Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 6kLTBLtTDfQP9xxPwILIMexhh1oSXAaGkJ/FigdLR8M=
Subject key identifier: E7:3D:FF:22:69:9D:FC:5E:EF:17:37:05:89:D4:F6:0F:00:C9:AB:15
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019358797954EAFCBFF79F1CF36B02EA13C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 11C0
Signing time: Sat 23 Nov 2024 10:02:56 +0000
Manifest this update: Sat 23 Nov 2024 10:02:56 +0000
Manifest next update: Sun 24 Nov 2024 10:02:56 +0000
Files and hashes: 1: 1-fOtLCEip_cQmd0fYXtz6ZS5KC4.roa (hash: fII76EazRJLSng2UTYKDT3nLIKk/Wv/XQiwGHdZ74mc=)
2: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: nNfGttLnT0ifDKalSH+wh41F+SSduj7AppR9cfChlXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:79:54:ea:fc:bf:f7:9f:1c:f3:6b:02:ea:13:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Nov 23 10:02:56 2024 GMT
Not After : Nov 24 10:02:56 2024 GMT
Subject: CN=e73dff22699dfc5eef17370589d4f60f00c9ab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:46:5d:b1:7a:fc:55:ab:03:4e:7e:cb:7a:
ea:be:d7:3f:07:ec:95:74:d3:a6:3b:34:15:fc:f8:
e2:38:5f:c0:fc:68:77:a2:1d:28:b4:c9:f8:12:38:
af:92:37:75:1a:ab:16:d6:bf:18:45:8e:67:7b:9e:
cb:95:62:8e:03:63:b3:5a:1d:aa:cb:aa:9a:f2:53:
83:4e:f9:fa:a2:8c:7a:e2:31:47:79:da:31:68:68:
2e:8b:d2:f6:ef:bf:86:44:cf:94:ea:af:a2:e3:07:
cd:77:62:bb:77:e6:52:30:24:c0:61:34:df:7b:e0:
b3:90:47:39:e6:ca:73:71:4e:26:1e:ef:84:30:64:
ad:42:f3:49:e3:0e:37:b8:c5:71:4a:d9:82:03:d3:
5d:68:4b:ac:96:1f:7b:e3:77:26:b2:86:5a:43:88:
03:9b:8e:79:27:af:5c:e3:35:a9:d6:11:62:00:d8:
70:47:7f:eb:4b:50:0a:78:f1:73:b8:2a:09:41:7b:
33:f0:ca:28:41:05:50:f7:11:0f:76:05:8e:40:97:
9d:67:23:b3:dc:34:24:65:13:50:39:77:4c:66:4b:
82:3d:24:c4:74:5c:28:ba:0e:1d:1a:b6:fd:7f:72:
f3:9e:63:54:2e:4b:b8:fa:f5:3c:c0:c1:26:c2:e5:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:FF:22:69:9D:FC:5E:EF:17:37:05:89:D4:F6:0F:00:C9:AB:15
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:f9:b2:a5:8a:2a:1b:00:c8:d4:0d:75:47:5d:ce:00:b5:
35:f8:5e:dc:af:30:da:a3:b5:06:ec:d1:99:4f:fb:25:5d:62:
57:6e:cc:81:5b:e6:2e:e3:ff:17:b3:ee:b1:d3:09:89:f0:15:
72:2d:11:37:d2:76:c0:d4:c3:fb:56:78:9f:b2:b3:6d:95:51:
d8:5b:d0:c9:9e:60:e4:72:45:f0:09:be:7a:6b:36:60:4a:e2:
bc:88:63:f8:d6:c6:45:b2:65:ee:8d:05:2e:78:f0:2a:59:77:
7a:c1:e6:cc:07:c5:a4:6f:c7:52:8f:74:9a:77:ad:ab:6b:c3:
53:16:1f:17:93:73:ee:c6:52:ec:13:d2:35:5f:77:c6:ae:65:
89:9a:0c:70:78:18:84:98:c8:c5:5f:d5:1d:86:1b:98:9e:08:
24:fb:a5:ed:a2:4e:14:9a:09:9f:3d:70:54:dd:bf:bf:96:a3:
9b:af:1d:b2:af:c8:26:ec:5a:d2:66:47:d4:58:20:cd:3d:c4:
a9:36:13:ad:d9:51:8b:7b:7e:8f:be:73:8d:22:b2:31:b9:e9:
c7:97:15:a5:72:e0:25:5e:1a:bb:e4:71:72:17:81:c4:6a:97:
68:6b:e0:06:e4:38:45:4a:d2:04:98:48:77:19:b9:2e:86:01:
76:8d:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:20 2024 by rpki-client on console-fra.rpki-client.org