Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: r7q85q+nfRd9HmT++yf4j1XIpKR6iRiLGmrSoXHuJAY=
Subject key identifier: 86:66:F7:E3:86:1A:55:3C:6B:64:8D:36:F7:1B:53:10:E5:AE:7F:33
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 01938C9D2944FD01A523DA64B088FF1260E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 030C
Signing time: Tue 03 Dec 2024 13:02:10 +0000
Manifest this update: Tue 03 Dec 2024 13:02:10 +0000
Manifest next update: Wed 04 Dec 2024 13:02:10 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: YK5N+LBcsDrHFVBt/tPcRWkNrRKlpyifa1BG/gqvjHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9d:29:44:fd:01:a5:23:da:64:b0:88:ff:12:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Dec 3 13:02:10 2024 GMT
Not After : Dec 4 13:02:10 2024 GMT
Subject: CN=8666f7e3861a553c6b648d36f71b5310e5ae7f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:5b:79:2e:c2:66:5b:47:ca:67:3d:a8:71:
60:6a:ad:f3:36:01:eb:a7:05:f3:88:1a:55:f0:30:
11:03:39:ea:85:d9:1e:88:2d:47:4d:62:2a:c8:a7:
47:27:44:7f:fc:f5:40:f6:ba:28:52:02:13:4b:a6:
a1:e9:66:c8:df:d9:3d:43:3a:22:e4:93:ea:d4:21:
52:aa:35:cb:41:57:2d:cb:3c:91:5d:bc:23:86:47:
94:98:b2:6f:bf:54:36:19:3b:78:41:b1:1e:6b:58:
b4:0e:23:7a:27:3c:e1:bf:ca:97:20:27:e0:1f:12:
57:be:b4:83:ad:ec:6a:10:f1:e8:52:af:f2:df:b2:
24:67:4b:49:6c:21:60:28:b3:54:66:3c:10:4b:2c:
74:9f:47:23:96:99:dc:8b:21:17:72:b2:40:ac:6c:
3e:bc:3f:a0:03:8f:43:40:d6:fe:15:2d:7e:45:a9:
6b:ac:9a:fe:33:42:b5:67:65:59:79:0b:c2:7f:18:
21:4b:3d:74:e1:b1:db:31:bd:18:de:65:a3:55:0e:
37:2b:89:25:ef:d3:14:dd:8c:5b:5c:60:58:68:6a:
4d:4f:b4:45:9a:9c:f6:7e:57:0b:0f:04:9b:3b:c3:
26:a2:3b:45:57:a6:c4:cc:7b:23:b0:0e:1a:27:7a:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:F7:E3:86:1A:55:3C:6B:64:8D:36:F7:1B:53:10:E5:AE:7F:33
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:10:0b:34:02:ef:05:05:30:de:13:01:05:50:ab:8d:ee:86:
c1:43:5b:a4:7a:4b:8c:04:81:77:6b:a3:42:28:34:ae:82:cf:
2e:e2:58:b3:99:58:74:7f:bb:d8:86:76:6c:d6:aa:1d:4a:4a:
30:1d:b4:bf:49:c1:f9:c1:3a:6e:7e:7f:38:6d:8f:aa:80:03:
75:97:86:59:c4:b1:6d:fa:69:98:70:6f:5b:63:fa:6e:fc:ae:
04:6a:fe:aa:bc:11:37:11:63:a2:4d:1f:2e:eb:b0:d5:29:48:
3e:0a:09:5a:a0:ea:61:94:36:67:61:d2:64:b4:96:bd:a9:d2:
1e:84:09:05:6d:68:02:66:ad:cc:a0:41:80:c4:ae:d4:dc:71:
8f:67:f8:2d:09:89:75:b8:5d:15:50:d3:ec:07:45:dc:2c:1a:
a6:ce:64:51:d5:6a:bb:d6:1c:e0:e3:3d:65:84:63:dc:b8:af:
00:6a:12:15:7d:09:17:dc:d3:6f:42:20:02:6f:16:51:7d:a6:
4b:2a:1f:27:5e:da:77:fa:08:fe:b8:15:22:53:76:64:06:7c:
7a:65:88:bd:7a:84:56:fb:04:15:e7:22:ed:3a:69:d5:66:74:
9c:88:a0:07:62:48:f4:7c:60:08:3f:7b:e5:58:48:cb:b4:e8:
5d:24:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:08:21 2024 by rpki-client on console-fra.rpki-client.org