Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: zmY/J8DNRFGr77L84CAJf4kFbSwJ1BN3wNObRRZxWIE=
Subject key identifier: 28:FE:04:0D:56:D1:24:4C:6E:F4:B4:C4:00:D0:27:23:51:40:CF:EB
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 01901D0F1BFBE4F59F82665A0B2805F301DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 0416
Signing time: Sat 15 Jun 2024 18:00:47 +0000
Manifest this update: Sat 15 Jun 2024 18:00:47 +0000
Manifest next update: Sun 16 Jun 2024 18:00:47 +0000
Files and hashes: 1: 1EquoB6rMY8JBmAF1YdprXEN9lk.roa (hash: li4e32XJ76Oe4M+dk9IoieU+wlh0hpqeXl6du0L38GQ=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: soDW+nclcQpM6eHZoU73K+8U/vHJ83GQWBXSC/a7YLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:1b:fb:e4:f5:9f:82:66:5a:0b:28:05:f3:01:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Jun 15 18:00:47 2024 GMT
Not After : Jun 16 18:00:47 2024 GMT
Subject: CN=28fe040d56d1244c6ef4b4c400d027235140cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:ea:5d:b7:64:94:27:31:e0:55:4e:b6:d3:
d2:13:c7:f6:8d:2e:a6:5d:5a:4e:db:15:52:bf:7f:
68:0d:70:37:fe:cc:be:00:a0:18:04:20:c0:5d:46:
3f:df:f6:93:98:f9:58:d6:59:12:6d:2b:44:20:b1:
02:6a:4e:a1:42:6d:bc:72:b8:ab:55:53:6c:e6:2b:
06:02:f6:85:0f:4a:08:82:b4:4a:7a:39:33:e2:ae:
7f:99:d2:8a:80:90:cb:ea:71:76:2f:8f:3c:0c:57:
90:e3:9b:a8:59:18:6e:ff:a4:76:cd:8f:ab:c9:3f:
75:0d:6b:e5:7e:49:10:eb:48:a9:79:19:83:5c:ab:
54:99:82:32:00:cf:a1:79:d1:70:49:60:c8:de:8c:
33:12:fe:e2:00:64:89:e6:41:f3:99:37:fa:27:20:
d6:18:3e:65:c2:e8:16:3c:c4:0b:59:d7:e5:7b:54:
ac:ea:24:97:df:ad:a6:d9:df:25:7f:60:00:bf:8a:
04:42:96:09:4a:50:77:5b:5d:07:df:96:5c:75:b0:
6c:c5:95:43:2e:44:2b:9a:9b:4c:b0:ee:5c:a8:c8:
3b:20:0b:1b:a8:fb:28:36:fb:c6:33:d4:95:c8:f3:
b6:f3:12:92:f1:6f:05:5c:93:e2:78:51:14:7a:28:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:04:0D:56:D1:24:4C:6E:F4:B4:C4:00:D0:27:23:51:40:CF:EB
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:f9:42:5b:a6:cb:cd:2f:b2:05:42:eb:fb:00:44:38:ad:
d3:93:13:75:5a:85:c8:ab:ee:8f:5b:d1:de:bd:4a:67:8e:c9:
9f:d4:bb:b9:5f:a9:7c:e7:15:15:df:9a:12:07:39:b6:30:f5:
c6:a4:31:15:71:54:c3:5c:5d:0a:42:b4:4b:6b:6a:2e:0e:f2:
87:20:fd:be:4f:bd:ad:67:6d:fe:55:b6:d4:03:2c:c5:50:68:
b4:7d:e4:8d:54:63:bf:89:00:4d:db:9a:5b:05:e7:7f:86:7d:
a3:49:29:e5:0c:bf:19:32:92:92:2a:00:cc:11:e3:96:9b:c4:
0a:b7:34:8f:b8:20:44:c2:c7:ad:54:8d:3c:92:f2:af:37:c8:
2e:1b:19:26:27:12:31:89:35:88:02:f5:18:eb:a2:b6:45:93:
c7:fa:ef:c7:c4:24:6d:f8:74:0d:34:57:f2:30:69:2d:38:2f:
5c:be:3a:8c:e3:b0:0a:c4:87:96:c2:c5:b1:48:26:56:1e:b4:
3e:45:f7:a3:4e:f3:06:62:85:26:61:c8:42:2d:c8:a7:64:5f:
bf:6e:48:d6:7f:50:e0:fe:f4:72:fa:1e:e9:0d:77:b9:c7:69:
21:c7:bc:36:b4:c9:eb:23:ab:97:39:69:39:12:b2:a2:46:b7:
d5:c7:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:48:59 2024 by rpki-client on console-fra.rpki-client.org