Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: I3D8n9onGbe04524nMxWMsArG+mPqGaVtkYGKOckyvo=
Subject key identifier: F7:03:A5:82:D5:65:AD:5B:D8:DB:94:08:B1:EE:9C:8C:3C:F2:28:92
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019237A5AA17A217E08AF934F7B134256DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 09F4
Signing time: Sat 28 Sep 2024 08:00:56 +0000
Manifest this update: Sat 28 Sep 2024 08:00:56 +0000
Manifest next update: Sun 29 Sep 2024 08:00:56 +0000
Files and hashes: 1: bBSZmapKkbi5zgNkzdMfFpxC0aI.roa (hash: wEFuTiXDYL5yUdg9cuNZPoO4C7Y0cpCrQn+KG3/Ynzg=)
2: ku7wf4Gmu2_tu-G52zfpd-xBSb4.roa (hash: msP6bTVrDA+2JWUxWLTV/jQJkGd0ekCIZD+LgtvJZh4=)
3: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: lgKIwWOFsvJHI97qgQursa1k/VMcc3I/pizlysfkS2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:a5:aa:17:a2:17:e0:8a:f9:34:f7:b1:34:25:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Sep 28 08:00:56 2024 GMT
Not After : Sep 29 08:00:56 2024 GMT
Subject: CN=f703a582d565ad5bd8db9408b1ee9c8c3cf22892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:30:bb:d4:f1:c9:bf:ca:d1:37:89:e3:42:
56:0e:db:b8:3c:b6:1e:13:56:a6:af:24:40:48:5e:
66:d3:e5:bd:08:5b:e6:ef:02:df:85:18:a3:fd:21:
59:ac:bf:9c:5e:43:3f:32:40:2b:80:13:84:2a:6d:
ab:2e:a5:e0:ab:be:6b:41:1c:7a:a6:ea:d8:3c:d1:
5d:29:da:9f:17:cb:9d:6d:67:db:9d:4e:f1:d2:b0:
a5:8f:53:c7:16:64:95:f3:a7:34:bc:ee:b9:75:8e:
2d:df:be:20:c9:55:7b:75:5e:3b:1b:be:bb:ee:c5:
e2:aa:34:4d:4d:96:36:ae:b4:ed:c1:b3:18:4d:8c:
b9:9e:7a:fc:4a:38:22:b1:f2:f2:a4:9c:f5:05:52:
aa:15:76:ac:3e:c9:a5:2a:89:c1:49:58:f2:e4:ab:
cd:65:8f:82:bb:27:4f:8d:a3:d8:9e:33:a1:5d:58:
2f:68:76:cd:e4:11:88:e8:5a:48:f5:1b:c0:86:72:
59:a4:cd:d2:6c:e9:96:7d:d5:48:94:04:7e:21:b6:
04:a1:65:96:c2:06:f6:fa:e8:fd:bf:c7:a2:47:eb:
4a:f8:61:79:ec:06:0e:1d:2e:ea:3d:41:40:e9:4c:
3f:bf:40:c5:15:5a:90:e0:8f:7b:3a:fc:46:32:b3:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:A5:82:D5:65:AD:5B:D8:DB:94:08:B1:EE:9C:8C:3C:F2:28:92
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:38:3e:2f:4c:3b:45:c3:0b:b6:81:5d:e0:de:95:5b:f3:90:
0e:62:d8:b1:92:ca:e1:da:ab:f7:d8:48:bf:6b:dd:d7:61:56:
a6:ba:10:b6:cf:6f:7f:8f:e3:e1:ea:55:1c:d5:c7:4c:16:6e:
74:6a:3d:ec:d4:49:d5:6f:19:92:9a:11:84:c7:5a:55:3e:43:
cf:61:ae:d4:1e:c5:1c:63:4d:9c:20:c9:6c:ad:de:4f:a3:fd:
f1:b5:b0:65:65:eb:66:21:d1:29:67:2a:93:41:51:e0:90:34:
67:48:2b:ec:aa:94:1f:bf:65:37:d2:68:08:cc:c4:be:5a:80:
0c:f0:9a:18:db:ba:67:6d:12:ec:dd:ba:de:a3:e0:5b:a7:2c:
16:3e:f9:b6:24:c4:a3:5c:3c:a2:27:7c:5b:e0:5e:f0:65:e6:
4f:a0:a7:72:a7:48:d6:5f:93:5a:0c:6f:17:c8:1d:b0:55:b3:
14:fa:d7:14:cf:0f:dc:5d:00:56:dd:91:62:49:aa:4e:86:23:
85:57:f3:37:95:e7:ff:54:d5:87:06:db:f5:78:9d:f4:62:77:
35:f4:24:f8:2b:67:50:42:93:d2:14:4c:a9:f4:57:c2:25:9c:
bf:86:5e:71:9e:85:08:11:30:77:4a:7f:66:55:3d:10:d5:27:
9e:c0:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:34:29 2024 by rpki-client on console-ams.rpki-client.org