Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: EkbkKW6bZZGgkztwGjUwDCK5477bNxrj4vDP9M9Zuvc=
Subject key identifier: 7B:03:A1:3D:D6:52:74:ED:F0:42:06:0C:98:56:0D:F0:2D:BC:AF:15
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 01935688A2F4555E9D7E27B17CF95DED3E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 0DBA
Signing time: Sat 23 Nov 2024 01:00:15 +0000
Manifest this update: Sat 23 Nov 2024 01:00:15 +0000
Manifest next update: Sun 24 Nov 2024 01:00:15 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: F0VIra+4yT9UfQ8jZ155EZ+I1p6jNuWlFnzKl/1Ke/o=)
2: f8WYBESjByDrjILBuxDDauHMQAE.roa (hash: oc/WPycV/j9MXis6Yhh6nOSHEbwaDTsPiljQ3hh/TpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:a2:f4:55:5e:9d:7e:27:b1:7c:f9:5d:ed:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Nov 23 01:00:15 2024 GMT
Not After : Nov 24 01:00:15 2024 GMT
Subject: CN=7b03a13dd65274edf042060c98560df02dbcaf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:c9:86:ea:d3:68:f3:68:af:97:92:d1:3e:
54:1c:4c:ff:d3:00:da:54:2e:0c:a5:b2:77:0c:d5:
15:61:77:71:ee:a3:62:c8:fe:2a:52:85:a7:48:48:
26:b5:e9:c7:c2:a3:7f:ed:f9:d5:e0:27:e9:98:03:
84:a6:67:1a:38:49:38:5a:25:75:94:48:36:bf:9d:
c6:f4:13:5f:84:d4:4f:fe:73:b9:32:b8:aa:1c:75:
08:cb:c2:02:f3:f4:c8:dd:6f:5f:c4:ab:33:a7:5a:
f2:ca:0a:07:32:aa:64:24:36:6c:b5:a2:fd:46:d2:
59:ea:6e:bf:2b:61:c1:81:a5:23:90:fc:88:13:4a:
6e:c2:82:58:e0:68:7e:5e:2a:ac:c7:b7:22:99:99:
f5:4b:41:50:de:15:da:2e:95:65:05:fe:43:fc:0d:
20:8a:cb:f8:52:0b:87:fb:3e:30:d6:d0:d7:36:5c:
19:18:fd:a2:f8:68:95:5a:44:92:30:f5:66:86:b7:
87:43:28:83:4e:98:e4:3f:ad:e9:f4:30:89:22:62:
ca:22:2a:16:21:d3:fc:c8:be:5b:ed:ad:85:ff:13:
fc:d9:80:cd:9d:1e:35:33:7d:c0:9b:e9:ee:04:61:
aa:03:84:ea:10:08:6b:21:e8:65:5b:a7:75:77:b5:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:A1:3D:D6:52:74:ED:F0:42:06:0C:98:56:0D:F0:2D:BC:AF:15
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e5:85:28:6c:c5:a7:79:e4:8f:dd:91:b0:93:7b:80:46:9c:
dc:63:2c:87:bc:4e:d7:1f:7b:20:03:1f:7d:c8:b6:1c:05:91:
d9:7f:81:c9:08:70:ff:cf:d4:97:c2:b0:5c:3c:62:2b:4f:bb:
09:5e:ed:4b:ac:08:19:9b:69:cb:05:77:15:2a:53:17:4a:25:
17:00:55:7b:ce:03:54:0a:a6:61:e4:99:db:3f:a7:96:00:e1:
01:dc:6e:6c:64:61:c3:aa:c6:1c:1a:20:c6:bb:1d:20:f0:e3:
e3:28:29:1d:fa:78:64:66:56:6e:01:09:54:c5:af:e2:1c:7d:
c2:a5:5f:83:25:2b:ff:e8:3e:14:e0:25:5c:35:0a:c6:87:40:
d3:0a:54:66:ef:0a:5a:73:1a:6a:a6:23:16:aa:37:38:78:af:
78:b6:4d:c6:36:28:bb:b0:43:4f:bb:3f:8d:a2:87:63:6e:d3:
2f:e2:06:43:5c:ae:20:4e:d8:cb:b8:a6:5f:29:64:f7:87:52:
60:9e:72:e4:18:e9:4c:7e:b5:59:8c:ac:e6:ac:78:d7:42:05:
b9:bb:03:a3:9a:91:55:fe:b5:c6:e1:d3:cd:bc:85:4f:ab:96:
54:79:a1:ac:6a:ef:d9:d3:7c:f0:80:60:01:5d:37:e6:da:ee:
05:26:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:09 2024 by rpki-client on console-ams.rpki-client.org