Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier: eblfGIx70Nqs19ICNzG0LCCmbTGUugs5QCNftEuHiFo=
Subject key identifier: DF:A7:21:7A:B0:3D:E3:22:24:C4:57:48:CF:35:FE:83:8D:03:C6:1E
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 018F9571EA9A27241DE7A196546D28174C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number: 0514
Signing time: Mon 20 May 2024 10:00:21 +0000
Manifest this update: Mon 20 May 2024 10:00:21 +0000
Manifest next update: Tue 21 May 2024 10:00:21 +0000
Files and hashes: 1: 1pxzmjTeLtdT1DEcUEKTz3TWHP0.roa (hash: H2BPUFgv+h+wkAUfvoDlaOqYh9bQuuDcsPvqNeqN7nc=)
2: 5km8UhyfqAMu2cumwri3FqygDh8.roa (hash: Gp0Q/780StawRvCkSrR9I8q8S2BRDDaa9K4A4drCmzc=)
3: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: hqTSETDREbFAr8sOJUg+XlYDVUdP5vFPSyylkXTecIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:71:ea:9a:27:24:1d:e7:a1:96:54:6d:28:17:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: May 20 10:00:21 2024 GMT
Not After : May 21 10:00:21 2024 GMT
Subject: CN=dfa7217ab03de32224c45748cf35fe838d03c61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:2a:cd:28:83:81:8a:63:05:02:d3:e8:33:
93:96:eb:8b:55:7b:3c:c9:65:c9:03:cd:3a:9b:b2:
f6:5c:83:54:8b:7f:22:d0:17:f5:cc:bb:3d:d3:88:
44:ae:f3:f6:15:29:6a:f1:db:33:87:28:d7:de:55:
0f:38:81:9d:36:8a:0d:56:73:ae:e7:12:3f:99:07:
c2:3f:cd:e9:f1:c5:6a:81:5a:75:4d:80:e1:58:06:
4c:17:fc:08:f3:80:dd:42:02:a4:24:9d:a2:b3:bc:
55:11:2a:de:14:be:5c:f4:d4:da:54:a1:2a:b8:3b:
a8:f3:f7:d9:b0:33:57:ee:f1:87:34:51:0c:81:7e:
de:1f:1d:2a:ee:27:b3:c6:a6:c8:cc:c6:14:c7:1c:
bf:3c:ea:18:1b:1a:72:b5:d0:bb:15:e9:75:02:88:
0a:db:b7:1d:37:fd:64:e8:22:a0:44:e3:d9:d2:17:
c4:93:e1:92:bf:e3:50:f9:d1:d2:13:e2:d9:0f:fb:
9c:01:8b:71:4f:ef:71:07:24:a2:41:25:3f:ad:69:
f3:b2:b4:30:a6:58:77:23:5b:70:b2:c7:80:ea:15:
b9:90:05:3a:6f:a0:81:ba:90:a6:d1:c4:2a:36:f9:
42:87:87:f0:e7:90:65:cf:5c:c9:1f:e2:fa:aa:94:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:21:7A:B0:3D:E3:22:24:C4:57:48:CF:35:FE:83:8D:03:C6:1E
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:ee:9d:ed:23:a9:23:02:51:13:44:93:2c:76:49:f0:16:
76:06:73:f2:a9:3d:e8:4c:f9:0c:23:da:7f:0b:47:44:a3:12:
82:00:b6:62:33:de:9e:2c:b3:84:6e:79:18:d7:43:b8:67:ce:
7b:89:02:44:e1:4f:2b:70:ab:4e:e8:fe:0a:86:bb:a1:2f:15:
35:35:6a:27:3f:2e:eb:ce:35:fd:bc:6f:a9:36:66:d2:f6:53:
55:23:97:ea:5a:89:0d:c3:02:2e:4d:a6:a7:d7:d3:0c:55:c6:
26:05:02:95:59:af:9a:61:41:50:be:05:6d:fc:6c:ab:8e:c9:
9f:e5:ba:75:bd:5e:dd:a1:02:bc:7b:58:e2:fd:9b:95:74:0e:
6f:01:de:44:98:40:e9:b2:43:5d:83:7a:0d:14:7e:f1:1a:b6:
2b:30:b1:0c:7a:a5:ca:5d:b0:f4:70:5d:f9:32:77:29:56:16:
bb:dc:af:5a:13:c6:d1:3d:88:bf:60:e4:1d:2d:7c:53:2b:97:
8f:fe:26:1a:5d:c6:f1:a9:f2:99:02:3b:3f:15:38:c1:b1:f0:
82:5a:ce:dc:92:16:df:5d:a2:6d:4f:70:4a:a9:c3:a1:b3:44:
1d:f3:b3:41:cc:56:03:76:7e:83:0f:27:6e:5b:73:47:20:c0:
76:17:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:25:32 2024 by rpki-client on console-fra.rpki-client.org