Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: V3UBpVIP2UISVkYsKbLXDNCG1lpo5UqHxNX6sy0xv7Y=
Subject key identifier: 67:0E:26:F7:E9:0B:33:AF:16:CE:DF:2F:65:8A:75:74:C1:CA:84:4D
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019357D241405DA2153D15002E5862342D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 0F41
Signing time: Sat 23 Nov 2024 07:00:17 +0000
Manifest this update: Sat 23 Nov 2024 07:00:17 +0000
Manifest next update: Sun 24 Nov 2024 07:00:17 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: OFSMb9XsLOtcsme+lTgjj2dtOr804VPdoZoLdmmQX90=)
2: dRPJFB6dX8a01lg4bPnIrF2WaG0.roa (hash: mWq4lRcSTwKq4ptZfoA4sd8YD6DFQ9FpICADiXnu7BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:41:40:5d:a2:15:3d:15:00:2e:58:62:34:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Nov 23 07:00:17 2024 GMT
Not After : Nov 24 07:00:17 2024 GMT
Subject: CN=670e26f7e90b33af16cedf2f658a7574c1ca844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:c1:c8:47:b5:e8:c8:82:43:c8:18:09:9b:
27:58:0c:08:76:33:f0:45:3c:96:f5:d3:1c:55:80:
fc:36:76:04:e4:50:02:88:3a:09:4d:6b:70:f0:6e:
71:10:99:72:5b:f2:d3:d8:d1:29:f9:eb:97:6f:03:
65:25:69:6c:d9:9b:0a:9e:83:98:39:27:55:f1:dd:
6b:ce:b4:3b:0c:b6:af:f4:97:7f:f9:e0:56:7b:e9:
b3:d8:dd:95:40:68:7a:7d:5b:fa:58:04:b8:e0:ec:
96:64:52:c2:56:ac:65:7a:6a:cb:e1:47:9f:aa:80:
37:e1:d9:bd:85:d4:7a:a8:d9:42:c4:db:ec:a8:bb:
79:91:b0:ac:5a:0c:f5:81:82:26:a0:92:58:7a:97:
36:40:cb:b4:84:0c:d5:49:84:cb:3c:19:65:c1:9b:
24:2d:1c:99:57:ee:6b:a3:01:9b:78:4d:94:f8:c2:
66:3f:39:ca:be:c2:3b:c7:8d:c4:1c:0e:e5:df:ae:
01:bf:71:08:3c:e4:f1:0c:6f:3f:fa:fe:67:8e:14:
6f:aa:1d:7b:77:51:e6:ef:27:87:6e:0e:c0:2f:f0:
e4:f8:63:1c:d7:43:fb:a1:fb:69:1c:97:8b:ef:ae:
d9:28:65:23:92:c4:8a:64:2e:49:84:a2:a0:6e:9c:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:26:F7:E9:0B:33:AF:16:CE:DF:2F:65:8A:75:74:C1:CA:84:4D
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3b:1c:e8:48:33:1b:08:dd:11:47:48:37:b4:fd:6c:9b:7b:
a4:3a:17:47:32:c5:11:c9:e9:8f:fa:ff:25:b9:31:5a:5c:0d:
cd:eb:d6:0e:31:aa:8f:da:a4:5c:be:4c:00:d4:91:55:d3:2e:
e1:c5:af:bb:dc:37:6f:66:70:be:dc:fd:9d:f0:b4:99:bb:6b:
40:12:82:98:66:1f:59:1a:2a:6e:22:d1:29:72:88:b9:28:13:
4b:34:24:f5:52:b4:0f:38:25:92:ad:cb:a4:0b:d3:d5:d6:23:
ce:42:8a:c0:e9:87:bb:cf:00:df:b9:f4:f8:ca:27:88:4e:5c:
be:45:0d:ac:8f:d2:12:eb:3b:89:e4:be:07:4d:a3:f6:26:23:
3a:76:45:f6:2c:a9:aa:ef:d8:c3:6b:76:96:b7:b9:99:9e:ff:
05:5a:71:d7:dd:40:9d:85:c9:7f:78:bf:e0:29:34:e5:26:4a:
db:75:49:53:62:33:f7:9c:42:0c:55:1e:e2:47:19:d3:8c:f4:
d3:fc:85:ce:0b:06:0a:a8:44:30:ff:59:0c:05:33:e4:ee:15:
a6:10:1e:09:e5:1d:27:ee:a6:b8:5e:81:47:e1:40:b0:c2:a7:
05:2e:d5:76:a9:ca:96:27:be:3f:59:83:a0:87:d8:8b:8c:1b:
53:3e:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:07 2024 by rpki-client on console-ams.rpki-client.org