Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: e8DBONcp2ENTDbjmzWNEF2pJ7glNQpdVxSlmob8BFWU=
Subject key identifier: 8B:52:0F:C2:B1:29:21:6D:94:7A:55:7E:0E:88:B9:54:71:5D:A4:31
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01936B2268308E85B8C45290E9A0460FC1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 12AB
Signing time: Wed 27 Nov 2024 01:00:37 +0000
Manifest this update: Wed 27 Nov 2024 01:00:37 +0000
Manifest next update: Thu 28 Nov 2024 01:00:37 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: +4f6TEJ2JxtxgA02pXrhWOOhJ5Kdd1uoKyEiFqVA8/o=)
2: q32fJRV_ZmnFiC6omwel6ivupk8.roa (hash: S4K8XnSQAQP4221DfSnTkv1/Z69NEPcGEYOltK4r7Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:68:30:8e:85:b8:c4:52:90:e9:a0:46:0f:c1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Nov 27 01:00:37 2024 GMT
Not After : Nov 28 01:00:37 2024 GMT
Subject: CN=8b520fc2b129216d947a557e0e88b954715da431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:c2:91:01:9f:eb:da:41:e0:73:a5:bb:40:
ff:2e:b8:d9:b2:9f:83:49:cb:0d:f9:21:a5:43:8d:
c4:98:f2:b4:86:46:40:c8:b7:24:42:0a:0a:a9:9a:
73:02:8d:bd:f4:a6:67:97:74:8d:8e:8a:48:ce:95:
85:ea:02:4b:f0:8e:00:87:1c:cc:3b:d0:0d:55:82:
14:b2:4e:ce:e2:7f:52:ea:45:72:d8:2d:9a:7a:c8:
2e:fa:7b:62:dd:d7:ad:8e:42:5e:a5:ff:2e:38:93:
62:b8:31:a0:e2:91:5e:12:67:b8:1e:a3:a1:66:a6:
c1:8b:fc:18:18:92:a6:d4:4d:b2:42:63:99:b0:c6:
f2:60:85:af:5a:94:3f:3b:30:54:c4:18:a3:8c:bb:
d8:2a:4a:61:4e:99:cc:2f:3f:3c:a0:c5:4a:59:80:
e5:87:66:9c:d5:f0:5e:b6:5e:14:a4:21:97:3b:38:
62:d2:a1:4d:f6:62:8c:e3:a1:4e:dc:6b:28:34:d2:
22:7f:e4:88:50:00:be:ed:8a:4e:17:d4:a1:47:0b:
e8:05:02:55:8a:ee:a5:34:1b:ac:05:4f:4b:45:8e:
91:07:59:db:bb:b7:d8:ff:80:21:c0:84:83:b6:9e:
ae:6b:7b:39:ce:f4:e9:76:63:02:23:e0:ad:ee:c6:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:0F:C2:B1:29:21:6D:94:7A:55:7E:0E:88:B9:54:71:5D:A4:31
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a4:da:d6:fb:1a:b5:b1:23:77:3d:f1:75:da:9a:38:0e:c2:
c7:70:69:4a:ca:aa:07:ea:71:c1:6f:49:f5:1b:4f:13:c6:55:
1a:0d:d3:a6:83:03:de:9f:95:e1:01:f3:0f:fe:e8:cc:79:57:
f0:6c:c4:22:3c:04:25:b8:4b:47:b6:56:35:53:a2:db:30:05:
91:c4:c6:b4:1d:64:d6:72:7a:14:4f:45:6d:55:7b:cd:c2:e6:
07:5c:63:6d:34:ae:e7:24:e9:d8:b6:f4:a7:f9:47:33:cd:4b:
6a:d3:c4:48:63:14:5f:c7:8e:2f:03:0f:b4:67:ff:7d:a5:c4:
0b:ac:ed:ec:6e:e8:25:1e:14:7e:f7:4a:f3:21:28:f6:2b:bc:
2a:66:2a:58:44:f0:a9:93:79:3b:e0:30:c3:02:b1:93:77:99:
51:d7:da:3c:d3:60:c0:60:7c:bf:7c:35:2f:d3:9a:ef:a4:ac:
7a:b3:92:65:71:0e:87:dc:13:69:c3:32:b6:1c:2d:77:30:cd:
15:e7:63:a6:65:08:af:09:55:ef:88:9d:7b:1a:11:53:59:a1:
3d:35:c9:1d:48:c2:91:e8:0f:1d:c7:ca:fe:86:e3:3f:5c:46:
b6:9e:48:a3:07:4a:a6:69:62:e5:fc:e1:5f:bd:b6:a1:bd:c2:
71:db:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:26 2024 by rpki-client on console-fra.rpki-client.org