Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: Jdn/UuN9PnGHNsG4GQ9mzRsufkcVi9nC/VMJlIPSzLw=
Subject key identifier: A4:24:E9:DF:35:78:68:11:65:EC:EB:79:D8:1C:F4:36:B4:72:75:A2
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 018FA0655F28AEB491828625864924FE8A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0B05
Signing time: Wed 22 May 2024 13:02:29 +0000
Manifest this update: Wed 22 May 2024 13:02:29 +0000
Manifest next update: Thu 23 May 2024 13:02:29 +0000
Files and hashes: 1: 1-iyBsl5rE9lpSKrl-SUfwo5NPhY.roa (hash: IXdsm4JyaQFJ2cJkNYafRmC3NYOOT1+6IGlaC79dMRk=)
2: 9xGmlnKe5FEYgC5wgJvBgSw24ng.roa (hash: mxmiZL2ldmNK4HRRQzQZGCgy3cigbZ9VKu8sz97PuAs=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: DUYtSJ4xljK5V0CzWC4SWClHQNy1/9itTEx3EXYUNrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:65:5f:28:ae:b4:91:82:86:25:86:49:24:fe:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: May 22 13:02:29 2024 GMT
Not After : May 23 13:02:29 2024 GMT
Subject: CN=a424e9df3578681165eceb79d81cf436b47275a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:ce:f8:7e:fb:d7:70:c9:b3:55:9c:67:a2:
90:d8:19:42:e2:7f:66:0e:44:fe:69:7a:70:34:54:
84:d7:ee:77:8e:e8:8c:f6:df:13:ef:81:29:15:9a:
72:a5:53:05:17:3c:69:5c:76:d3:a3:63:96:45:be:
c4:c2:ba:c0:c3:25:d6:11:f5:b2:6c:a0:44:74:79:
d3:af:90:b9:22:52:56:de:eb:c2:b4:6a:60:f8:46:
0c:47:39:99:b9:4b:f2:bf:d8:75:f5:5a:e1:6d:3e:
dd:5f:48:87:bb:bc:ac:fa:cf:26:34:09:9f:a5:78:
5e:61:9c:9a:bc:9b:a5:03:bb:5c:71:d8:62:0a:52:
6b:df:f6:3f:b7:ba:bd:fc:d9:92:9a:b9:f3:c3:7c:
2c:7a:a0:ab:d0:1d:b0:c8:ea:42:43:76:5e:0a:c5:
f5:e9:00:6d:0e:2a:de:bf:26:f7:f3:7f:ce:84:15:
35:62:be:94:40:fe:01:25:61:18:89:3a:06:ee:46:
9b:e3:ca:ea:01:c0:05:c1:fb:6b:00:eb:5c:0a:08:
41:73:ee:d0:1e:1f:75:58:d3:9d:78:eb:0f:48:51:
89:c8:d2:62:93:c7:b8:cb:6b:47:b6:1d:df:bf:92:
c2:29:de:a0:ab:be:fe:a2:63:09:75:b3:f1:fd:01:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:E9:DF:35:78:68:11:65:EC:EB:79:D8:1C:F4:36:B4:72:75:A2
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:4b:e8:2e:28:f4:bb:de:fb:5a:4a:2f:09:ef:11:d7:8c:
da:c9:0a:39:da:12:f8:a8:1d:2a:c3:66:0d:7e:9d:f1:0c:68:
1a:2f:6f:3e:7b:73:86:8c:da:c6:a5:0d:67:90:be:21:7e:60:
ba:f9:f2:32:ab:a6:c5:4e:47:2b:4a:72:ec:70:34:57:e2:aa:
2c:a9:bd:0b:d8:39:a5:35:51:e0:e0:55:d2:9c:ad:18:32:30:
d4:98:09:ac:00:49:fa:90:06:f0:17:d6:29:bc:b9:8c:96:45:
ed:18:17:e6:ec:2c:cf:cc:a7:49:74:92:bb:12:24:76:f8:eb:
0e:80:a7:3a:54:48:fd:c4:0b:9a:16:02:06:ce:d6:52:21:86:
0c:06:d7:29:9b:8e:d5:f2:8c:ad:dd:49:53:42:a2:00:e3:54:
9b:19:d9:a2:f3:61:12:1a:8d:e0:7c:49:7d:0d:d2:0f:80:0e:
5c:59:b5:fa:82:45:6b:b4:cf:72:13:f7:50:82:19:64:33:56:
cc:24:55:04:0b:ec:14:83:5d:48:f7:31:ca:97:a5:5c:e8:b8:
de:34:d6:e3:a8:60:3c:dc:f1:08:55:ff:b1:4d:10:6e:65:a5:
9d:83:67:c8:cd:ca:a3:83:3c:99:83:d9:de:60:b7:5a:68:85:
ef:1d:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 19:46:22 2024 by rpki-client on console-fra.rpki-client.org