Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: NSwoDlaI4mVTKDaVis1gudKWkoclQ8CNf7uf+60Q7XY=
Subject key identifier: 0A:C4:E7:3E:79:66:8C:AA:F4:6A:A7:B4:7A:4C:3B:2B:35:76:5F:5A
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0190448AA32752665A97A4CFE93E3B18BAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 0FE3
Signing time: Sun 23 Jun 2024 10:00:54 +0000
Manifest this update: Sun 23 Jun 2024 10:00:54 +0000
Manifest next update: Mon 24 Jun 2024 10:00:54 +0000
Files and hashes: 1: GC-wNDRG1czwLkH1fXMmecer_dI.roa (hash: /21euQHaLclE42xfY7ptCmj1qtOrp9GqAzQ1CWQ6r5U=)
2: Jrge4SA3eXv1WTTR8HXR0KL0SPQ.roa (hash: e+7QxUyJQWuzE4Q2M95Sn1cUvQR3gTp0yxhIUJ/4PGM=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: PpOKzm6326BPtX+1WcG/Udeg/QC8BQqWGDiAj1E4/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:a3:27:52:66:5a:97:a4:cf:e9:3e:3b:18:ba:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 23 10:00:54 2024 GMT
Not After : Jun 24 10:00:54 2024 GMT
Subject: CN=0ac4e73e79668caaf46aa7b47a4c3b2b35765f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:6b:aa:40:32:5b:01:54:ec:52:2d:ef:ae:
c3:e4:f7:6a:bd:8e:0f:30:7b:6b:8d:94:56:23:34:
16:99:a0:3d:74:28:62:7a:36:0d:20:0e:2f:1b:5a:
cb:91:5f:3c:89:f4:6a:75:a6:a2:13:79:27:a7:b1:
c4:70:3e:4c:ac:85:76:5c:99:c7:85:cd:19:1a:48:
4e:f2:26:ad:a5:29:23:bf:67:76:a4:46:62:f0:97:
22:14:8a:c6:b9:bd:bf:ad:be:10:dc:1f:cb:73:53:
99:23:b9:04:9b:b7:d1:bb:cb:5a:52:84:b8:0e:21:
9b:45:ce:a3:4a:ea:c2:d2:42:4d:05:31:c3:43:ab:
5c:33:fb:75:75:4d:a1:29:26:21:25:dc:a2:d6:d0:
c5:2f:60:e7:81:ca:d2:b8:f7:4c:08:54:f2:42:24:
6e:8a:cd:8f:92:6c:95:ff:3b:50:f4:73:28:55:c3:
18:1f:6f:d8:84:4d:fe:5c:d3:84:7c:01:fa:09:0c:
3e:bf:e1:de:d1:33:e0:70:ac:1c:a2:fd:eb:a9:29:
fc:28:31:3c:c8:69:d6:8d:3c:e8:b8:13:0d:2d:20:
59:c0:be:e6:65:66:94:2e:e8:bf:bf:77:1d:2d:30:
2d:ab:bf:d1:f4:49:91:f7:db:71:c8:c4:94:63:e4:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:E7:3E:79:66:8C:AA:F4:6A:A7:B4:7A:4C:3B:2B:35:76:5F:5A
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:a3:e1:be:e1:56:b1:a7:fe:c6:48:05:1e:74:af:df:2d:
c8:34:29:d7:f1:5c:29:e7:85:d0:ff:f6:1d:da:cf:df:b3:af:
f9:dc:c0:77:7f:a0:56:8d:8b:35:17:36:e4:6f:57:97:dc:3b:
a6:c3:2a:fd:3a:e0:1d:c1:70:3c:87:a7:6b:02:92:19:f6:15:
7b:6f:a7:2c:16:f0:f0:c8:7c:a1:67:3f:3c:e2:11:7f:7c:e1:
12:55:b8:0d:13:92:b5:b5:13:5a:66:6a:2a:20:bf:ce:2b:61:
32:2b:0d:b1:9f:33:08:ed:17:9d:6b:d3:89:e0:62:cf:2e:50:
20:7a:4b:4d:c3:87:0d:16:22:3b:2c:3e:3c:cf:1f:19:3c:1a:
b2:09:6f:8d:9e:f3:8d:65:99:33:4d:6f:73:93:5b:37:72:c9:
4a:f4:92:83:99:a0:6d:07:38:e0:11:9c:34:fc:d0:a3:98:8e:
13:bf:a7:12:be:9c:c9:e4:96:05:87:89:0b:4d:0a:a1:0b:92:
4b:25:67:4e:d9:80:fc:56:fa:28:ce:2e:d5:45:3a:d9:17:e0:
c9:67:18:a5:6a:ba:52:ec:57:6d:fa:dd:fb:ae:c7:76:b3:ff:
0f:50:7b:e8:28:12:64:71:50:59:e4:d8:05:95:7f:69:89:b9:
d1:1d:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:08 2024 by rpki-client on console-ams.rpki-client.org