Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: PGeHqJga3HzRV4qXakaxKyNkGpoOQ9+s4lwPZFhhJm4=
Subject key identifier: 01:98:46:82:0C:4A:CE:8E:67:12:9B:81:6A:D0:73:EA:0F:C2:17:45
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 0193512B7442E850B6FC0BC03AADB29C3D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1375
Signing time: Fri 22 Nov 2024 00:00:22 +0000
Manifest this update: Fri 22 Nov 2024 00:00:22 +0000
Manifest next update: Sat 23 Nov 2024 00:00:22 +0000
Files and hashes: 1: NCQMGXvrg9hZPurkeNZhOqxt3Vk.roa (hash: QNYA9jTZeMpNw7XQDt6ntK/5ska9kWiiKNIJoE7RFg8=)
2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: imcVSNiDyRD4YKalGpa53n9lQiaZIklMy8+KU/rhMFg=)
3: RcGN8Nr7boON4mG039b0K9U580U.roa (hash: j0UZjLPUR9kkJFY5iqz+WAUVeQi8WsQup+QY3NC9CZs=)
4: Snevnmk16oZj7SLsQHP9oTgzvUI.roa (hash: y9dAYxd6QfmhRPHkWrNoRXtPMVbvHOw2atOZmLfZWn0=)
5: nbx1iWgB85M28eNeeUUy7AhgRCY.roa (hash: N36gCVvFOx41es5TpDhTYyz2K6TMDk/qr2wVefwX578=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:74:42:e8:50:b6:fc:0b:c0:3a:ad:b2:9c:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Nov 22 00:00:22 2024 GMT
Not After : Nov 23 00:00:22 2024 GMT
Subject: CN=019846820c4ace8e67129b816ad073ea0fc21745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:98:84:9b:53:a6:68:4f:c3:b9:a1:ac:61:
f8:86:ca:1d:69:22:5e:9d:aa:a2:65:4c:1b:07:8c:
93:59:7e:34:0c:d9:e7:8d:9d:5c:c6:41:46:dd:94:
20:61:80:20:10:c1:47:5c:8d:e9:b2:56:60:13:05:
d1:78:bc:c2:a5:3c:44:e4:06:68:72:26:b8:5f:91:
36:cc:a0:fe:e5:f9:8a:ad:41:41:64:5b:5d:00:13:
29:13:d1:43:b8:c8:81:7e:a5:b9:75:62:56:f3:30:
c4:7d:7b:d8:99:e0:a3:64:03:af:03:ae:f1:0e:3b:
79:3a:83:e8:9a:57:b0:36:91:3f:cb:0c:81:8d:3c:
40:8b:65:25:89:b4:e1:0b:95:89:a3:9c:39:9e:8f:
df:b9:d8:cc:0c:03:be:6b:2e:8a:c4:08:ae:49:26:
c8:ac:16:ed:1a:86:75:5e:36:84:97:93:ea:45:99:
48:f1:c9:a1:b2:7d:6d:3f:d0:b2:7d:df:c3:33:76:
ab:46:22:c7:6c:9b:37:c8:5e:30:bb:e6:2d:88:e7:
89:08:69:7b:ee:0e:fb:65:d0:31:70:58:62:d3:97:
ab:2c:f9:46:b5:4e:95:b4:77:44:3d:d5:4e:2e:2f:
af:7b:b2:73:f0:25:c6:7b:1d:74:25:47:87:12:d7:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:46:82:0C:4A:CE:8E:67:12:9B:81:6A:D0:73:EA:0F:C2:17:45
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:5b:bd:bd:7e:5e:d6:ae:5a:52:bf:82:96:be:f2:ec:13:
00:17:49:25:5f:21:4d:25:eb:e9:4c:43:8c:88:f1:82:0e:4b:
4e:64:2c:e2:52:4d:d6:4e:78:e6:54:66:53:c9:7b:14:8f:74:
88:a4:98:0f:64:39:9f:13:6f:0e:1d:f7:ad:36:8b:13:fa:79:
c8:19:d9:40:3f:af:7b:20:0e:07:bd:7a:c9:e6:bf:d0:78:10:
d7:e5:6f:49:5d:43:e6:ec:6c:c5:b8:9d:d4:bc:68:7c:a7:96:
29:81:12:0b:3f:8c:3a:6b:86:fb:66:56:c8:db:31:bc:cb:14:
ca:32:c5:e5:42:c9:a5:74:f1:e8:fb:3b:c1:a7:f5:9e:36:0e:
44:71:84:d9:7c:92:13:1a:03:3a:51:44:af:da:ff:12:f3:2a:
54:f8:90:e6:80:36:ea:12:de:fa:09:33:82:5d:28:ce:e6:5e:
a1:0b:ce:63:ae:a9:c3:93:79:95:e1:4d:be:08:a4:7c:d4:26:
50:4c:95:8a:5a:75:94:0b:8c:a6:01:a8:64:ec:21:b0:75:e2:
81:91:45:66:27:b1:67:e1:43:74:32:44:a1:b1:e4:6a:d6:d8:
59:06:29:b6:f0:d6:90:48:6a:e9:98:92:2f:3a:65:86:ed:47:
31:3c:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:21 2024 by rpki-client on console-fra.rpki-client.org