Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: LyYGPjmMzzX23nDZN8dQGFw9AVdLykD0N+IoUTC8ROw=
Subject key identifier: 8C:1B:F4:3D:A1:25:CB:4A:0F:E1:20:34:2E:96:44:68:83:90:FB:FB
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 01935651C0A3086C034CF50968ACE783F582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 033D
Signing time: Sat 23 Nov 2024 00:00:18 +0000
Manifest this update: Sat 23 Nov 2024 00:00:18 +0000
Manifest next update: Sun 24 Nov 2024 00:00:18 +0000
Files and hashes: 1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: HjjRF2E8mCv1/arG9memVDZFbnYVleQmBtBzye13f0g=)
2: SSv3lFleO0qDyxb3ifhp8e1wXR8.roa (hash: t9Yosc09ZFKXcT0pa+c0OT1f2fRjuhLHaA/m+0TmNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:c0:a3:08:6c:03:4c:f5:09:68:ac:e7:83:f5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Nov 23 00:00:18 2024 GMT
Not After : Nov 24 00:00:18 2024 GMT
Subject: CN=8c1bf43da125cb4a0fe120342e9644688390fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:9f:e1:af:ff:f4:32:a0:cc:68:be:9b:ea:
a5:04:58:4a:28:ba:22:4a:6a:42:a7:fe:77:99:c5:
2d:d2:6d:f9:5b:e1:45:5f:11:e5:e6:f8:f3:e6:90:
23:b6:13:82:ad:5c:66:de:61:06:3f:99:be:e3:b5:
8e:66:40:d1:ef:64:4e:53:38:19:e3:0a:aa:9d:9c:
94:50:8f:52:49:81:8d:71:6c:8f:da:03:72:e5:da:
b6:cb:da:ba:70:ea:3f:38:02:00:f5:ad:23:90:c6:
9d:6b:8c:5e:57:f2:f6:a7:49:22:2d:84:ba:ba:8f:
33:29:07:a3:db:aa:1e:d3:23:a9:ef:37:36:2d:a0:
51:5a:34:b3:6b:58:0d:bb:5a:48:03:dd:e7:40:24:
28:bf:0b:d7:5d:93:fb:3e:a3:1d:7b:2c:36:dd:61:
ce:e5:38:6f:e1:b6:5c:b8:e2:47:34:6e:7a:97:e6:
41:d0:e0:cc:71:3f:c0:d5:e5:f5:79:6d:19:24:a1:
0b:77:27:4d:bf:b7:f9:5e:5f:eb:7f:43:bb:70:c8:
bc:06:cb:f2:aa:4f:47:84:46:2a:e1:ce:e5:27:b7:
71:61:af:01:a9:45:27:b7:f6:44:1f:ea:be:b6:61:
f2:99:4e:07:6f:40:b6:9a:32:7c:17:c6:b1:c3:19:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:F4:3D:A1:25:CB:4A:0F:E1:20:34:2E:96:44:68:83:90:FB:FB
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:c1:b3:a4:05:6e:44:4f:c0:26:8b:d4:82:bf:df:f7:db:
07:1e:2c:08:e3:0f:6f:e3:e9:61:eb:01:3a:42:30:b5:dd:cd:
5f:a3:c7:bd:44:f6:d2:aa:6e:32:0a:0e:9b:fa:da:f8:25:f0:
94:6f:c2:38:e0:78:90:a7:ea:80:bb:38:6c:d7:0d:69:36:c4:
d2:b4:9e:a2:26:24:8d:87:dd:07:32:70:92:35:b8:d7:7b:df:
57:ee:b3:f9:d1:89:64:c1:a6:97:d2:a5:8d:85:fa:99:80:e7:
00:91:6a:26:90:50:e1:83:6b:4f:fd:a3:f6:d0:59:5d:92:cc:
6f:01:ae:7a:c2:ee:41:ab:b9:11:64:26:e1:ff:63:e3:b0:0f:
74:9c:e5:04:a9:52:a8:c8:ce:eb:bb:f6:95:63:d4:e0:a6:9d:
d0:6a:67:1d:23:e0:62:e6:20:b6:40:7f:cc:12:16:e5:78:e2:
94:e8:48:c0:5c:d0:e9:da:76:b9:0d:26:61:63:11:60:21:92:
18:21:8a:aa:7f:39:cf:2d:60:b6:d6:60:ea:7d:e6:0c:84:52:
27:00:5f:f1:c1:13:b4:fa:9c:19:e4:21:e0:d9:04:9a:09:d4:
4a:f8:ef:73:d0:80:8b:59:b6:18:27:ca:df:ab:75:65:6e:0f:
27:c7:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:34 2024 by rpki-client on console-ams.rpki-client.org