Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: JoGiDkvlRUa6WotyMx8BBYBDwI6l9OjJPWEmsRPUB48=
Subject key identifier: 87:81:F8:46:73:2C:4A:F3:BA:F7:36:71:84:D6:8A:BC:5D:36:A4:7E
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 01935809580CF2DAB6F0596C6EDB55BFE70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 08:00:27 +0000
Manifest this update: Sat 23 Nov 2024 08:00:27 +0000
Manifest next update: Sun 24 Nov 2024 08:00:27 +0000
Files and hashes: 1: 3W847SymzIs8P8JVFggqpjeQKsQ.roa (hash: gqThGCUREjlJsrkvwyEbF6pmaeSkJV+PMPOCPYUS+M0=)
2: SIX2qb-e2mSCyTKgkkq8qnQsi90.roa (hash: /DzQbHQLHk3H/c7jgFIp0Ta8i/c3zP6zRWfSLVlD+M0=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: SL4Faje6yDFM72QVIgf0BwSYT/Zjb/JfZGrwT6/TlNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:58:0c:f2:da:b6:f0:59:6c:6e:db:55:bf:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Nov 23 08:00:27 2024 GMT
Not After : Nov 24 08:00:27 2024 GMT
Subject: CN=8781f846732c4af3baf7367184d68abc5d36a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:e9:cd:68:2a:49:ea:32:e2:d4:e5:54:4e:
fa:fc:87:a0:35:59:64:94:fd:26:5b:d9:05:94:57:
af:de:e9:ad:5f:34:3f:8e:b5:c6:cf:b9:2b:63:08:
1f:5b:00:12:40:c4:b2:e3:2f:9b:61:22:13:42:36:
4c:44:1f:12:6c:dd:ce:8b:30:06:0b:a9:ff:73:e7:
a5:fc:97:50:32:b0:cf:76:ac:35:a0:9c:9d:cc:54:
5a:b0:7a:0d:2a:c6:45:0a:d9:dc:e2:e9:f0:2b:9b:
bb:c0:c0:76:41:0e:34:88:2c:07:98:b3:20:95:fc:
67:1f:6f:97:8f:30:e3:80:a5:1d:56:2c:6e:7d:fb:
f6:39:8d:9b:9f:73:a7:97:1e:e4:ec:35:1b:53:2a:
1b:a9:92:6d:ea:2d:6f:6b:c2:4c:55:90:ad:56:ca:
7b:7c:76:1d:08:96:93:62:6f:01:e5:d5:77:6e:cb:
85:28:24:4d:4c:23:11:f3:0d:8e:a2:a2:42:b3:69:
ae:90:57:4c:d8:45:04:f1:1b:23:04:87:ed:17:e1:
83:1a:7e:ae:e3:bb:b7:25:65:34:3c:c5:ce:e0:3e:
da:1b:80:f1:85:06:65:b7:3e:51:90:0b:2d:02:f1:
16:27:a0:01:87:9f:ec:3a:1d:fb:36:88:d1:48:45:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:F8:46:73:2C:4A:F3:BA:F7:36:71:84:D6:8A:BC:5D:36:A4:7E
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:be:7b:7d:cd:95:f7:d3:bd:03:c7:f0:87:ed:77:03:00:b5:
c2:b2:40:f9:9b:63:79:93:f8:79:77:a0:ab:96:5f:3c:9a:81:
d5:07:b3:a5:a5:d7:45:8a:51:70:a2:75:cd:96:8d:5f:ed:92:
7e:a4:42:95:de:43:9e:ee:72:01:7f:d6:db:5c:ca:ca:8b:d2:
dd:fb:7f:e9:63:52:29:fe:39:8b:eb:70:2e:34:9f:18:6b:96:
f7:e8:6c:21:01:58:9a:2c:55:a7:ca:e0:d9:da:a6:54:08:6e:
54:4c:bd:22:e6:e8:ee:ad:3f:a0:dd:39:bf:09:92:5a:32:ca:
f0:e6:68:4b:27:81:8c:c3:70:ca:8a:86:a3:c1:91:1e:1c:34:
c0:95:40:48:a1:ea:71:4f:e7:0e:4e:87:cd:4c:6c:b5:87:00:
dc:ed:c6:d7:48:96:69:15:70:42:c4:b5:f5:a8:df:50:69:b7:
e4:e4:5a:e9:46:34:5a:7e:69:10:b1:0d:db:a2:2d:e2:01:19:
58:83:47:76:e7:5b:29:cb:9d:b6:f3:a0:be:fc:80:e7:a9:ed:
ad:0a:c3:f3:51:0c:e2:77:ad:7b:9f:44:2d:5c:20:6d:f9:98:
13:5d:a0:f6:52:8d:bc:99:ab:d7:59:5d:64:60:e1:10:e0:52:
73:0b:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:30 2024 by rpki-client on console-fra.rpki-client.org