Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: B4YdA50cRnXcExcD1/mHCIPPU4Z8KLjCUsGDxyHNw9o=
Subject key identifier: 0A:F6:FC:4B:6F:72:71:E9:74:41:56:D2:FE:A7:11:7E:3D:57:B7:20
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019355760CF61B15491F3B76C8D384D2F027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 138D
Signing time: Fri 22 Nov 2024 20:00:19 +0000
Manifest this update: Fri 22 Nov 2024 20:00:19 +0000
Manifest next update: Sat 23 Nov 2024 20:00:19 +0000
Files and hashes: 1: 0xwLNVwWjhjeovq_nf0f-DeXIls.roa (hash: fq4Nfj++baJRi6TQevoaMtbSB0RLEB1CAzpBILbzHPs=)
2: 1-T8kvsYGsYyD8fgpGoZannzlcVQ.roa (hash: i77giDSm40ppwqYCNjjHhoJuUBLUcS2k0Q266pc9k+8=)
3: A7REsbGE1NrMU-LSCZyMtKSjm8k.roa (hash: zhPZaUdsFTS8eVrwvXcM5kTM6RctaNrzWltEyiRGpbQ=)
4: GW_QRM5OGf2inycSXy9TO3iFrgY.roa (hash: yEjbZqH/07/KoaQ/Z56+9T2NCR6sHbA1ZaITzOcqqeA=)
5: OM2PftldEmRx3oq0WnpX1_KJbyU.roa (hash: 1xVBDU5wFM+BK2O09aPn9SHecodxlEgCxOYL6yruc7w=)
6: Zdb3i__ReBUE17G6UPOUrNOZrVU.roa (hash: aDq7l1//cBdS7k4hio2Xn3FgaWhJW9A3osBnLx6Wg8E=)
7: ZjuqeMXqpY9TYFMSZBYR01WUsMM.roa (hash: eh/DJ4my2sHmuUeV0U2Gw2+0UGUwShXOstQosHPh6cY=)
8: c0dCRAWkwFRmaZnF7pMKsvkULIE.roa (hash: ZTQjk/pvLzkqs0zMP+J58UoKurFE5ljtPairfDbL/D4=)
9: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: kK3S2mINtES0sQ3ZGypUZcCtP5ypjoUrNWJYtGhd4vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:0c:f6:1b:15:49:1f:3b:76:c8:d3:84:d2:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Nov 22 20:00:19 2024 GMT
Not After : Nov 23 20:00:19 2024 GMT
Subject: CN=0af6fc4b6f7271e9744156d2fea7117e3d57b720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d5:ef:c7:85:f3:ec:b2:f0:e0:66:05:2f:76:
ec:08:45:d2:9e:7a:da:65:0c:89:6e:85:d5:55:86:
7f:57:8b:5b:0a:9e:6e:7d:75:22:f2:d9:f5:1a:53:
ed:ce:4b:a8:86:1a:8d:1f:79:6f:8d:01:e6:5e:15:
0c:69:21:d1:cb:ef:d9:be:02:28:cd:3f:fb:00:63:
26:6d:36:ab:04:6f:e5:f3:e2:53:f7:96:f6:92:69:
db:cd:64:0f:b8:19:14:a8:d9:86:ff:bf:9b:4f:59:
c5:29:44:51:b8:d8:98:56:26:f4:bc:c0:45:5f:49:
cf:85:c8:b3:f2:51:ab:d4:d5:47:02:b9:79:39:00:
b7:a4:1e:bb:5d:2f:ac:22:95:ed:3f:1a:ca:be:c0:
10:73:88:b0:20:31:01:08:d6:fe:c1:24:54:bb:45:
d6:42:74:9d:17:cb:14:c9:7d:02:ec:dd:78:61:37:
a8:f5:ca:fa:fa:82:f0:ef:b9:45:dc:fd:d5:6c:f2:
c0:a6:1b:a6:9b:e6:27:27:c1:20:48:58:8d:6d:e7:
41:8c:b9:6b:22:0d:b3:99:3e:fd:1e:ed:e7:92:97:
0f:a5:51:a3:09:c1:a4:33:c9:e3:4b:2c:9a:d1:ba:
9c:bf:70:ea:56:84:fe:3d:c0:c8:38:3b:04:41:bc:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F6:FC:4B:6F:72:71:E9:74:41:56:D2:FE:A7:11:7E:3D:57:B7:20
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8c:aa:2f:31:fe:38:b6:b8:b3:9f:2c:a4:d3:34:c7:7e:29:
9d:d9:57:5e:49:4b:da:3c:ac:3c:f3:89:fc:68:bf:6d:01:e6:
3b:66:a0:b8:f1:aa:49:e5:7b:0d:59:38:0c:0e:d0:9f:d1:b5:
a3:a5:85:58:14:81:d5:e2:53:e6:01:76:a7:1e:36:29:d2:2a:
56:14:0e:ab:71:da:c1:f8:b1:96:1c:5b:2d:64:32:cf:9f:6e:
b3:e9:00:6a:26:1e:bd:19:ae:a3:88:20:ce:b0:3e:5b:d0:a9:
47:e7:2f:ab:db:94:20:ed:a5:7f:f2:cf:17:85:64:35:ae:d3:
0a:6b:85:81:d0:2b:94:4e:19:91:99:3e:3f:57:0f:66:00:50:
25:51:6d:2a:51:0b:36:39:57:cf:58:0b:aa:1e:29:16:0f:cf:
af:b4:d2:60:e2:1a:d7:0d:22:ee:1c:04:61:aa:0f:02:f2:d3:
a3:fe:5d:22:88:d1:67:d4:41:7d:24:9d:e2:b7:34:02:5c:2d:
d0:33:d0:f0:78:55:b5:e1:66:3f:31:1b:18:51:bb:2a:e2:78:
ed:d4:bc:76:cb:1d:57:5c:b2:32:89:0d:4d:fa:ba:48:55:6f:
3b:10:f8:ce:07:c1:d2:c3:3b:74:76:f5:de:d8:ff:7d:28:bb:
a2:f3:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:10:04 2024 by rpki-client on console-ams.rpki-client.org