Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: 6Z8Fkk+pZwVFeRiSi+JrHiLDcmyQlPAODt8fBqXOKAE=
Subject key identifier: 09:46:23:CC:84:16:C3:18:87:56:22:4F:72:9C:C2:D5:97:BD:EA:3E
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019355E43DFFC8B4620CA9F9747B64045537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1376
Signing time: Fri 22 Nov 2024 22:00:41 +0000
Manifest this update: Fri 22 Nov 2024 22:00:41 +0000
Manifest next update: Sat 23 Nov 2024 22:00:41 +0000
Files and hashes: 1: 7WR1etNULqqDS3QC1dhMpxpbYBA.roa (hash: 2kSJSpOSATOJE0N6/y9AewJ/9m/eG8wbe4po/lzJW/I=)
2: d-0MWdhC-xTWKyP25VCeFZSFjs4.roa (hash: VNHIq0Dyk5SMeisZYGQ6ZHxQbLq9wdmNTqz3Dd8AJOc=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: etkLLu21PbT4TEEEd26dGeFkRLZS3kMk/u7Wk+gH7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:3d:ff:c8:b4:62:0c:a9:f9:74:7b:64:04:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Nov 22 22:00:41 2024 GMT
Not After : Nov 23 22:00:41 2024 GMT
Subject: CN=094623cc8416c3188756224f729cc2d597bdea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:2f:f9:ae:fb:30:5b:d9:a5:16:2e:f6:e9:
9b:a6:fa:6a:e0:54:00:81:95:11:26:d8:d4:8e:6c:
ef:3a:5c:20:34:54:ca:77:8f:f8:28:5e:59:a7:61:
68:63:57:80:21:b6:2b:86:29:fa:cd:45:e7:f4:55:
60:9e:5f:69:35:e2:6b:bd:05:55:27:f9:a1:12:f3:
1a:6f:c9:05:a2:e5:c9:4a:04:43:35:17:a0:84:59:
46:6f:76:30:ca:b7:48:fe:44:25:75:81:78:b1:02:
cf:57:49:eb:f4:6d:d8:0a:e4:4d:07:94:f6:36:9a:
5c:7b:40:11:2b:9c:47:63:e4:70:88:ce:02:cc:2c:
2f:d8:3a:cf:e5:f2:8c:ff:af:33:67:8b:fa:9e:43:
0b:f9:c0:98:b9:2c:eb:78:87:e0:0d:c7:75:f1:99:
e7:24:ab:1d:26:41:8f:c7:2b:63:4d:98:4c:10:c2:
ed:3e:52:9f:51:7c:eb:48:b5:df:0b:4f:ac:02:45:
fd:ac:3e:60:58:37:83:4f:d4:b6:98:d5:aa:5d:95:
e5:95:2c:07:80:51:b1:36:a9:90:14:4a:ea:15:1a:
99:47:f2:59:1f:65:7c:0e:b2:ca:19:fc:9b:65:1b:
2a:2e:7f:5e:e2:9a:2c:d0:b0:e6:ce:f1:45:87:d9:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:23:CC:84:16:C3:18:87:56:22:4F:72:9C:C2:D5:97:BD:EA:3E
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e0:28:8c:d0:7b:a2:54:32:01:2e:c8:54:cd:cc:6e:f6:c4:
59:a9:1a:22:20:e9:db:a0:51:be:f7:e7:5d:66:4c:61:86:53:
68:52:06:de:be:69:67:07:17:62:b1:58:21:2a:8a:05:8b:c0:
4d:1b:09:c6:07:4a:c1:f3:45:99:e5:a2:72:53:37:55:d9:92:
29:5e:f7:6c:f8:ca:bc:0a:40:cf:c8:7e:38:a9:4a:f1:39:b4:
2d:1e:99:ad:1f:ac:f4:78:29:fa:47:80:cf:75:a5:54:70:45:
ca:69:7e:02:80:26:74:7a:1f:e3:4e:ba:c3:e3:8c:9b:e3:e7:
94:52:dd:bb:29:ed:e5:2e:d2:bf:3a:1c:4e:15:a5:39:4b:c6:
39:3a:a7:ee:f8:8b:2c:ea:f7:4e:7c:ea:47:77:dd:1a:2c:39:
9b:40:df:ae:de:63:6d:d2:8a:be:eb:a3:29:ac:bc:2d:1f:d9:
c6:4e:b2:94:45:7a:ea:01:7a:d6:1b:10:d7:f2:3a:18:4b:a3:
2e:4c:b7:6c:cf:5d:fc:44:03:ce:e1:e1:2e:53:ad:2e:0d:6b:
4f:30:66:c0:59:2a:3f:a5:1e:4e:87:a6:d0:8e:02:8b:70:4c:
d1:c5:00:e7:a8:90:b3:c4:30:80:21:68:cc:71:84:67:7e:70:
f5:54:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:55:59 2024 by rpki-client on console-ams.rpki-client.org