Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
File: QfxINXn14C0-SZzXOiOq2RQDGDE.mft (raw, json)
Hash identifier: 1bVCuOFGU/q4Vb1bxSlQFTD7bwP06UC0V3dx4c0yW7I=
Subject key identifier: 7A:FF:F4:0C:64:19:3F:E3:53:2D:D1:7A:B6:9A:88:D4:20:00:59:6A
Authority key identifier: 41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
Certificate issuer: /CN=41fc483579f5e02d3e499cd73a23aad914031831
Certificate serial: 019357D2B9B42593801B78B4FD69AB6E8163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
Manifest number: 0FA0
Signing time: Sat 23 Nov 2024 07:00:48 +0000
Manifest this update: Sat 23 Nov 2024 07:00:48 +0000
Manifest next update: Sun 24 Nov 2024 07:00:48 +0000
Files and hashes: 1: QfxINXn14C0-SZzXOiOq2RQDGDE.crl (hash: CCJe0HGUDWxrlHli3RK9yrv9/0lU5TwI4WsFWp26nxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:b9:b4:25:93:80:1b:78:b4:fd:69:ab:6e:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc483579f5e02d3e499cd73a23aad914031831
Validity
Not Before: Nov 23 07:00:48 2024 GMT
Not After : Nov 24 07:00:48 2024 GMT
Subject: CN=7afff40c64193fe3532dd17ab69a88d42000596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:e2:13:b0:e7:ff:92:9d:56:3d:ea:91:21:
46:db:f2:7b:53:13:34:f6:00:38:6c:00:bc:3f:82:
65:9e:89:da:af:8f:7d:3e:35:4c:04:64:06:be:d2:
2f:ac:f4:95:9c:51:bd:71:af:2c:bf:15:b8:59:aa:
f9:ce:ec:e2:e1:14:41:e3:d7:3c:0a:18:c4:0b:f4:
b3:cc:60:5c:a5:36:b5:2e:57:45:cc:de:42:4f:70:
92:7f:ae:59:04:fe:d0:24:6d:d4:80:48:0a:ff:a4:
a6:b4:ce:1b:1c:94:98:2a:7d:c0:79:2a:cc:0d:62:
c8:01:f2:88:2c:44:63:c5:41:1a:e7:36:6b:b0:1b:
ad:31:10:fc:5d:e8:a1:a0:0d:3a:85:19:2f:a4:24:
44:16:cb:24:58:11:ea:fa:a1:87:ca:aa:a4:3a:7e:
e6:03:3a:df:78:63:9c:41:10:81:c0:5e:02:58:49:
6d:08:61:a6:35:61:f9:01:81:11:52:61:7e:04:ef:
2d:3c:08:01:d4:1b:2a:0b:29:00:c5:b6:5e:7e:5c:
9e:c9:9e:e9:f9:b4:32:42:34:84:85:f4:af:2e:30:
50:55:0d:60:74:f3:26:e8:3d:8f:8f:4c:72:8c:e1:
03:ff:65:45:cc:4d:87:6d:2a:3c:47:fe:70:c8:6f:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:F4:0C:64:19:3F:E3:53:2D:D1:7A:B6:9A:88:D4:20:00:59:6A
X509v3 Authority Key Identifier:
keyid:41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:21:2c:b8:aa:47:7b:ac:8a:73:9f:78:78:46:28:f9:67:d0:
39:87:35:f6:50:13:de:f0:29:6b:20:8d:7b:b5:9d:5d:14:2e:
61:ca:43:54:bf:a8:f8:78:d1:e6:79:36:3d:f4:9c:e2:8c:d2:
ca:62:07:54:dd:e3:39:19:69:02:1f:e9:50:d1:27:f9:a7:67:
03:71:ce:db:6d:d8:1a:db:cb:c5:f8:1f:44:23:19:e7:66:25:
86:a3:b0:a2:72:8f:42:79:25:d1:8f:5b:94:ad:59:b8:5d:99:
88:ef:c7:ed:8b:81:e0:f4:09:4f:4d:45:81:53:94:a0:a7:1a:
50:c8:25:5e:dd:a5:56:05:02:ee:6e:00:fc:c1:ed:69:3f:6c:
54:3f:7b:58:9c:b6:df:2a:26:08:d5:92:e8:39:da:a4:43:44:
f2:6a:69:61:02:b4:bd:41:6e:68:26:83:4b:8a:16:e2:40:8e:
ba:65:80:bd:6d:46:7b:86:1c:7f:58:c9:ee:c9:07:e7:5e:13:
22:e6:61:f7:a3:c3:a2:a4:32:04:ec:c7:5c:9f:9d:f3:e1:f7:
cc:2e:53:23:98:8c:06:4f:73:f9:f5:f6:0c:aa:79:02:3f:72:
57:98:aa:32:65:22:47:5a:12:01:13:54:69:3c:b1:e4:2e:e0:
4b:fc:bd:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0rm0JZOAG3i0/WmrboFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM0ODM1NzlmNWUwMmQzZTQ5OWNkNzNhMjNhYWQ5MTQw
MzE4MzEwHhcNMjQxMTIzMDcwMDQ4WhcNMjQxMTI0MDcwMDQ4WjAzMTEwLwYDVQQD
Eyg3YWZmZjQwYzY0MTkzZmUzNTMyZGQxN2FiNjlhODhkNDIwMDA1OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCfiE7Dn/5KdVj3qkSFG2/J7UxM0
9gA4bAC8P4Jlnonar499PjVMBGQGvtIvrPSVnFG9ca8svxW4War5zuzi4RRB49c8
ChjEC/SzzGBcpTa1LldFzN5CT3CSf65ZBP7QJG3UgEgK/6SmtM4bHJSYKn3AeSrM
DWLIAfKILERjxUEa5zZrsButMRD8XeihoA06hRkvpCREFsskWBHq+qGHyqqkOn7m
AzrfeGOcQRCBwF4CWEltCGGmNWH5AYERUmF+BO8tPAgB1BsqCykAxbZeflyeyZ7p
+bQyQjSEhfSvLjBQVQ1gdPMm6D2Pj0xyjOED/2VFzE2HbSo8R/5wyG+r8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr/9AxkGT/jUy3ReraaiNQgAFlqMB8GA1UdIwQY
MBaAFEH8SDV59eAtPkmc1zojqtkUAxgxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4SU5YbjE0QzAtU1p6WE9pT3EyUlFER0RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ODFlYTItNTcwYy00OGFjLThhMzct
NzI2OWI3OGY5Y2ZmLzEvUWZ4SU5YbjE0QzAtU1p6WE9pT3EyUlFER0RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80ODFlYTItNTcwYy00OGFjLThhMzctNzI2OWI3OGY5Y2Zm
LzEvUWZ4SU5YbjE0QzAtU1p6WE9pT3EyUlFER0RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSEsuKpH
e6yKc594eEYo+WfQOYc19lAT3vApayCNe7WdXRQuYcpDVL+o+HjR5nk2PfSc4ozS
ymIHVN3jORlpAh/pUNEn+adnA3HO223YGtvLxfgfRCMZ52YlhqOwonKPQnkl0Y9b
lK1ZuF2ZiO/H7YuB4PQJT01FgVOUoKcaUMglXt2lVgUC7m4A/MHtaT9sVD97WJy2
3yomCNWS6DnapENE8mppYQK0vUFuaCaDS4oW4kCOumWAvW1Ge4Ycf1jJ7skH514T
IuZh96PDoqQyBOzHXJ+d8+H3zC5TI5iMBk9z+fX2DKp5Aj9yV5iqMmUiR1oSARNU
aTyx5C7gS/y9Qg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:32 2024 by rpki-client on console-fra.rpki-client.org