Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: ocBQFEUBN3GbUyZb0JlukRW304LW28kwDKMqa9vs/Pc=
Subject key identifier: 17:E0:1C:F0:B6:63:92:9B:66:26:FB:1A:AF:A0:3E:C3:E7:E7:41:66
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 018F8749A09C513DB9B9DE33B904278E7620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:01:40 +0000
Manifest this update: Fri 17 May 2024 16:01:40 +0000
Manifest next update: Sat 18 May 2024 16:01:40 +0000
Files and hashes: 1: GYlRvXs1Zdvb45K-HqLdD1lx0Xk.roa (hash: LsH8/524XJMJXLE/lJ03R9dmHJiOZvoqmGRDD05Za/M=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: 6zDVJLCmwukagKNHpklixTRkkj/QPqg05EwWTPpWvLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:a0:9c:51:3d:b9:b9:de:33:b9:04:27:8e:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: May 17 16:01:40 2024 GMT
Not After : May 18 16:01:40 2024 GMT
Subject: CN=17e01cf0b663929b6626fb1aafa03ec3e7e74166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:6f:c7:62:61:f5:4c:f9:ef:10:86:f0:02:
4b:f2:5a:24:6d:87:4f:27:e9:b3:95:14:7b:ad:16:
1e:f5:6d:b0:0d:36:75:b9:d5:8a:27:b2:ea:90:a2:
51:ea:a4:dc:f6:af:b3:e9:9c:91:69:c3:ad:8b:01:
ea:ad:97:92:5b:41:53:93:f3:0e:09:b8:66:6a:5f:
cb:04:c0:4a:e0:9d:64:14:08:ec:0d:7c:2b:50:5e:
87:fa:09:dc:32:19:45:b4:e3:39:3c:59:44:25:4c:
58:64:1e:92:04:66:08:07:81:30:ea:91:88:08:d7:
c1:f9:a8:39:cf:8b:b5:4a:86:9e:2c:9f:85:3b:e7:
8e:22:d6:e0:c1:59:02:73:c1:f5:fc:2c:e1:90:6b:
d1:d0:c8:06:c5:c2:69:db:13:04:3e:fb:92:68:54:
d0:64:e6:43:66:68:ea:6a:24:d3:2b:c6:a3:ea:0b:
64:08:e8:c5:b9:7c:a1:67:03:a9:ad:8e:98:6f:b6:
7a:5c:c4:43:64:fd:b4:95:43:83:d8:96:de:89:e0:
04:b6:77:b9:f5:63:7d:73:92:0d:1b:da:15:c6:d8:
87:72:27:c0:e1:e4:2e:4a:93:35:18:09:1f:fc:7b:
26:ef:9f:b7:a9:ce:a1:8e:88:ff:8a:93:03:c1:c8:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E0:1C:F0:B6:63:92:9B:66:26:FB:1A:AF:A0:3E:C3:E7:E7:41:66
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a2:46:9c:ac:e8:4d:3a:25:09:61:95:06:fe:27:f7:79:3f:
6a:05:09:96:b8:d4:33:e3:64:71:ed:71:d3:5f:bd:d6:1c:1f:
cb:6c:7d:b4:46:d6:64:3b:a9:de:05:69:0d:8a:3f:3b:2a:a6:
a3:35:16:ac:12:5e:93:cb:13:ad:3d:61:04:fb:0c:74:59:ea:
23:68:24:7c:5e:9f:ee:aa:1c:5f:3d:c3:d5:0a:56:87:ac:ec:
74:8c:da:74:30:8a:14:87:8e:d4:5c:30:10:ae:b7:ba:3b:51:
58:d0:93:8f:4e:4e:9d:af:5c:76:5e:4f:87:ba:42:86:5f:d0:
10:db:e4:60:a3:fd:0e:95:08:3d:88:65:e1:15:ac:bd:4a:cd:
4c:a7:8a:39:e0:e5:7b:d1:70:5b:b4:ec:62:97:8f:c2:22:93:
be:db:9a:ef:be:a2:c0:d0:ee:27:6e:ea:f1:92:9c:a6:9d:67:
cc:84:63:54:79:48:d8:08:f3:c1:71:63:99:8a:3b:62:a7:6a:
bc:0b:35:ea:ed:c0:9c:1d:65:6a:ce:f3:c0:e8:d6:dd:27:2a:
4d:bb:a6:73:1d:1a:14:c3:13:85:df:66:23:89:c4:08:d6:79:
63:fb:b8:75:00:4e:61:05:94:e9:1f:7a:17:76:12:54:30:1c:
10:60:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:41 2024 by rpki-client on console-fra.rpki-client.org