Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: CgrGw1J1rWSmtNSiYMjuFrGCr2Znvov1Kr8Z9bj3l8U=
Subject key identifier: 7D:16:C7:C1:50:A4:E2:C5:23:46:5D:CD:D4:94:5B:17:A1:E4:49:86
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 01935764DDE855F1C25D2F9FB26667878589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: FC
Signing time: Sat 23 Nov 2024 05:00:48 +0000
Manifest this update: Sat 23 Nov 2024 05:00:48 +0000
Manifest next update: Sun 24 Nov 2024 05:00:48 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: 7Lq4mkOozqT04dUIfHrRr5GAthSAnZAeQV7OsZA4m3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:dd:e8:55:f1:c2:5d:2f:9f:b2:66:67:87:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Nov 23 05:00:48 2024 GMT
Not After : Nov 24 05:00:48 2024 GMT
Subject: CN=7d16c7c150a4e2c523465dcdd4945b17a1e44986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:c1:a0:d0:6f:c5:4d:15:41:a7:3a:43:34:
70:a5:b9:4b:d2:cb:f8:d1:0e:5e:a2:f4:9c:ff:0e:
b5:ca:51:21:aa:6d:3e:47:48:24:4d:fb:ec:73:0c:
41:33:59:5e:c1:1a:64:9c:95:5a:57:6f:d2:11:f3:
9c:35:fd:40:7c:26:78:40:bc:dd:76:49:ef:2b:4f:
7c:69:20:12:07:b8:75:1f:44:f0:d1:45:7f:8f:e6:
62:66:42:a4:1e:f9:90:47:4e:fd:95:4b:6f:13:1f:
68:97:1f:ec:e7:6b:ba:d7:11:54:66:6e:d1:0f:88:
4c:69:dd:32:2d:a8:ea:de:3e:27:fc:24:8f:5e:94:
4b:47:9e:e0:be:57:62:02:4d:61:06:db:24:f5:03:
c3:14:ee:d3:4f:87:d6:08:be:3b:ed:3f:0d:f6:dc:
97:7c:4b:9c:76:be:55:08:14:7f:0d:01:31:1f:a7:
ab:6b:d0:7c:83:92:b8:0d:96:dd:f5:91:fd:02:ab:
f7:c1:e6:f5:c2:d4:60:4b:e1:b1:54:c7:3c:5d:37:
67:44:57:2d:39:40:a3:b9:89:39:df:ec:89:40:d4:
93:12:36:65:05:de:6b:9b:33:c9:13:2e:ff:39:b4:
65:63:ee:e3:20:7e:8c:ad:84:a3:64:ef:a5:a8:fc:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:C7:C1:50:A4:E2:C5:23:46:5D:CD:D4:94:5B:17:A1:E4:49:86
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e1:f3:40:f0:4e:4f:8a:20:09:ca:a3:2f:c3:0c:58:fc:fe:
ae:e4:28:3c:bf:13:de:19:65:bd:ca:62:8b:a0:01:68:d4:d5:
79:fc:9c:a0:d5:f1:31:a2:b3:bf:95:0a:56:5c:fc:0a:28:90:
0c:1d:b2:cd:2c:bd:00:56:0d:3e:91:d1:e8:be:8c:2b:c3:dc:
b6:c0:e2:17:c4:d4:58:35:b7:5f:07:c7:17:a3:da:c1:98:42:
73:ae:a3:d1:9a:8f:55:d8:2d:97:fb:d9:f6:45:b2:0b:a1:41:
f0:24:c8:71:9f:fd:fe:2c:dc:60:65:90:82:07:da:b4:bf:77:
dd:62:1f:3a:96:a5:69:7f:16:7a:7a:37:2f:04:af:0e:e3:9b:
29:cf:80:1e:56:c1:16:3a:40:a8:ac:6e:95:1f:ad:18:01:ac:
b9:eb:7c:af:2b:37:5e:11:b0:fb:2d:21:f2:4b:dd:8c:88:71:
cf:3c:f8:74:3d:d9:a8:b5:6e:1d:d7:68:5e:44:45:ea:dc:9b:
3b:b4:a3:53:6e:07:0c:d7:31:1c:fb:29:c1:cd:32:01:56:2b:
ec:61:87:ab:d1:62:a4:64:bd:5a:5b:dc:b4:08:d2:a8:88:3f:
cc:99:25:fb:1e:90:4b:bc:b2:97:ab:4f:81:6f:4d:7c:b5:fd:
73:e7:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:55 2024 by rpki-client on console-fra.rpki-client.org