Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: KzdAjHok+BbU4MPRCE2MxUENtPzaV3R1QvIrIb9i/TY=
Subject key identifier: 86:B0:BE:BC:48:CB:FC:FF:F0:8C:2E:09:17:FE:4E:AB:60:5D:0C:58
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 018F8636125FCF0A243E334559852A8ACB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1194
Signing time: Fri 17 May 2024 11:00:41 +0000
Manifest this update: Fri 17 May 2024 11:00:41 +0000
Manifest next update: Sat 18 May 2024 11:00:41 +0000
Files and hashes: 1: 0xwLNVwWjhjeovq_nf0f-DeXIls.roa (hash: fq4Nfj++baJRi6TQevoaMtbSB0RLEB1CAzpBILbzHPs=)
2: 1-T8kvsYGsYyD8fgpGoZannzlcVQ.roa (hash: i77giDSm40ppwqYCNjjHhoJuUBLUcS2k0Q266pc9k+8=)
3: A7REsbGE1NrMU-LSCZyMtKSjm8k.roa (hash: zhPZaUdsFTS8eVrwvXcM5kTM6RctaNrzWltEyiRGpbQ=)
4: GW_QRM5OGf2inycSXy9TO3iFrgY.roa (hash: yEjbZqH/07/KoaQ/Z56+9T2NCR6sHbA1ZaITzOcqqeA=)
5: OM2PftldEmRx3oq0WnpX1_KJbyU.roa (hash: 1xVBDU5wFM+BK2O09aPn9SHecodxlEgCxOYL6yruc7w=)
6: Zdb3i__ReBUE17G6UPOUrNOZrVU.roa (hash: aDq7l1//cBdS7k4hio2Xn3FgaWhJW9A3osBnLx6Wg8E=)
7: ZjuqeMXqpY9TYFMSZBYR01WUsMM.roa (hash: eh/DJ4my2sHmuUeV0U2Gw2+0UGUwShXOstQosHPh6cY=)
8: c0dCRAWkwFRmaZnF7pMKsvkULIE.roa (hash: ZTQjk/pvLzkqs0zMP+J58UoKurFE5ljtPairfDbL/D4=)
9: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: NRiJFlIBDzwj89Fb4z8MLX9HntS1Pi6dpuCkZWr0zlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:36:12:5f:cf:0a:24:3e:33:45:59:85:2a:8a:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: May 17 11:00:41 2024 GMT
Not After : May 18 11:00:41 2024 GMT
Subject: CN=86b0bebc48cbfcfff08c2e0917fe4eab605d0c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:b3:01:92:7d:ac:4e:a0:99:b7:81:ee:76:
f9:0c:f3:8b:69:a6:62:e9:04:b0:86:b3:7d:d5:db:
ca:19:b6:78:d6:70:4b:1a:03:51:78:ca:c5:62:b9:
6e:cc:11:c4:36:10:9d:94:a1:85:dd:4e:2b:42:fb:
1d:49:5a:e4:ba:35:2f:15:46:a5:a7:76:c6:ca:0c:
f4:8c:5f:b7:b1:ce:56:d1:18:ee:9a:fb:f0:e7:df:
13:fe:8f:dc:bb:f2:b5:92:d1:43:f8:ec:10:f8:d2:
eb:e5:61:25:70:dd:ec:c2:24:cb:e8:21:0d:73:20:
bd:ba:90:e8:c8:be:c4:72:1c:82:fe:63:0e:f5:37:
f2:9c:1b:a8:0c:de:38:3e:6e:06:63:1d:65:61:e1:
81:4c:a7:b7:6a:42:14:14:79:cd:4e:2a:3d:6b:53:
a8:14:1e:e6:55:fc:b2:78:d7:ea:89:26:e9:ec:d0:
70:dc:21:59:1e:9e:a0:38:76:64:a2:f1:1e:8e:22:
dd:6b:0f:7f:78:94:ad:ad:54:bf:ba:4c:ae:59:80:
19:00:d2:7e:83:cc:5b:8a:d6:8c:99:f7:df:82:e5:
c5:c8:8b:96:9b:c4:1e:c4:1c:0a:be:bc:7e:31:be:
6b:0b:70:7d:c6:21:7c:45:cb:e4:a8:ba:9d:09:00:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:BE:BC:48:CB:FC:FF:F0:8C:2E:09:17:FE:4E:AB:60:5D:0C:58
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d5:98:ca:a9:bb:23:c8:71:ad:3e:12:17:ca:fe:e6:09:ff:
e1:22:d9:8e:1d:98:b8:ee:75:ee:ba:34:19:5d:e1:8d:b1:10:
3a:bc:5c:90:fb:6a:bd:04:ed:2b:81:70:ec:4a:20:6a:e3:11:
ab:3c:a0:ae:7a:7e:8a:30:74:e4:6d:ac:05:f0:c7:64:9d:0d:
6e:fa:67:ed:14:22:8c:3d:11:09:ab:1d:ce:a9:18:51:27:ec:
6b:95:48:e4:69:69:da:1d:d6:63:00:6c:87:d6:b1:5e:d9:fd:
3d:2c:8c:f7:a9:ba:92:99:dd:3f:53:eb:1c:46:24:61:97:4f:
4b:7b:c2:66:cc:b3:e5:69:c3:a0:1e:83:00:8d:c3:a5:d5:d7:
4a:d6:d9:97:34:dd:ab:37:2b:e4:8a:82:31:05:58:fd:0c:c8:
99:8e:1f:ea:c1:80:fd:83:75:08:20:a2:10:d3:44:a1:22:fb:
d1:47:c7:10:76:77:09:2d:e2:af:1b:26:7d:5f:d1:0c:65:96:
1e:05:f5:4b:f9:6c:63:e1:69:96:f6:6b:2c:bb:88:4b:22:e1:
e6:b3:f0:c4:a6:a5:5a:b3:cf:72:a3:38:cd:06:c6:4d:5f:34:
1c:e6:28:82:9f:ea:f8:a2:e1:89:d5:ea:fe:f2:cf:42:2a:31:
9c:04:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:47 2024 by rpki-client on console-ams.rpki-client.org