Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: LF5KIIw0w3f+4967fhSU8jBaCUGh6tEVrR2PRrTDMsM=
Subject key identifier: 7D:64:47:48:5B:5B:F0:88:28:CB:6B:88:02:85:96:A3:4A:54:82:EE
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 019355767E758F3346AE19C9B802FAAA3BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 59
Signing time: Fri 22 Nov 2024 20:00:49 +0000
Manifest this update: Fri 22 Nov 2024 20:00:49 +0000
Manifest next update: Sat 23 Nov 2024 20:00:49 +0000
Files and hashes: 1: PFvf11W3TV1gZzMsaF3vw81Swkk.roa (hash: PVqNqbfYQQ8DwcLKLG/WxYmNZ2hihr69Rd8hwIVNUq4=)
2: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: J6tTQcxbBpCzB7D+LO3m1VmP8RLD9Va3ABlOBb8/sII=)
3: ytnFIMyiTbwhmW6yidoKPmL7B-w.roa (hash: rCSowOmr/z5wsV/+tDgp5HvxLw/UfJPp7HohPmPyJpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:7e:75:8f:33:46:ae:19:c9:b8:02:fa:aa:3b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Nov 22 20:00:49 2024 GMT
Not After : Nov 23 20:00:49 2024 GMT
Subject: CN=7d6447485b5bf08828cb6b88028596a34a5482ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:3f:45:77:31:ac:83:cc:a4:f6:48:d7:83:
f1:15:85:fb:cf:78:e0:6b:c4:5f:20:28:11:96:89:
ed:9e:60:9b:94:cd:cb:89:a7:02:41:46:14:44:bc:
40:25:02:61:eb:f6:ab:91:c3:c2:a0:45:e8:ff:16:
09:04:4c:10:7b:b5:5b:c5:2f:42:b9:71:4c:d6:29:
09:8a:1c:7c:c8:c5:94:fd:0c:42:0f:1b:33:2b:c2:
1e:9e:63:14:e7:13:02:b6:d5:35:b4:d0:90:61:0e:
c6:a1:2c:72:72:2f:3d:d7:c5:2e:c5:dd:13:8b:3a:
f6:cb:33:f2:6e:42:c1:ea:0a:2a:6d:f1:13:35:2c:
d0:70:ee:22:4f:47:d9:61:80:c8:24:c5:17:56:e0:
ca:65:de:2f:97:f4:ce:c4:b3:ab:db:35:b1:91:ab:
c0:8b:93:04:20:f2:6c:f1:12:f3:a8:31:77:63:e8:
f5:11:df:a2:14:b2:29:c0:d0:6a:1e:33:d0:ec:90:
b6:35:f1:bd:fe:fd:0a:51:38:b2:14:43:6e:62:3d:
23:fa:3d:93:ae:4c:b4:b2:72:f4:5e:1a:ec:b2:4e:
3a:74:78:45:54:a6:55:d5:c1:2e:a2:c9:b6:fe:e6:
55:48:dd:a1:8b:d7:65:6f:c4:af:37:f5:a8:bf:7a:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:47:48:5B:5B:F0:88:28:CB:6B:88:02:85:96:A3:4A:54:82:EE
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:60:9b:72:80:4b:32:63:0e:ec:66:43:f4:34:8a:7d:f2:66:
54:52:7d:7f:dd:1f:9a:d6:87:ee:a4:a7:11:80:8f:90:42:37:
b8:2e:52:4d:db:b5:23:0b:e7:6e:7e:0d:db:19:5b:b7:21:15:
7d:5c:90:87:de:24:65:da:f2:ab:81:20:64:a4:ea:f8:8b:83:
52:48:b0:2f:da:12:68:27:ef:63:71:07:f7:f3:8f:74:d9:32:
36:d3:01:2c:86:ee:6f:aa:80:34:b5:72:3d:b4:11:e0:2a:20:
4c:05:5b:c7:81:bd:32:9d:76:ed:35:d2:5c:d1:24:c1:d6:d8:
25:05:a3:ea:d4:d9:31:16:ff:06:4c:9e:5c:f0:89:5a:4e:8e:
75:89:5b:26:81:b0:6d:f2:81:c9:5d:e0:e8:77:52:52:08:35:
35:80:9e:ed:b5:6a:b3:b5:82:2c:f3:ff:46:bf:65:70:c9:41:
7c:81:59:f2:de:e6:b5:9d:da:01:7e:1b:69:95:82:a7:f5:93:
77:58:8e:40:ee:87:cd:7e:f2:74:d4:4c:e1:7e:0f:7c:c7:2d:
1e:ea:94:47:53:79:e9:78:54:93:ee:03:dd:21:83:21:9e:ab:
73:56:2a:1e:0a:b6:0a:3e:40:b2:3b:d4:05:ed:90:e6:ad:c3:
48:6d:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:23 2024 by rpki-client on console-fra.rpki-client.org