Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: gnvuJ9VGLTiDjYzExN5vxacufNAW8YZsBB4AAvGGzKc=
Subject key identifier: D8:44:BC:2F:DA:7E:D8:D2:4B:94:61:50:F9:78:79:4A:DD:62:6E:4B
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01901D0F4DA5DE235D6739C0B4FF757BD82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 18:01:00 +0000
Manifest this update: Sat 15 Jun 2024 18:01:00 +0000
Manifest next update: Sun 16 Jun 2024 18:01:00 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: ld7SFUVMTXzZuqRECbt0YF+5+tLRupY4Xak+lXHjZoY=)
2: vH670xrkwvVR2VssahTVwwmvkRk.roa (hash: 5BmtrUEcCIJ5XLm5vkceoHd9TwhztDPwd9yN95dlnmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:4d:a5:de:23:5d:67:39:c0:b4:ff:75:7b:d8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jun 15 18:01:00 2024 GMT
Not After : Jun 16 18:01:00 2024 GMT
Subject: CN=d844bc2fda7ed8d24b946150f978794add626e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:43:05:2a:d2:c8:54:f0:ae:b2:96:f5:57:
17:44:39:53:b4:73:2d:51:38:61:2d:43:36:2b:14:
99:36:84:92:f5:dd:8d:8a:ea:8c:54:a1:14:3f:61:
bb:9e:48:be:d5:23:3e:de:3f:c3:55:76:f7:a5:ca:
35:74:70:63:c5:f2:ea:4b:80:2c:19:5a:d6:eb:9b:
7e:ad:f6:0b:58:af:66:5f:47:a9:d6:65:93:96:92:
88:3a:3d:b4:cf:be:4d:10:80:57:e2:2e:7c:6c:ef:
38:bc:a9:fc:47:95:e8:86:fd:10:71:7c:b9:d7:cc:
6d:da:1d:a7:df:d5:79:d8:d8:03:c9:8f:2c:61:18:
b4:85:9b:ba:ba:3e:16:84:af:e3:71:69:ce:27:ce:
56:d2:2c:51:d8:b1:06:0b:81:89:d1:66:df:55:cf:
8b:7d:dc:b7:fd:61:b7:eb:7f:61:92:21:7f:72:3d:
6b:b3:f2:5c:94:9c:a3:02:fb:a4:fb:46:ab:26:49:
65:48:5d:79:5a:bf:cd:5f:1c:3e:13:be:c2:8b:f8:
75:01:75:c2:8b:aa:62:a9:71:0f:6d:88:db:2f:85:
a5:7c:eb:49:9e:eb:08:06:33:23:38:fe:f6:9f:14:
f4:ad:d3:12:29:d0:b3:57:56:d2:13:bf:32:65:ef:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:BC:2F:DA:7E:D8:D2:4B:94:61:50:F9:78:79:4A:DD:62:6E:4B
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:77:ff:13:3e:6d:6a:37:d2:5c:f6:19:64:f7:3c:68:eb:
dc:48:cf:00:ea:f8:7d:e6:80:de:8a:1f:71:33:e2:9d:08:87:
56:9c:e4:61:15:f9:12:8e:34:e8:7b:b4:ca:fc:db:ec:5a:87:
92:81:b7:78:9f:4c:e5:4f:f8:b2:ec:69:0a:6a:c5:42:33:84:
d7:c0:10:1c:bc:a2:62:0d:3f:91:3d:d9:5a:05:15:b6:81:79:
09:2c:f4:ba:eb:bf:29:b9:c9:24:80:cb:c9:14:88:b7:be:89:
2d:e6:71:34:80:d1:6e:24:d1:02:78:8b:e6:85:e5:d9:1c:ee:
7a:57:ba:12:cf:93:87:b9:dc:61:ed:47:f6:db:2e:5b:3c:86:
af:cb:20:30:f9:93:a7:d6:70:03:80:7c:16:f4:58:ae:2e:6a:
8c:37:14:d9:8a:0c:31:d2:6a:c6:87:a7:43:8d:7b:e9:ac:30:
87:be:6f:13:86:3f:80:b1:62:20:69:09:5d:b4:59:79:c7:9a:
1c:c2:24:c3:5d:2d:9a:44:ec:2e:53:d0:d4:42:3f:be:78:a4:
61:8b:68:74:43:7c:65:8f:c0:6f:ba:b8:17:e1:70:22:16:c1:
2a:7d:b0:8c:9f:0c:0d:85:00:4e:a9:31:3e:16:f3:a3:e7:48:
37:b5:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:24 2024 by rpki-client on console-fra.rpki-client.org