Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: jG56Q3TcM2iLiRAx7OVidk1PK5+sT/vEimpdiHdNES0=
Subject key identifier: 40:CE:7E:58:1B:90:8B:21:A0:AC:42:EB:73:37:51:7A:8C:2F:38:1C
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 0190452F7AA6B5046D7539A0CB80FA136A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: FE
Signing time: Sun 23 Jun 2024 13:00:57 +0000
Manifest this update: Sun 23 Jun 2024 13:00:57 +0000
Manifest next update: Mon 24 Jun 2024 13:00:57 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: IdHr0Voumf2o4vwSKiXAzVAepjAB/SmbDM9PbLE4lMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:7a:a6:b5:04:6d:75:39:a0:cb:80:fa:13:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Jun 23 13:00:57 2024 GMT
Not After : Jun 24 13:00:57 2024 GMT
Subject: CN=40ce7e581b908b21a0ac42eb7337517a8c2f381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:ad:c8:f6:42:d8:bb:a8:b1:ac:f5:b2:41:
07:af:0f:9a:8c:d9:51:4d:29:e1:75:f7:df:89:e7:
3f:6c:7b:be:30:4a:53:53:fd:8b:ce:6c:83:15:d1:
e4:db:37:d7:aa:63:87:32:21:c2:62:c2:fd:4f:f6:
76:79:51:8a:e8:c5:b6:2f:cb:de:2b:9e:37:7f:80:
42:3e:cd:0f:95:67:e7:3a:7d:7c:4b:7b:ca:a7:cf:
d3:f0:c1:80:7a:a8:73:29:50:2d:73:7b:b7:66:e3:
e2:e8:e6:0e:3e:39:56:da:d0:ea:44:2b:bf:f7:d7:
5e:a2:e1:ca:f1:c4:89:52:a5:65:a0:e6:ef:3e:b9:
23:d5:2b:46:75:9f:8d:85:1d:05:e9:88:7d:4c:7f:
d6:52:c9:f7:0c:a6:5d:2e:38:90:8b:33:80:a1:6e:
52:31:19:0a:29:58:d6:f0:71:76:89:f9:46:79:8f:
9f:cc:46:ea:96:50:79:1e:20:97:49:2e:a6:b9:cb:
7b:ab:d8:f7:06:2d:9c:f5:17:9f:44:f4:0a:60:30:
c3:02:84:c5:b8:b5:55:1f:8c:b8:3e:63:5e:1e:41:
ee:61:b2:d7:84:c4:40:40:0b:44:9b:ee:74:79:53:
25:c1:09:61:fc:4d:e2:67:4f:6a:86:29:e4:43:74:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:7E:58:1B:90:8B:21:A0:AC:42:EB:73:37:51:7A:8C:2F:38:1C
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7b:ab:9e:d6:74:3a:8d:47:ba:5c:83:06:1e:c8:c5:35:04:
9e:ae:a1:74:d5:e8:66:81:27:53:af:05:06:58:f1:2f:47:33:
d2:bc:27:ca:0b:1c:f5:bf:2f:a0:bc:72:2d:94:8f:5b:23:8d:
92:fc:83:74:8d:52:6b:9a:e1:29:31:84:b8:f0:fe:17:69:bc:
c1:61:87:3c:77:7b:45:5f:be:24:93:67:e4:c9:9c:05:9d:4c:
a5:cc:2d:2f:85:1c:ed:2e:b9:5d:a4:e8:d1:7c:b8:e8:ed:da:
50:d2:71:ba:77:9a:9c:eb:4b:ba:1b:6e:cf:c9:c0:54:b8:16:
78:63:8b:84:72:d7:9d:b8:a0:6d:bd:bc:e9:ba:5b:c9:fd:db:
93:10:86:25:ca:e9:e5:fe:1c:e3:78:c7:56:d2:a7:78:f0:ad:
fa:c1:7e:cd:32:cd:0b:bc:64:e0:92:7d:85:74:64:08:cc:99:
3d:24:f2:fa:ae:6e:85:46:3b:22:b7:9b:75:ac:d0:14:33:df:
4a:b5:47:8e:db:c0:99:21:df:c1:7b:34:6b:10:fa:fc:12:b0:
c2:4d:b9:2f:82:12:ec:18:50:73:7d:50:41:b1:53:39:03:5f:
52:12:e4:ee:a3:4d:70:b5:56:4d:4f:28:be:3e:f2:3a:02:99:
ce:f9:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:27 2024 by rpki-client on console-ams.rpki-client.org