Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: bbMyRPuBb79vjLSyest+QjyGnh1Ks32SHw7cfWZ8v/Y=
Subject key identifier: 18:D4:FF:8C:D6:D0:C5:29:B3:62:BD:23:06:C3:31:E0:70:9A:7E:81
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 01901FA22A5684794C82BC8EB79F18B821C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 0ECC
Signing time: Sun 16 Jun 2024 06:00:39 +0000
Manifest this update: Sun 16 Jun 2024 06:00:39 +0000
Manifest next update: Mon 17 Jun 2024 06:00:39 +0000
Files and hashes: 1: ODhi5E2qw0vpUrSZxqC5wcC-apE.roa (hash: Hbje0p0SujQmLjGDSqJqCfV+tt+S43MZPp6I9HCRnBc=)
2: PXcHl394Lz2LuCoP9mPe8uXptVU.roa (hash: eMho7HriTNqrB6RBk1+Vl2ymF2pxG1eI9Bm2cPV08RE=)
3: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: PcONifcFNo2x2ZlJYmHwloxmSb0jh9m9WeRMa4Z6x88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:a2:2a:56:84:79:4c:82:bc:8e:b7:9f:18:b8:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jun 16 06:00:39 2024 GMT
Not After : Jun 17 06:00:39 2024 GMT
Subject: CN=18d4ff8cd6d0c529b362bd2306c331e0709a7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:83:9c:a8:b2:99:dc:34:e0:ec:cf:02:73:
18:87:40:50:42:e9:d9:af:74:7d:1d:f8:cd:bd:4d:
65:bf:40:d3:5b:bb:12:19:5c:36:1c:aa:ff:35:16:
1e:02:24:66:87:14:86:de:54:90:32:8e:55:8b:04:
7a:9b:b4:59:72:6e:20:40:02:c2:39:fb:b7:1e:17:
bb:cf:2e:d7:a5:54:4f:9b:17:50:ce:4a:39:cd:6b:
88:c7:c6:ce:90:d1:cf:41:55:29:ed:95:45:32:48:
54:6e:48:04:7f:9e:2a:a8:ff:0c:97:5b:02:50:a9:
f7:0d:69:fe:80:e2:0c:da:b6:d3:48:9b:b9:47:bb:
f0:d3:ba:ae:67:b6:7a:49:9b:8e:ee:b7:8a:ce:e2:
af:2d:17:2b:59:53:fd:f8:62:3f:ed:d5:9d:72:68:
9c:7d:5b:a0:b9:19:76:ac:95:e9:1b:91:09:88:98:
74:14:77:9b:ef:6f:f1:13:af:7c:f2:a1:83:5f:b7:
dd:f0:8d:3a:e0:9d:d2:f7:63:31:af:62:d4:c7:2a:
dd:a9:9c:51:e1:28:3f:3f:3c:1b:d9:57:76:96:ee:
dd:6f:cc:77:ae:cc:bf:5e:61:0e:67:f4:da:ba:78:
99:ca:a4:5a:d7:f3:ec:63:2d:bc:ae:b3:f3:3e:cc:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:FF:8C:D6:D0:C5:29:B3:62:BD:23:06:C3:31:E0:70:9A:7E:81
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:3b:ca:d0:5c:cf:55:22:ad:f0:71:73:72:66:1e:c8:98:
4b:76:a6:41:91:4d:18:0d:25:98:84:0f:f4:36:69:94:30:1c:
9a:89:2f:17:ff:81:6f:8d:38:d8:39:1d:08:fc:09:63:c6:44:
51:25:db:a2:35:7d:94:bf:0b:6b:12:f8:47:5e:d3:6f:70:3a:
d8:9f:ae:3a:0f:74:d5:14:cb:cb:de:7b:a0:cb:55:9d:80:0f:
9a:9f:3c:8c:29:68:56:be:5f:aa:cf:4d:b7:26:8e:6b:06:f8:
14:60:80:3d:2b:47:30:35:35:4e:bf:e6:97:f1:4f:8e:fb:a9:
c5:21:a4:8d:ad:f1:b5:07:c7:0b:44:21:97:40:64:1a:63:0f:
9e:af:48:5e:7a:16:5c:48:a3:0d:b1:74:61:d7:ea:b9:24:04:
39:8a:73:b3:55:ff:69:70:84:0a:02:5e:1c:5d:a2:a4:dd:3e:
20:0f:de:9d:51:f6:8e:d2:1d:3c:5c:15:6b:12:19:04:b7:2f:
ff:9b:2b:3a:d9:96:af:6c:6a:58:7b:49:bd:3e:a2:81:68:0e:
f1:0c:83:9e:c7:9a:ad:22:87:a4:95:42:6e:31:fd:c1:66:21:
8a:21:a9:43:a1:4b:3d:35:9f:13:b2:0d:73:c4:8a:ce:2c:b2:
dd:d9:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:46:14 2024 by rpki-client on console-fra.rpki-client.org