Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: inQPvn4wYbzLffWRNh0HzL5j/1z6GAA+Ic9m09XTgv8=
Subject key identifier: B2:EA:77:F4:36:D8:4B:B1:F1:93:BD:7C:45:CE:AC:BF:4D:25:4C:CE
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 01936AB4831691D1F701A3D8EBAE88785549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 23:00:35 +0000
Manifest this update: Tue 26 Nov 2024 23:00:35 +0000
Manifest next update: Wed 27 Nov 2024 23:00:35 +0000
Files and hashes: 1: 8JFSWNUlc5-Yhqzi_opWwXjwi24.roa (hash: ifH46JfhtTBprN50YtfklTPDKeIK/YTBngoNBJvYdas=)
2: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: 6oRu8AJGRI/KUi/xDdhZ7JHGfBD++WwVi4QyawyK2rY=)
3: jDTzV_bETiriajM1hqdYM9h7XYg.roa (hash: A7ML+C77JY8OSPRXFb9g1Z6kvkVOGlNEfcE1B1hKrK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:83:16:91:d1:f7:01:a3:d8:eb:ae:88:78:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Nov 26 23:00:35 2024 GMT
Not After : Nov 27 23:00:35 2024 GMT
Subject: CN=b2ea77f436d84bb1f193bd7c45ceacbf4d254cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:72:dd:cc:6c:9b:b3:89:2c:7a:7f:99:3d:
67:4c:35:99:c8:95:01:20:55:30:41:b6:2d:cb:97:
fa:9a:03:58:1c:1f:7c:1a:aa:1c:9b:eb:b3:bb:f4:
bb:5c:c2:67:67:31:b9:df:a7:17:e9:a4:60:12:f2:
77:66:38:81:72:6c:43:2a:c2:1c:b6:31:40:b8:51:
03:8e:2a:c8:84:ac:4b:48:e1:28:da:e0:3a:d2:cf:
3d:61:20:20:6e:76:58:77:5f:f1:21:f4:9a:85:fa:
54:0d:1c:e7:47:97:d7:29:6b:c9:cc:bd:87:ba:1f:
29:93:21:cf:a9:b5:d7:39:8a:86:f2:49:26:00:77:
2a:61:4f:2e:f8:37:4b:80:2d:20:58:b5:82:7f:f2:
e7:28:7b:d6:02:4b:1f:47:0d:d9:21:a8:9a:a6:21:
57:27:e7:94:18:18:bb:c9:e0:20:23:85:12:a1:fa:
1a:b1:80:4f:bb:36:0c:86:f1:41:56:79:55:51:a0:
07:18:e1:e1:0a:88:79:0d:0c:6c:51:b9:ba:11:4c:
6a:c4:6c:d4:77:a8:bb:70:c6:6a:9d:ad:74:dc:e3:
ad:46:a9:86:1f:56:21:69:a9:39:6f:26:2b:65:14:
68:8c:6d:8a:fb:a8:68:84:27:af:9e:32:fc:a5:95:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:77:F4:36:D8:4B:B1:F1:93:BD:7C:45:CE:AC:BF:4D:25:4C:CE
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:32:4a:41:9e:52:b4:76:ce:57:bb:f2:54:1e:2c:77:1f:3b:
cc:ce:3d:8a:4e:b8:87:15:10:c2:93:68:1d:8c:59:df:ac:7d:
85:40:0c:ee:15:fa:f9:43:ca:4b:38:7f:45:10:eb:58:99:56:
e4:c9:2f:d3:a5:bb:a6:f2:ec:40:b4:f2:a2:60:da:ee:3a:24:
ec:38:11:d3:63:05:b2:65:6e:f9:95:bf:b0:0e:e1:1e:4b:5a:
a4:ff:fe:2a:a3:0c:68:fe:59:7b:40:0e:9c:07:07:32:fb:61:
4b:93:a5:fb:8e:c8:5c:1f:d4:21:b0:71:b9:1d:ba:15:eb:4f:
ec:b8:4d:1c:c2:5c:15:b5:52:dd:3c:0a:d6:27:3f:26:a9:2e:
23:5f:af:7c:c1:91:b5:1b:1e:36:ec:a9:f0:62:1c:56:53:3b:
28:b4:0b:8b:42:a1:08:30:96:16:c5:fb:bb:59:66:8f:92:86:
b9:af:8a:74:7e:cb:cc:8c:90:ff:37:98:36:14:8c:bf:f0:ed:
98:a9:07:9c:23:de:07:9d:0e:e7:6a:6a:e8:62:04:2f:4f:52:
f1:a0:20:de:7d:bd:d0:94:8c:c8:ab:0d:9d:61:4f:70:3f:2d:
09:b3:77:75:37:5a:b5:a9:31:d1:48:ca:b8:a0:d3:cf:ea:58:
23:e3:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:26 2024 by rpki-client on console-fra.rpki-client.org