Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: fCNMdB3OaoMxsFygbCggq/GKBeJuEdcv0R3VVWUaZ5U=
Subject key identifier: 23:51:6C:3E:2D:31:0F:E8:0C:92:E0:B2:66:E2:BC:1F:40:8F:9C:58
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 018F8937BCA4359DE221580A2B460DA8FAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 0418
Signing time: Sat 18 May 2024 01:01:22 +0000
Manifest this update: Sat 18 May 2024 01:01:22 +0000
Manifest next update: Sun 19 May 2024 01:01:22 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: r5I9PhKUgUnZEsIKyInTd2Vs/7pXw4EKGLGZSBZU1bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:bc:a4:35:9d:e2:21:58:0a:2b:46:0d:a8:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: May 18 01:01:22 2024 GMT
Not After : May 19 01:01:22 2024 GMT
Subject: CN=23516c3e2d310fe80c92e0b266e2bc1f408f9c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:b0:78:a8:2b:f9:ab:28:af:bb:82:70:b1:
3a:b3:a0:7e:de:5c:69:5b:0b:5b:f4:88:65:c7:62:
c5:bc:6f:48:46:14:e4:c9:c8:ea:98:8f:3a:02:f7:
d3:16:01:d2:ef:85:a0:c0:e1:eb:bf:2b:de:80:6d:
cd:16:8a:28:77:6d:f8:61:78:7b:94:35:47:9b:91:
33:ed:a5:95:fb:01:19:db:b5:64:4f:91:84:4b:e8:
9d:4b:05:a9:84:0f:36:e6:c3:c6:b7:5c:bb:b4:7b:
07:44:8d:3c:3c:c3:fc:3a:a4:87:2a:4e:ef:4d:99:
92:a7:bd:f4:eb:07:e3:c2:bb:df:96:5f:10:85:fb:
b5:6b:6f:b6:4b:25:19:32:c3:6e:dd:09:a3:e7:33:
e1:53:38:48:e4:89:ce:f8:5a:a6:20:71:ab:76:fe:
4e:29:76:dd:83:29:16:04:89:6a:6a:98:7e:a6:e8:
a3:f3:38:95:27:0d:a6:4e:d1:ce:4a:33:2d:53:7f:
48:7a:3c:10:d5:a3:4f:89:50:f5:11:81:b9:76:73:
41:a1:f9:eb:2c:8b:3e:3d:5e:24:ba:ac:f6:d1:78:
ec:5d:60:d9:6b:1b:6a:28:aa:c1:63:56:d3:16:b9:
8c:9a:77:f3:ec:f3:ab:9b:7b:e5:ec:82:45:f6:08:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:6C:3E:2D:31:0F:E8:0C:92:E0:B2:66:E2:BC:1F:40:8F:9C:58
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:38:0c:da:89:9f:f8:85:4c:d4:cc:52:c9:9a:e8:ae:f5:
90:3c:9c:c7:57:85:b9:7a:7d:a0:48:aa:49:d9:b5:92:fe:ef:
e6:67:f7:2d:c8:4a:0f:c9:fa:0b:e0:06:4d:2d:f1:30:09:46:
47:f7:f5:18:b7:ad:b8:ed:7e:9c:82:b4:25:21:75:e9:cf:9a:
b5:c6:ed:29:73:a4:e5:e9:39:c8:31:d9:93:e9:b7:6c:34:7d:
79:3d:63:a4:e0:1a:8a:fd:c5:3d:26:2f:83:d6:4e:00:ab:b5:
97:ad:66:92:f8:2d:98:88:e2:d5:f1:be:56:dd:a0:8b:58:2f:
b3:ea:28:8c:36:15:09:ed:9c:51:78:f4:c1:23:d2:d2:af:46:
60:e4:0a:21:a1:5a:85:ed:0e:9a:dc:cc:60:76:e1:49:fd:f1:
9d:ca:04:60:2d:9b:25:88:4c:a4:25:0f:9b:ee:31:23:0d:82:
86:cf:36:6c:58:4b:cc:24:5c:57:0e:bc:65:c6:b4:46:18:c2:
8b:aa:59:8c:ce:35:af:69:7f:11:3f:66:89:e0:7d:60:cd:1c:
20:ee:10:83:60:46:aa:00:c0:5a:87:bd:b9:5b:18:8d:d2:bf:
0b:d3:0e:44:b6:35:88:72:1d:3b:3f:8e:54:d7:2a:11:bf:e3:
a8:ff:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:59 2024 by rpki-client on console-fra.rpki-client.org