Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: KXhPwob5AluTK+/AjDGaXmZdPOAtsFawmuTOb2ZoKOk=
Subject key identifier: 8A:9D:DA:C5:C7:34:D8:6E:B7:59:11:23:E5:3D:71:FF:30:B2:ED:AC
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 018F8D138BD3A3820CB248DF27773DFB12B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 117D
Signing time: Sat 18 May 2024 19:00:19 +0000
Manifest this update: Sat 18 May 2024 19:00:19 +0000
Manifest next update: Sun 19 May 2024 19:00:19 +0000
Files and hashes: 1: QFVjGcBmqDgkmCxcPC-ydqjIa-w.roa (hash: Nt4AjtSOLcVnjtcNU/k+vz+3/otZC8mkXBF5v2kV9no=)
2: h0kmkGrFBOzt5v0CadgdRMML0Vs.roa (hash: KySeJR1ImOZjk3OXHk4uL03a+8VhH+bgym0fdLvSRMI=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: 4zLW9OosKAau4v64DlfmarDtcemobffx6YNNpRf0XBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:13:8b:d3:a3:82:0c:b2:48:df:27:77:3d:fb:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: May 18 19:00:19 2024 GMT
Not After : May 19 19:00:19 2024 GMT
Subject: CN=8a9ddac5c734d86eb7591123e53d71ff30b2edac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:85:77:e0:03:2d:3d:3c:e1:62:10:d4:ba:
ef:61:f6:19:23:56:ed:71:ef:11:23:b5:7d:68:d7:
5a:71:6e:38:cd:63:89:f5:0d:36:a8:0f:4d:55:2f:
3d:3a:44:51:8e:6a:a6:77:50:74:eb:23:74:a8:04:
2c:a0:e8:58:20:6b:0e:89:61:65:18:d6:ee:0d:20:
00:4e:38:4f:63:f0:49:e5:d4:b8:d3:6e:27:34:9c:
39:50:6f:ea:e9:03:7a:5c:ee:c3:fc:19:65:b3:62:
a2:7a:69:84:3f:0b:d4:64:ec:93:61:0d:8e:dd:35:
c6:dc:2b:15:69:6b:d3:48:27:57:44:c8:d1:17:62:
7f:d4:1f:70:a7:b4:6c:31:1e:2d:85:b7:d8:8a:72:
b1:27:f5:d5:83:50:2d:4c:f3:78:1d:45:69:62:31:
16:e7:4e:3f:ac:f1:7d:da:7e:1e:2a:43:d9:1d:36:
77:d4:ca:09:ae:74:2a:95:10:c4:ab:d8:3a:48:f0:
5e:f1:33:a5:a8:15:9c:11:64:a0:05:4c:de:22:45:
ad:9f:ea:55:69:62:ea:53:93:a9:9f:e3:56:b5:e5:
8c:a5:db:67:9b:55:fb:5e:61:8b:c2:56:a5:30:50:
39:1a:0e:a6:f3:23:4b:78:b5:78:0f:b6:1d:73:6d:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:DA:C5:C7:34:D8:6E:B7:59:11:23:E5:3D:71:FF:30:B2:ED:AC
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:71:f0:10:48:c3:c1:d3:72:9a:bb:f7:86:5b:95:06:26:ae:
30:34:2d:74:ab:29:ad:87:21:6d:65:f9:fd:d1:c8:d5:40:21:
13:24:27:a6:9f:5e:02:61:1d:86:6e:a8:6f:e5:90:30:24:1a:
bf:9c:c9:01:f3:a3:b3:e6:d3:22:5d:0a:e7:aa:05:41:a0:22:
19:2c:ac:73:bc:e7:25:77:5d:63:9e:49:74:45:7a:83:03:5e:
57:e3:4e:11:a3:b9:d5:b3:bf:90:f1:2a:6e:64:70:ae:0c:d5:
60:8b:e4:37:2a:0a:34:04:84:31:61:49:45:9e:2a:bc:42:bb:
7e:c3:0a:28:33:e5:50:84:c8:46:73:5a:2b:bb:2e:ec:a7:8b:
6a:54:94:4d:1c:c5:81:4e:3d:54:e9:c0:44:70:f8:f9:c3:c2:
ce:95:f7:e7:14:ca:c9:2e:b0:10:39:6d:59:ab:dc:59:62:5e:
7a:40:b0:ec:7f:9d:8e:5a:7c:94:39:93:d2:c7:e5:b0:d0:49:
66:be:b2:92:d2:f6:b6:c6:f8:de:51:f7:26:8c:75:27:0d:38:
25:c4:2b:39:ff:9f:82:8e:44:bf:16:b3:b5:ed:50:27:45:96:
bf:d7:19:a9:a5:4d:b6:a7:95:f3:a0:ef:17:d1:a3:f1:40:05:
3c:34:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:50:10 2024 by rpki-client on console-ams.rpki-client.org