Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: Xk+Aw8g2xZkNDCcVSBzL5aPd+6z0MLY84yBDdu4sZcM=
Subject key identifier: C1:AD:46:D2:2C:08:59:DE:C7:BD:E3:79:E3:BA:5A:31:A3:7D:D6:68
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 01901DED2B270CB4091D46E05B07709E510B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0956
Signing time: Sat 15 Jun 2024 22:03:20 +0000
Manifest this update: Sat 15 Jun 2024 22:03:20 +0000
Manifest next update: Sun 16 Jun 2024 22:03:20 +0000
Files and hashes: 1: 0LNGdjYasgqntHEIQIzvfE8wQIY.roa (hash: hbzCEQ2yJBk21LmFBof9ud0/qkiT9CgODNeApIjQax4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 5ZVXuCW7TDy7+OG71MoV9MYCfqSpBKr2Gx/A5BgAB0U=)
3: ZMraDMbqSJ-YaVa3GpMKopTPyEA.roa (hash: ikZvTkQslFEkZ2AJ6JtQnitoGpZR7oSg9wWs7Azbiks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:2b:27:0c:b4:09:1d:46:e0:5b:07:70:9e:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jun 15 22:03:20 2024 GMT
Not After : Jun 16 22:03:20 2024 GMT
Subject: CN=c1ad46d22c0859dec7bde379e3ba5a31a37dd668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:30:58:8c:65:de:88:9d:81:00:ff:b0:9d:b8:
38:43:1b:6a:d8:64:c6:96:41:8c:0d:19:86:60:4e:
55:1c:be:60:9c:30:84:cd:64:5b:68:1e:60:4b:9c:
2f:e9:64:d4:ec:f5:60:e5:eb:cf:4c:23:da:24:a9:
3c:69:a4:b9:7a:76:23:e3:cb:a0:69:38:4f:2e:33:
e2:7f:12:6b:ce:57:b8:2f:f4:72:6f:9f:ed:87:70:
d5:69:74:6d:f8:b9:37:74:89:70:28:bd:d0:dc:d4:
aa:4f:8a:8d:1c:20:e5:4e:4f:38:b8:64:4c:28:8e:
e4:b5:04:1b:33:c3:20:45:5f:32:cf:f0:c4:86:5d:
4e:ce:13:6e:64:b4:f7:fa:9a:45:3b:7b:9a:93:de:
87:4d:00:17:72:b1:76:71:3d:8e:5a:dc:44:19:e9:
b0:b5:fb:77:b9:ed:f6:55:ee:fb:6d:86:ad:9b:05:
be:a5:4f:df:cc:cf:47:98:18:be:f5:ff:cc:3f:c1:
f1:b7:5b:9e:38:eb:f4:c5:b8:3a:be:2c:6b:a1:98:
51:95:5f:fc:11:bd:7f:eb:c7:e5:78:34:0d:a0:ff:
fb:f5:1a:b9:46:d1:ed:35:de:fb:5f:f1:7c:3d:c3:
32:e3:f7:dd:a3:5b:92:da:3e:b4:40:a4:88:2f:8a:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:46:D2:2C:08:59:DE:C7:BD:E3:79:E3:BA:5A:31:A3:7D:D6:68
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9d:55:59:4f:9a:18:83:ba:de:4d:1c:2e:b5:86:bf:ee:c1:
b1:89:99:49:5c:f4:bf:f0:38:dc:3a:1a:34:fc:8c:80:c9:e6:
5a:df:e4:4c:ac:b0:51:88:5f:64:07:a1:6d:6f:19:db:bf:b3:
e0:25:15:56:9d:b4:48:3a:39:5d:8a:42:85:f3:a2:d0:2f:03:
dd:93:d7:8b:48:2c:de:d9:25:15:be:3f:a4:d4:f8:a9:06:1e:
12:ed:78:d7:ed:c4:7f:aa:0e:65:41:f8:fb:3f:5d:3d:90:29:
b4:ac:74:46:ba:57:62:06:ac:9a:91:62:b1:36:01:06:19:a6:
84:ce:62:57:1e:47:79:f4:74:4f:82:4e:92:36:1f:c0:b7:24:
d6:c0:2b:5b:6d:e7:21:21:73:24:4d:4f:d6:90:15:7e:bc:23:
9a:a0:d4:7f:fa:3b:7d:f9:93:82:f9:c9:fa:17:68:f6:ec:8d:
ed:c0:21:4e:d7:ea:c1:a7:ef:96:60:a9:be:70:ef:11:33:f0:
5e:f5:5e:f6:bd:21:3f:65:d7:3c:3f:b4:57:1f:b0:9b:ca:41:
95:94:57:37:ae:2c:f2:38:d5:7e:c1:6c:79:49:1d:bd:13:c0:
ed:48:5f:c0:e1:59:cb:ea:33:91:de:9d:f5:68:ff:cb:bf:5e:
60:d2:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:46 2024 by rpki-client on console-ams.rpki-client.org