Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: jSzyMRGI34H/vLjhHuYYBQspq4pt9q5M5FfHo6nwfmE=
Subject key identifier: 32:DA:64:D9:A1:A7:B5:DF:87:21:3A:41:6C:FE:CC:8A:FE:DC:C0:39
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 018FB2A1A1A119C3CA5375BA69D422A32C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 0F5D
Signing time: Sun 26 May 2024 02:01:27 +0000
Manifest this update: Sun 26 May 2024 02:01:27 +0000
Manifest next update: Mon 27 May 2024 02:01:27 +0000
Files and hashes: 1: BLw3i85CYVgfTcuTkHzCAZRoSAE.roa (hash: HArbQPMd6Wu1WucM7piKjydLgEATkrrXiYMsnAxeDNg=)
2: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: G741a/uV8Q02ato0NjTmDJnkz5t1b6zpe0b2yvP06mY=)
3: xiNSRry8fF1cfUKFv9oQktvR80k.roa (hash: CnHr4ILhnsQcv61EGzt2CxWn2FskciYuUF6w128C5KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b2:a1:a1:a1:19:c3:ca:53:75:ba:69:d4:22:a3:2c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: May 26 02:01:27 2024 GMT
Not After : May 27 02:01:27 2024 GMT
Subject: CN=32da64d9a1a7b5df87213a416cfecc8afedcc039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:49:01:5e:41:5c:2d:84:c8:57:0c:f8:11:
e7:3c:73:02:6e:ca:90:5f:fb:21:4c:a4:ae:a4:cf:
3b:4d:f8:78:dc:bf:9a:c9:e4:28:4e:d1:ed:8b:20:
c1:90:8f:8e:89:14:38:e8:9a:02:bc:06:9b:9c:22:
af:d9:bc:4b:55:a4:89:68:c4:6f:ff:01:4f:12:1b:
bb:0d:cc:53:83:ed:34:71:23:33:b4:d5:17:39:d1:
c3:29:a3:2a:b7:70:f3:90:5b:74:e6:b4:e0:f8:80:
e8:0d:9b:b4:e2:0c:95:ae:86:23:46:eb:ca:96:d0:
5d:05:aa:3d:27:5d:ff:89:7a:3a:f6:b8:4a:d4:f4:
72:db:e9:d7:c2:c6:1d:c2:14:32:5e:47:52:6c:64:
d5:77:bd:65:b4:4d:90:0c:f2:2c:c1:9d:09:24:5e:
e3:36:47:b6:1f:22:8f:1c:1e:1c:ef:7e:88:8b:77:
f2:08:3e:79:26:b6:d5:27:d6:d0:1b:86:d7:8d:83:
66:bb:29:d1:3c:bb:1a:08:66:29:d9:3b:66:bd:dc:
d4:92:6f:b8:7d:3b:9a:0f:5c:d4:94:57:11:ee:a8:
c4:ef:6c:98:38:5e:b5:c4:8e:6d:1c:7a:a4:9d:31:
4d:20:b2:8d:da:36:f6:3e:fa:6e:70:66:34:3e:e1:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:64:D9:A1:A7:B5:DF:87:21:3A:41:6C:FE:CC:8A:FE:DC:C0:39
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:cf:ca:96:50:b0:4e:bb:13:29:ff:18:22:ac:81:c0:36:
c8:b9:8c:4b:7b:f5:f3:64:b2:61:d3:78:60:a6:d3:72:da:87:
4f:7f:96:27:67:2e:fb:95:a1:58:e6:1a:da:d7:36:53:87:63:
2d:8c:0c:d2:bf:40:9d:27:f6:53:6e:db:c9:5f:ca:9c:37:ea:
36:66:f0:bd:2a:c0:42:56:30:36:f7:52:88:59:66:cf:32:c8:
a1:45:a4:cf:9c:74:52:ca:a3:7c:d1:a7:9c:f8:4c:17:c9:d3:
9b:01:5c:74:45:8a:fd:ae:53:9c:25:b2:e2:c7:f8:9d:b2:41:
57:3c:c3:91:e6:5d:d0:32:67:66:be:9f:52:e2:64:b4:22:b1:
db:e6:23:a7:99:60:cb:fa:ee:67:31:79:e0:45:45:97:f5:f4:
ca:32:a2:35:f8:c7:21:68:fd:2d:ba:fd:10:7c:5b:6c:d3:99:
fd:09:14:7c:05:6b:de:d4:d3:80:fe:10:07:8c:e0:e0:50:1b:
22:71:d7:4a:ba:b1:16:bf:7a:06:3d:98:0a:d4:a1:98:2a:62:
59:21:27:a1:26:d5:86:59:6a:02:af:6a:85:7b:7a:9c:9d:a0:
62:75:ee:ca:a1:c2:59:91:b9:02:ca:73:de:81:77:7c:ce:ac:
a1:0f:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:33:42 2024 by rpki-client on console-ams.rpki-client.org