Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: jXgXHnrkEH3YdAQP2Gb4LLRaW15wZ6ycFvN411LDYo0=
Subject key identifier: 1C:7B:1F:E4:E9:FA:C7:07:4E:83:01:5E:E7:26:1D:46:C2:01:99:07
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 0193579BD8B82EAA64179AB5A49ADD0BA14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 08DF
Signing time: Sat 23 Nov 2024 06:00:51 +0000
Manifest this update: Sat 23 Nov 2024 06:00:51 +0000
Manifest next update: Sun 24 Nov 2024 06:00:51 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: QOQ2FsAlF2ofNzhLHik1p+SacQQsHDdLInrJEukiuak=)
2: QohTLVUJaNTfn28E9nm8m7YPAN0.roa (hash: V967Zy7GXOYU3lwd60hgtDRxnhS7D7R/wc/oUPUVHX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d8:b8:2e:aa:64:17:9a:b5:a4:9a:dd:0b:a1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Nov 23 06:00:51 2024 GMT
Not After : Nov 24 06:00:51 2024 GMT
Subject: CN=1c7b1fe4e9fac7074e83015ee7261d46c2019907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:46:ad:40:d2:2f:a7:b6:e5:47:2e:b6:d5:
13:57:ef:81:90:92:3e:ed:15:37:43:a3:5c:84:e1:
34:00:a7:96:bf:23:1e:40:7d:fa:7d:cf:da:2b:e7:
f5:50:34:e7:2a:3b:a3:d9:70:d1:b3:5b:27:47:70:
8f:64:4c:ec:a6:d7:26:7e:f8:9e:9c:13:89:d1:93:
8f:90:8c:b3:69:7b:0c:cc:6d:be:aa:6d:ac:4c:ab:
3d:e0:ce:09:8f:fc:b2:72:59:dc:37:c9:c1:ca:d8:
26:e8:52:5e:12:f0:f3:96:f2:bb:6e:df:01:d0:9b:
ab:f6:47:6f:c8:3c:d6:0a:ca:20:6a:78:d0:be:83:
60:7f:a6:45:5a:06:4b:54:85:66:1d:c4:6d:02:fb:
c9:4d:35:37:7c:c5:dc:7a:ea:70:cd:c5:20:1c:13:
22:76:57:04:a9:76:d3:6a:6c:d5:5c:07:7f:f6:53:
ac:f9:3b:e5:56:e2:39:d0:c1:23:94:e6:4e:cd:1d:
37:f3:3b:ff:9a:46:0d:ad:ce:c1:72:75:16:a6:8e:
56:8f:0c:e6:13:d5:1c:06:62:83:6c:44:60:ad:45:
92:ef:fc:95:c1:1f:82:ed:2b:f8:24:59:db:d8:82:
04:0f:56:b7:ba:94:77:f9:56:3f:71:80:30:c1:e4:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:1F:E4:E9:FA:C7:07:4E:83:01:5E:E7:26:1D:46:C2:01:99:07
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cf:9e:2f:0c:46:d3:a1:9e:32:fe:b9:c7:1e:17:be:20:1f:
e2:4e:4a:50:18:71:ec:2a:56:f9:7e:47:c1:95:35:ef:77:58:
4a:ca:32:73:8a:c5:28:ac:a6:b7:db:02:3d:20:7b:1d:70:63:
0e:9c:53:e1:48:5a:01:b1:e9:d7:ac:28:0d:93:61:33:29:c1:
2b:42:89:12:be:01:f6:3b:e3:d4:6f:10:5d:76:0e:e3:1c:88:
0b:fa:80:d5:e8:f8:ae:f2:6b:d4:16:03:9b:c7:f2:05:d1:82:
aa:0d:68:ff:bd:b7:f2:e3:1e:b9:59:e0:ae:e1:08:84:57:cd:
b4:c9:d2:aa:94:82:63:f6:34:2f:ee:4e:cc:bb:36:e7:75:80:
59:20:28:ed:1c:21:37:e2:67:75:75:dd:72:25:b2:3f:3b:e4:
c2:99:78:89:df:49:d2:ee:ff:d2:d7:4a:cb:04:42:5b:46:16:
3f:13:e6:d5:32:cf:44:ca:98:48:08:28:b6:ae:41:b0:be:fd:
c6:ee:fb:78:44:fe:c7:cb:0c:00:f6:73:90:13:78:1e:6e:f8:
b4:c9:23:9f:f8:45:b4:bf:48:f8:26:b6:36:2d:ec:2e:74:03:
9a:16:92:1a:92:6b:bd:3d:e4:59:13:d2:d5:f7:d9:b6:1f:0e:
ea:0c:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:14 2024 by rpki-client on console-fra.rpki-client.org