Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: 4yeIT5JMBNBThgt/MKHHrpexL3tAXH6ZlHiyGHXaAbw=
Subject key identifier: 9F:B2:52:57:C7:1B:5B:22:DD:C7:AC:11:86:00:19:8C:9E:A0:A5:53
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0193568A528B21C87726AD2E13279DE625EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:02:05 +0000
Manifest this update: Sat 23 Nov 2024 01:02:05 +0000
Manifest next update: Sun 24 Nov 2024 01:02:05 +0000
Files and hashes: 1: 6S8g1_5jqS_TU4H2Ino-MUn-R2A.roa (hash: 9HBzOhJvgomkKH617igMzzGzUfqv/pRoFRu9EumAHu4=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: lKEp1mJ7tN+4fMMgKWIGiU4eNKj9t0GAdp8IJs/c+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:52:8b:21:c8:77:26:ad:2e:13:27:9d:e6:25:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Nov 23 01:02:05 2024 GMT
Not After : Nov 24 01:02:05 2024 GMT
Subject: CN=9fb25257c71b5b22ddc7ac118600198c9ea0a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:61:60:8d:67:a2:c6:80:77:6b:6a:93:d6:
d9:db:63:32:72:4f:0c:82:61:ba:ad:ce:15:97:63:
34:8e:08:58:80:30:05:ee:e7:a6:5c:a1:85:88:90:
2c:fd:b8:7f:eb:e4:db:16:14:65:33:f3:50:c2:de:
39:47:a1:b5:a7:59:7c:43:0d:13:60:50:e3:d1:2f:
94:55:7f:8f:ce:e3:8b:36:fc:1e:a7:8b:65:3b:9d:
6b:52:60:12:58:83:99:c6:fe:65:86:a5:1d:8e:69:
35:35:5f:75:0c:d2:2f:13:38:10:ff:0e:e9:4a:59:
a7:e3:0c:bd:46:7e:a6:33:3c:23:e2:2d:56:9a:e2:
f9:c9:2b:e2:a1:d3:3f:ed:1f:b4:7c:2b:a5:f7:0f:
fb:65:d4:e7:20:dc:36:ae:e8:26:18:a3:10:f5:d0:
13:70:32:e0:37:4c:bd:e6:5b:e3:dd:39:16:7a:39:
80:70:68:eb:99:79:94:e4:ce:3b:9d:3e:84:04:03:
64:18:d0:68:7d:61:7a:ba:08:31:08:b7:92:f0:9c:
60:a7:96:6a:a3:71:33:f0:3a:1c:de:dc:01:2b:2a:
1b:8a:29:f0:16:90:02:0b:1d:7b:48:ef:fb:39:30:
70:32:80:0c:89:e8:f2:91:fe:2e:ca:6c:f5:a3:a4:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:52:57:C7:1B:5B:22:DD:C7:AC:11:86:00:19:8C:9E:A0:A5:53
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:8b:b8:04:2d:30:c7:27:fa:df:b3:06:1d:31:f8:9a:66:
0b:21:fe:2a:24:d9:6f:3a:8c:f2:d3:9a:cd:2a:8a:c1:d9:ea:
0a:e3:73:31:6d:bc:88:25:17:26:ec:8a:b8:14:a5:99:f2:18:
fa:17:91:9c:a8:37:ed:42:1c:5c:b5:36:ec:3a:5e:83:7d:0b:
55:60:4e:a1:fb:32:17:32:28:e2:c4:ac:23:9b:1a:1e:2e:ba:
32:0e:f4:80:93:cb:f8:31:b3:20:44:8a:a5:d6:6a:24:48:78:
f6:fa:41:12:69:04:b1:06:84:15:67:f4:25:52:ee:a4:31:1b:
0f:27:0d:83:1f:bf:72:35:85:76:ca:e6:5b:e5:91:63:93:d3:
fb:e8:b0:42:3c:3c:b2:53:7f:e4:6f:17:60:6a:cd:99:d1:6e:
00:1c:dd:e8:36:2e:0c:87:83:fa:d7:d2:52:0e:dc:b5:98:97:
e9:22:d2:bb:31:e0:c1:7d:37:a2:ea:44:2a:55:76:11:de:58:
d7:83:8c:7a:79:bd:18:1c:a3:04:b5:20:03:4c:26:13:aa:73:
8f:48:c1:81:e4:36:e3:41:a3:cb:8a:99:5e:e4:10:91:c2:d7:
ac:ed:a5:93:e0:92:3f:ef:c5:86:c7:f7:40:6b:ae:c3:f7:65:
f7:62:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:35 2024 by rpki-client on console-fra.rpki-client.org