Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: V7GQgHIQY4GQx1RZM17K2SnkPsVtxH0L/llTL1t0H9Q=
Subject key identifier: CD:79:31:77:11:04:5E:C4:D5:0E:2F:B3:72:16:72:EC:19:A1:B1:E8
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 019369DA7F9CC9ED20C49FB0022418FB1738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 126F
Signing time: Tue 26 Nov 2024 19:02:27 +0000
Manifest this update: Tue 26 Nov 2024 19:02:27 +0000
Manifest next update: Wed 27 Nov 2024 19:02:27 +0000
Files and hashes: 1: QCDRP-RMOxGYDp_Chw4PKJtKi3A.roa (hash: RO1voxSewD55U1A/5MFmQfqwpG4MhNwj8vZAV31n2lk=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: 1+NiCXUQl1KgptiJ/Cg0ksugbEyBEoLEJ34saSq8bR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:7f:9c:c9:ed:20:c4:9f:b0:02:24:18:fb:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Nov 26 19:02:27 2024 GMT
Not After : Nov 27 19:02:27 2024 GMT
Subject: CN=cd79317711045ec4d50e2fb3721672ec19a1b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:07:bc:c1:90:27:f0:c7:73:57:57:80:d3:
5e:28:23:89:6c:69:f9:3c:22:9e:35:76:d0:ee:ce:
4b:4b:65:a8:0c:fa:12:43:76:31:b5:f7:43:a2:ca:
b3:0b:3b:38:f4:b2:67:c0:bf:41:70:8c:78:f4:5d:
35:4d:0c:54:cc:4a:3b:86:ce:e1:2d:44:bb:59:83:
b5:ab:19:de:98:10:93:ee:a8:9e:b0:29:d1:aa:e8:
de:b8:3b:cb:41:4c:20:e7:7a:33:6d:b1:ee:79:cd:
54:80:9c:a9:0b:9d:83:99:ab:cf:da:0d:c3:0f:60:
96:57:d8:0d:8c:a4:57:b7:a4:49:42:4d:62:5e:66:
a2:ab:34:78:bd:08:f7:e9:68:b0:62:e9:1e:e6:6a:
dd:eb:32:9c:76:9b:96:2c:23:e5:98:c2:76:0b:46:
25:f9:85:1f:13:7c:86:c9:b3:84:38:fc:01:43:33:
e6:73:72:4e:92:3a:d2:67:77:b3:4d:cd:4d:fc:e6:
b8:da:53:9f:24:81:a5:ab:49:1b:5b:ee:a4:1d:56:
d5:af:bb:d3:d5:8e:d3:c5:bf:f7:65:dd:d3:aa:bf:
e2:89:c8:b5:bd:83:3e:d6:8b:c5:c0:2a:c8:2f:91:
c2:77:b8:ac:35:ef:ce:a5:2b:30:5a:29:af:c8:98:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:31:77:11:04:5E:C4:D5:0E:2F:B3:72:16:72:EC:19:A1:B1:E8
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:1b:b1:c4:01:5e:a1:51:64:a5:70:97:76:7a:55:18:29:
b5:5a:12:c7:12:e6:03:9a:95:d9:34:24:6a:df:5c:ea:34:06:
dd:e6:2a:d7:95:66:88:7b:ca:9c:7e:8e:35:c0:14:ee:ba:7f:
58:be:82:24:1a:0a:80:b2:46:5e:1e:2d:92:0e:3f:cf:15:dd:
7b:0b:d6:77:cd:30:3b:b7:45:16:f9:80:6c:61:d7:ef:d7:48:
dc:00:ac:f9:a1:c4:a3:9d:5c:ce:89:5e:4a:b9:12:74:b7:05:
1d:d3:92:ae:e2:95:db:8d:b6:3a:14:b4:29:a5:79:97:14:bf:
97:33:38:29:df:bc:5c:78:37:9d:35:10:70:1a:fe:36:51:6c:
6a:bf:9e:a1:06:6b:50:39:38:c2:49:6e:24:d3:2e:22:18:94:
77:ea:03:77:b2:e6:8e:e5:69:ef:fa:aa:2f:b7:3e:5c:a2:93:
c5:7d:8f:fb:fd:a5:fe:97:74:5c:70:80:c3:97:88:20:f9:d1:
c8:6f:14:f7:ea:6d:44:dd:83:6e:27:d4:71:bf:b0:68:91:a2:
9a:5e:39:fd:3d:59:c7:3e:37:c5:96:f6:90:e7:71:7e:b8:79:
eb:d0:f0:d4:5c:67:02:81:e2:21:e1:73:7c:f1:53:e8:19:98:
29:a1:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:17 2024 by rpki-client on console-ams.rpki-client.org