Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: GJFwTSEprrVI6Cg9c/oki2JUztSfgeI15L19rBGR5RY=
Subject key identifier: AE:7C:78:AC:0B:81:A2:79:A3:52:11:CD:34:77:32:87:D1:76:C1:AB
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 018F8749BCE6E678D588A54E167FECD84EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0908
Signing time: Fri 17 May 2024 16:01:47 +0000
Manifest this update: Fri 17 May 2024 16:01:47 +0000
Manifest next update: Sat 18 May 2024 16:01:47 +0000
Files and hashes: 1: 0LNGdjYasgqntHEIQIzvfE8wQIY.roa (hash: hbzCEQ2yJBk21LmFBof9ud0/qkiT9CgODNeApIjQax4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: QTzphNLpI1myJB9F0wZW1jv2XF/VYZRXthMkLcr597k=)
3: ZMraDMbqSJ-YaVa3GpMKopTPyEA.roa (hash: ikZvTkQslFEkZ2AJ6JtQnitoGpZR7oSg9wWs7Azbiks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:bc:e6:e6:78:d5:88:a5:4e:16:7f:ec:d8:4e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: May 17 16:01:47 2024 GMT
Not After : May 18 16:01:47 2024 GMT
Subject: CN=ae7c78ac0b81a279a35211cd34773287d176c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:03:74:8e:2c:fc:a7:42:68:f5:56:0f:fa:
d1:b5:e5:bf:06:1e:ec:a2:12:cb:83:82:01:e1:44:
8c:6c:93:d5:94:73:71:ea:a6:ea:34:d4:98:80:b5:
ba:ca:11:75:2a:1e:9f:9e:c0:c9:0d:c3:b6:3a:ad:
a3:d9:c9:fc:b2:d5:11:71:db:05:9a:d0:fc:b1:ae:
08:cc:a1:21:32:9a:dd:4e:71:fa:1c:09:19:77:a8:
3b:68:7a:17:21:8d:7f:b4:d7:0e:9e:63:23:3c:4d:
4c:04:3f:74:e5:c7:66:04:c7:bd:d6:d0:7d:03:15:
72:78:70:d6:ad:ff:2b:90:cc:aa:70:8c:21:14:8a:
77:31:17:83:62:b5:eb:a0:5d:9a:10:ca:0c:ad:fa:
b2:24:53:a3:a7:0c:33:a9:1b:25:3e:1f:10:d0:62:
fd:f3:c6:3b:ab:61:4b:3e:dd:3f:a9:aa:04:8e:b5:
a0:89:8d:9a:bf:0d:81:81:a9:ca:fc:ba:b5:68:69:
33:6b:eb:b8:d0:98:a9:45:2e:65:0d:28:c6:50:8b:
38:53:8f:84:1b:14:e0:c0:1e:6d:c4:17:cc:2e:7d:
66:c3:55:5c:d0:ed:8b:67:cf:d1:54:42:fd:ad:be:
bd:1b:93:ee:ac:95:7c:e9:9b:ba:93:d2:ce:a4:11:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:78:AC:0B:81:A2:79:A3:52:11:CD:34:77:32:87:D1:76:C1:AB
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:08:71:dc:0c:1b:b1:d0:ef:97:53:d3:7b:9d:20:e7:ee:
80:17:de:d0:e4:ee:2a:c5:3b:0f:f6:fe:d0:90:d3:8a:3c:a6:
9a:6a:cb:f4:47:e7:02:6d:c8:20:5b:9e:48:8d:dd:a6:83:56:
20:df:89:97:6c:20:dc:fa:4d:55:72:4d:ce:4b:62:cc:41:0d:
8d:4d:96:27:6a:da:62:f8:0b:50:14:e9:aa:ad:87:c4:4d:21:
ca:34:b6:27:a3:e0:95:ac:dd:bf:0f:3f:42:7e:2d:49:e1:55:
04:d8:25:2a:6a:f1:58:44:01:e1:b2:be:24:a7:4b:89:2e:56:
14:df:4c:6b:59:0b:3a:94:21:5f:a8:c5:94:80:86:d5:c0:0f:
96:e3:50:48:02:ed:7c:ee:21:8a:15:25:bf:8a:82:fb:1a:60:
e3:dd:d3:71:64:a2:c0:94:68:e3:1d:cd:83:ef:9a:bf:9c:e2:
0b:42:d4:8b:04:82:42:60:b0:7f:23:e4:20:c1:f7:03:db:cf:
ba:71:f1:18:6a:b1:23:1c:f5:7d:fe:d3:72:4f:71:4c:d8:55:
0f:ff:61:72:87:fd:2c:2b:fb:28:65:e9:68:e1:42:c9:71:4a:
05:6f:43:86:92:57:af:15:2b:57:4c:b3:18:65:5f:a1:e2:8c:
dd:28:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:08 2024 by rpki-client on console-fra.rpki-client.org