Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: pDydygG5FprRaffnRf2Eady9wNA0mQQBeDkiE3yCZkw=
Subject key identifier: 48:AA:03:4B:B5:DD:49:85:BB:2D:ED:5D:20:62:B4:08:18:3A:BA:53
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 018F8891F1958FF827FC1281B20BB8E09FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0560
Signing time: Fri 17 May 2024 22:00:16 +0000
Manifest this update: Fri 17 May 2024 22:00:16 +0000
Manifest next update: Sat 18 May 2024 22:00:16 +0000
Files and hashes: 1: D6zQdbFIeCXRKhzZJuG-P8Xwggk.roa (hash: qsqpRFCN3PADhlcj0MZ984amQ2rZAcH+dJpbwsdpBwA=)
2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: 3ug2vfZ8ad782JjTPK6bUufc6SWcMgwYvC/s0VuSwlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:91:f1:95:8f:f8:27:fc:12:81:b2:0b:b8:e0:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: May 17 22:00:16 2024 GMT
Not After : May 18 22:00:16 2024 GMT
Subject: CN=48aa034bb5dd4985bb2ded5d2062b408183aba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:06:ea:0e:6d:60:04:1f:22:df:59:c3:1c:
5e:f7:11:2f:33:dd:93:3f:2e:00:61:d1:cb:23:15:
5d:10:50:21:33:00:f8:e0:bb:ad:86:eb:48:57:c2:
da:36:d3:98:f9:bf:e8:63:32:81:7b:bd:d5:f5:fb:
5d:6f:33:ee:8a:b7:71:83:d2:21:48:5c:e6:79:ec:
4a:54:bf:dc:0c:53:08:ef:2e:3f:5f:5d:9e:7b:07:
d8:02:5d:93:34:a7:6f:e2:2f:08:03:99:db:49:cb:
94:fe:4d:55:bb:c8:d9:b7:d5:57:c9:5f:6a:3a:f6:
7d:bc:7d:48:49:f4:2a:c7:c5:21:9e:25:69:74:f6:
50:76:7b:11:3f:d1:da:3d:09:47:a5:25:2f:21:7c:
94:7f:01:8a:18:68:11:eb:27:fe:6a:a8:4b:77:79:
89:d7:3d:e1:1c:19:66:0d:16:27:35:10:5d:d2:f4:
6b:f5:1e:1b:7c:10:15:f6:a7:7e:31:97:94:cf:99:
e2:0f:a8:3c:85:fc:5d:93:67:bb:e0:b2:af:eb:52:
e8:d4:81:14:74:ac:42:fc:14:d1:c6:e5:9c:e4:c1:
2f:24:2c:d6:d5:ad:25:75:b5:bd:67:a7:e3:00:f9:
df:5a:80:08:8a:4a:12:55:5a:a3:d8:a3:b2:ec:1e:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:03:4B:B5:DD:49:85:BB:2D:ED:5D:20:62:B4:08:18:3A:BA:53
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e4:d3:b8:e1:33:d0:a1:74:f4:7c:18:e8:bf:de:5e:b3:6c:
99:16:a2:26:cb:62:bc:0c:3b:0d:77:bb:14:64:54:55:9d:24:
2b:f6:9b:eb:2f:4f:9c:c7:4f:13:21:5f:d4:6b:39:5a:ce:54:
04:f1:71:c5:7f:93:3f:69:c0:7e:76:23:d7:9b:6b:f7:ce:fd:
93:47:37:0f:56:7e:64:a9:e2:f0:80:14:8d:99:5f:34:d8:67:
0f:12:7d:3d:63:13:cf:10:ad:a8:58:06:a9:79:58:90:ba:1a:
a9:db:e6:63:28:0f:34:53:35:19:af:d6:1b:4b:fd:45:42:99:
be:90:04:a6:23:70:7e:15:1f:d7:33:ec:bd:e5:75:3a:2e:bc:
a6:6f:91:d8:dd:d0:52:28:be:6b:65:38:40:6c:4a:b1:cb:8c:
b3:23:a0:44:1a:15:de:34:e7:ce:28:75:f0:8a:40:b8:21:f2:
46:10:64:cd:0f:d1:65:dc:9b:61:de:49:65:e3:5c:e7:b5:9c:
29:f9:23:83:eb:52:d3:49:26:df:56:77:c0:12:9c:f9:d2:e6:
ba:e8:92:72:ff:68:7f:c6:7a:50:0e:4a:9f:d7:20:59:bb:ee:
ac:f9:e9:a3:a1:ce:24:1c:e7:da:42:af:18:9e:80:32:03:fe:
0a:7d:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:40 2024 by rpki-client on console-ams.rpki-client.org