Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: GcnNBHmYUJ1fjw4w6rchCyVPDgx69QMwSbWE8YTxZ3c=
Subject key identifier: A4:AA:7A:52:0C:D9:A6:2B:07:12:F0:01:6F:08:37:C5:1A:63:56:15
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019355E41E23A64829165C84203F860DB238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 22:00:33 +0000
Manifest this update: Fri 22 Nov 2024 22:00:33 +0000
Manifest next update: Sat 23 Nov 2024 22:00:33 +0000
Files and hashes: 1: aAq3Bt5BJ_h0KiNu_5bxFSguLfQ.roa (hash: rMl12EXpxLp9FPIJY+FfSuZfIC4RGE9sfm8GUZNDkg4=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: y2RFeFtR+RW+aqhahvIGIWkCt8Miyfx6FqkPjBq0nxc=)
3: x9xlVLihUtZJ5uEsiOObBlE92a0.roa (hash: qJECn+4lWYMZg+EuMiydsgMFxEmMY5eIChNTWBnQK4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:1e:23:a6:48:29:16:5c:84:20:3f:86:0d:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Nov 22 22:00:33 2024 GMT
Not After : Nov 23 22:00:33 2024 GMT
Subject: CN=a4aa7a520cd9a62b0712f0016f0837c51a635615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:2d:6d:49:da:8d:cc:6e:e9:45:aa:65:8b:
68:60:a3:24:10:e5:d5:b7:3c:59:65:71:5e:5e:d2:
be:c7:00:91:f0:b0:2b:99:a4:42:d1:9a:55:ff:9b:
1f:37:a1:5b:8d:01:77:fe:87:7d:ce:c8:c9:73:19:
a0:15:79:3e:eb:f3:2c:49:cf:bd:5f:5a:62:7e:d1:
98:03:10:8e:b6:33:21:57:a5:90:89:03:87:c4:ee:
ce:56:f3:0d:55:53:56:5a:0e:14:27:44:c3:f8:46:
70:d5:d9:31:ca:cb:30:ab:b9:95:bd:67:82:ea:15:
b9:9b:1f:05:8e:f3:0b:a8:eb:db:d0:b8:a3:09:9c:
26:70:67:09:24:ee:5f:fb:df:1d:99:9b:a3:7e:4b:
9a:f9:14:b1:df:a0:cd:d8:13:7e:d1:b2:c3:58:d9:
2f:9e:a5:c8:2e:b3:a6:7a:c7:b0:bf:52:33:72:57:
6a:88:40:c4:2b:b5:fe:ad:e7:57:b9:6e:1d:dc:c4:
a2:24:1e:6c:94:9d:bb:5c:cd:91:fd:de:a0:b8:8d:
74:6a:0e:c2:d8:37:3f:9b:36:c9:9e:3c:56:7d:23:
f1:c6:ac:b2:3e:5f:55:aa:f4:b0:31:e1:5d:0e:fb:
94:e7:13:9c:38:99:27:10:17:82:61:16:5f:e5:92:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:7A:52:0C:D9:A6:2B:07:12:F0:01:6F:08:37:C5:1A:63:56:15
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:9c:04:7d:86:65:e3:37:fd:5f:0b:ef:a4:4d:e9:75:fb:
af:9f:fa:a3:48:f0:59:d3:90:92:03:52:6d:17:2d:48:6f:c3:
d8:7f:70:87:a6:21:3a:37:cd:9b:46:ad:3f:c9:e6:00:63:ac:
c8:f4:08:a8:89:64:ce:a0:95:a6:b2:fb:0e:8d:29:02:27:0e:
8c:29:d7:b2:8f:d0:be:0b:5d:22:75:da:df:2e:35:15:96:d8:
bd:ee:fc:ca:1e:9a:21:c8:11:d6:f9:8a:5f:1c:23:dd:86:a8:
c0:fe:82:4f:07:9f:20:f5:e4:18:db:b1:94:59:d0:a9:33:f1:
f8:c0:7b:d3:99:9c:ed:04:c7:62:2a:b1:e6:ab:0d:0c:9f:2f:
cb:d4:94:63:db:41:81:8e:1c:f9:6d:d8:ed:4d:62:b6:47:0e:
19:8e:2d:71:4e:97:e7:fb:6f:12:21:51:04:5e:9c:ea:0f:06:
20:ea:86:79:92:c5:6f:3c:4f:1f:48:0e:70:f9:da:a0:48:5b:
aa:92:fe:cd:37:90:5d:7b:6b:82:ea:89:aa:02:bc:75:12:9a:
f7:3d:e0:cb:3c:5d:94:eb:48:c6:ca:c3:a1:89:d5:2e:d9:a9:
46:18:f1:9e:93:c7:92:38:7c:c8:32:7b:78:e4:e4:9e:7d:97:
c5:55:0b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5B4jpkgpFlyEID+GDbI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy
MjI3YTMwHhcNMjQxMTIyMjIwMDMzWhcNMjQxMTIzMjIwMDMzWjAzMTEwLwYDVQQD
EyhhNGFhN2E1MjBjZDlhNjJiMDcxMmYwMDE2ZjA4MzdjNTFhNjM1NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNktbUnajcxu6UWqZYtoYKMkEOXV
tzxZZXFeXtK+xwCR8LArmaRC0ZpV/5sfN6FbjQF3/od9zsjJcxmgFXk+6/MsSc+9
X1piftGYAxCOtjMhV6WQiQOHxO7OVvMNVVNWWg4UJ0TD+EZw1dkxysswq7mVvWeC
6hW5mx8FjvMLqOvb0LijCZwmcGcJJO5f+98dmZujfkua+RSx36DN2BN+0bLDWNkv
nqXILrOmesewv1IzcldqiEDEK7X+redXuW4d3MSiJB5slJ27XM2R/d6guI10ag7C
2Dc/mzbJnjxWfSPxxqyyPl9VqvSwMeFdDvuU5xOcOJknEBeCYRZf5ZLcOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSqelIM2aYrBxLwAW8IN8UaY1YVMB8GA1UdIwQY
MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt
OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1
LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXmcBH2G
ZeM3/V8L76RN6XX7r5/6o0jwWdOQkgNSbRctSG/D2H9wh6YhOjfNm0atP8nmAGOs
yPQIqIlkzqCVprL7Do0pAicOjCnXso/QvgtdInXa3y41FZbYve78yh6aIcgR1vmK
Xxwj3YaowP6CTwefIPXkGNuxlFnQqTPx+MB705mc7QTHYiqx5qsNDJ8vy9SUY9tB
gY4c+W3Y7U1itkcOGY4tcU6X5/tvEiFRBF6c6g8GIOqGeZLFbzxPH0gOcPnaoEhb
qpL+zTeQXXtrguqJqgK8dRKa9z3gyzxdlOtIxsrDoYnVLtmpRhjxnpPHkjh8yDJ7
eOTknn2XxVULfg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:22 2024 by rpki-client on console-fra.rpki-client.org