Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: ovOPzTkVbOhVKZElABcm4Wrwjp+Jm/viy5tpVe7XdnY=
Subject key identifier: DD:9D:21:72:EA:F9:49:84:61:AC:72:9C:0B:BC:7B:C6:AE:B6:C6:C0
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 019357D2CA025D843291BBEEC188FC137DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 02D3
Signing time: Sat 23 Nov 2024 07:00:52 +0000
Manifest this update: Sat 23 Nov 2024 07:00:52 +0000
Manifest next update: Sun 24 Nov 2024 07:00:52 +0000
Files and hashes: 1: 6YjMqV6dlx7M5A539kkzyMkoga0.roa (hash: JeiYGGHZFuUFSjBwn/Pjj6IWVtrddM9sRfR6lqTKA4s=)
2: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: 3buMVXDcsdaP6jQNI2Pp26H0ViKfQ0EokFcFQfk5LsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:ca:02:5d:84:32:91:bb:ee:c1:88:fc:13:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Nov 23 07:00:52 2024 GMT
Not After : Nov 24 07:00:52 2024 GMT
Subject: CN=dd9d2172eaf9498461ac729c0bbc7bc6aeb6c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:95:04:bf:85:11:5a:e4:a5:e5:6e:f1:e5:
84:63:0f:31:bd:0a:9c:fc:0c:48:34:05:a4:ab:95:
66:02:5c:29:0c:20:af:35:53:64:a7:c9:e6:8a:35:
91:3b:66:3b:02:fa:1a:a8:ac:57:a4:31:88:c1:0f:
a8:e0:83:8d:d9:dc:29:e4:fd:fc:af:0b:57:f6:be:
34:c4:2b:3c:df:82:89:9f:91:e1:62:1d:e6:ea:51:
82:01:0f:26:f4:29:cc:0a:18:4d:c3:c7:8d:32:d8:
bb:96:02:f7:f4:b3:cd:1a:1f:04:70:7e:d7:ed:3d:
41:1f:81:41:44:93:38:5a:ba:2a:8d:5b:b7:7c:5e:
2f:f8:33:6a:c0:01:67:01:2d:b4:37:75:28:d5:49:
d3:1e:95:c8:1d:09:8c:ee:33:d5:ac:bb:dc:14:ce:
9a:70:b0:79:a6:41:5b:1c:89:ac:7d:30:48:34:4f:
f7:d5:d2:3e:1e:31:d9:1b:50:95:48:e5:74:31:0d:
92:05:86:7c:2a:f8:23:8f:68:9c:c2:5d:1d:d1:f3:
c6:dc:4b:b2:64:67:53:aa:4c:d2:a1:4d:84:78:54:
bd:89:69:38:66:35:46:c5:45:bd:b1:5c:a3:58:65:
59:9e:48:ff:07:44:ac:7b:93:bd:ad:e5:51:b1:c6:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:21:72:EA:F9:49:84:61:AC:72:9C:0B:BC:7B:C6:AE:B6:C6:C0
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:75:d6:82:c2:f9:29:4e:ea:29:29:ef:10:ff:b5:23:fa:a6:
bd:73:fb:1d:38:7c:04:f2:53:44:79:d7:e7:aa:6c:48:de:fc:
7b:73:0f:5e:db:cb:36:3d:55:bb:55:73:c7:74:cc:f2:a3:76:
88:94:b6:cc:20:27:8f:ed:92:53:3c:52:6f:77:c3:16:de:69:
59:93:85:6f:6f:4c:e3:ba:30:10:86:78:99:86:ab:05:92:4c:
41:2f:58:ce:fc:ab:76:87:e4:76:57:d2:4b:18:c3:63:a1:4d:
e1:f9:12:b0:b7:3a:82:45:a7:e7:09:62:78:bc:00:d7:16:88:
82:39:ff:42:e7:31:b1:35:ee:90:b4:71:be:50:81:f3:df:fb:
99:64:72:3e:66:64:e2:35:78:61:51:fa:93:0f:8e:a9:45:5d:
57:f1:69:9f:a8:a1:ed:b0:1a:20:a1:1f:13:bf:6f:ba:ff:26:
72:04:eb:17:9b:8f:80:6f:f7:31:9c:79:ef:27:f8:c2:1e:85:
c0:32:9d:1a:fd:59:5b:dd:ce:c5:f6:57:2b:b1:39:a2:2a:e1:
24:56:94:7f:b9:75:4f:dd:7a:8b:94:d6:d4:08:41:27:fb:56:
3a:95:04:d6:8b:04:c3:82:1b:ab:32:3d:55:3c:ea:f8:a6:8c:
ba:a9:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:26 2024 by rpki-client on console-fra.rpki-client.org