Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: IPxDMj8MpvscdPIksqd66Ck52Ek63n5eXQkIgFqYl64=
Subject key identifier: DC:D9:86:30:52:3E:12:81:38:8E:2D:43:B0:AC:3B:7D:FA:BC:2B:90
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 01935688C4C7289424D706A4A97D56AC2572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0709
Signing time: Sat 23 Nov 2024 01:00:23 +0000
Manifest this update: Sat 23 Nov 2024 01:00:23 +0000
Manifest next update: Sun 24 Nov 2024 01:00:23 +0000
Files and hashes: 1: fe6RukFedJVFro-XVQw80lphPeM.roa (hash: n+sTbPEEmBm7ILPJKeppn126kb98KGFKkRgrqMZvXK8=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: DytxB23znIhDwZG6cSoi+m1YyqhvFByNlD8kiq3R5aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:c4:c7:28:94:24:d7:06:a4:a9:7d:56:ac:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Nov 23 01:00:23 2024 GMT
Not After : Nov 24 01:00:23 2024 GMT
Subject: CN=dcd98630523e1281388e2d43b0ac3b7dfabc2b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:e0:51:9e:12:5f:66:df:44:68:b8:05:7e:
83:ff:b9:13:c3:1e:b5:a1:aa:ec:c8:0a:64:aa:ad:
fd:a3:7c:1d:a0:b6:eb:05:d4:09:bd:30:6d:87:17:
24:00:ac:6c:0f:c8:9b:e3:8b:78:91:d6:79:bc:4d:
ad:18:a3:10:93:82:93:43:18:2c:eb:57:c5:c0:22:
eb:4d:54:de:2f:ff:08:8d:bf:b3:c3:8a:7e:58:5a:
62:68:e3:d1:79:cd:76:17:63:bc:3b:ee:34:15:d9:
87:28:35:ed:82:8d:fa:60:a2:3f:1e:57:89:8f:aa:
15:e5:d4:ca:70:86:13:37:93:0d:36:05:8c:c0:53:
2c:4e:5b:a0:b8:23:ef:bf:6d:a0:44:a7:a5:9f:bf:
77:69:ff:39:e6:e9:2d:40:2c:29:7a:be:13:1a:2e:
68:9a:89:1e:55:db:07:07:5f:b2:1d:ca:e7:87:f8:
bc:3e:68:58:57:7c:37:4f:6e:16:6f:8a:8f:46:cb:
77:22:bc:3a:2a:96:73:7f:a4:d8:b9:3a:53:2c:d1:
b9:ed:3d:67:39:b2:1e:9d:c6:b8:da:6d:0c:70:77:
1c:31:da:05:28:d2:03:85:00:47:a1:00:22:d4:a4:
86:d9:e1:29:49:d1:da:31:61:ad:68:49:9e:39:77:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:86:30:52:3E:12:81:38:8E:2D:43:B0:AC:3B:7D:FA:BC:2B:90
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ad:0a:6d:93:01:66:30:2c:5f:6f:42:6d:f3:c4:95:7e:2b:
99:f6:f1:91:56:72:e4:52:99:c0:c0:8a:55:af:11:55:90:2a:
18:cf:44:a4:39:54:fc:d6:ca:91:e7:17:eb:d7:62:0d:ae:88:
17:44:92:be:3b:83:24:ec:9b:71:1e:25:54:b9:5e:84:1d:24:
c2:37:af:90:1c:ad:11:3f:3f:6d:0c:65:bd:34:7e:3a:ad:c9:
41:00:3b:31:3b:c5:0f:89:60:d0:91:87:e7:ef:a8:b6:89:fa:
58:7a:9b:1e:a7:0c:9b:dd:8c:aa:96:70:5a:41:fd:d0:96:6a:
35:c7:c3:2b:7c:d4:61:fd:0a:39:fd:2d:d1:68:25:bb:f8:8f:
50:ac:0b:03:a2:62:10:09:df:46:a8:5a:4f:5d:a5:86:9e:49:
82:d3:be:6e:65:8d:53:13:7e:b6:9d:c6:e8:3e:82:61:f0:9b:
09:cc:9d:4f:25:4e:3d:9b:ae:26:6e:41:d8:9a:e5:4f:b3:22:
27:4b:11:91:40:eb:f3:97:88:23:03:3e:55:9f:d5:18:ef:89:
91:05:84:7b:3e:ec:fb:73:c3:9d:c3:f6:25:02:b9:70:cc:e6:
a1:24:c7:7e:e7:65:2f:e5:d0:0d:41:70:6b:3c:10:c5:f9:65:
41:c1:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:31 2024 by rpki-client on console-fra.rpki-client.org