Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: hTvxKLA6ZrL6ADuRAQNB+W4x0U7hL0yaC7NxBEHR4mk=
Subject key identifier: 5F:05:11:3B:D5:91:B7:05:D8:D1:49:ED:7E:09:44:9E:D5:8C:47:3E
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019044F8CC3381597F1BD2C5E5BEEC827409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 0D7F
Signing time: Sun 23 Jun 2024 12:01:14 +0000
Manifest this update: Sun 23 Jun 2024 12:01:14 +0000
Manifest next update: Mon 24 Jun 2024 12:01:14 +0000
Files and hashes: 1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: H3zJAiLjNO2SNeui2vxGyd2uSt6xs6U8FrtOW6+/Fg8=)
2: RXHk3atO2mRr6pCxiwqqgXlyQgU.roa (hash: KKaz7TnoNn3C+WRSPhhEKu2mI0zNIxrn8yLpEZ0waWg=)
3: qDhIND7RidKRCSjSjL0rFVBO-qk.roa (hash: vC2+1i58Yb7/wTnjk82ttLyMmP6KcnAObkoHEASApng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:cc:33:81:59:7f:1b:d2:c5:e5:be:ec:82:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jun 23 12:01:14 2024 GMT
Not After : Jun 24 12:01:14 2024 GMT
Subject: CN=5f05113bd591b705d8d149ed7e09449ed58c473e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:b1:b5:96:a8:90:20:86:1c:1b:51:aa:29:
4c:65:35:a6:17:9b:76:9b:c7:75:3f:53:31:df:ef:
eb:62:a8:4f:c1:68:2e:97:88:dc:1b:1e:3d:47:74:
a6:17:87:77:58:fe:f3:67:01:83:65:7c:91:28:4c:
9d:01:79:dc:de:ec:1f:ce:53:2e:9e:46:a6:77:52:
7f:c2:2c:80:53:cd:56:bd:3f:c8:49:aa:26:96:37:
f6:e6:cd:82:cb:e4:b1:27:9c:55:c9:ca:c1:40:05:
40:f9:bd:4e:50:06:69:e9:63:f3:c3:4e:25:3b:9a:
f3:cc:75:47:02:cd:83:81:9e:43:b0:32:63:70:15:
01:61:a9:55:99:8d:ed:5b:44:2f:06:23:8b:3a:0d:
85:12:97:48:37:fc:57:55:92:b5:c3:dc:2c:b8:ba:
af:f3:3f:67:fa:a6:d5:b7:07:bd:7e:2c:56:bf:cf:
6c:d0:af:3a:ea:84:39:34:89:b5:96:8d:6f:c8:75:
84:56:41:33:1c:d8:3f:5c:2a:18:1d:49:8d:75:b4:
dd:bb:9a:6a:f6:66:4f:c3:dc:91:3a:2f:6f:b7:e9:
65:67:4e:69:7b:78:a5:25:5d:c9:ff:d3:4b:78:03:
f8:27:0d:dc:65:25:a7:15:a1:f2:9e:f6:93:bb:99:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:11:3B:D5:91:B7:05:D8:D1:49:ED:7E:09:44:9E:D5:8C:47:3E
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:99:cf:a7:d0:b3:60:1d:59:65:31:b5:4d:db:e0:2f:54:d0:
a0:9c:a0:43:88:eb:ec:a2:67:c8:fa:ea:c6:23:86:d1:32:40:
28:d0:b8:a6:78:c9:ca:f3:19:d9:9c:53:58:3b:91:a2:f0:21:
74:dd:fc:63:98:b2:2c:19:66:c4:04:47:2f:80:c7:d0:cd:95:
7a:fd:ea:ad:37:ab:d9:b8:13:12:04:93:e9:c0:72:28:05:e5:
b3:f3:64:4f:c2:67:94:11:e8:e8:4d:f4:bd:46:17:ea:12:14:
99:5c:d8:d7:ab:5c:5b:0a:c1:e1:c4:69:29:1a:e4:3f:11:aa:
66:af:9b:c0:5f:5d:5b:d7:db:fd:e0:53:2f:4d:0b:66:62:a2:
db:35:a8:d2:65:e8:d4:cf:d6:63:5e:f1:63:99:7f:9b:4f:d4:
92:4d:57:4d:d0:2d:49:39:dd:d7:96:8c:53:2b:11:a0:b7:99:
26:01:cd:72:94:06:e5:12:e3:ec:00:ee:ee:15:8f:8a:55:a6:
b9:9f:3e:fe:6a:f5:bd:5d:cf:ee:82:b6:98:ef:4f:ff:fc:30:
25:af:a2:fd:33:e8:19:9a:61:b1:f5:53:e7:5b:47:3c:fa:8a:
c3:7b:6f:a6:36:a2:e8:9f:ab:5f:a4:02:f9:e2:4f:6d:db:91:
21:a6:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:41:37 2024 by rpki-client on console-ams.rpki-client.org