Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: rxXSD1GHqu/0OOIdRf6WNddNQJTsZFYAWU6+l5HU8I0=
Subject key identifier: 1C:1F:18:11:BB:33:6B:44:66:98:8D:BD:84:47:60:CE:86:6B:45:F0
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 0193579B8CC7F18BF3E4EC58009AE2F09D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:32 +0000
Manifest this update: Sat 23 Nov 2024 06:00:32 +0000
Manifest next update: Sun 24 Nov 2024 06:00:32 +0000
Files and hashes: 1: 4qBD8BCWoM3qZiqdrjR2yla4Bog.roa (hash: NHI2UXRzgnpfHSiJzK5/HjIaV/sFV36KERfsNOmhjEc=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: kXWLOOwfl+EnpU9QmxoMp+Ucxi/Qk6wlpCAB2iIL49k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:8c:c7:f1:8b:f3:e4:ec:58:00:9a:e2:f0:9d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Nov 23 06:00:32 2024 GMT
Not After : Nov 24 06:00:32 2024 GMT
Subject: CN=1c1f1811bb336b4466988dbd844760ce866b45f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:60:7b:80:a0:44:60:b4:a2:8d:0e:bd:e9:
45:6a:9e:54:c3:88:11:07:a6:c9:27:3a:b7:f4:86:
94:88:35:d6:b6:bc:98:36:07:68:26:ed:60:74:0c:
9b:8b:2e:aa:97:91:b4:19:1b:34:83:d3:b5:70:49:
31:73:9a:0b:e7:cc:19:3d:77:e4:e0:da:e1:38:25:
2c:ee:48:88:7c:1e:d5:80:bf:87:f9:79:70:61:2f:
3e:e7:87:69:fc:db:ba:fe:4e:d1:32:5b:18:c9:1f:
23:46:10:4b:b4:f8:16:9c:dc:23:64:c6:9e:65:0b:
b2:f3:51:d6:20:29:f8:41:f4:50:73:3b:b2:9c:48:
c5:d1:18:11:d4:77:ed:5e:e2:3a:c4:7e:68:8d:d3:
7b:38:6c:1c:63:87:9e:a2:77:20:74:57:a1:3b:16:
1f:82:80:0b:d4:3b:22:47:c9:24:f4:c2:9d:c3:6b:
73:4a:91:14:08:fc:b5:10:f9:d4:61:68:07:d7:67:
c7:50:7b:dd:e9:3d:91:bb:28:18:ee:28:ba:81:d5:
ae:b6:4b:b9:54:b4:ba:5e:c7:ff:f1:c7:ee:d5:c5:
d1:2c:0c:98:99:df:7c:9c:2e:15:f7:02:fe:08:a0:
12:f6:58:3f:76:3e:bd:ad:dc:6d:12:38:9d:49:60:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:18:11:BB:33:6B:44:66:98:8D:BD:84:47:60:CE:86:6B:45:F0
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:47:19:fc:2e:b0:c9:9f:38:50:ac:f3:a7:5c:4c:7d:9e:fb:
ff:c5:3c:50:85:bd:8c:bf:f1:ce:61:30:84:6e:ca:97:66:41:
a5:94:84:d4:d4:d4:a3:40:5f:0d:31:f0:98:e4:35:7a:57:00:
04:d4:0b:03:e7:32:19:90:c7:60:ef:48:0d:e6:60:ee:cc:14:
96:01:50:79:31:72:a1:42:01:d5:2b:e6:19:80:94:9b:36:92:
ff:0d:40:c8:6a:bb:e6:ea:72:06:b2:f0:18:ff:f7:99:47:a2:
5d:d9:7e:e3:24:9f:2f:5b:03:53:74:1e:60:5c:e1:dc:d1:74:
d0:e7:01:54:80:36:89:96:9d:e6:73:82:7a:0f:7e:44:cd:80:
fe:16:38:53:2e:90:20:b9:e8:33:93:40:32:74:c8:55:9c:51:
63:8f:e2:28:9b:4c:57:f9:81:01:24:bc:2e:07:4f:26:55:6e:
f8:b3:26:61:4b:77:0c:a7:79:7a:31:43:9b:fa:19:f5:4b:49:
d8:63:12:60:c9:80:e4:84:54:42:3d:5f:02:f5:ad:01:c0:83:
df:ae:bc:8a:39:38:40:26:08:ac:85:69:58:19:0d:b7:70:e4:
59:bd:6e:53:c8:a7:70:fa:04:e2:0d:2c:e1:74:2f:2b:ac:78:
56:23:a7:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm4zH8Yvz5OxYAJri8J05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzU3NWNhZmEwMGJjNDFkNTdjNDk0YWMxZjVkYmNmZWU3
ODMzMmUwHhcNMjQxMTIzMDYwMDMyWhcNMjQxMTI0MDYwMDMyWjAzMTEwLwYDVQQD
EygxYzFmMTgxMWJiMzM2YjQ0NjY5ODhkYmQ4NDQ3NjBjZTg2NmI0NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtxge4CgRGC0oo0OvelFap5Uw4gR
B6bJJzq39IaUiDXWtryYNgdoJu1gdAybiy6ql5G0GRs0g9O1cEkxc5oL58wZPXfk
4NrhOCUs7kiIfB7VgL+H+XlwYS8+54dp/Nu6/k7RMlsYyR8jRhBLtPgWnNwjZMae
ZQuy81HWICn4QfRQczuynEjF0RgR1HftXuI6xH5ojdN7OGwcY4eeoncgdFehOxYf
goAL1DsiR8kk9MKdw2tzSpEUCPy1EPnUYWgH12fHUHvd6T2RuygY7ii6gdWutku5
VLS6Xsf/8cfu1cXRLAyYmd98nC4V9wL+CKAS9lg/dj69rdxtEjidSWDGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwfGBG7M2tEZpiNvYRHYM6Ga0XwMB8GA1UdIwQY
MBaAFKrFdcr6ALxB1XxJSsH128/ueDMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYt
OGY5MTNlMjY5NmU1LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYtOGY5MTNlMjY5NmU1
LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEcZ/C6w
yZ84UKzzp1xMfZ77/8U8UIW9jL/xzmEwhG7Kl2ZBpZSE1NTUo0BfDTHwmOQ1elcA
BNQLA+cyGZDHYO9IDeZg7swUlgFQeTFyoUIB1SvmGYCUmzaS/w1AyGq75upyBrLw
GP/3mUeiXdl+4ySfL1sDU3QeYFzh3NF00OcBVIA2iZad5nOCeg9+RM2A/hY4Uy6Q
ILnoM5NAMnTIVZxRY4/iKJtMV/mBASS8LgdPJlVu+LMmYUt3DKd5ejFDm/oZ9UtJ
2GMSYMmA5IRUQj1fAvWtAcCD3668ijk4QCYIrIVpWBkNt3DkWb1uU8incPoE4g0s
4XQvK6x4ViOnEw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:48 2024 by rpki-client on console-ams.rpki-client.org