Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: 5M1pUQ9/1jFBMWJUyY4nY1mETVlKz/Q+gNpdpWgLcHk=
Subject key identifier: 8C:32:92:5E:DF:75:E0:D2:0E:80:22:58:E8:02:0E:9C:E1:DA:B9:14
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 018F4D5B42B28BBA9049C4972BF4A5B9D3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 10E1
Signing time: Mon 06 May 2024 10:02:57 +0000
Manifest this update: Mon 06 May 2024 10:02:57 +0000
Manifest next update: Tue 07 May 2024 10:02:57 +0000
Files and hashes: 1: HEWx2S34MiUqiw41A-aYdyP3GvI.roa (hash: kvsRLY6f1ekDUMdh2mB9Xm6+C58+9Xmdj0LQBQStVcM=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: mEF9CO1B/HPvmj5rXuV0PyFVxjISLZldZ3dcAfoaAII=)
3: e5RArwmEKA___iSwx0e4wAaqDK4.roa (hash: JNHfe3qUl/RWRUKYCqVi9dTRWD0ESjPT9QrGjqY94HA=)
4: iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa (hash: DIk1/CgKHHZayFogegArFlhvkmCWKg0YcXljwpip8xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5b:42:b2:8b:ba:90:49:c4:97:2b:f4:a5:b9:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: May 6 10:02:57 2024 GMT
Not After : May 7 10:02:57 2024 GMT
Subject: CN=8c32925edf75e0d20e802258e8020e9ce1dab914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:ff:4f:7b:21:42:db:25:6d:5b:0b:ad:62:
c9:91:e4:44:63:7a:1f:01:7b:e7:17:72:47:d5:72:
e2:99:c2:5f:42:65:b9:20:c4:5a:fc:9f:22:04:50:
3f:aa:61:19:43:4a:55:a5:e1:29:79:3c:ae:35:7c:
60:28:a3:0f:60:f2:84:36:8b:9e:f3:0a:f1:66:2d:
bf:2b:9c:f3:2c:b2:98:01:e1:74:bb:5b:40:2a:d4:
97:6f:52:50:95:43:20:8a:03:cf:fb:3b:0b:61:86:
d3:6a:9c:ff:33:4c:8d:a7:e9:d6:3c:6a:ca:a1:b3:
b6:fc:a1:b3:85:55:30:55:e6:37:a4:dd:c6:4c:1a:
7f:71:7e:c9:1a:7e:4a:1f:27:c7:23:2d:69:92:df:
77:e3:4c:5d:06:ab:d1:4b:3b:c1:9f:e3:af:d8:03:
e4:f2:de:67:02:36:18:06:66:2b:46:c7:a8:e8:bc:
43:f0:4d:6d:f6:11:9f:be:48:7e:2c:66:d9:2f:a4:
e8:73:3a:16:25:13:c9:bc:3a:fd:c0:d3:1d:64:cb:
93:70:38:da:70:5b:71:38:76:08:ed:0a:84:22:11:
d8:f1:03:ac:27:bc:bf:5f:05:e7:1a:72:89:5c:63:
f8:1f:fa:fe:7f:2f:a6:22:35:40:9f:5f:f2:ea:a2:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:92:5E:DF:75:E0:D2:0E:80:22:58:E8:02:0E:9C:E1:DA:B9:14
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:be:58:02:48:4d:61:a9:ab:03:26:23:4f:a6:80:a4:01:ed:
41:b6:97:36:8b:87:f3:f6:03:37:e5:4a:4e:49:09:27:33:d8:
b3:b4:5e:c1:14:db:2b:99:b7:7c:26:7a:4a:55:b9:ad:93:6a:
ef:01:14:ed:5b:5c:78:d0:c0:45:01:2b:7f:fe:6b:d8:62:f9:
33:3f:7d:9b:ce:69:70:aa:1e:6e:57:31:c9:d6:b8:d1:05:59:
ab:1a:c4:66:f0:d7:77:05:ee:6d:a5:9d:b9:8a:59:6a:a8:8f:
3c:25:95:4f:4c:12:53:17:a3:84:6c:2c:f5:bd:30:59:57:34:
77:67:43:80:7e:e1:c2:ed:ce:72:97:52:3f:11:ce:cd:7b:35:
a9:48:75:f5:eb:64:5b:5b:b4:91:10:8a:a7:d2:c1:cb:f9:79:
f8:43:da:eb:a1:9f:b7:2f:fd:a8:48:59:5e:27:90:f0:60:4c:
5b:4a:b6:5d:e4:d8:dc:78:87:4f:98:f0:20:40:72:ce:01:80:
4b:70:ef:64:20:d8:be:e4:e3:2c:42:1a:9d:80:31:85:9a:58:
b2:00:eb:46:f5:c8:4b:56:77:87:5e:06:43:3c:39:a3:85:69:
db:56:35:6d:90:bc:78:66:9f:79:cb:91:94:f9:62:79:9e:e7:
72:c6:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:08:45 2024 by rpki-client on console-ams.rpki-client.org