Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: GRzd60XBv3mHlbNicv6YIv8PbaHCRoUiccDDS/i3wgM=
Subject key identifier: 25:45:30:30:85:28:DB:46:AE:AE:1B:E6:E5:FC:AD:2F:FA:7C:4D:29
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01901BFE48943A0F104C0D7A546C4F508C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 13:02:47 +0000
Manifest this update: Sat 15 Jun 2024 13:02:47 +0000
Manifest next update: Sun 16 Jun 2024 13:02:47 +0000
Files and hashes: 1: GYlRvXs1Zdvb45K-HqLdD1lx0Xk.roa (hash: LsH8/524XJMJXLE/lJ03R9dmHJiOZvoqmGRDD05Za/M=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ZyrJj8s/yezS7IpD11L7bLsXRgZMlx6JQBL8V1BmPeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fe:48:94:3a:0f:10:4c:0d:7a:54:6c:4f:50:8c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jun 15 13:02:47 2024 GMT
Not After : Jun 16 13:02:47 2024 GMT
Subject: CN=254530308528db46aeae1be6e5fcad2ffa7c4d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:cc:bb:f3:32:00:c7:d5:e7:e8:a0:02:da:
7e:49:43:38:35:4d:71:f4:4a:e9:0d:b1:25:a7:51:
4e:5f:54:5e:8e:d4:ef:91:cc:3c:f8:da:04:39:f9:
2c:2d:68:11:18:24:b1:48:56:40:1e:5e:b6:d1:03:
96:4a:f1:b9:f9:69:a2:f7:90:03:04:e3:c5:c4:9c:
9e:73:f3:5b:44:d5:13:5f:7e:1f:83:df:97:ce:51:
e5:eb:a8:e6:4e:cf:65:bd:ba:c5:d8:08:a4:34:bd:
33:0b:b1:7f:53:91:a5:80:71:6a:77:03:d5:09:fa:
0d:7b:fa:9d:b7:b4:34:3a:c1:41:5a:23:8d:2a:14:
e4:ba:47:87:6b:8a:65:17:10:fa:7f:42:bf:65:7b:
e9:51:f7:5a:84:58:b3:94:a1:bd:be:0c:5e:79:11:
0b:00:33:99:66:ec:2b:65:b6:69:d0:38:bf:6b:61:
29:3d:14:fe:06:a7:f7:e0:51:fd:b0:dd:5e:a1:5e:
04:4b:a7:54:d2:4a:59:3c:cd:a5:e2:54:9b:5f:e0:
64:15:27:60:4f:47:db:53:ec:9b:18:5f:10:33:dc:
f0:ef:48:18:27:0e:37:3c:3d:89:a6:3d:3a:05:01:
c6:51:c0:40:c9:68:27:3b:e0:b8:e4:49:74:16:37:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:30:30:85:28:DB:46:AE:AE:1B:E6:E5:FC:AD:2F:FA:7C:4D:29
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:d0:57:33:91:a3:8f:54:34:d1:4e:1f:ef:55:7e:e8:d0:
ce:9b:d2:2c:a3:1d:5a:50:df:a8:aa:b5:43:cd:a0:75:43:31:
1a:b6:26:48:f8:66:34:b1:17:35:b3:66:97:2f:d0:0c:6c:85:
94:6f:c5:f7:72:14:82:76:4d:e2:14:48:8c:91:dd:2e:86:6e:
9f:c1:bd:4f:81:f9:bc:18:91:2e:a7:d9:a5:f7:ee:67:a0:85:
d7:81:a5:88:69:df:d1:12:39:ce:81:ce:eb:3b:27:dd:56:86:
88:86:8d:cf:de:60:f0:bb:e0:5b:fa:86:dd:46:42:df:36:a7:
cf:d0:7a:4c:2a:6c:4a:7e:80:bc:f2:63:5c:58:2b:77:d0:f7:
72:01:aa:28:70:bd:e8:c7:58:11:3c:d8:dc:9a:13:22:8a:88:
92:64:f6:8f:6e:7e:69:08:9b:5b:bf:84:19:a8:9f:67:2a:35:
a7:e0:a1:f2:e1:40:02:07:d1:44:27:bb:ea:46:c6:33:78:90:
23:43:d2:6e:49:ca:d0:e6:97:3d:39:3a:8a:da:31:e1:3a:e4:
ad:37:f7:1d:18:f8:14:52:f7:a6:e5:f8:d1:20:b2:84:d5:87:
73:ea:fe:87:c5:eb:02:1e:49:46:02:f1:b2:d6:30:6e:60:61:
b1:c8:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:28:48 2024 by rpki-client on console-ams.rpki-client.org