Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: kg1YdOxYgrLze1uVz4J3+3LNwKm/7mEu4j4qTJKFt1k=
Subject key identifier: 19:4C:B6:F4:CE:48:F0:65:E9:2F:F4:2A:C0:AB:71:56:0E:BD:16:D8
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01901D4676A4A4621F7FD17339FF6BB846AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0AE3
Signing time: Sat 15 Jun 2024 19:01:15 +0000
Manifest this update: Sat 15 Jun 2024 19:01:15 +0000
Manifest next update: Sun 16 Jun 2024 19:01:15 +0000
Files and hashes: 1: 9YuupHmmpdpZRIMFT3I7baZGqNE.roa (hash: lsZW98Tmevy02BiHWfFsy0RXV2xTXQsK+1mzAjecLm0=)
2: EGVu-mbXBqUf60_nuaxm1gnX_S4.roa (hash: mzFRixQOCAXy131KudzurUtyd4oH0u9R9Fm/6j7PB2E=)
3: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: 9d28VBxF0He4Lqai90MN/H6+Fo6tHChnjsoR5TBtEn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:76:a4:a4:62:1f:7f:d1:73:39:ff:6b:b8:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jun 15 19:01:15 2024 GMT
Not After : Jun 16 19:01:15 2024 GMT
Subject: CN=194cb6f4ce48f065e92ff42ac0ab71560ebd16d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:34:36:ee:35:a0:08:97:74:78:4c:67:d2:
09:f1:1b:29:9a:3a:68:36:ae:1b:35:86:5d:4d:d2:
c0:1d:b4:1d:ae:54:30:be:59:c1:de:59:49:56:51:
43:55:a4:f4:84:01:fb:e2:ae:98:d3:03:2f:00:48:
05:c6:81:c8:a1:39:6c:96:f9:04:e3:27:64:00:42:
77:39:0e:d0:90:71:53:e2:c2:d5:f7:b4:87:2c:94:
bf:5b:ee:c8:83:36:a6:57:ee:fd:46:e3:87:70:73:
99:71:2a:06:33:f7:ec:36:61:2f:55:2d:04:10:51:
b3:f5:6d:a7:05:0d:1e:07:5b:4b:32:ce:e7:0b:89:
02:96:c1:94:ea:3a:88:2e:e9:ca:e5:5a:3c:1b:4e:
72:76:fc:37:89:85:01:dc:75:08:09:86:44:b3:bb:
1e:63:52:f0:97:33:92:fd:de:53:8f:3a:99:c4:e3:
12:73:8a:8e:c9:27:b6:7e:b0:db:47:13:13:46:1e:
f9:a1:5c:c7:50:7a:6a:36:03:6a:38:4b:46:f2:dd:
12:15:a5:a4:79:37:68:6a:c6:aa:18:f4:b5:ca:78:
56:b1:65:43:10:6d:8c:87:3e:16:a3:7c:1f:89:ee:
af:95:ae:0c:1c:03:4c:ff:11:10:88:9d:dd:7f:d7:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4C:B6:F4:CE:48:F0:65:E9:2F:F4:2A:C0:AB:71:56:0E:BD:16:D8
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f3:8e:91:29:34:5c:76:9a:d2:27:05:f3:87:22:ce:48:96:
78:c7:c1:65:a5:58:52:1d:aa:6e:d9:cb:fb:a4:31:82:44:92:
99:da:df:e9:d7:e7:a4:77:f2:b4:2e:54:fb:33:b6:0f:df:c3:
7d:ec:b1:80:1e:7a:ac:83:73:d8:10:e0:0e:7b:b6:ce:7a:c3:
e1:7f:bc:2e:27:2d:2e:1b:8f:f4:56:a9:00:09:1d:3e:1c:a7:
9b:09:1f:a1:61:28:a9:2d:b8:38:41:c6:32:a4:2b:1f:86:71:
8b:37:3c:e1:06:df:eb:31:35:51:80:b8:11:bc:d6:9f:b9:d8:
6d:35:5c:49:c2:90:fe:20:7d:59:9c:bf:df:72:69:8d:d3:bc:
a0:04:ae:e3:46:da:a4:18:20:4d:a9:14:7c:dd:77:08:8e:4e:
9d:07:6f:f5:1c:0c:94:d0:91:db:53:04:22:16:37:37:61:b2:
b8:54:5f:39:c3:e4:2a:b5:f1:01:55:a9:cb:f3:ff:06:d7:d8:
db:21:d7:8b:41:78:c1:7d:33:0f:be:36:38:2c:e6:6e:da:e3:
e2:fe:ca:ce:68:db:4d:b3:77:ef:90:6a:1d:a7:e7:90:1e:9e:
9a:84:21:fc:95:82:6e:fc:17:60:24:90:1a:59:70:ba:92:b0:
d2:d0:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:07:11 2024 by rpki-client on console-fra.rpki-client.org