Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: Fwhjkd1N7O1kv7va780DU+DRJ1gRgbH5/d/lSu01BnI=
Subject key identifier: 3F:E7:A4:85:A1:FF:18:41:A6:91:E7:18:DD:CF:B5:B7:E5:C5:2B:43
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019352ACC95E43D609EFCC738DD43C4FC2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 076A
Signing time: Fri 22 Nov 2024 07:01:15 +0000
Manifest this update: Fri 22 Nov 2024 07:01:15 +0000
Manifest next update: Sat 23 Nov 2024 07:01:15 +0000
Files and hashes: 1: G6hGn1qk1ItnjNIquy4HWgnL7y4.roa (hash: rOHAC4fDEDaQGu3xrtEtDEpG+87aWXtJu9ZCmIMQwss=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: kBjzmeAwAPKISKnYkL9UIbRXBkL7ajvvT6Fu6s5Cilo=)
3: jIlTwE71smXv0Zl6i_YjH7HvOnI.roa (hash: diV46BZgHxMNyJav5O4V78J28uGB9y28AXUDBKBy5Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:c9:5e:43:d6:09:ef:cc:73:8d:d4:3c:4f:c2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Nov 22 07:01:15 2024 GMT
Not After : Nov 23 07:01:15 2024 GMT
Subject: CN=3fe7a485a1ff1841a691e718ddcfb5b7e5c52b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:17:6e:e4:d6:f8:cc:1a:11:23:15:b3:59:
f8:be:8b:fa:06:10:16:9a:89:1d:b4:00:6e:21:4a:
a9:c1:72:53:a3:5f:9a:8f:2d:e2:1a:2b:12:cc:71:
3a:76:f7:4b:71:80:b3:a8:e0:2b:15:0d:85:c4:b6:
c2:15:0b:0f:c7:c5:61:b7:cb:d2:0f:22:ad:ec:9d:
f5:60:1a:01:c9:a4:d4:58:bc:12:be:d6:87:42:f3:
98:fc:0c:53:e0:cc:e0:dd:a7:7c:da:83:3b:ce:6b:
5b:0a:e5:c0:c3:c7:f0:58:4f:f9:81:78:05:fc:ba:
08:bf:09:79:89:6b:8f:51:76:eb:f5:c1:2e:ba:33:
ce:0c:3e:66:fd:b4:bc:1f:39:72:c4:af:69:89:c0:
44:27:76:af:49:9d:03:bf:c4:b1:70:15:01:91:a6:
bc:3d:a2:71:a3:7c:c2:cb:3c:b2:f7:12:68:c9:93:
27:c8:f5:72:8b:35:9d:44:f2:6a:37:76:c4:1f:40:
49:2d:0a:70:eb:ec:84:d3:bc:2e:93:25:10:8a:74:
7e:47:81:07:aa:fd:f3:ed:aa:38:95:ac:bd:7e:43:
93:d1:05:c1:d1:df:b9:9d:f2:ca:42:62:18:5f:9e:
54:ca:9a:39:51:69:56:9a:20:71:1c:82:83:f8:57:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:A4:85:A1:FF:18:41:A6:91:E7:18:DD:CF:B5:B7:E5:C5:2B:43
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:5d:aa:9b:8c:ca:4a:78:2e:d9:cf:de:26:47:34:f0:86:
dd:03:15:35:7b:2b:63:cc:80:90:6c:e7:83:fd:6d:48:34:fe:
50:ec:5b:b9:0f:ce:91:e8:98:96:d6:74:02:2e:88:6e:a2:88:
8f:07:7e:d7:33:a8:ed:0d:19:e2:b9:15:f4:db:4d:4e:05:df:
71:94:6b:14:d5:59:f8:67:5e:37:1d:c9:00:3a:78:8e:65:01:
fd:73:97:9a:c6:f5:34:f0:9c:91:ae:08:b5:7f:8c:82:4c:ee:
9b:79:73:9a:98:8c:bd:a7:05:d3:4b:c4:d4:77:cc:c8:00:27:
51:36:aa:01:b6:46:43:77:49:3a:01:00:27:2b:eb:ff:e0:8c:
aa:a6:6e:ad:97:1d:fc:25:0e:19:b2:8e:66:28:65:ea:5a:3e:
8e:85:b5:6c:6c:2f:ae:2d:47:e5:65:1e:92:6e:72:2c:01:be:
32:35:54:d4:41:b7:d0:42:d1:7a:7e:52:29:d8:12:86:2d:b1:
71:e5:1d:69:3b:01:78:ae:63:b6:00:ee:80:0c:ad:af:3e:0e:
18:b6:58:fe:d8:2c:1d:0f:28:b7:a3:90:d6:de:8f:30:78:20:
37:1a:f3:c9:5d:ae:bc:a2:a3:0c:b0:fe:a1:bf:5b:56:59:ad:
1c:fe:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:06 2024 by rpki-client on console-fra.rpki-client.org