Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: AcKMSml39xfi5mVdAJQaEkAJNow8MM7aBKINaeSY/A0=
Subject key identifier: BF:49:DB:8A:63:17:FB:84:05:FA:89:6A:44:B1:42:61:36:CE:78:EC
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019352AD8D201AEA8A1A3D58411DAC04C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0D20
Signing time: Fri 22 Nov 2024 07:02:05 +0000
Manifest this update: Fri 22 Nov 2024 07:02:05 +0000
Manifest next update: Sat 23 Nov 2024 07:02:05 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: efKk0FAh4ULm4s8U2JkT0PYAX8+7/cN4sOvdWGMRAxk=)
2: 1bdOMIbvc5hhMjSg5FBRCCJdq84.roa (hash: apFkPc8WYsDfO0FkcCAoY3zvmqEfPCWdIk9DyjZ+04k=)
3: 9ZZSOafnhooqrJjUuJki28vifKs.roa (hash: SgXHiFjZAu+q7kSfMbvWeItINzJKTdexMW7FLmsdV9Y=)
4: PsdjzA_VaxK0TCCIrw3v0M11o6g.roa (hash: pVgKRYFtLEwQh0LY8M7cv/v4JwEbMlpwF95+Ztt/OLI=)
5: g_tftySCpNo-PiGj0lAqlZC1ISA.roa (hash: 5sm4SXMjTP1FfBuITzJLMiufIGrtJAppPShZtmEY8+A=)
6: pu3FV2HN9lYJR88Ww1-K-r9MyvM.roa (hash: prYgRr/gg5AkKKdndwb9a90EXVnq/3UrJ4udgYUXp7k=)
7: ssXsmg0FRqriCEyhlZz4g0dEwNM.roa (hash: OwWEPi1aqola22Nw81lXiOpoKP8Oabru4A1aOn20CFU=)
8: u2dXA72zZ-FYk_eNcsIR1xEwf_I.roa (hash: Wz/r4XiXtFhZrQPehQLnM32GhwcH9CicQOCNV1cc7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:8d:20:1a:ea:8a:1a:3d:58:41:1d:ac:04:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Nov 22 07:02:05 2024 GMT
Not After : Nov 23 07:02:05 2024 GMT
Subject: CN=bf49db8a6317fb8405fa896a44b1426136ce78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:84:7b:a7:d0:4b:50:04:36:c8:bb:46:d1:
e4:1b:6e:08:b3:17:1d:ed:f3:2c:79:d8:86:8f:58:
65:1d:71:91:90:03:d8:4f:e5:7e:e5:47:25:bb:15:
9a:fc:eb:2c:0c:e6:b1:ae:68:48:29:e1:56:11:41:
63:bb:b8:25:6b:16:14:22:6a:84:31:2f:d3:39:78:
27:80:0c:9d:60:52:cf:8a:e5:9e:11:90:cd:e5:e9:
8c:50:58:bd:89:a9:30:f4:dc:5c:b8:75:96:65:aa:
d0:8d:d0:a8:82:fe:36:ac:25:47:ea:74:3b:ac:e6:
ed:00:9a:09:3a:f5:dc:09:ab:db:f0:c0:4d:84:9d:
c1:fa:bf:62:b0:e5:c9:8a:58:3c:23:2a:7c:fe:b9:
c3:8a:46:3b:25:a8:76:08:03:dc:07:72:04:09:61:
a5:7d:a6:cd:86:49:fb:4e:ed:04:f9:0e:88:4b:d1:
ba:bc:2b:1b:66:64:b8:dd:c3:e8:c9:96:29:6d:fd:
c9:00:46:57:3f:84:f8:f0:cc:61:74:c9:b8:3e:e4:
7e:25:93:7b:59:34:98:a0:9e:dc:4c:1e:ca:32:3d:
a4:f1:f1:3a:58:06:15:16:fb:c3:df:f7:d2:c4:de:
db:5c:5a:13:cb:71:3d:a9:d4:7e:9d:d4:b7:33:19:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:DB:8A:63:17:FB:84:05:FA:89:6A:44:B1:42:61:36:CE:78:EC
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:6a:e5:f0:9f:b1:ca:a6:f5:59:b1:22:28:ab:d7:fb:b7:
b2:28:ac:34:7d:c4:aa:b8:24:0f:49:18:42:8e:16:c6:c3:4f:
66:c0:23:9f:ca:1b:7a:ff:9f:b1:31:eb:8c:59:d2:4f:2d:a9:
d3:bf:da:57:28:f5:44:fd:9e:d2:22:0b:9c:8f:4d:25:88:72:
0e:ea:a7:59:82:03:29:c2:de:46:57:0e:2a:37:68:63:99:b3:
e1:bb:53:db:64:ed:ff:24:a9:69:35:0c:8b:2e:89:7d:e1:bc:
9e:e7:c9:9c:84:ca:2f:74:7a:c9:e9:82:c7:4e:5f:bd:fd:be:
47:42:c9:84:c2:31:9e:bc:43:73:b4:c5:e6:7e:dd:a3:5e:4d:
ef:ab:8c:17:3c:3a:67:31:0c:5d:9d:d3:3f:f0:39:d3:74:37:
ef:36:cc:96:5a:7f:18:ef:a4:59:b3:60:17:45:ce:d3:11:ee:
d8:b8:db:ec:64:f8:1f:91:6a:91:8f:bc:59:53:5f:29:d7:76:
4c:89:4a:59:0b:8d:02:eb:dc:4a:ef:2b:aa:59:d2:0b:bf:da:
2d:55:b2:3b:f8:f7:86:57:66:ee:90:d4:a2:68:0d:c4:ee:c6:
76:b4:a0:99:65:75:3d:48:ed:75:d3:f5:67:2f:d7:14:b1:51:
19:21:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:26 2024 by rpki-client on console-ams.rpki-client.org