Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: BdWMN9fPN+mZPUDcKsQwxTEb7/7bCgSnAdfyL9CYJZw=
Subject key identifier: 3A:4F:A9:18:B1:DE:3E:85:13:1C:9F:1D:04:AC:40:69:E6:72:9C:7E
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01935878C1FD343F81ECA3B4F8968F93B101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:02:09 +0000
Manifest this update: Sat 23 Nov 2024 10:02:09 +0000
Manifest next update: Sun 24 Nov 2024 10:02:09 +0000
Files and hashes: 1: 8s4IkYO9ZNc9rJp7RxCM3Qs3iO4.roa (hash: dHJKL/D6M5rRqAd5fbvGNtB3b0VvA+cXK1LxnmBsL5A=)
2: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 8tFMsUrM3/hlZwhQAeErfnjYJrjqPmvzWfsLbjmf91A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:c1:fd:34:3f:81:ec:a3:b4:f8:96:8f:93:b1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Nov 23 10:02:09 2024 GMT
Not After : Nov 24 10:02:09 2024 GMT
Subject: CN=3a4fa918b1de3e85131c9f1d04ac4069e6729c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:4e:9a:77:36:bb:9f:a6:cb:01:fe:ab:04:
bd:90:db:3c:94:e0:5c:28:fe:16:6a:d3:e4:ec:da:
69:1c:78:0b:54:18:80:2a:0c:d0:bc:3e:62:b1:5f:
e4:af:c9:e9:ab:40:88:22:5c:2e:d5:b4:e3:e5:fe:
0a:95:ed:72:03:09:20:ee:e9:c2:33:2a:7d:b7:33:
64:3b:25:59:94:a2:db:b4:5a:99:3c:71:86:0c:0a:
34:83:8a:bb:a9:18:f8:40:59:b3:1e:88:4f:d2:dc:
27:b3:86:3c:d9:61:a7:64:83:3f:b1:eb:55:b4:10:
9b:12:ad:92:fc:b8:48:a3:f3:bd:85:e4:9f:cb:18:
78:39:87:24:1b:d4:68:01:8f:40:cc:24:82:59:0b:
99:da:08:21:84:8d:27:a3:45:17:ef:74:6d:8d:ba:
18:0e:71:95:6b:7c:34:f0:5f:b0:b7:19:7e:06:00:
1b:b5:8f:f0:69:6a:af:17:06:8d:89:2d:0e:8a:c3:
6b:a2:86:10:d6:1c:ff:f0:f4:cc:72:35:0e:42:28:
d3:48:75:26:b2:79:6e:aa:b7:4e:b8:9c:8e:8a:08:
10:1a:9d:ed:ef:ab:83:9a:8f:8f:98:41:47:90:b8:
23:d3:81:4e:b7:0b:01:21:b5:36:09:fe:4d:b8:43:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:A9:18:B1:DE:3E:85:13:1C:9F:1D:04:AC:40:69:E6:72:9C:7E
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8c:82:8a:7f:be:9f:ea:6e:a8:a0:48:96:1e:b8:8a:66:a1:
89:df:e7:cf:80:bf:80:75:94:08:8b:31:d0:c7:66:c6:ed:f2:
46:88:a0:db:b7:05:9f:86:d9:1b:25:92:e0:8e:72:c8:a6:f6:
78:03:06:35:ba:89:b5:69:df:db:6a:a0:3b:fa:d3:a7:87:ad:
ca:c7:78:b3:2b:c7:60:ac:72:e6:ad:94:01:57:f4:5a:c8:26:
83:3d:8b:df:26:4f:2d:09:e5:eb:cc:a1:d7:11:78:ea:5d:23:
45:db:2f:08:25:62:36:bc:9e:18:6c:0b:47:49:ca:16:e7:3f:
41:38:9f:6d:ec:eb:73:48:e8:c5:22:3e:35:af:f3:b3:23:88:
81:39:18:06:b7:d1:8b:71:1d:5d:cd:d5:40:d4:27:1f:03:16:
15:a8:c8:f0:03:7f:60:ce:a5:b2:4b:8b:fe:d1:9c:c9:e1:39:
4d:30:f4:ad:35:88:00:f1:3b:90:59:f0:70:a4:f4:04:f5:05:
fd:c3:5c:fb:12:f1:d3:93:ec:f4:fb:54:36:a5:68:b1:a7:62:
d2:5b:4b:e7:85:31:df:d8:41:a1:17:75:34:69:0b:41:98:c2:
a9:3f:0f:28:26:a4:9d:91:a3:19:53:e6:83:0a:60:13:92:eb:
0f:9d:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:37 2024 by rpki-client on console-fra.rpki-client.org