Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: MX/9KcNoTlNP5TVcSxyou8ZAkrpqpp4BfUQGMVNNXZc=
Subject key identifier: 29:9E:69:DB:3E:24:DD:5D:D8:B6:17:00:91:72:FF:40:84:0D:3D:C9
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019353BEDB879A93242002912323616E9917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0218
Signing time: Fri 22 Nov 2024 12:00:37 +0000
Manifest this update: Fri 22 Nov 2024 12:00:37 +0000
Manifest next update: Sat 23 Nov 2024 12:00:37 +0000
Files and hashes: 1: NRmmLHL0knTruqzxV_WeJCi85rw.roa (hash: gMKgLmCQjygCIQx14vESsx2UnOgP1dnPyr9krtrAEaI=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: JSUYplSL2iCJiqTJDmL21XFpbLJDoLfG/LanfI00fXI=)
3: wG0DKdNraDsbCCiCFmfkeUFIvIw.roa (hash: UM+WV1RJFZrAO6Gd6ZSZfzxZmXn3A4lfrB9MHc7LImk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:db:87:9a:93:24:20:02:91:23:23:61:6e:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Nov 22 12:00:37 2024 GMT
Not After : Nov 23 12:00:37 2024 GMT
Subject: CN=299e69db3e24dd5dd8b617009172ff40840d3dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:e1:13:55:c3:dc:af:aa:74:e8:e5:38:66:
d9:0d:98:50:97:6a:63:61:97:49:13:7e:47:0a:f3:
b5:63:48:25:6e:9f:51:24:5d:6a:8d:5e:30:d3:e7:
3d:23:df:6c:9a:d9:1e:87:51:4b:58:36:14:02:22:
22:af:7b:7a:47:c0:c6:75:96:e2:b4:7b:96:97:a6:
d4:fe:b6:2c:f6:c6:ac:62:fb:0e:68:da:49:29:6a:
23:04:8b:1a:1e:85:d2:85:7b:dc:4b:e6:ad:a2:36:
b3:97:d8:10:be:c5:21:07:f5:b5:f4:fe:d4:91:0c:
b9:3a:0a:ee:2d:dd:23:f5:3a:d8:31:4b:02:8d:fc:
cf:e2:9d:db:de:00:2e:7c:36:ce:3d:3f:e8:bd:7a:
65:56:6e:61:0a:37:0f:93:f6:70:4c:46:40:0d:dd:
02:ab:b5:e5:47:02:50:b0:df:ab:2d:49:b2:3a:5f:
eb:82:2e:81:db:1f:01:4a:2b:32:bd:ad:1a:67:c8:
69:13:c5:62:5c:5e:91:58:c9:81:75:fa:35:43:fa:
1f:d7:40:3b:54:fc:8d:6a:1c:a1:7b:b7:15:e2:11:
51:2a:67:dd:a1:46:31:4b:85:f3:a4:e5:01:1c:d7:
ee:25:f2:51:46:b4:f5:f0:3a:a4:13:5a:f5:fe:f7:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:69:DB:3E:24:DD:5D:D8:B6:17:00:91:72:FF:40:84:0D:3D:C9
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:86:ce:7f:d7:d8:7e:33:ce:50:62:9c:97:05:f1:ca:eb:
c2:46:af:46:43:d1:44:5d:21:8d:e6:3a:82:51:c9:83:c3:c3:
bf:4b:0b:6d:63:85:61:d9:1c:24:09:e6:04:db:a8:a9:f4:ab:
51:a1:1b:fd:46:39:b1:13:a5:a2:04:1d:8a:3e:86:e9:66:9a:
e0:71:5c:cb:e0:4f:97:eb:c0:b4:85:e1:c2:62:9f:98:80:08:
e7:5e:0f:e6:b9:43:cb:68:a0:5b:e1:00:50:1b:6d:69:67:bf:
50:16:80:f8:c9:d1:f4:76:9a:ca:41:3d:ea:ad:33:c8:c9:59:
a3:c6:c8:da:f0:68:53:d5:ee:73:56:55:95:9c:70:bb:dd:f7:
b0:96:a7:c8:4e:bc:78:d3:7c:a7:de:99:40:c0:0d:14:e6:da:
54:bc:bc:c6:d1:28:44:57:92:b7:97:65:e7:f1:27:da:8a:8d:
56:d4:41:17:ad:67:75:f2:67:cd:c3:56:66:a1:0c:7c:48:22:
88:a8:68:c1:54:32:be:c0:43:4b:27:39:f3:c9:de:95:db:91:
94:bc:b5:7b:6b:df:c3:c0:bb:6f:06:65:6c:ed:25:f1:38:74:
54:b1:04:89:d0:b3:f6:db:94:60:be:78:bc:6a:38:07:8b:bb:
62:28:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:36 2024 by rpki-client on console-fra.rpki-client.org