Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: w9wKRTIg7VN/TUIJpFx9Ob9uhEm9lmnls+1zLlwQYX0=
Subject key identifier: 3F:27:DD:2F:26:9A:9A:F4:7B:41:51:5E:5D:BE:F1:EC:DB:0B:0E:09
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 01936A0F788AD6B231490C975C1D872E5116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 05A9
Signing time: Tue 26 Nov 2024 20:00:18 +0000
Manifest this update: Tue 26 Nov 2024 20:00:18 +0000
Manifest next update: Wed 27 Nov 2024 20:00:18 +0000
Files and hashes: 1: PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa (hash: P4sTLh1bsmJSU9Mo+JJ1w6TCxPWXENK9YTu3l198pcg=)
2: WIiqYBMicffdaDGfXNEqVifxGw8.roa (hash: Bem/8DC0+/4TKfU86R9nwh2NYlU/RLz+ZgIFGu9T0VQ=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: 082GanqE+AngkZbHhBy/Y/8QUg/hQjX2ur8ybe6X520=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:78:8a:d6:b2:31:49:0c:97:5c:1d:87:2e:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Nov 26 20:00:18 2024 GMT
Not After : Nov 27 20:00:18 2024 GMT
Subject: CN=3f27dd2f269a9af47b41515e5dbef1ecdb0b0e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:dc:84:9c:c3:80:8b:10:3e:70:75:a6:78:
fb:6c:85:ca:9c:f1:1b:20:ac:2e:09:89:09:f2:1e:
dc:19:aa:ea:8f:8c:62:86:3c:01:de:06:9e:63:9d:
e5:c5:26:ff:11:ac:d5:d8:63:08:53:f6:12:33:d3:
fd:ee:7c:db:ab:43:28:e6:21:a0:7b:5c:63:80:2d:
d2:81:f9:91:d6:ae:fd:44:8b:01:72:82:78:a1:86:
d4:e7:b0:7b:58:b2:6a:27:74:ef:ba:30:12:dd:aa:
b9:f0:97:6d:95:9d:fe:58:af:94:18:62:bd:36:f6:
30:17:d1:aa:44:cc:d7:62:89:5c:23:d4:01:39:73:
77:65:c7:b2:7d:37:7c:31:c9:19:c6:e3:f3:93:47:
84:dc:e8:de:c2:44:1c:0c:7a:59:0b:0d:21:b0:21:
f9:21:9f:e8:0e:7e:a0:3b:49:db:cc:de:9d:bc:b3:
b3:08:70:72:68:f7:ea:1c:5d:e0:64:3e:75:57:20:
e1:46:b8:8e:05:98:90:1f:98:f5:40:0b:5e:ea:17:
36:fe:c8:b7:c9:b2:dd:38:56:12:6c:fb:ee:ce:87:
10:d2:f2:89:1f:04:a2:d7:75:dc:74:c0:26:f6:f8:
13:b2:95:a8:bf:bf:6b:58:42:3e:81:82:16:f9:03:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:DD:2F:26:9A:9A:F4:7B:41:51:5E:5D:BE:F1:EC:DB:0B:0E:09
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e7:c1:ad:a7:a5:ce:34:bf:03:11:c0:2b:b8:bd:d0:14:58:
2d:1d:29:6e:1e:e4:d1:bc:e2:93:08:3a:13:18:3b:ea:22:e1:
e5:29:aa:ca:fe:f5:7a:65:b7:cb:7d:ea:e0:42:88:02:7f:85:
04:f0:b7:10:58:0f:f7:b7:ca:a4:f2:93:65:ba:89:f3:94:20:
ed:ec:2c:a4:bd:af:5d:ae:fc:5a:69:7c:81:61:37:6d:ca:46:
90:9f:b1:67:b0:6d:02:1c:41:d8:dd:ae:e9:4b:1f:e5:44:ec:
8a:d5:31:52:72:92:ca:4c:61:f8:00:47:e6:b6:04:42:a7:37:
0d:34:ba:73:05:41:ea:3a:69:81:8c:81:f5:89:05:f2:c7:3b:
a4:47:69:b5:ff:2c:70:bf:6e:b4:90:fd:43:7b:ad:15:4b:36:
76:ef:e0:ed:cb:77:a6:ce:56:4b:b8:f0:88:ac:62:70:c1:8d:
bb:43:a0:db:63:22:22:51:40:be:5e:01:64:a7:ba:9d:0a:09:
26:68:b5:5f:45:8c:99:3d:a7:39:07:bc:87:b8:82:72:70:db:
2c:b0:e4:80:9b:fc:06:f3:5e:56:cf:c0:8b:7e:8b:0d:a5:ea:
31:d5:56:9f:92:fd:25:8f:98:f7:bf:e5:c5:5c:09:48:56:d6:
4f:ae:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:26 2024 by rpki-client on console-fra.rpki-client.org