Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: 0ckEcPkrxSvepRCZeOWI7p0wfK2nqo7oM6eRUULTpRA=
Subject key identifier: 85:BD:07:4F:B5:A6:B6:BE:EB:04:F9:34:34:F1:EB:95:9E:F7:9C:45
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 018F9797836AEB193442DEEC6809FEE66241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0800
Signing time: Mon 20 May 2024 20:00:40 +0000
Manifest this update: Mon 20 May 2024 20:00:40 +0000
Manifest next update: Tue 21 May 2024 20:00:40 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: 3rS8K4vZQKWdJ3/ZcO5Z6hIQBwjVFKFqGbkRNacoFpk=)
2: ivcIOGYGxDr4HuRiOMEJgjPtlw8.roa (hash: N0sX2xc9l6+o1NGaaCByASB7ZY+20fI1pDGVXPoq3+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:97:83:6a:eb:19:34:42:de:ec:68:09:fe:e6:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: May 20 20:00:40 2024 GMT
Not After : May 21 20:00:40 2024 GMT
Subject: CN=85bd074fb5a6b6beeb04f93434f1eb959ef79c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:8c:46:b3:bf:6c:84:d6:19:60:11:df:82:
d0:1d:2b:85:c8:ee:d0:32:16:a5:5a:a5:77:82:1c:
53:6f:2f:36:17:fe:7d:03:89:9a:2e:47:23:83:a2:
ae:68:4c:74:c3:f8:45:61:1c:c2:23:b8:e2:bb:37:
04:58:ec:4f:4d:cb:ac:d1:87:17:d9:fb:5b:dd:47:
0b:87:f8:b8:f6:0a:07:ba:0b:c9:f9:05:89:16:ee:
37:0f:6b:90:87:bb:03:d6:e5:b8:0d:8a:e0:b2:4a:
26:1d:6b:03:f2:dc:c8:b7:7e:63:a6:f8:1d:d3:1c:
ab:ed:e3:a4:6e:eb:3b:8a:b6:4e:34:65:ca:ed:f0:
72:9e:f8:3a:32:77:2b:b5:05:82:7c:7d:7b:2c:38:
93:38:4e:36:28:b1:c1:ad:05:2f:c9:ed:b5:ae:df:
58:6e:af:5f:1d:f8:a3:f3:e9:31:70:af:af:9d:68:
7e:ed:f5:5b:ee:53:d5:e9:d3:99:9c:83:e9:6e:0c:
b3:ab:f0:ac:f6:63:3f:08:c6:0c:31:71:d9:18:4f:
0f:43:97:06:a4:d0:9a:36:98:47:58:7d:26:c0:08:
8c:5b:17:cf:41:f8:8a:fa:59:ef:d1:a2:b3:e4:ad:
7f:7f:d5:ee:4c:44:41:83:19:83:b7:fe:21:7d:13:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:07:4F:B5:A6:B6:BE:EB:04:F9:34:34:F1:EB:95:9E:F7:9C:45
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b8:17:0d:55:4c:e3:1d:b7:10:10:53:f0:c0:78:9c:76:21:
f8:84:d3:af:47:30:09:98:20:4f:9c:48:d5:6c:7d:62:db:80:
9f:4e:00:08:4d:37:f3:dd:ec:1b:bf:20:d2:07:c2:a8:39:96:
8a:e1:71:23:7c:eb:f9:c1:0d:4d:ec:11:be:c4:78:46:de:a7:
92:19:54:49:f8:68:30:83:69:8d:da:bc:b6:ad:bf:e9:d5:e9:
3d:46:b2:81:8e:53:d3:a7:cf:8f:1f:2e:3f:c8:ff:79:a1:a2:
b0:85:d0:73:01:cd:4c:be:95:0b:de:11:12:30:87:5e:a4:b3:
62:40:e9:84:c8:35:50:d5:9b:ad:f0:a8:b1:a9:f1:c1:34:66:
dc:ef:fa:13:16:e0:6e:07:a2:1c:a9:02:0f:9c:a7:f7:3c:cb:
1c:09:0b:11:83:c4:1d:4b:3e:a0:69:b9:b7:b9:64:07:15:e7:
5e:b4:1b:8e:39:39:d6:b7:a3:2c:a3:4a:09:39:c6:f1:ca:71:
ff:66:01:6b:a5:45:8f:1f:54:39:74:8f:ad:82:2c:de:3d:67:
1c:c9:af:e4:73:5f:36:e3:30:5e:8c:89:a5:9b:92:3f:41:40:
07:55:a9:4a:e7:14:6a:7f:a7:68:72:c0:b8:eb:8d:a9:b8:12:
8d:10:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:59:09 2024 by rpki-client on console-fra.rpki-client.org