Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: pnlnaw65B2gop5Mjy5+a9zeBklcQBv6lbj5aplZAR9Q=
Subject key identifier: F4:D1:88:A5:33:C6:37:5B:C9:7E:EF:17:A7:80:2D:BB:F4:1C:FF:0A
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 01936AEB492BB0D44616B8CD887924170D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 130E
Signing time: Wed 27 Nov 2024 00:00:24 +0000
Manifest this update: Wed 27 Nov 2024 00:00:24 +0000
Manifest next update: Thu 28 Nov 2024 00:00:24 +0000
Files and hashes: 1: 9UMsIjElrwZFoAimocMjmAFeXnQ.roa (hash: SnmR3mfuFeT3NWW3jR+zMIwc4eUYxO8Q4gxkHWLqL90=)
2: DAgDBhGeP2nSobMByyzSaKLbovM.roa (hash: coNdza/2UoxkZwFSCNBgaAbFlc8i8OhWnU3eX9oJ/68=)
3: DEGDnl_IqKDJKEQFj-YJpqtxRhU.roa (hash: 3ft4BYVPtKOJc2M7l4Q1ePk1gsBVp8fz5WFtC8JFaZc=)
4: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: WmT4DoPZiOFxwNB9p21mjkhGc3aW1ypAvMnv2Gx227E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:49:2b:b0:d4:46:16:b8:cd:88:79:24:17:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Nov 27 00:00:24 2024 GMT
Not After : Nov 28 00:00:24 2024 GMT
Subject: CN=f4d188a533c6375bc97eef17a7802dbbf41cff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:86:37:c3:b0:7d:02:68:9d:e7:ed:b1:42:
0c:23:85:9a:0c:cf:c1:34:ad:9e:b4:63:0e:c7:09:
63:7e:13:a3:c6:df:88:30:67:99:ba:4e:e7:ae:e1:
2d:18:84:96:21:60:c8:10:bd:e8:71:82:67:1c:c0:
c9:ca:6c:86:5f:3e:21:85:ce:a9:e0:45:22:cb:15:
4c:a2:e9:76:f1:3b:11:ec:11:c3:56:f2:b8:98:92:
fb:03:62:be:eb:fd:da:91:ba:c3:54:f1:2b:1c:39:
d1:52:6d:53:c8:f1:a7:e4:f1:3a:b5:49:7a:0a:73:
4a:3b:77:57:69:fa:b0:a1:40:a0:ce:1c:14:b9:35:
44:79:89:82:68:19:f4:b3:2c:a2:93:df:23:b9:be:
20:53:56:de:81:96:2e:9c:1a:d7:0c:d4:e9:ee:0b:
9d:58:9a:26:cd:d9:37:57:72:91:49:ad:3d:24:a7:
cf:03:ef:69:f9:f9:aa:b2:7a:ca:ff:1c:a6:0c:95:
81:fd:a2:3a:fe:32:26:89:00:4c:c7:21:70:f0:06:
4e:fc:9e:43:93:24:99:ca:10:e1:d2:f0:fe:6b:37:
e3:14:d3:43:0f:f1:29:f9:28:d9:8e:b3:ad:5b:dd:
b2:a2:ed:6d:06:bb:03:0a:b2:a7:bf:da:6d:b0:64:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D1:88:A5:33:C6:37:5B:C9:7E:EF:17:A7:80:2D:BB:F4:1C:FF:0A
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:ca:b7:8c:9c:cc:7d:78:28:63:52:87:e9:0c:c4:65:85:
a7:34:09:47:79:88:21:bb:17:78:f4:4c:5a:04:84:77:69:6e:
26:2a:f9:a9:08:22:10:12:0a:e5:30:4c:9d:2f:79:41:0f:31:
af:28:c4:74:d9:5a:a7:38:b9:3f:90:b1:62:2c:f5:e2:33:a5:
12:8e:ca:98:81:8d:8a:2a:8d:71:f6:86:a3:64:94:92:2d:08:
a8:f7:1b:5b:c4:fa:86:bc:66:21:5e:5d:c9:16:01:6a:3b:f7:
49:ac:f6:34:d4:42:f7:35:8c:5b:5e:ac:33:6d:4d:27:c9:ca:
52:50:3c:ac:7d:d2:23:7f:53:df:0a:f0:6e:d1:e2:15:7b:5d:
af:45:64:58:0d:92:f3:6b:e9:52:5f:0f:60:dd:a1:28:51:21:
53:f2:65:22:cc:86:17:8c:b3:f3:1c:ae:c4:5a:62:20:8b:ea:
3b:1e:73:e1:5a:f2:bb:f2:75:44:f5:ae:f1:7f:21:e4:40:b3:
0a:6a:57:67:76:26:e2:ba:ea:9d:dd:d9:99:ac:d1:a3:b9:b5:
27:f2:6e:b6:ee:3f:79:f3:34:6d:a2:f7:a0:65:6c:5e:a6:97:
62:b0:69:67:f7:70:42:1c:b8:22:24:9f:2a:cc:cf:ce:65:d7:
8e:eb:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:14 2024 by rpki-client on console-fra.rpki-client.org