Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
File: qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft (raw, json)
Hash identifier: qdfzt2KFKpsLPcRam8RGT2a6tK3YSyfnyvk9hljuD5E=
Subject key identifier: B4:EE:D2:4A:43:A2:CC:66:6C:7B:2E:7E:DB:09:23:0E:8B:3C:A1:11
Authority key identifier: AA:3E:D9:03:4A:21:1D:41:6A:BC:B9:B6:98:9C:0F:CC:37:3C:73:A8
Certificate issuer: /CN=aa3ed9034a211d416abcb9b6989c0fcc373c73a8
Certificate serial: 01901EC68D3C311028EC5FF08815C6C30E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
Manifest number: 040F
Signing time: Sun 16 Jun 2024 02:00:47 +0000
Manifest this update: Sun 16 Jun 2024 02:00:47 +0000
Manifest next update: Mon 17 Jun 2024 02:00:47 +0000
Files and hashes: 1: qj7ZA0ohHUFqvLm2mJwPzDc8c6g.crl (hash: E5TO0BPE1N42VsgUhxm7AhetUxhDJRs1dQTyR5j9buQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:8d:3c:31:10:28:ec:5f:f0:88:15:c6:c3:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3ed9034a211d416abcb9b6989c0fcc373c73a8
Validity
Not Before: Jun 16 02:00:47 2024 GMT
Not After : Jun 17 02:00:47 2024 GMT
Subject: CN=b4eed24a43a2cc666c7b2e7edb09230e8b3ca111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:84:7a:7b:49:05:9b:e3:4f:2c:db:70:0c:
17:90:3e:a4:31:48:37:73:e5:61:b9:3b:b5:b4:c5:
36:11:8e:2a:c9:ad:bf:e0:66:f2:bc:02:dd:4f:2c:
39:60:5c:7b:6b:97:fa:b8:06:be:4e:d6:0d:7f:d6:
98:37:67:1f:20:b1:0d:f8:3a:15:4f:ce:89:63:07:
65:6b:e7:9a:ca:67:17:95:10:2c:c7:54:f6:04:45:
46:aa:b6:fa:6f:79:83:4e:44:8a:d5:a4:bd:77:df:
4e:53:2d:88:00:40:c5:1b:25:df:9b:72:4b:16:d2:
02:d0:70:b9:4b:5a:52:3e:07:e3:bc:5b:91:cc:48:
5f:70:93:ae:9f:bf:04:ed:16:6a:47:d1:a6:4a:98:
89:64:53:7a:61:a6:71:8d:d0:90:51:6f:56:f0:7c:
8a:8e:22:3e:2a:3e:12:19:f5:72:3f:63:8e:f9:f5:
58:61:eb:e9:9b:33:fd:47:68:1d:80:60:1f:02:82:
86:72:e7:39:05:f2:ca:a4:ac:af:ca:30:a7:af:b1:
2f:70:2b:4e:cb:03:fb:db:cd:59:7a:4a:91:7a:ab:
9b:8d:07:4b:27:77:f4:de:8a:a8:e3:cb:2e:a5:a5:
5f:c1:28:f6:51:9a:61:51:b7:43:c7:81:d3:c1:dd:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:D2:4A:43:A2:CC:66:6C:7B:2E:7E:DB:09:23:0E:8B:3C:A1:11
X509v3 Authority Key Identifier:
keyid:AA:3E:D9:03:4A:21:1D:41:6A:BC:B9:B6:98:9C:0F:CC:37:3C:73:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2a:49:23:f0:18:d3:da:4a:26:fd:f7:a1:6b:ce:92:15:39:
65:3a:f4:4c:56:45:26:09:b4:98:e4:0d:b6:1f:bb:f5:b2:ee:
ec:f0:e1:05:43:a2:d8:21:62:44:86:c4:92:28:aa:4c:5e:e6:
69:66:26:f1:73:64:0d:13:55:38:dc:b6:85:51:82:26:04:56:
20:78:72:b4:c5:5b:0c:78:fa:b0:a8:10:8a:63:cf:34:e7:b4:
7d:07:32:38:13:c1:d6:9e:43:d6:ae:84:36:c9:99:38:fb:10:
97:47:20:09:cd:2c:4a:43:c2:cc:92:bf:f4:82:4a:c6:c3:ea:
21:12:3c:0a:1e:6a:db:6c:c7:8e:69:f8:4c:23:c6:9c:b9:d9:
14:8f:96:7f:47:7a:6d:18:13:bf:50:36:4b:b5:88:33:89:19:
19:6e:e1:69:7b:c0:d5:b3:0f:dd:5e:2a:5e:2e:2b:c8:a2:73:
53:a3:52:90:dc:cd:b3:ee:d7:1b:6c:09:d8:c4:c8:9a:d8:a2:
20:e8:21:ca:97:26:c5:77:56:68:94:cc:93:f2:85:1d:1a:dc:
bf:a7:43:97:89:14:d4:14:89:0f:91:74:e5:e8:f5:09:74:7d:
91:e6:b0:c7:4a:d4:99:51:6d:16:a6:62:4b:18:64:e6:e5:9e:
36:13:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:47 2024 by rpki-client on console-fra.rpki-client.org