:9b:
f8:2b:79:cc:44:56:17:46:9d:bd:98:f4:60:c6:40:
89:03:19:1a:d3:24:c5:04:0f:04:31:fc:92:34:be:
f9:f1:9b:69:5e:54:89:89:0a:32:68:a8:0f:ec:ca:
0f:a2:0a:52:84:54:65:10:a8:16:d2:d0:ed:9f:32:
06:e6:f4:cd:6c:2e:48:4a:37:3a:b2:2e:21:73:d5:
3f:1d:d7:d0:a0:08:1c:10:02:b4:9d:a3:8f:25:87:
f1:f4:e2:5b:c3:49:95:9e:8a:ab:a8:7b:9e:af:56:
5f:09:f1:e0:4a:26:77:96:48:b5:dd:dd:cf:58:86:
bc:a2:5b:92:06:92:66:95:76:d1:fd:9b:3e:cf:d9:
45:71:42:30:f3:7a:ba:12:ec:6f:47:61:b7:f4:13:
74:3a:99:82:20:a6:42:2f:8e:8f:79:5d:93:51:6e:
2b:65:1b:37:8d:f8:4a:ca:0d:1a:bd:e1:3f:60:09:
b2:d2:94:b2:e5:b1:d5:cc:69:32:6c:da:f4:8e:b8:
25:d8:08:6c:94:96:5f:2c:86:e9:41:46:cb:50:59:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:63:F9:98:D4:E1:B0:73:13:14:AA:10:1F:28:38:B8:4A:86:34:40
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:75:64:e8:de:54:6a:19:69:d3:1c:ec:80:99:15:04:70:
a4:a3:dc:99:f0:5a:18:60:54:5d:18:b9:25:db:15:b4:14:80:
19:e6:cd:ca:dc:69:0a:e4:2b:c2:59:cf:8a:ca:02:68:0a:70:
fe:5f:45:12:45:bc:98:e5:3e:15:73:3d:d7:a0:1f:1a:df:81:
ae:04:43:1f:ac:13:86:f3:2d:18:ab:06:21:79:58:0f:dd:1b:
b9:45:0e:91:11:cb:1d:dc:c9:a0:63:c0:da:d9:e0:39:cf:54:
fc:40:bc:e5:69:a6:8a:15:1a:8e:f2:13:6a:3e:d2:59:46:1f:
b1:4e:9d:89:c5:58:c4:a2:43:ae:fc:19:9b:fa:d3:f2:d2:df:
8b:d9:89:81:56:29:d2:3a:2f:73:84:95:89:0e:af:99:75:3a:
8b:e6:a5:0f:a1:14:52:4c:05:5b:41:ef:70:f3:86:f4:37:5b:
67:44:c2:55:ad:01:28:19:7f:7e:89:82:52:63:4f:21:f7:7f:
c7:bd:8b:6c:f1:3b:0f:57:20:7f:f6:fb:b8:63:48:38:4e:a9:
b3:a2:53:ef:44:fa:f2:d3:87:6e:96:7c:7a:ec:cb:5f:c4:00:
47:81:78:ca:54:ab:bf:09:53:f3:6a:fd:0e:42:01:81:8c:f6:
63:06:25:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCDlrt7qeZl7VxveNPMynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjQxMTIyMTgwMDIyWhcNMjQxMTIzMTgwMDIyWjAzMTEwLwYDVQQD
EyhkNDYzZjk5OGQ0ZTFiMDczMTMxNGFhMTAxZjI4MzhiODRhODYzNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34hoK3+rnvabHheMifQzxYBCLDBg
jJQtlu3vaPBEgZ0tFktifCFntnmSm5v4K3nMRFYXRp29mPRgxkCJAxka0yTFBA8E
MfySNL758ZtpXlSJiQoyaKgP7MoPogpShFRlEKgW0tDtnzIG5vTNbC5ISjc6si4h
c9U/HdfQoAgcEAK0naOPJYfx9OJbw0mVnoqrqHuer1ZfCfHgSiZ3lki13d3PWIa8
oluSBpJmlXbR/Zs+z9lFcUIw83q6EuxvR2G39BN0OpmCIKZCL46PeV2TUW4rZRs3
jfhKyg0aveE/YAmy0pSy5bHVzGkybNr0jrgl2AhslJZfLIbpQUbLUFk1IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRj+ZjU4bBzExSqEB8oOLhKhjRAMB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleh1ZOje
VGoZadMc7ICZFQRwpKPcmfBaGGBUXRi5JdsVtBSAGebNytxpCuQrwlnPisoCaApw
/l9FEkW8mOU+FXM916AfGt+BrgRDH6wThvMtGKsGIXlYD90buUUOkRHLHdzJoGPA
2tngOc9U/EC85WmmihUajvITaj7SWUYfsU6dicVYxKJDrvwZm/rT8tLfi9mJgVYp
0jovc4SViQ6vmXU6i+alD6EUUkwFW0HvcPOG9DdbZ0TCVa0BKBl/fomCUmNPIfd/
x72LbPE7D1cgf/b7uGNIOE6ps6JT70T68tOHbpZ8euzLX8QAR4F4ylSrvwlT82r9
DkIBgYz2YwYlkg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:58 2024 by rpki-client on console-ams.rpki-client.org