Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: +vUmCpgRgrVumAyb/dAxRTCNaVN3kOT+aSTRwHSzro8=
Subject key identifier: 19:DD:1C:4B:3E:D3:BF:7F:28:BF:2C:DE:4F:54:D2:DB:72:0B:FF:A3
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0193512BCA91EE4ECBA084F4DE41DF9EBE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 09FA
Signing time: Fri 22 Nov 2024 00:00:44 +0000
Manifest this update: Fri 22 Nov 2024 00:00:44 +0000
Manifest next update: Sat 23 Nov 2024 00:00:44 +0000
Files and hashes: 1: 6a9ZLaPFmgE_5pPt4jTBTWcelzY.roa (hash: JFosxTJTo7vyE1BX9mwkRuidA5Py5o/ktUqggwEnv/s=)
2: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: uIzM+XuVZpgF7yDp/3gZ3xStvYcZXvEmXP8puvUS/3A=)
3: sFI6jiwEIOSY78SQlf2VjWq1yOY.roa (hash: yimBWYpH1b7o29JpJ+XFoo7m7QTWoVWXILyzAzkkfAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:ca:91:ee:4e:cb:a0:84:f4:de:41:df:9e:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Nov 22 00:00:44 2024 GMT
Not After : Nov 23 00:00:44 2024 GMT
Subject: CN=19dd1c4b3ed3bf7f28bf2cde4f54d2db720bffa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:23:f6:5e:56:f7:3e:69:d1:58:7f:e8:f3:
7e:f4:08:02:73:51:b7:fb:ba:24:e8:19:07:e8:8b:
1b:00:f7:30:96:6a:84:e7:2a:f2:78:a6:71:1a:61:
cf:76:33:c5:0a:35:96:92:b5:e2:3b:41:68:46:0d:
a7:40:eb:d8:bd:f2:91:e4:86:c8:49:ff:63:5c:2c:
d3:70:5c:41:d0:58:72:4d:09:20:3d:72:7f:fc:7d:
a3:76:3f:dc:cd:77:40:b2:3c:17:c0:08:0d:1e:04:
43:b4:fe:03:cb:ed:20:eb:ae:a1:dd:9a:07:b0:4e:
c9:9b:d2:58:f1:38:c3:d7:9c:8c:6e:20:1e:17:3d:
a3:f4:41:45:21:47:24:cd:71:5b:35:91:e3:fa:14:
c7:b2:92:06:0f:cc:ef:a0:a9:3f:e0:a6:15:18:a5:
5c:26:f7:56:a8:b1:af:cb:4d:bc:07:75:80:d9:b7:
0c:dc:ef:01:5b:f0:b0:16:e2:c4:28:b0:40:08:2e:
d8:94:59:82:30:0f:9a:be:6c:f8:a9:ea:23:69:f4:
b9:f3:51:75:fe:2c:3c:a0:10:de:3b:bb:f4:c6:1e:
69:ed:d2:c5:ca:d2:f8:8a:90:fb:49:a1:9d:4a:48:
d7:a8:2b:4a:49:93:6b:35:60:4c:ea:b6:39:3f:28:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:1C:4B:3E:D3:BF:7F:28:BF:2C:DE:4F:54:D2:DB:72:0B:FF:A3
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:7d:38:7c:ed:18:b7:c6:43:a1:df:4d:8e:83:e2:2c:ca:
1d:06:c1:94:09:47:64:71:34:e0:d6:58:9a:44:df:40:29:21:
78:41:e0:c8:a3:6b:35:48:59:79:8d:57:16:15:b4:36:27:87:
63:c1:c6:38:e3:d8:00:83:ed:b8:58:b4:f0:86:4b:dc:48:4a:
82:26:6d:82:65:80:79:73:55:93:4d:a9:79:e2:34:6f:3a:e6:
a0:e0:4f:95:b0:2a:84:ab:09:02:0a:3d:3c:b0:2d:58:af:c7:
dc:e1:cd:3c:81:fa:7c:7e:9a:3e:ef:a9:d0:5e:d7:71:f3:d2:
cb:76:73:83:17:99:7a:8a:6c:32:02:b8:8f:03:b6:bb:c1:0c:
39:72:4a:ef:a8:cc:93:84:58:4b:f9:e1:a1:42:54:15:96:e0:
e2:d7:44:8b:c0:c4:64:a5:1f:32:44:0f:bd:44:4d:ef:c1:ea:
d4:1b:bd:f2:c2:ca:70:e9:72:ff:19:5b:ce:3b:f9:8a:a6:9f:
82:b3:14:4b:e0:0a:d7:a9:a8:5e:c7:7b:e7:09:08:87:93:3a:
9e:14:7a:4b:23:bb:a5:c4:1b:4f:5d:f2:b0:f2:c1:c7:99:a3:
f2:a0:0c:67:83:2d:2b:24:0a:56:6a:35:8c:3e:4b:58:13:2a:
dd:6e:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:21 2024 by rpki-client on console-fra.rpki-client.org