Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: 3QaJx4MTMqGMEkuU3OfFJkc9zSADjbUXyFThtJO5UCI=
Subject key identifier: B0:D7:7E:67:F3:C0:94:AC:CF:B6:1E:AD:0A:F5:9C:CB:78:D3:71:02
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 01935688D418A778BEEDFC71DE935FB297B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 0F7B
Signing time: Sat 23 Nov 2024 01:00:27 +0000
Manifest this update: Sat 23 Nov 2024 01:00:27 +0000
Manifest next update: Sun 24 Nov 2024 01:00:27 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: +/5EFo+L1jweJPu/vCmdbyuZZ/K5KOnFT9nmYb+fdUA=)
2: 7wrCmeS-57-lNYKppRhr6qw4nMg.roa (hash: +AcFfbZ2Z2xjMkDZgr7xkFysGftC964jW1GcEgcD9fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:d4:18:a7:78:be:ed:fc:71:de:93:5f:b2:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Nov 23 01:00:27 2024 GMT
Not After : Nov 24 01:00:27 2024 GMT
Subject: CN=b0d77e67f3c094accfb61ead0af59ccb78d37102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:9a:fc:69:88:80:cf:aa:1d:04:17:64:96:
d2:4f:fc:5e:c3:04:52:3e:87:61:3f:17:79:e1:04:
8c:4a:17:da:d0:44:e0:8f:5c:fe:05:03:87:c9:b3:
f0:24:f5:6c:74:8f:ad:a6:71:ac:31:81:53:93:fd:
c0:c5:e6:19:de:15:b5:13:64:82:81:c8:10:34:b5:
bc:f5:32:6e:30:17:5b:b9:66:5f:e3:2a:a0:70:f5:
95:f3:9d:43:95:76:6e:b6:c2:f9:fd:b9:e5:30:28:
9a:68:f4:c3:a4:d7:85:75:5a:47:5e:7f:2d:e9:c2:
8a:8c:1d:ea:4d:32:1a:02:a7:64:1a:dc:ec:36:7b:
ae:96:10:be:9b:38:6f:66:51:5a:ff:c5:47:25:09:
fb:5e:10:d8:9e:19:f3:4a:55:83:05:6e:2f:ca:f3:
9f:44:81:e6:1e:60:bc:10:24:8f:27:b1:83:b4:12:
92:fe:66:41:79:d1:3e:1c:1b:e0:cb:92:b0:11:db:
fe:13:1f:83:12:c7:0d:9c:4a:67:3a:62:86:87:0e:
00:09:a5:fa:75:b2:01:1e:29:ac:bf:0e:33:25:6d:
b2:be:0f:35:31:66:30:fb:0f:2c:6a:e4:d8:e5:a8:
63:ba:93:39:e2:bd:fa:86:ed:fc:a1:7d:18:66:0c:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:7E:67:F3:C0:94:AC:CF:B6:1E:AD:0A:F5:9C:CB:78:D3:71:02
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:76:74:fa:86:29:7e:d0:b7:0b:b5:dd:4d:9e:40:93:61:ce:
20:b4:8e:8c:1a:3c:83:ac:98:a6:4f:06:f8:28:7f:50:bf:f8:
17:a1:c4:e7:71:cb:8d:e5:3b:59:bd:75:08:09:cf:f2:b7:03:
31:23:bf:af:72:97:db:be:ee:0c:00:21:77:41:b3:a2:95:bb:
85:ca:58:b7:87:a9:df:60:32:50:6c:87:35:69:51:b9:3e:a9:
02:89:ea:47:ff:e0:68:82:09:78:4b:0a:72:10:2a:60:77:4e:
ac:75:1f:5b:1e:66:ad:c0:a6:ed:30:eb:34:32:b3:5a:be:a2:
9e:1a:91:e7:62:50:3e:79:e7:5a:e0:8c:29:38:20:37:27:b3:
6f:3d:27:27:e5:4d:8a:03:b8:54:0d:03:4f:61:02:32:97:60:
7c:53:81:59:6d:1f:f5:25:5b:a2:f3:f7:e7:c2:a0:68:9d:fa:
70:50:82:1a:f9:6b:2a:bb:ba:28:21:fa:d0:ad:18:cd:bb:0c:
7f:bf:1e:b6:1b:d5:b7:94:3b:30:82:68:59:92:59:79:47:3c:
f0:c4:3d:ab:ec:b9:5a:5d:44:2d:e4:42:4d:09:05:25:33:17:
64:85:8e:ce:94:d0:81:12:20:56:21:4a:e3:1d:7a:2c:8e:3d:
a0:59:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:12 2024 by rpki-client on console-ams.rpki-client.org