Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: 3+un/K132B53RRILNy2VN2lzGMUFH0DHLghjHa+23xE=
Subject key identifier: 51:A2:C4:52:47:F3:3E:11:24:A1:A1:FC:A0:08:BA:C5:BD:22:3F:74
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 0193579BC5DD472340CA613164A8707C28C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 02A7
Signing time: Sat 23 Nov 2024 06:00:46 +0000
Manifest this update: Sat 23 Nov 2024 06:00:46 +0000
Manifest next update: Sun 24 Nov 2024 06:00:46 +0000
Files and hashes: 1: IkSVFZmgocaorxCsWenlD1WGnTA.roa (hash: j2+168lp4Ut4BF+TXDc+80jQafzgYFqC1KIf6LMvNq0=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: y+VT0VgO8QAtkWXb6QpxynfPpXApLfvkPHpdjHMif8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:c5:dd:47:23:40:ca:61:31:64:a8:70:7c:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Nov 23 06:00:46 2024 GMT
Not After : Nov 24 06:00:46 2024 GMT
Subject: CN=51a2c45247f33e1124a1a1fca008bac5bd223f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:45:b6:bd:cf:fe:2d:12:37:ba:a2:9b:0b:
97:e8:87:34:08:10:6c:73:0e:42:33:a3:8c:3c:33:
8e:7e:47:26:2f:6d:f1:dc:5a:b1:83:dc:6f:7d:c1:
df:a0:b0:4f:15:3b:02:3c:fe:16:fa:de:3b:f7:97:
46:60:77:50:74:ca:c5:5b:a6:b2:bd:f2:52:d9:5d:
10:05:2a:32:62:54:7f:48:7a:16:9e:27:b1:42:ed:
88:80:0b:bd:54:08:b4:bc:37:3f:c7:9a:3c:1b:5b:
96:27:f7:63:d7:b5:67:de:fc:87:4c:b5:7a:80:1c:
1d:4e:22:10:55:44:5e:38:5f:15:86:54:7f:b7:fa:
34:41:f7:cf:cc:75:ff:2b:c0:e5:b3:1f:f3:e5:5a:
85:95:19:48:67:9d:ce:f1:61:80:25:37:d7:20:19:
87:25:78:36:c1:76:16:79:4c:18:cb:b7:94:a9:15:
bf:5f:e5:19:d0:2c:88:b3:97:71:cd:4f:c3:9f:c5:
90:d4:11:24:87:6f:7d:5d:c8:3e:15:7c:f4:bf:5b:
14:b0:d9:4b:f4:9d:84:5f:53:85:33:23:93:b0:73:
c5:9a:b4:e0:3d:57:18:96:d8:bc:8a:73:1b:8a:09:
24:c8:dc:b2:98:09:3e:e7:81:6b:86:5d:11:71:50:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:C4:52:47:F3:3E:11:24:A1:A1:FC:A0:08:BA:C5:BD:22:3F:74
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:60:b9:b4:35:34:bf:bb:95:f9:c5:2b:78:6a:23:a6:05:1c:
68:9d:db:0b:89:2a:24:92:71:3f:98:83:62:45:91:45:37:1f:
66:d6:55:15:72:24:aa:d5:f8:9b:ba:8c:ff:44:50:a6:f5:9d:
de:5f:f8:d9:32:bb:e7:44:4b:6a:8d:df:76:44:31:02:45:8a:
bb:3d:85:9c:b5:a3:ad:02:f2:3f:b8:05:7b:21:c4:7e:e7:0c:
ad:45:61:79:79:9c:18:26:d1:c3:52:7f:99:2a:ad:dd:39:dd:
ab:a6:0b:c7:ec:80:30:25:77:9c:75:fe:e1:68:75:5f:1c:18:
50:0c:6b:49:6d:52:c9:54:81:5b:21:80:88:b6:5a:d4:c3:6c:
42:4a:fa:2d:c0:78:c6:99:b5:3a:0e:5e:46:71:e8:04:13:e9:
d8:77:7a:9c:48:53:f5:20:eb:91:3b:7f:64:22:5e:57:23:6b:
96:0d:51:64:62:79:83:a0:2c:8d:31:e2:5e:70:1b:21:26:f4:
e2:ff:e6:fc:55:be:11:86:de:77:15:18:1c:70:90:ce:8f:36:
66:90:34:8e:66:14:10:e2:61:20:56:40:3d:91:36:cd:fd:32:
b1:05:61:97:85:ca:19:51:ba:eb:f4:9d:37:ea:56:c9:0f:0b:
51:b3:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:23 2024 by rpki-client on console-ams.rpki-client.org