Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: 1JQc7RzsnbKhZQDKvB+V3tX4Q65XYyEAXW/AjMF6TtQ=
Subject key identifier: 68:20:58:04:D2:4C:D0:48:94:A9:5B:F2:71:4F:10:AC:C3:72:95:1D
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019369D8A98A530D921BD395B45EEF61F192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 19:00:26 +0000
Manifest this update: Tue 26 Nov 2024 19:00:26 +0000
Manifest next update: Wed 27 Nov 2024 19:00:26 +0000
Files and hashes: 1: Ul6WEgikxV-kZckZAJ5M7h-3ZYc.roa (hash: 5A+QcrHLrzZEGfjJJKje1gwlAV47CJM1731dDXHLgUg=)
2: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: SBku7BFAuHyPNedR/vp2ZEDkBPqNz4qke1d9MvNmTWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:a9:8a:53:0d:92:1b:d3:95:b4:5e:ef:61:f1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Nov 26 19:00:26 2024 GMT
Not After : Nov 27 19:00:26 2024 GMT
Subject: CN=68205804d24cd04894a95bf2714f10acc372951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:5a:60:46:44:0d:7c:4d:fe:14:67:35:57:
34:05:23:36:1f:e0:73:1d:fa:3b:89:25:ff:9b:88:
20:ec:0e:f7:20:ce:89:1e:9a:ff:3b:f9:9a:6f:e3:
3c:0d:3e:a8:48:fe:9d:a4:49:f7:f2:85:32:90:90:
4a:de:4a:37:2e:6f:52:e1:30:2a:f4:8e:5e:cd:09:
38:5a:f0:98:12:72:c9:8d:b8:02:91:9b:5f:79:d5:
17:1e:94:ab:0e:a5:99:a4:47:07:5c:5e:e5:e7:b2:
dc:21:a2:4f:62:09:02:cc:7f:c2:16:6b:0b:68:1a:
b1:98:3a:84:68:18:10:cd:45:66:af:07:4d:a2:f0:
2e:1a:db:c8:f7:89:29:86:ca:ef:c3:db:48:4f:02:
80:45:47:1f:ed:31:a2:ae:66:49:29:7a:f5:38:0c:
00:fe:40:c1:c4:a5:5d:6d:84:5c:7e:a5:a4:45:8a:
66:65:e4:b4:3f:ac:82:be:be:0b:51:0e:a7:f7:e7:
d3:5a:7c:79:b3:1b:1b:73:14:76:46:04:33:f8:a6:
d0:be:c3:3c:e1:8a:73:56:1b:91:dc:51:61:04:77:
45:16:16:19:20:a5:01:3c:88:c2:0e:0e:ca:29:32:
52:a7:c2:29:93:37:38:dd:13:d5:f0:a1:de:96:a1:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:58:04:D2:4C:D0:48:94:A9:5B:F2:71:4F:10:AC:C3:72:95:1D
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ce:e2:fa:49:97:00:e1:eb:cc:09:6e:2d:8f:08:fe:90:e6:
e5:d4:a7:44:dd:16:d5:76:b4:65:f0:49:fb:24:f8:24:00:d9:
9b:0a:96:c7:8e:2d:ae:a8:bd:f7:bf:7a:a2:02:d3:a9:f8:fb:
18:39:ea:95:fb:85:c8:91:5c:e4:38:a9:55:be:40:1a:77:3c:
c7:5b:eb:5d:dc:ac:95:73:b9:5b:34:ab:7d:fe:74:76:b4:cc:
33:a9:70:1f:60:e4:b0:3c:ef:53:7e:85:b0:bb:fd:84:4e:55:
bf:ed:2d:13:54:14:f4:c3:8e:e6:3a:35:71:c8:17:84:72:5e:
c3:6d:31:48:1b:ee:83:e8:a5:fd:ca:4d:5a:dc:3d:f3:f9:64:
7a:e7:4a:b7:df:cd:c8:16:7f:53:ce:a7:d4:65:0a:14:73:87:
28:71:76:1c:f2:43:4e:4d:30:e6:88:93:96:84:b2:2a:df:47:
61:13:c6:63:44:e4:1a:d5:35:34:95:66:07:cf:96:50:f8:73:
50:81:97:45:d7:af:e6:27:cd:f7:17:92:d7:56:61:46:99:72:
56:a5:08:5c:2b:e5:54:10:4f:7c:77:51:c0:e8:b6:ae:a1:97:
cf:93:04:db:e0:6f:db:e3:e9:4d:1e:45:cf:e2:31:94:2e:ac:
5b:1e:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:22 2024 by rpki-client on console-fra.rpki-client.org