Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: S4SQmDMmy6uwb9zttgNatE3zQaFWB5waFXqsf1U7SFs=
Subject key identifier: F2:25:84:FA:76:7C:13:1E:53:BC:35:B8:B0:DB:FD:22:ED:86:6D:A4
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019358405C8851E46518872863D2F84081C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 09:00:33 +0000
Manifest this update: Sat 23 Nov 2024 09:00:33 +0000
Manifest next update: Sun 24 Nov 2024 09:00:33 +0000
Files and hashes: 1: 1-1bz-0zniD5MHmsOh_hH4hrpuPA.roa (hash: WmvUIW7An2KldZNToPbqN7ClZofIxI/z/RwU4nZ1DHg=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: hqgbuA9rTNgNdWteOFYhfG6d+7sOwzFetFWo4nJW6JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:5c:88:51:e4:65:18:87:28:63:d2:f8:40:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Nov 23 09:00:33 2024 GMT
Not After : Nov 24 09:00:33 2024 GMT
Subject: CN=f22584fa767c131e53bc35b8b0dbfd22ed866da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:3a:4e:d5:5a:d9:d2:4c:ba:cc:ae:5f:10:
94:8a:3d:81:67:8a:8b:5f:5a:43:a7:16:4f:d8:42:
bb:64:5b:f8:34:5a:ae:95:65:62:36:1c:5b:83:46:
52:6b:a7:62:0a:0d:d8:31:77:9d:26:ab:47:8b:ed:
3e:f7:71:c1:ef:cb:11:a9:d1:cd:5e:e5:09:77:e9:
30:38:55:77:04:ed:59:84:87:b9:ff:57:63:6a:2a:
30:18:f2:40:c1:32:00:cc:b7:0a:ca:ea:c2:20:9b:
92:31:8d:bc:f7:b4:37:05:ed:bb:53:54:ac:67:49:
c4:39:e3:56:f6:c8:30:9e:1f:c9:46:1c:38:1b:c4:
fa:bd:c6:e6:2c:3b:72:ae:2f:40:03:5b:d8:3b:11:
86:fe:59:b8:36:8a:c6:ac:97:bf:e2:1e:d3:cb:a5:
4c:da:17:17:ac:03:af:c0:e9:13:d4:ba:f2:cf:ee:
22:3c:3b:8e:88:dd:50:28:63:76:2f:47:ed:87:25:
85:bc:ed:d5:a4:2e:fd:e4:82:f8:f2:b5:d3:64:43:
34:11:d5:bf:51:d9:a6:20:e4:e5:fd:be:af:d9:da:
0a:f6:d8:ae:8b:ad:0a:91:3c:49:e4:a3:0e:b9:58:
40:f5:b9:b9:f9:5e:ad:33:eb:c1:64:b5:2f:f5:2a:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:84:FA:76:7C:13:1E:53:BC:35:B8:B0:DB:FD:22:ED:86:6D:A4
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dc:67:9c:e4:ac:ac:a1:e9:96:fd:c8:47:17:98:df:ca:ac:
56:b5:25:b0:8c:f8:76:71:e6:d2:8c:11:96:f4:ef:f1:02:ce:
da:d1:be:ea:55:1d:79:3f:78:99:14:cb:ee:70:b0:97:3a:e8:
c9:d0:b1:ad:97:22:f0:5f:2a:97:f6:d6:41:f9:0e:f7:bc:69:
91:1c:20:90:9b:c4:e8:0a:fb:bd:57:af:93:c4:34:c5:d3:90:
90:cf:1c:db:06:e9:d3:e6:aa:80:f5:7f:a9:00:92:c0:08:bc:
a0:e6:45:1e:c7:be:56:40:c5:62:7c:21:23:09:83:25:9a:53:
bb:8c:e3:d7:40:df:20:96:ac:4a:3c:4f:ea:a1:0f:0c:48:7d:
4f:59:89:78:5c:1a:3d:a8:f1:ff:d5:b6:8c:0c:0d:38:ff:67:
03:07:65:7e:b4:62:ce:12:af:6b:ea:c4:b2:2b:0e:6b:04:8a:
89:97:01:c9:24:0f:97:4a:11:6a:14:01:1a:ab:13:54:07:8e:
10:8f:4e:89:17:f4:c7:4a:e3:a1:c9:53:3c:5d:55:f3:02:51:
8b:a0:54:24:6d:e1:8a:8c:4e:9b:14:4b:d0:17:4e:8d:a8:8d:
8b:ee:40:93:0f:57:4d:61:b7:b4:b2:28:46:bb:76:22:58:c4:
e3:42:42:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQFyIUeRlGIcoY9L4QIHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjQxMTIzMDkwMDMzWhcNMjQxMTI0MDkwMDMzWjAzMTEwLwYDVQQD
EyhmMjI1ODRmYTc2N2MxMzFlNTNiYzM1YjhiMGRiZmQyMmVkODY2ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr46TtVa2dJMusyuXxCUij2BZ4qL
X1pDpxZP2EK7ZFv4NFqulWViNhxbg0ZSa6diCg3YMXedJqtHi+0+93HB78sRqdHN
XuUJd+kwOFV3BO1ZhIe5/1djaiowGPJAwTIAzLcKyurCIJuSMY2897Q3Be27U1Ss
Z0nEOeNW9sgwnh/JRhw4G8T6vcbmLDtyri9AA1vYOxGG/lm4NorGrJe/4h7Ty6VM
2hcXrAOvwOkT1Lryz+4iPDuOiN1QKGN2L0fthyWFvO3VpC795IL48rXTZEM0EdW/
UdmmIOTl/b6v2doK9tiui60KkTxJ5KMOuVhA9bm5+V6tM+vBZLUv9SoJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIlhPp2fBMeU7w1uLDb/SLthm2kMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9xnnOSs
rKHplv3IRxeY38qsVrUlsIz4dnHm0owRlvTv8QLO2tG+6lUdeT94mRTL7nCwlzro
ydCxrZci8F8ql/bWQfkO97xpkRwgkJvE6Ar7vVevk8Q0xdOQkM8c2wbp0+aqgPV/
qQCSwAi8oOZFHse+VkDFYnwhIwmDJZpTu4zj10DfIJasSjxP6qEPDEh9T1mJeFwa
Pajx/9W2jAwNOP9nAwdlfrRizhKva+rEsisOawSKiZcBySQPl0oRahQBGqsTVAeO
EI9OiRf0x0rjoclTPF1V8wJRi6BUJG3hioxOmxRL0BdOjaiNi+5Akw9XTWG3tLIo
Rrt2IljE40JCwQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:16 2024 by rpki-client on console-ams.rpki-client.org