Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: EUaoV+RE7UQ2izLjzd2YGIjaQ3IqD1XFuq4VohuWGdg=
Subject key identifier: CA:A0:5F:D9:C2:4C:7C:C9:94:EB:4D:65:1C:B4:49:C9:00:25:E2:C1
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0193523E236F8E7D4C8256CF80D1BD056EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 02E0
Signing time: Fri 22 Nov 2024 05:00:24 +0000
Manifest this update: Fri 22 Nov 2024 05:00:24 +0000
Manifest next update: Sat 23 Nov 2024 05:00:24 +0000
Files and hashes: 1: En3XwnwfkTjkO532-c3CgoxfcRw.roa (hash: 8kNU6vPDIgbVi9Ag6O8r/ZU53EvG6lrRiJZ0E6JQiN0=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: BnFKHF+wijiqgQMX3G1nlMrs9F/AiATkLUpOQmZV7rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:23:6f:8e:7d:4c:82:56:cf:80:d1:bd:05:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Nov 22 05:00:24 2024 GMT
Not After : Nov 23 05:00:24 2024 GMT
Subject: CN=caa05fd9c24c7cc994eb4d651cb449c90025e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:7c:f1:ee:ba:13:45:75:2f:a8:f8:64:21:
13:50:23:1b:db:e2:5c:bf:99:8f:60:0b:db:cd:87:
53:ac:4d:07:9a:fa:7c:68:71:75:96:53:b2:39:93:
ad:64:80:76:9a:8d:17:43:7c:4c:80:35:31:80:a6:
f8:29:98:f4:fb:34:1b:73:6b:75:27:b6:26:6d:d4:
9b:04:26:9a:d6:6f:c9:e0:bd:1a:f5:09:0b:09:81:
90:3f:63:f1:8e:a0:76:61:06:06:7b:8c:0b:85:35:
60:a7:16:4d:d2:03:42:02:de:ed:ff:aa:ea:b4:b3:
0a:62:e5:5f:ec:57:b1:28:f2:ac:f9:78:ea:06:fd:
7d:59:4b:65:db:d5:0f:da:2b:e8:b4:4b:fb:6b:79:
6d:4e:6d:23:56:4f:d0:2e:89:ec:87:2d:84:aa:6a:
76:74:30:a7:1b:26:2a:f3:1f:c6:64:12:39:b0:30:
b7:63:3f:be:a1:2f:1b:e6:ed:02:92:96:42:f0:c0:
67:f2:79:59:83:16:d1:9d:1a:b1:0e:02:92:c7:61:
72:25:c6:2d:e9:59:de:43:6d:eb:03:02:46:f4:a7:
fe:30:94:db:e5:c4:85:d2:f1:65:f2:8b:c8:e2:1f:
9e:a4:d1:b1:70:40:12:3b:6f:26:d1:e5:50:fe:8d:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:5F:D9:C2:4C:7C:C9:94:EB:4D:65:1C:B4:49:C9:00:25:E2:C1
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:29:31:db:12:1e:7a:31:1a:5f:10:77:d2:e1:9f:17:4b:ed:
b5:5e:a7:5c:c9:33:6f:71:1e:83:3f:b4:d0:81:3f:25:7c:ab:
41:24:47:cc:1c:77:1f:1f:81:2f:78:d9:5a:7b:f1:da:2b:0b:
d1:a4:69:34:ab:a2:1e:da:3b:bd:4e:fe:6c:2f:f7:ab:d9:de:
ce:38:ce:29:f3:8c:76:06:a8:23:87:9f:a0:57:b0:f1:40:c7:
c9:da:16:d9:d5:07:bc:0d:89:29:14:2b:6a:7a:b8:69:7e:89:
c7:d9:af:8f:9d:c2:56:25:c4:ed:a5:5e:dc:93:3f:77:5f:63:
34:96:b3:bc:6b:ea:fa:75:de:5e:1a:6a:2b:e2:9c:08:65:30:
d4:ef:81:68:8c:5d:34:3c:d9:01:25:9f:2d:6b:de:b1:7a:ba:
be:bf:49:a9:7e:5c:37:b8:21:93:7e:73:82:fc:29:ef:12:b5:
f9:c8:10:8d:6f:87:cd:f6:7a:c3:fd:bb:9e:4b:8f:d0:ce:5a:
62:5c:f4:d2:64:a3:17:a3:3d:09:8e:b9:9a:d2:99:7c:1d:7a:
98:8c:a4:b9:81:b5:ae:1a:75:d4:db:b6:56:92:a3:c7:6a:41:
3f:d3:ff:11:89:58:d3:69:85:33:14:b0:68:93:d5:42:38:b1:
51:59:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:30 2024 by rpki-client on console-ams.rpki-client.org