Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: DEMhyQZ/zhg4KCIdn/RS4YCb1PDLWXXx9WBqdkycC3s=
Subject key identifier: E5:B7:18:FC:3E:EF:0C:39:12:87:18:4F:D8:D5:4C:2A:06:C0:B8:95
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01935989DF85F79DFC1E13B4CFC1417F094C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 15:00:28 +0000
Manifest this update: Sat 23 Nov 2024 15:00:28 +0000
Manifest next update: Sun 24 Nov 2024 15:00:28 +0000
Files and hashes: 1: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: K2hRRQNJJX19gXhRE+IO9kY+xwVywZRoIQSOqUiCK3Y=)
2: YGcn0-iWEs_yDLVzFSInFBMOWqQ.roa (hash: Vl1BbJg/j2XxlzC/pWK9ViaOAj8ZubJjBdnqyuL1vjc=)
3: nYzkymfOADhGlk9Y7IraP9lzJ1k.roa (hash: POROf+OfE6w8ZjY/Scz/YwPrtTJ6yEwmrs880Te+kvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:df:85:f7:9d:fc:1e:13:b4:cf:c1:41:7f:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Nov 23 15:00:28 2024 GMT
Not After : Nov 24 15:00:28 2024 GMT
Subject: CN=e5b718fc3eef0c391287184fd8d54c2a06c0b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:b9:bf:85:da:66:83:72:47:7e:ea:6a:56:
0b:d8:16:a0:96:2b:5e:61:99:fe:3d:85:bc:4b:0a:
0b:d6:d8:4f:a3:e1:b9:c6:47:84:14:b4:9b:3e:26:
25:11:08:07:cc:4e:8f:a2:c4:30:45:3c:16:59:1a:
48:39:fc:08:b8:be:b1:63:62:57:89:34:76:62:02:
3e:1e:7b:33:55:ef:cc:75:0e:50:00:5f:15:d7:02:
b7:9e:d9:64:66:2b:bf:c6:bc:e3:cb:7c:55:8c:07:
a3:4a:cb:b0:c6:dc:75:1f:a7:84:2f:a1:60:29:fb:
d6:b4:40:11:03:7f:51:7a:59:94:e3:c5:66:38:aa:
f5:69:e7:36:d5:b6:7e:51:0e:23:60:5d:20:b3:5d:
17:fe:9d:0e:d4:df:13:18:5c:81:c4:01:f6:4f:f6:
da:5f:af:a3:4a:85:a6:50:21:1e:bd:73:5c:2c:ac:
5c:06:b1:52:4a:7f:f7:b7:b1:e4:bd:ed:74:b2:ab:
25:d7:09:b5:0e:00:77:ec:f6:3f:f7:04:a4:d1:07:
77:0c:0a:e3:6b:05:f5:94:78:57:3a:91:96:ce:bc:
91:99:17:c6:a0:3b:89:cb:7d:58:2a:3b:43:e3:4e:
86:b5:17:ec:ee:cd:ef:2a:65:86:4f:a1:0e:c8:a3:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:18:FC:3E:EF:0C:39:12:87:18:4F:D8:D5:4C:2A:06:C0:B8:95
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:22:72:4f:db:08:b4:ef:af:43:ad:03:8f:06:9b:bd:dd:
7b:4f:90:8b:a5:f1:c5:50:d4:fe:df:c6:57:70:f9:49:1d:c7:
f1:2c:1e:2f:da:30:dd:bd:f5:83:56:39:80:bf:a2:f9:77:c5:
37:be:59:c0:9c:ea:ed:d3:70:84:b9:76:17:e4:56:68:7f:6a:
bf:18:84:21:8f:7a:9c:7a:b2:2f:48:c8:e3:82:3e:4c:19:45:
04:8e:2c:bb:0a:eb:e0:b1:8b:da:1c:ea:99:70:44:17:c8:4d:
e0:6a:16:e6:c6:81:72:f3:d7:35:2e:55:b3:c8:b7:3b:a7:77:
c4:3e:46:85:a1:8c:40:be:73:3a:fa:53:bd:57:97:af:17:c0:
72:c9:8c:7e:8c:42:dd:7e:a4:a8:9e:96:1a:78:46:32:98:dc:
f6:4b:2c:88:48:16:47:6f:66:e3:57:f2:b0:08:8d:39:47:fe:
c7:ee:d1:ba:b4:11:2d:72:43:50:38:dc:c3:8f:d0:81:17:2c:
b4:ad:19:fd:35:9b:08:5f:36:ba:52:a5:69:0a:d9:ea:90:3e:
45:a2:92:38:2b:f2:27:4a:b4:84:30:6d:d7:7c:b4:32:20:d9:
07:b4:a7:3c:c7:a3:89:d5:e2:fb:9c:c3:c5:e9:39:56:70:a8:
ce:b6:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:55 2024 by rpki-client on console-ams.rpki-client.org