Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: cvrXEL7nkxVrypeub3vOFYx55a/NBlrlRc6LNsReG9I=
Subject key identifier: 41:9A:D1:BB:C7:E1:6F:BA:16:59:15:42:62:C2:A0:23:CE:D8:C7:1B
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 018F9872CE6D7E3FF6310FAF903A446E0C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1184
Signing time: Tue 21 May 2024 00:00:11 +0000
Manifest this update: Tue 21 May 2024 00:00:11 +0000
Manifest next update: Wed 22 May 2024 00:00:11 +0000
Files and hashes: 1: dj5MlBDiurldoA-E2VPIwpjtCQk.roa (hash: VolCjw+0P1kpP2rtaoNR8oU6ZUTbIKpbd7ewCxkZQNI=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: XETwALuQFQOsIpOPMprnYs51W2La3AQ9K1YSWAtIp9g=)
3: vKxtgXNEWl3HfAsosrkeKIGsi24.roa (hash: N1XLSdK6QlfIW/kg6yzMjy7EcDXODsx5+qRMfeDlJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:72:ce:6d:7e:3f:f6:31:0f:af:90:3a:44:6e:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: May 21 00:00:11 2024 GMT
Not After : May 22 00:00:11 2024 GMT
Subject: CN=419ad1bbc7e16fba1659154262c2a023ced8c71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:8f:70:81:71:68:3c:58:a9:96:14:d0:61:
08:eb:e8:50:c3:52:2d:8c:52:b1:98:d7:86:20:53:
9c:80:24:21:77:eb:1e:99:36:40:8e:1a:18:cd:41:
78:9c:be:9f:cc:e9:9b:78:e7:0e:81:a3:5a:8e:9e:
1b:f8:e1:ed:e9:61:ee:4c:05:1c:da:1a:1f:af:b2:
12:b1:9d:29:d6:37:9e:eb:ea:6d:6b:d0:ba:17:ed:
ab:8e:d0:91:ff:54:f5:3f:8d:ae:25:e5:57:01:39:
f2:a2:ec:2f:40:67:71:6f:91:24:ac:8d:68:1c:4f:
6b:fe:17:ae:90:ba:ec:85:00:d3:6a:00:ce:af:48:
49:d5:b2:73:05:73:46:dd:66:fd:64:a0:eb:09:cd:
a6:4a:95:5d:9a:62:91:a4:02:d1:95:c5:c8:32:b8:
c3:d8:41:7d:1e:59:54:72:38:d0:87:f9:1f:2c:b7:
9e:27:b8:8b:d0:79:e3:ff:24:ee:7d:9b:ed:bf:a3:
e0:9e:3a:0a:d0:1c:7d:ea:be:53:cc:db:dc:d5:3a:
13:81:24:dd:09:13:be:ec:6e:20:cb:de:77:23:b6:
b1:eb:23:7e:58:7e:03:50:49:91:1a:7d:59:4f:27:
98:5a:a1:98:f7:7d:56:b4:5b:02:c8:ff:bf:dd:3e:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:D1:BB:C7:E1:6F:BA:16:59:15:42:62:C2:A0:23:CE:D8:C7:1B
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f5:34:01:37:ce:08:15:1f:12:6c:44:6c:a9:cd:0f:8c:d8:
ca:e1:13:64:25:cc:f6:3e:06:08:c3:b2:35:45:de:88:51:21:
c7:12:8f:52:94:bd:02:f5:e4:e5:81:4d:d1:b2:4e:5a:d7:e1:
98:31:03:ac:eb:92:79:83:c6:b9:3c:ff:79:d4:72:c9:c7:23:
20:4d:11:8f:35:d4:cb:97:63:d2:53:fe:7d:fa:42:f9:b9:e7:
ea:4b:dd:08:de:4b:07:a3:6c:55:be:4d:78:b3:cc:fb:2e:b7:
a5:9b:9a:61:36:3f:b5:1a:3a:38:97:ff:a3:eb:ac:3e:6c:b3:
be:b3:9b:4d:81:17:fb:82:21:c0:1f:c6:06:d8:83:c6:07:7a:
1f:4f:13:2d:9f:16:22:4f:fd:42:9f:a1:47:c8:ec:c4:b2:df:
40:75:14:c2:73:c1:06:58:a5:2a:1b:f4:03:d3:f3:78:e5:ec:
5f:d6:b3:f4:7e:dd:45:f1:71:08:f5:fa:e6:0b:82:87:18:73:
98:6a:14:b9:49:75:4f:78:c6:3d:b8:eb:b1:4d:92:39:46:56:
b2:f0:7b:03:6a:14:1d:62:cc:e1:b1:01:4d:e7:07:60:ac:b2:
77:73:d3:09:ae:94:74:47:a8:ae:2a:26:cc:6a:3f:ec:b7:ad:
cc:21:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:15:27 2024 by rpki-client on console-ams.rpki-client.org