Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: BIOI34tbSRXhbzPfdDfs1kxRzF4nhzm+Mwxj7MkwWWY=
Subject key identifier: B4:7C:56:F1:7B:2F:6D:00:99:2E:73:E4:45:01:52:41:62:8A:71:D4
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019368FD2D7B6C026A1FB3145DE7961611AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 130D
Signing time: Tue 26 Nov 2024 15:00:42 +0000
Manifest this update: Tue 26 Nov 2024 15:00:42 +0000
Manifest next update: Wed 27 Nov 2024 15:00:42 +0000
Files and hashes: 1: 73Frd6Nk-nyS_SxjtuD1d6GgeFo.roa (hash: BbbQ914VnONli+eJ+bVJRtkkvZHNZyNxe/ZdW1Jq8t8=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: 8fz8+yX/4JG4tDnd9RiJX8amD4yr2C+EhdyteuYfino=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fd:2d:7b:6c:02:6a:1f:b3:14:5d:e7:96:16:11:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Nov 26 15:00:42 2024 GMT
Not After : Nov 27 15:00:42 2024 GMT
Subject: CN=b47c56f17b2f6d00992e73e445015241628a71d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:a6:04:0e:79:ae:e3:43:c7:1b:e4:48:a0:
8d:b3:0c:6c:c0:57:05:b7:3d:72:38:5f:21:06:88:
15:d2:59:f3:2f:43:42:3b:32:bb:ee:50:04:a0:f1:
ec:fe:f9:21:4f:2d:5f:b1:6c:1d:2e:30:10:b8:3e:
fe:b0:cb:7d:94:0d:b9:a6:cb:3c:ff:db:0e:8a:ee:
b9:b0:98:3d:2c:5d:9f:6a:89:fd:81:dd:67:7f:a2:
fc:b9:1e:d1:f4:d5:e7:98:a1:51:7c:aa:c0:24:2c:
7d:02:fc:c1:a6:de:91:50:7a:ed:84:ee:c0:0d:f1:
20:72:1e:fa:78:1c:e8:9f:6d:4f:be:aa:c4:04:01:
02:4c:cd:ec:ba:67:af:0e:e8:1d:85:eb:1e:79:95:
64:81:27:e4:b7:7d:b9:0a:a3:1e:2f:94:49:59:f5:
3d:09:21:e1:3e:04:e6:6a:93:1a:47:fb:49:c9:1e:
cd:52:4f:73:02:fc:da:67:df:d2:be:be:bb:71:ec:
16:c6:4e:0a:62:d3:e8:00:e4:49:df:a2:3a:31:28:
3b:d0:14:e8:6d:dc:ea:36:36:93:a8:6c:b6:33:96:
03:3e:de:63:1b:f9:4e:30:8d:fc:c4:78:f7:d0:6e:
39:c9:82:f4:85:6c:53:f8:9c:8d:aa:df:77:f0:59:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:56:F1:7B:2F:6D:00:99:2E:73:E4:45:01:52:41:62:8A:71:D4
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:74:0b:b0:e2:9f:e8:1c:7e:bc:3c:88:4b:d8:9d:28:8b:
87:8d:39:82:3e:e9:2e:8c:8e:3b:19:27:86:aa:85:48:cc:f3:
c9:56:c6:43:3c:2b:54:21:6f:5d:9f:61:c6:90:9e:2e:a6:cc:
2d:e1:7b:5a:7e:e5:a1:eb:87:26:b5:40:e1:b3:cf:fe:82:15:
fa:fd:a3:76:bc:58:7f:cd:67:4e:e5:49:15:7c:e4:0e:a5:2b:
5d:62:a9:4b:a1:93:8c:b4:01:75:fb:6d:7e:f7:b8:41:c5:bf:
cd:cf:73:86:12:1b:ac:74:ab:90:1c:6e:4a:17:fe:16:c0:7a:
49:32:e0:e4:9c:5f:f9:e3:89:ed:ed:49:92:85:80:a8:aa:2b:
05:df:18:fb:d1:44:b4:cf:dc:c8:d6:6d:ba:43:c2:5c:a1:de:
0a:c1:04:0c:fe:2b:47:a2:35:e7:85:4b:4e:f8:a3:ae:47:9a:
df:ab:1e:f3:88:30:52:d3:2a:ab:ae:3c:e9:ed:96:9e:75:ad:
73:f6:34:2a:0c:5b:81:8b:d4:c6:20:ec:75:25:e9:4f:bb:14:
d6:f8:f8:44:fb:fb:7d:af:37:5e:64:f7:f9:f9:fa:49:2c:68:
3b:a6:b2:2d:63:43:75:97:88:c3:10:b6:35:8d:47:71:be:f4:
d9:b4:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:48 2024 by rpki-client on console-ams.rpki-client.org