Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: U3CsE2WFX6jaup4p+T89fkRHF1UtjHAC5EjLsN4UFNI=
Subject key identifier: B9:5A:3C:D8:44:02:A7:2A:2E:78:4B:36:FC:9C:2F:67:07:3D:9D:61
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 01901DED23ADF564E401CEEAC00B67A8BD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 22:03:18 +0000
Manifest this update: Sat 15 Jun 2024 22:03:18 +0000
Manifest next update: Sun 16 Jun 2024 22:03:18 +0000
Files and hashes: 1: 3D0NYkfS4WU1Yvt9q-lSepQXBHk.roa (hash: qwXmLougtuKjUKnbAJzPrX4+YntC36HY7RyUd1Qs8/Y=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: lrG/0/9dgqwgSDCoIe8hgKt6KHstQJiUjnI6+8KVFoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:23:ad:f5:64:e4:01:ce:ea:c0:0b:67:a8:bd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jun 15 22:03:18 2024 GMT
Not After : Jun 16 22:03:18 2024 GMT
Subject: CN=b95a3cd84402a72a2e784b36fc9c2f67073d9d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:14:af:f3:74:d1:39:7e:53:d0:5e:62:ce:
16:d0:f9:c1:f0:83:b0:6e:49:bf:70:57:3e:53:48:
2e:12:c7:5f:73:94:22:ef:39:62:8b:9b:e8:5d:ef:
2e:b3:28:bb:47:70:f0:bc:91:4f:2f:87:8d:1e:12:
1e:bf:b1:d2:d1:54:10:a4:14:41:a8:6a:39:4a:8d:
ca:03:0b:14:77:c7:2f:0b:79:a9:2b:5b:ff:fc:af:
db:98:7d:9b:0a:df:9b:e6:ea:9d:f1:8b:ad:a7:f4:
c6:c6:9e:b6:3e:af:51:a7:b8:4b:a7:2d:b3:05:2c:
4a:63:43:02:c7:56:30:6e:fc:ed:ef:54:96:fa:55:
e0:bd:59:ea:cc:21:aa:60:88:e4:2c:b4:9a:09:0b:
5c:64:2a:81:f0:f9:ca:be:a7:0d:4e:5b:70:d6:85:
04:c1:0d:d7:41:ea:17:d3:9f:e2:01:a8:df:69:13:
83:34:21:3b:45:12:3b:16:e2:72:ad:03:e3:3f:2f:
e4:d0:2e:0b:87:e0:6c:6b:25:0a:8f:08:fe:66:9b:
e5:8f:ae:4d:21:f0:24:4b:b7:67:ef:11:3b:fb:45:
9d:16:8a:ed:8a:fa:81:57:f3:f0:4e:a7:f4:19:aa:
f7:7f:e5:9b:b1:f0:1a:9c:e7:c3:72:2a:c6:5a:38:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:3C:D8:44:02:A7:2A:2E:78:4B:36:FC:9C:2F:67:07:3D:9D:61
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:32:10:5f:3a:42:ed:5e:c5:e9:77:92:53:de:7c:ac:39:
5b:3c:8d:67:1c:83:d4:3e:76:64:53:9e:00:a5:9f:bf:09:1a:
61:5b:65:40:1e:41:c7:db:a5:41:a2:03:4e:0a:30:fb:e1:5a:
4e:a4:55:36:8a:dc:c1:9d:26:4d:4d:34:2d:f4:d5:52:54:4a:
45:55:81:d4:83:01:6e:be:38:4f:0b:7e:65:b5:22:bc:33:da:
c3:55:c1:49:dd:35:38:37:d1:19:02:42:8d:aa:53:fa:23:dc:
e7:7b:96:77:9c:6c:35:2e:ec:52:71:62:f0:c0:0f:f5:0f:75:
83:67:b4:27:ed:cf:5e:6f:c0:53:88:49:38:19:9f:d7:47:95:
98:50:f6:99:27:20:c3:15:07:5c:8c:b5:c7:52:58:cc:1c:fb:
b1:7c:9d:0e:94:40:5c:4f:dc:79:b3:de:41:26:78:61:94:9e:
20:ba:9c:05:8f:b1:a2:b0:bc:cc:3a:12:75:ee:e3:4a:71:6c:
12:28:5c:89:b2:46:b4:a7:c3:e3:07:60:6e:e3:34:59:a1:a9:
16:d8:4a:4f:7e:54:e0:74:f1:01:bd:c7:7c:34:ed:4c:73:ba:
8a:b6:01:3c:fc:e6:93:5d:04:43:3a:25:c5:81:55:10:fc:f7:
d3:a6:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:21 2024 by rpki-client on console-fra.rpki-client.org