Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: +vSJqN4JDH1PZrYFfpao4TUdPW9YmgxyAl6Cw2Zk0d0=
Subject key identifier: CC:DB:21:E1:36:D0:8C:07:63:01:9E:71:56:59:79:24:D3:88:60:13
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019355AD74C62F0D38F24DA4160ED34942B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 21:00:51 +0000
Manifest this update: Fri 22 Nov 2024 21:00:51 +0000
Manifest next update: Sat 23 Nov 2024 21:00:51 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: 8M7EC2uci3bkT3AT+Vw6Zgzorex2yGE+nIzj+OIcSMM=)
2: sG9QCECmwbS225jEPdJrJGg8JOg.roa (hash: fD8TdLRAW/bvC9eCvEbAkpeRHJhgic19Gq713W+jkXs=)
3: umWcaqQh_ZUxL6mSaZYgOt9--wg.roa (hash: w3qUe+bJVQeln69cJRsMFOrvRrjc2/bgVuGfkaToCjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:74:c6:2f:0d:38:f2:4d:a4:16:0e:d3:49:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Nov 22 21:00:51 2024 GMT
Not After : Nov 23 21:00:51 2024 GMT
Subject: CN=ccdb21e136d08c0763019e7156597924d3886013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:b8:2f:87:60:db:6a:d7:f2:65:b3:eb:c3:
29:a6:27:dc:b7:66:d4:89:a4:3b:15:42:c0:f1:8f:
7f:17:4c:45:1e:51:de:c7:c5:a3:0a:52:03:dd:32:
62:d5:69:08:0b:d9:09:29:07:c9:33:c7:b6:0b:5d:
a5:43:86:f2:0a:9e:4c:94:a8:3e:00:36:17:76:b3:
00:ec:3b:b8:71:49:30:b6:77:28:a1:a0:96:96:2b:
90:13:5a:47:e6:12:81:bd:82:7f:9c:0e:81:96:75:
f6:e1:c9:c0:e9:f6:41:bf:40:6f:ef:db:df:1e:77:
ca:24:85:71:1e:fd:07:ef:b1:6e:d9:f2:0d:17:26:
d8:5a:7b:f9:8c:99:a8:5c:d9:58:26:3b:60:fd:68:
14:da:5e:d8:37:96:78:c3:0a:68:9d:3e:b1:de:72:
67:c0:ec:84:5c:f1:bd:1f:3f:d7:90:c2:9e:c9:72:
95:27:15:d3:12:6d:d4:43:22:f4:f1:92:d0:33:0f:
1c:91:63:de:56:a8:a9:9f:aa:97:4c:7a:e4:be:ab:
36:7c:2b:65:bd:98:24:b3:05:1c:03:49:e9:c2:6e:
9e:c0:6a:f3:2a:b8:9c:79:5d:5a:ac:fc:ed:3d:cb:
78:c6:bd:22:de:1f:31:e9:2e:a9:a6:c3:1d:8d:bd:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:21:E1:36:D0:8C:07:63:01:9E:71:56:59:79:24:D3:88:60:13
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:10:9e:6b:d6:6b:91:15:d1:4f:f3:35:86:0f:4d:b0:70:f8:
8c:4d:db:8a:d9:7c:67:52:12:97:6c:bc:c2:99:b0:12:fc:ae:
88:86:b4:a1:ff:ee:d6:21:18:84:c7:1d:49:75:9f:17:23:81:
30:15:b9:6e:6f:53:59:05:92:3c:94:67:0f:ac:64:5f:81:74:
65:08:62:e9:2a:d0:e1:be:6e:3b:6d:44:48:dd:26:5d:c1:6b:
31:94:57:af:7a:ca:55:7e:34:b8:98:35:00:a5:42:28:5c:ad:
cc:3f:9e:93:8d:bc:02:09:bd:ac:95:9e:3d:6e:9a:7a:bc:73:
93:79:41:1c:29:a4:40:ad:60:cc:85:93:39:a7:f7:bf:15:ce:
58:fd:2c:cb:10:d9:93:6a:21:d6:c0:44:ea:03:c1:c8:ac:6d:
04:13:fb:ad:c7:23:c5:1c:8e:b0:a8:9b:19:49:f9:04:e8:89:
5d:c6:05:27:51:6f:34:65:c7:1b:a4:61:a6:68:8f:b2:bd:15:
47:40:c7:3d:1a:c3:03:4d:f4:ab:52:a3:79:a2:72:3f:3e:a2:
d3:23:78:f7:3b:52:98:80:8d:94:72:b1:89:9c:e6:aa:56:5b:
1f:23:d2:dc:78:3d:e9:70:33:d0:87:96:f9:3f:42:22:8b:fb:
2c:47:36:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrXTGLw048k2kFg7TSUK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjQxMTIyMjEwMDUxWhcNMjQxMTIzMjEwMDUxWjAzMTEwLwYDVQQD
EyhjY2RiMjFlMTM2ZDA4YzA3NjMwMTllNzE1NjU5NzkyNGQzODg2MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu24L4dg22rX8mWz68Mppifct2bU
iaQ7FULA8Y9/F0xFHlHex8WjClID3TJi1WkIC9kJKQfJM8e2C12lQ4byCp5MlKg+
ADYXdrMA7Du4cUkwtncooaCWliuQE1pH5hKBvYJ/nA6BlnX24cnA6fZBv0Bv79vf
HnfKJIVxHv0H77Fu2fINFybYWnv5jJmoXNlYJjtg/WgU2l7YN5Z4wwponT6x3nJn
wOyEXPG9Hz/XkMKeyXKVJxXTEm3UQyL08ZLQMw8ckWPeVqipn6qXTHrkvqs2fCtl
vZgkswUcA0npwm6ewGrzKriceV1arPztPct4xr0i3h8x6S6ppsMdjb1G2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzbIeE20IwHYwGecVZZeSTTiGATMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3hCea9Zr
kRXRT/M1hg9NsHD4jE3bitl8Z1ISl2y8wpmwEvyuiIa0of/u1iEYhMcdSXWfFyOB
MBW5bm9TWQWSPJRnD6xkX4F0ZQhi6SrQ4b5uO21ESN0mXcFrMZRXr3rKVX40uJg1
AKVCKFytzD+ek428Agm9rJWePW6aerxzk3lBHCmkQK1gzIWTOaf3vxXOWP0syxDZ
k2oh1sBE6gPByKxtBBP7rccjxRyOsKibGUn5BOiJXcYFJ1FvNGXHG6RhpmiPsr0V
R0DHPRrDA030q1KjeaJyPz6i0yN49ztSmICNlHKxiZzmqlZbHyPS3Hg96XAz0IeW
+T9CIov7LEc2yg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:11 2024 by rpki-client on console-ams.rpki-client.org