Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: rqNe9RXzIcOrArEQ7WNSJrtGb0QFsCo+JkBor24iKb4=
Subject key identifier: 6D:41:7C:AD:B7:B9:74:35:EE:AA:33:DD:21:B2:FB:56:70:4C:23:10
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 018F86A36D64D42E671E2064CF5A7005DA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 0E90
Signing time: Fri 17 May 2024 13:00:08 +0000
Manifest this update: Fri 17 May 2024 13:00:08 +0000
Manifest next update: Sat 18 May 2024 13:00:08 +0000
Files and hashes: 1: 8Sdwm8lxmK8Xv4dB7TxXFirQduU.roa (hash: flPhdJ0dinICq/lULM6p2jbQ5FGnrtI22IVfp47okFA=)
2: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: ad3YMKPjdWILI1J6Zp2uFWuF3dxCcdriIfRhOFCgksI=)
3: mfTnu52ouo5DZoLmZNKgLwZrJYM.roa (hash: rqFzsRLTSRbgcX6vgF1Ho1c+vHpakZNQNOlW2FKKlsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:6d:64:d4:2e:67:1e:20:64:cf:5a:70:05:da:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: May 17 13:00:08 2024 GMT
Not After : May 18 13:00:08 2024 GMT
Subject: CN=6d417cadb7b97435eeaa33dd21b2fb56704c2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:4f:b3:07:9f:f5:ee:ee:0d:4b:8b:62:f3:
d2:2a:ee:ea:e5:4d:05:ad:3b:6f:0f:1e:79:f3:87:
a2:2d:a0:59:10:79:76:76:f9:e1:df:ec:4a:70:93:
45:eb:21:4f:02:45:bd:79:d6:dc:a5:c7:4f:81:fd:
66:ae:4a:b2:c9:23:50:3f:9c:dd:76:41:1f:cb:e4:
66:67:84:50:d5:3a:58:6e:a8:06:37:1b:ac:da:5b:
ed:bc:66:0f:b4:40:b2:26:5e:17:f3:c0:18:92:22:
a5:6f:9c:c4:d8:17:e7:d5:9f:e9:e2:71:14:11:67:
08:53:ae:3b:7a:77:f8:07:fa:85:71:01:c0:f9:37:
0a:f0:a0:86:5e:ed:3b:28:08:68:f6:80:ee:e7:59:
28:cc:35:14:39:70:e2:65:4f:a1:36:5c:79:a6:3c:
19:6a:0f:af:41:80:6e:38:6a:9e:11:f0:d5:7f:d2:
c2:42:a9:d5:9b:b9:47:a1:b2:6e:e6:5e:71:6d:25:
b8:2e:83:b3:e8:dc:eb:9d:39:e8:00:ef:48:6d:b3:
48:7e:7b:bf:5b:dd:7f:9a:2e:a0:9b:f8:08:2a:85:
5d:85:d2:f8:10:cd:58:af:26:7f:ce:d1:c0:90:75:
b9:9e:41:ac:0d:58:c7:e9:38:65:b3:72:87:dd:31:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:41:7C:AD:B7:B9:74:35:EE:AA:33:DD:21:B2:FB:56:70:4C:23:10
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:98:c5:17:39:04:24:55:0e:92:b2:14:b0:f9:55:72:e3:
f1:26:31:6f:04:ce:69:01:13:e1:05:5f:82:6a:2d:93:aa:6f:
cc:81:90:c2:cc:33:49:53:7d:89:58:c7:17:f5:7f:9e:8f:37:
f3:2f:f1:ac:95:c5:98:57:52:2d:c5:c5:51:07:cf:3f:71:d0:
b9:09:d5:75:29:c3:36:e5:0e:26:f2:67:a0:6c:1a:32:38:0c:
7a:4b:f3:f2:61:6b:98:69:d9:3f:38:bc:21:0a:1a:45:2e:cb:
d7:82:6f:04:85:47:36:ee:cb:91:44:2a:b6:e9:d3:19:0a:31:
0a:2a:37:a4:cd:30:20:51:f5:11:38:3c:b7:ce:67:aa:28:46:
10:1b:df:d0:0b:90:56:a0:6a:1b:0a:fa:63:06:ab:89:3f:c0:
5f:7a:ff:3c:02:10:3d:35:38:c8:09:0f:3c:bb:4a:10:3b:44:
78:30:16:26:97:a5:5d:12:8b:0b:3d:e4:6e:da:bb:fc:ef:86:
91:b9:4e:d4:38:1c:cd:7a:22:3e:a1:15:fd:64:6b:1b:cf:49:
16:a3:83:ba:26:63:ea:ef:6b:2b:26:34:15:1b:94:d8:54:d2:
92:7b:36:6f:08:e3:3a:4a:76:34:a1:ea:b3:80:32:f9:9c:3a:
c6:17:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:52 2024 by rpki-client on console-ams.rpki-client.org