Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: /p+ls5F2xxmGMvtlpywaXDZcg2P3B8NXFlg0XUFhGNw=
Subject key identifier: E6:5A:A1:D4:B5:26:5C:6E:BC:28:1F:DE:B0:E1:A5:72:8B:B8:EA:3C
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0193688F3DFB4C67A1B49BD33074E78B154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 0FEA
Signing time: Tue 26 Nov 2024 13:00:38 +0000
Manifest this update: Tue 26 Nov 2024 13:00:38 +0000
Manifest next update: Wed 27 Nov 2024 13:00:38 +0000
Files and hashes: 1: 1DAJXXrivuscgW0iOZh6aCBYqTo.roa (hash: BQqVMoROLT3FfEF/IwrXi7W2D1e0TI3qWzGOGCskKE4=)
2: 6So1IzRK1T8pR05awDPlZ9N1znc.roa (hash: 74ZTMFoSJrDgu8SqwSIaPheGy94mV5SxO6sCgC3HlQI=)
3: HqfyOfRQJT8VOxbtTAFecKhK7RE.roa (hash: fFOLN3u/Qrzn8t9L9c0uZWZ5OjIjTE40Z0MkVkWB/dE=)
4: IDxG78PQxIN0TCrkzyYuVdJHdBA.roa (hash: fixTjWdDvSCdL00534lofwBIu75Xm36agFhZ9bnIBVk=)
5: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: Qws9Vt3Z6LM98ziTwhKc3a1v7VJA2IRD/lh8K1sVRM4=)
6: Y0KBcsCNAi5RccIGBrFbLkM5T54.roa (hash: NvYthpub3WoBw+3y0gP61w72qKDf1gP2s/VCqfrDD6M=)
7: by_xlg6ECU-5X4HBOx1TO9KSpvw.roa (hash: Ki8FevdVrBu3ikQ9UakfgQuYS1ALt9A3/SJKjhOHUeo=)
8: jqSSnGxPMLBtHiXv47eMBAvrb_8.roa (hash: GddhtWOXLHoU1zIbORIvnmaMzYMgpUsNnxOAOZnpmgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:8f:3d:fb:4c:67:a1:b4:9b:d3:30:74:e7:8b:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Nov 26 13:00:38 2024 GMT
Not After : Nov 27 13:00:38 2024 GMT
Subject: CN=e65aa1d4b5265c6ebc281fdeb0e1a5728bb8ea3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:bc:e4:01:b4:91:0b:d7:3f:bd:5c:cf:ec:
ed:bf:48:f3:94:4d:0b:7f:23:3d:5e:0f:92:14:6d:
a5:d9:e6:f6:f4:2b:c2:dd:d8:d9:4e:12:1c:e2:74:
a8:6c:7d:68:49:b8:08:00:5e:02:43:70:0a:18:a3:
0c:13:c6:d2:1f:5b:01:01:80:18:75:df:69:48:3d:
c0:45:7e:c3:c1:bf:b2:12:6d:ad:23:5f:24:42:98:
2a:c7:df:b8:0c:f3:3e:03:db:6b:51:84:22:bf:3a:
6e:43:bd:82:87:eb:45:c5:9e:67:e4:f8:0d:20:6c:
3b:8c:70:36:72:65:3f:ae:78:f4:54:1d:69:2a:cd:
dd:b6:8d:8b:0d:ac:47:82:97:3e:af:9f:2b:c8:f7:
98:cd:a3:75:0b:b1:47:1a:66:a5:2b:92:7c:36:48:
90:c2:7f:08:96:58:f9:9e:6f:39:7f:b7:f8:f5:94:
f8:79:1b:6e:f2:ae:cb:3f:a9:d6:07:cf:8e:5b:52:
d8:b1:8b:b7:75:53:1e:0e:00:78:a5:56:9a:02:8a:
36:f1:2b:51:ae:27:a1:00:7c:e9:29:85:00:55:41:
8a:8c:bd:ad:26:04:77:f4:8c:a8:92:25:53:90:10:
0c:63:30:58:41:1b:1f:60:b3:9c:17:8a:52:ee:1b:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:A1:D4:B5:26:5C:6E:BC:28:1F:DE:B0:E1:A5:72:8B:B8:EA:3C
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:81:db:10:dd:75:fd:3b:a3:c3:4b:22:9f:40:32:55:58:
da:59:9d:55:ac:dd:a3:75:a4:98:2e:e3:32:8b:82:08:ed:7c:
8c:c7:72:17:fe:22:23:39:2c:27:79:59:ae:98:f4:1b:07:4f:
08:35:1f:09:c8:8f:35:dd:fd:32:0a:32:52:04:13:cb:40:ad:
56:67:db:b7:c6:d2:2a:6a:e9:c3:7d:1b:fe:a9:27:7d:de:c4:
cd:a1:69:7f:7c:4b:c2:40:7d:d3:57:30:11:f9:7d:60:9c:ef:
d2:9f:d8:35:7c:a2:1e:24:de:d0:e1:d5:48:7d:28:87:d9:61:
3d:9e:c8:91:8a:5b:62:f4:0e:d8:51:1e:4b:98:67:5f:56:52:
65:dc:59:08:ca:a3:55:55:b6:43:34:20:f9:da:33:34:1a:52:
a9:8a:ed:9a:bc:4b:64:3e:b5:df:f8:55:6c:a8:aa:a1:be:4e:
4d:7b:34:8a:c4:37:42:0a:f4:20:a1:b4:3d:7d:91:bb:64:4e:
3a:06:8b:29:31:ce:51:69:bd:46:d5:62:f2:37:37:b2:4c:5e:
18:f8:0c:78:96:54:79:83:76:6b:53:a4:da:2f:32:60:87:e0:
13:11:ac:97:0c:e7:dc:72:ef:c1:cf:28:a2:3e:1c:4f:2a:d2:
68:b0:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:52:36 2024 by rpki-client on console-ams.rpki-client.org