Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: mNq+jYRtocvR1Rec35doe4UKzK39I2B9xr4oc6HL1Ck=
Subject key identifier: C1:9B:D4:4A:DA:48:FB:B6:BE:1A:0A:4E:73:E2:21:12:52:A1:8F:7A
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 019353BED2FA2E387E634909D0A2794AA0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: FF
Signing time: Fri 22 Nov 2024 12:00:34 +0000
Manifest this update: Fri 22 Nov 2024 12:00:34 +0000
Manifest next update: Sat 23 Nov 2024 12:00:34 +0000
Files and hashes: 1: ci5sS72EYPS90cTl0mxL93X_S7I.roa (hash: rrJo+si3BCDDZsupFOe8iMyL4pqfPVuTcaCyj5kwgyw=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: x3kexuaU3tOX9LgSlhHvNTDHwCcwnZnhAgnFOSeH40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:d2:fa:2e:38:7e:63:49:09:d0:a2:79:4a:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Nov 22 12:00:34 2024 GMT
Not After : Nov 23 12:00:34 2024 GMT
Subject: CN=c19bd44ada48fbb6be1a0a4e73e2211252a18f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:4f:93:f0:8b:2a:c6:fc:46:98:c2:a7:88:
dc:01:44:11:f2:fd:ed:f5:a7:cf:b9:ef:a7:fe:58:
92:f5:4f:ea:d1:8c:ac:93:2b:ca:50:8f:3e:6b:6b:
de:e1:48:37:2e:c6:ed:c6:5c:92:f0:f4:c9:19:76:
42:a1:f8:68:47:21:5f:54:00:98:b5:34:9e:47:4f:
c7:98:bb:66:48:b0:42:28:f2:bd:28:75:1f:2a:66:
58:40:35:9c:7f:b0:de:05:4b:79:30:a7:d0:51:35:
8d:36:77:51:de:7b:32:30:fa:03:b3:7e:e4:34:fc:
73:5f:a9:d2:cd:2e:af:72:c4:e9:64:7a:5d:28:c7:
75:06:a4:12:19:b9:d2:61:43:91:ec:ea:aa:3d:74:
b2:e9:34:64:25:44:61:7e:65:2b:4e:c3:1f:75:31:
fb:7a:84:17:36:01:e3:55:e4:73:11:03:70:b3:6b:
e7:06:31:f3:15:9c:f3:cb:95:3a:00:0b:ed:17:fa:
50:f5:30:42:9e:8d:24:93:1c:f3:a8:25:4c:f0:cb:
44:65:6b:a8:ef:1d:b9:3c:87:23:6e:81:82:51:f2:
6d:93:a8:a6:5f:a5:b4:2f:c3:4f:e8:bd:f0:72:62:
68:a8:10:93:d2:28:0f:42:b8:e9:9c:bc:07:de:a2:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:D4:4A:DA:48:FB:B6:BE:1A:0A:4E:73:E2:21:12:52:A1:8F:7A
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ba:c8:70:2f:e5:65:52:aa:05:9e:5e:fa:77:1d:2d:f6:7a:
fa:66:a4:0b:d8:18:76:71:a2:a5:b5:c4:7f:30:2b:9f:bc:e5:
a5:bd:4b:9b:97:61:dd:b4:55:94:a3:be:a0:51:06:f0:5f:f1:
d9:d8:64:bb:08:07:27:86:51:69:66:4b:e9:02:38:04:3b:19:
28:ae:c7:17:2a:67:3c:17:dc:25:67:31:87:4c:34:16:44:a3:
a3:28:25:ab:35:83:ff:0b:75:4c:d6:8f:de:1d:d0:35:ea:5f:
18:66:4e:c8:ac:8a:c5:85:b2:9e:80:e8:08:10:dd:61:a6:eb:
94:c0:79:46:d3:19:21:7b:1a:ab:40:c2:8b:a3:9e:35:ef:d8:
83:ba:ef:c2:9b:13:4d:60:a4:8b:d0:34:40:71:58:84:9f:3b:
67:2b:cb:df:6e:b4:d9:90:28:83:43:49:c1:29:a8:2b:f2:2b:
33:ba:9c:8e:aa:61:a8:6a:9b:15:4c:30:56:96:24:c4:27:c1:
3f:0d:d7:43:95:21:34:bf:e4:c3:ca:94:2a:1b:32:39:33:c0:
23:06:72:4c:62:38:6f:92:91:1a:c4:1c:94:f0:bd:1d:65:9e:
ec:2d:9d:93:f9:e2:2d:df:da:ba:88:38:7e:ee:b2:5c:fb:d4:
91:5a:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:16:21 2024 by rpki-client on console-fra.rpki-client.org