Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: UppJE+GPU9yLYOwWpYiXuM0NyIf8ul4689eRdCU1R0U=
Subject key identifier: ED:44:58:0E:1D:2A:FE:5C:1E:27:E9:6F:17:F0:FC:2D:87:13:78:F0
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 0193550899B235ECC8F0E9F057F4082BA6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 18:00:47 +0000
Manifest this update: Fri 22 Nov 2024 18:00:47 +0000
Manifest next update: Sat 23 Nov 2024 18:00:47 +0000
Files and hashes: 1: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: n9DWej7ftCMTznWnLg7+G7lnPJRJ9ZIPOv+TuiKHMh4=)
2: cvrmaIrLxlaZQh_lx3_kwYPRPno.roa (hash: LiPq5Kgz0hwnkaFSP5CWIHT4TrfxYz8A0k7VuK7Lar0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:99:b2:35:ec:c8:f0:e9:f0:57:f4:08:2b:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Nov 22 18:00:47 2024 GMT
Not After : Nov 23 18:00:47 2024 GMT
Subject: CN=ed44580e1d2afe5c1e27e96f17f0fc2d871378f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:52:db:13:7b:cb:70:87:c6:1c:cb:2b:86:
47:56:a3:38:0e:fe:e5:8f:3f:97:9f:ef:c3:91:cb:
a5:0a:c0:2d:58:45:87:97:03:57:4a:a9:01:a8:2c:
cd:30:85:20:a3:24:90:a1:92:3c:a6:49:45:59:ec:
0a:5d:34:a5:2b:3c:d3:e9:3a:09:3c:93:12:7e:8f:
08:aa:7f:fe:2c:4e:54:49:d9:20:ab:73:f2:fa:c7:
2a:15:5b:37:37:e7:78:a1:4b:03:9f:27:13:8b:f0:
d0:d2:d8:12:ec:c4:9b:6e:6e:9a:45:14:c3:a8:90:
ae:aa:9d:c4:7d:dc:1a:53:77:72:82:cd:e4:c5:7e:
9d:6d:30:9e:49:9b:44:26:e7:6b:68:5a:84:30:c5:
59:bd:e7:1c:51:c6:69:dd:9f:5e:c4:71:f4:f0:73:
91:2e:52:ad:45:c3:09:e5:9c:6b:71:42:82:77:7b:
73:4a:88:b0:8f:f5:b0:2a:c3:3c:82:07:68:ee:c3:
2e:40:ca:51:ff:66:9b:76:f2:28:3b:31:3e:d8:2a:
72:0b:f9:cb:10:1b:8d:04:37:4f:6e:97:d4:62:76:
b1:e7:e5:44:87:61:f3:5b:9f:04:b5:f6:16:a0:0e:
68:06:9e:7c:d4:e6:dd:7e:52:c3:7e:db:39:ac:49:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:58:0E:1D:2A:FE:5C:1E:27:E9:6F:17:F0:FC:2D:87:13:78:F0
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:1f:8d:1c:8a:77:1e:c5:96:8b:f6:1d:e9:e9:7b:a0:59:
df:18:ff:a6:17:95:06:82:23:10:20:78:0b:0a:00:ce:31:d5:
b3:f8:f9:ce:ee:3e:40:0a:5c:15:d7:4e:3c:64:31:a2:36:e6:
b3:0d:15:e7:37:db:87:31:ff:1e:02:ff:65:d6:7f:42:b1:b5:
52:ef:9e:e8:0b:9d:97:dd:e3:43:c5:fb:7f:d0:61:dc:ba:94:
18:6b:e3:ea:3d:45:99:e1:fd:06:6b:3e:32:06:15:4e:9c:3c:
a5:29:a6:3d:f0:45:0a:07:3b:40:c9:5e:98:01:9d:78:46:58:
47:17:24:2e:67:95:0d:f1:4c:03:60:96:d7:0d:65:2a:6e:88:
bd:46:33:37:d9:ea:6d:55:3e:33:9d:55:73:b0:38:62:62:88:
92:34:a7:51:65:ba:1b:d0:38:05:e5:fc:e8:95:cc:69:38:e1:
e2:2c:29:f6:b7:52:10:d0:98:8d:1e:04:e9:ff:96:db:33:5f:
13:da:3a:8f:47:50:74:fa:e1:3e:9c:d1:33:49:3a:55:2c:b7:
2b:bc:f2:fc:ff:f8:ca:45:8a:66:5f:d4:66:2d:b1:06:82:b7:
90:ff:a1:0a:8e:dc:cd:a1:62:f0:a6:f3:6a:a1:97:9c:b7:e4:
97:32:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:51 2024 by rpki-client on console-fra.rpki-client.org