Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: yHFzMzOH54gXIa9TkESH6iuNDuPc1qMcx6cNZuOCkKM=
Subject key identifier: 95:12:68:38:A2:4F:3C:39:F2:3B:BA:D7:AE:E8:28:0F:02:A0:1D:5F
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01935508A6AD552B616C708156C47365C210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1377
Signing time: Fri 22 Nov 2024 18:00:50 +0000
Manifest this update: Fri 22 Nov 2024 18:00:50 +0000
Manifest next update: Sat 23 Nov 2024 18:00:50 +0000
Files and hashes: 1: 2TxiObfcwEc_LzzaDiLNSLyYIV4.roa (hash: j78XmRYtee2Gl/xK3f6Mvbk/RXfCx/oHEVkBy2Z+df8=)
2: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: JQuM0d532DhijLoKBrCSZgBUVXndmshyafdz3ipWypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:a6:ad:55:2b:61:6c:70:81:56:c4:73:65:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Nov 22 18:00:50 2024 GMT
Not After : Nov 23 18:00:50 2024 GMT
Subject: CN=95126838a24f3c39f23bbad7aee8280f02a01d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:95:3c:e9:ee:e6:33:22:c2:89:c3:66:98:
86:ba:9d:67:72:99:d0:e2:c7:1f:3b:04:b6:78:2c:
eb:f0:28:db:22:0b:89:48:98:27:a0:85:02:b3:c9:
dc:24:e0:7a:f9:62:e7:60:2a:17:95:55:6e:82:70:
6b:5e:a2:8b:98:cd:9c:e4:9a:2e:cb:61:21:63:be:
96:95:45:be:17:f5:aa:b3:06:57:ae:58:a2:a4:0e:
91:14:56:79:9d:3f:01:4b:f7:c0:8d:c0:8b:33:86:
e5:3b:ab:ac:42:21:be:77:97:2a:92:d0:88:09:d0:
12:82:38:08:29:6b:f4:ef:ff:b3:a7:7e:cf:04:2c:
82:dd:35:4e:21:ea:14:44:72:d0:a5:ec:fe:cb:77:
43:70:c3:ec:57:da:40:01:33:51:38:39:8f:af:c9:
46:f6:52:86:9f:03:67:b6:ae:6c:d2:c5:bd:2b:14:
00:97:9c:72:90:2e:cb:cd:f8:09:6a:8a:39:59:51:
ab:a0:f9:3f:6a:74:82:be:82:2e:77:23:a1:f3:43:
bd:e1:8b:fb:b9:5f:c6:d5:7f:8a:1e:d6:66:8f:31:
2a:d5:3d:10:dd:68:6f:48:60:bd:d9:74:a8:59:5b:
ba:fe:a8:3d:0b:67:eb:a6:c9:a2:a4:03:37:c6:50:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:68:38:A2:4F:3C:39:F2:3B:BA:D7:AE:E8:28:0F:02:A0:1D:5F
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:e6:8b:2b:c2:83:85:5a:3b:cf:0f:7b:60:94:0b:a0:73:
77:22:07:19:c4:97:f4:26:7d:58:14:42:ef:2e:54:2f:8a:1c:
05:b0:c7:b7:99:5d:9c:27:24:43:ae:22:66:29:1a:54:dc:a1:
72:a0:d8:85:ba:be:22:3f:99:6e:64:9e:a5:65:f4:b2:b6:00:
de:17:3c:64:4a:2d:ba:20:fe:80:25:27:62:7d:23:f5:81:32:
4a:10:fe:b5:c3:6c:18:cb:d7:d9:c5:ff:84:ee:b9:ab:57:48:
75:02:b0:b3:67:23:9b:09:60:a8:1b:e7:2f:d0:19:f0:b8:97:
3c:1b:2f:cd:fe:63:e1:6d:22:70:c3:7f:62:87:d9:d0:d8:ba:
24:cb:85:82:b0:e0:67:92:99:85:86:f3:f8:47:b2:cd:7d:64:
38:8a:61:e5:07:ef:b0:1f:70:c3:b6:64:57:56:4a:6c:54:17:
b4:13:f0:46:f1:92:f1:78:3f:3b:af:0d:da:62:34:51:b7:2c:
b0:78:9f:f4:98:36:25:07:ea:15:ad:e8:ab:8a:92:c0:db:57:
e0:ca:07:a6:fa:ee:7e:f2:6c:af:64:c2:2a:c5:1f:0e:d3:8a:
bc:ee:46:20:4c:38:1e:32:17:a1:7d:fe:da:e8:01:52:57:a8:
c6:d1:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:12 2024 by rpki-client on console-fra.rpki-client.org