Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: ptEFTqYlG7wriSwbPa+3266jxvNpgNV5mTc5qGEMGdE=
Subject key identifier: 73:27:4B:89:10:06:D3:59:B3:4E:64:80:15:CA:8A:D4:72:96:EA:52
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 0193553FA84A534352AE4781FDA54B40AFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1375
Signing time: Fri 22 Nov 2024 19:00:55 +0000
Manifest this update: Fri 22 Nov 2024 19:00:55 +0000
Manifest next update: Sat 23 Nov 2024 19:00:55 +0000
Files and hashes: 1: 1vbBnknt-Cgf3Vn3RJPhswPy5wc.roa (hash: +wqxxLrp/rP3IyyxKuc0/koV9jhjWzSyDSpvwgsXuzM=)
2: 9d6LfdEPa--l7n_u-iZzdOMv7DQ.roa (hash: ghwex2I1qDW5wrBzbnSbeskaxirFKUb1QOk4LZOCa7I=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: OeFHOU+aqGLHQgv3yR7S3+Zdxs6EbO0DOBP2A/z5zkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:a8:4a:53:43:52:ae:47:81:fd:a5:4b:40:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Nov 22 19:00:55 2024 GMT
Not After : Nov 23 19:00:55 2024 GMT
Subject: CN=73274b891006d359b34e648015ca8ad47296ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:0f:71:3e:fa:66:81:d1:06:57:63:68:47:
65:82:2b:4f:b5:2a:84:2a:66:ac:ef:af:cb:79:0b:
7b:d7:a8:69:ae:12:42:93:98:76:cc:2d:cb:db:6c:
18:ea:93:47:17:e9:84:ac:f7:6d:81:79:bb:fa:6a:
dc:ce:32:06:02:37:71:72:aa:62:9b:b1:ec:30:bf:
ae:f4:5b:a0:c5:0c:40:ed:16:f6:bc:42:37:8d:e9:
e4:7d:c8:3d:ec:bd:2a:1b:1d:82:43:89:e5:3a:ed:
58:aa:f1:3f:bb:9b:f1:8b:57:a2:4b:11:9a:98:db:
a1:7c:e3:06:df:06:e1:2b:ef:d8:d3:3b:b5:30:a6:
aa:cf:76:25:84:96:e0:80:42:ca:a6:32:32:c4:a2:
c8:0d:bf:f7:f9:f7:94:c1:29:e3:0a:b8:9f:e0:46:
36:61:d2:2d:00:5b:ec:a9:24:8d:ae:d3:a7:a4:86:
e8:51:35:14:c5:1a:ce:b8:c0:70:a9:4a:1c:14:48:
ed:73:3c:97:d1:9f:00:5e:e2:09:4e:41:f3:1d:42:
7e:d6:45:60:61:d5:d2:a9:3b:da:4d:d1:b1:15:dd:
24:84:3f:96:2c:ec:a9:26:d2:81:a0:16:a0:1a:32:
1e:a6:19:fc:43:8c:a6:91:a7:1b:c1:74:98:f2:b4:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:4B:89:10:06:D3:59:B3:4E:64:80:15:CA:8A:D4:72:96:EA:52
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7f:70:2a:9a:15:02:57:09:71:c4:4b:7e:78:4b:04:ab:ce:
4a:62:dc:f6:7d:37:08:9a:57:c2:a1:68:45:76:42:fa:35:a6:
ac:82:20:7f:85:9a:b5:df:c4:10:21:5c:ec:ea:d5:9d:87:56:
49:3f:22:33:87:92:e1:50:8f:6d:3a:0f:bb:0a:67:81:e2:4d:
3e:3b:40:41:b9:fe:b2:fb:f5:c1:82:62:d0:d4:5d:3f:85:7e:
a5:a5:10:8a:b5:f8:cf:54:7f:5e:db:df:0c:46:72:af:ff:17:
86:c1:b8:11:ce:c8:93:e6:cc:ce:ed:00:79:7e:5e:d8:99:7d:
2f:91:be:cb:05:63:a1:6f:de:d9:18:23:f1:d6:7d:4c:35:e7:
bc:b2:2b:86:d2:cb:6e:e0:27:6f:45:bd:81:99:3a:57:aa:14:
47:89:d0:32:1d:e5:d0:f1:f2:22:46:e5:3f:df:08:60:3e:04:
45:6b:27:39:5d:a4:94:2c:e6:db:1d:34:b6:93:c9:81:0d:77:
80:dc:d8:3a:1d:63:7f:6c:61:ab:9d:71:81:53:1f:1b:d6:cf:
3a:78:b1:f9:9c:25:1c:93:33:4e:d8:21:1b:05:62:17:02:64:
e9:48:fc:3e:1c:0b:fc:aa:1f:91:9c:0d:45:8e:e8:25:ea:62:
02:78:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:06 2024 by rpki-client on console-ams.rpki-client.org