Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: UhVPh8rCcb9AXHBOIcMAFMLfj/76hzBwh/nqfVIotM8=
Subject key identifier: 65:F5:31:18:D5:0B:6B:0E:38:7F:FA:17:4B:31:14:BF:80:44:E0:BB
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 0193523DF9A6C82900C1A9BFA671F14F5E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 05:00:13 +0000
Manifest this update: Fri 22 Nov 2024 05:00:13 +0000
Manifest next update: Sat 23 Nov 2024 05:00:13 +0000
Files and hashes: 1: A0s9auIzadwK2ruoWV5MyH8AeRk.roa (hash: EK/Uwg38Bltbk72ASXNYe3BnPnFwlw4dgt2PUIDnvrM=)
2: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: 6j/4UGAxOz7B7QalGqVQk9dWcF2DyAYevtGkfxDJYEQ=)
3: VC3wAzYJCs1cTeHdECuPEOSx7-w.roa (hash: g2bglxPJ8XxZJfLFcLtSyZSMbkbaUSjbklWt+GwTlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3d:f9:a6:c8:29:00:c1:a9:bf:a6:71:f1:4f:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Nov 22 05:00:13 2024 GMT
Not After : Nov 23 05:00:13 2024 GMT
Subject: CN=65f53118d50b6b0e387ffa174b3114bf8044e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:d4:36:29:4e:e8:9f:56:3a:b2:e2:89:cf:
ed:cf:61:60:3a:8f:c9:c3:d5:20:5d:7f:46:a8:d9:
d2:67:4f:c5:5d:e6:e2:11:50:17:47:91:82:5a:99:
22:14:20:6a:9b:ba:24:1c:7f:92:68:f1:c7:53:c2:
68:8f:c5:ec:11:22:5d:72:2c:69:a6:4c:12:e8:ba:
f5:ac:b3:f2:33:f2:23:d7:7e:be:9a:47:df:72:0b:
70:5a:25:b3:2f:85:b7:c5:3d:9f:b6:b5:69:14:d8:
47:04:87:64:ed:08:1d:22:1e:b9:80:c8:41:af:f7:
9d:69:da:c2:86:7c:a6:02:d3:c0:be:cd:fc:f4:34:
cb:b1:63:6c:3e:fa:99:07:28:94:6a:a1:12:24:6a:
cc:b8:b9:26:29:20:71:eb:a6:6c:9f:99:c2:40:fe:
1a:97:ca:52:3a:a6:5a:e5:91:59:3f:38:35:0d:c9:
6a:28:51:71:84:b2:4c:96:26:24:23:2c:36:7c:91:
ba:42:c3:8a:aa:5c:1f:a7:6f:81:19:a0:ae:fa:94:
e8:34:5f:ee:2b:d7:78:f5:0a:6a:3b:89:70:dc:af:
a2:e0:dc:ba:e6:9e:d4:9b:59:fc:24:c5:46:42:0d:
2a:83:f0:0d:a8:79:89:1f:0f:2f:80:e9:b1:ed:91:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:31:18:D5:0B:6B:0E:38:7F:FA:17:4B:31:14:BF:80:44:E0:BB
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:b5:be:d9:33:94:86:9e:e9:09:03:a1:08:3a:12:eb:63:
75:a8:55:0f:15:11:83:9a:5b:ba:dd:ac:7d:ea:e6:54:dd:75:
d9:6f:bd:d7:43:bd:35:c9:1c:29:4f:06:03:3b:74:cc:87:57:
33:92:cf:fb:d6:6d:61:3f:76:c6:a0:a9:75:bf:1f:21:3a:3b:
3b:62:b5:12:02:f2:d5:63:e7:b1:1c:ce:42:5c:59:dc:26:a9:
c2:5f:da:e7:9b:1a:6a:48:26:18:d7:ad:ff:1d:e8:f5:55:9e:
d7:14:72:91:5f:d7:11:2e:02:62:d8:74:60:ce:11:ac:3d:06:
5f:d2:f9:7a:d9:08:82:3d:4f:e9:a7:1c:b6:5a:0f:83:df:b6:
c7:eb:eb:53:62:89:a6:fd:ec:c7:9d:ba:34:85:90:d6:22:69:
50:f5:93:65:ce:65:88:e9:8d:1c:fe:ca:09:f1:31:39:a9:5d:
ec:e3:c8:5c:73:f2:4c:6e:8f:3a:0c:cb:62:1c:d0:13:b0:6c:
57:be:68:25:53:c3:4c:ea:0c:6f:f5:9f:4f:40:a6:17:b5:99:
84:cc:67:be:23:ab:01:52:f6:9f:85:e0:d4:e6:c1:2d:23:86:
c1:2c:3f:5a:0c:86:0f:c4:41:18:ed:91:78:95:b6:57:50:75:
ea:28:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:20 2024 by rpki-client on console-fra.rpki-client.org